<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5468</id>
    <title>ALSA-2022:5468: php:8.0 security update (Important)</title>
    <issued date="2022-06-30 00:00:00"/>
    <updated date="2022-11-23 22:19:29"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>php:8.0 security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.
Security Fix(es):
* php: password of excessive length triggers buffer overflow leading to RCE (CVE-2022-31626)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5468" id="RHSA-2022:5468" type="rhsa" title="RHSA-2022:5468"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31626" id="CVE-2022-31626" type="cve" title="CVE-2022-31626"/>
      <reference href="https://bugzilla.redhat.com/2098523" id="2098523" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-5468.html" id="ALSA-2022:5468" type="self" title="ALSA-2022:5468"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <module name="php" stream="7.4" version="8070020221010135733" context="a4870ff1" arch="s390x"/>
        <package name="php-pear" version="1.10.13" release="1.module_el8.6.0+3268+b150a051" epoch="1" arch="noarch" src="php-pear-1.10.13-1.module_el8.6.0+3268+b150a051.src.rpm">
          <filename>php-pear-1.10.13-1.module_el8.6.0+3268+b150a051.noarch.rpm</filename>
          <sum type="sha256">0cce4d216b43c4b38de6e0f49d7e0705d81c35d448903204b93b913865a2007c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6443</id>
    <title>Moderate: mariadb:10.3 security and bug fix update</title>
    <issued date="2022-09-13 00:00:00"/>
    <updated date="2022-10-14 07:41:44"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mariadb:10.3 security and bug fix update</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. 

The following packages have been upgraded to a later upstream version: mariadb (10.3.35), galera (25.3.35).

Security Fix(es):

* mariadb: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used (CVE-2021-46669)
* mysql: Server: FTS unspecified vulnerability (CPU Apr 2022) (CVE-2022-21427)
* mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer (CVE-2022-24048)
* mariadb: lack of validating the existence of an object prior to performing operations on the object (CVE-2022-24050)
* mariadb: lack of proper validation of a user-supplied string before using it as a format specifier (CVE-2022-24051)
* mariadb: CONNECT storage engine heap-based buffer overflow (CVE-2022-24052)
* mariadb: assertion failure in Item_args::walk_arg (CVE-2022-27376)
* mariadb: use-after-poison when complex conversion is involved in blob (CVE-2022-27377)
* mariadb: server crash in create_tmp_table::finalize (CVE-2022-27378)
* mariadb: server crash in component arg_comparator::compare_real_fixed (CVE-2022-27379)
* mariadb: server crash at my_decimal::operator= (CVE-2022-27380)
* mariadb: server crash at Field::set_default via specially crafted SQL statements (CVE-2022-27381)
* mariadb: use-after-poison in my_strcasecmp_8bit() of ctype-simple.c (CVE-2022-27383)
* mariadb: crash via component Item_subselect::init_expr_cache_tracker (CVE-2022-27384)
* mariadb: server crashes in query_arena::set_query_arena upon SELECT from view (CVE-2022-27386)
* mariadb: assertion failures in decimal_bin_size (CVE-2022-27387)
* mariadb: assertion failure in compare_order_elements (CVE-2022-27445)
* mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27447)
* mariadb: crash in multi-update and implicit grouping (CVE-2022-27448)
* mariadb: assertion failure in sql/item_func.cc (CVE-2022-27449)
* mariadb: assertion failure in sql/item_cmpfunc.cc (CVE-2022-27452)
* mariadb: assertion failure in VDec::VDec at /sql/sql_type.cc (CVE-2022-27456)
* mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27458)
* mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31622)
* mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31623)
* mariadb: server crash at Item_subselect::init_expr_cache_tracker (CVE-2022-32083)
* mariadb: server crash in Item_func_in::cleanup/Item::cleanup_processor (CVE-2022-32085)
* mariadb: server crash in Item_args::walk_args (CVE-2022-32087)
* mariadb: segmentation fault in Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort (CVE-2022-32088)
* mariadb: Crash executing query with VIEW, aggregate and subquery (CVE-2021-46659)
* mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE) (CVE-2021-46661)
* mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements (CVE-2021-46663)
* mariadb: MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr (CVE-2021-46664)
* mariadb: MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations (CVE-2021-46665)
* mariadb: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements (CVE-2021-46668)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* [Tracker] Rebase to Galera 25.3.35 for MariaDB-10.3 (BZ#2107075)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6443" id="RHSA-2022:6443" type="rhsa" title="RHSA-2022:6443"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46659" id="CVE-2021-46659" type="cve" title="CVE-2021-46659"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46661" id="CVE-2021-46661" type="cve" title="CVE-2021-46661"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46663" id="CVE-2021-46663" type="cve" title="CVE-2021-46663"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46664" id="CVE-2021-46664" type="cve" title="CVE-2021-46664"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46665" id="CVE-2021-46665" type="cve" title="CVE-2021-46665"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46668" id="CVE-2021-46668" type="cve" title="CVE-2021-46668"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46669" id="CVE-2021-46669" type="cve" title="CVE-2021-46669"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21427" id="CVE-2022-21427" type="cve" title="CVE-2022-21427"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24048" id="CVE-2022-24048" type="cve" title="CVE-2022-24048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24050" id="CVE-2022-24050" type="cve" title="CVE-2022-24050"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24051" id="CVE-2022-24051" type="cve" title="CVE-2022-24051"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24052" id="CVE-2022-24052" type="cve" title="CVE-2022-24052"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27376" id="CVE-2022-27376" type="cve" title="CVE-2022-27376"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27377" id="CVE-2022-27377" type="cve" title="CVE-2022-27377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27378" id="CVE-2022-27378" type="cve" title="CVE-2022-27378"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27379" id="CVE-2022-27379" type="cve" title="CVE-2022-27379"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27380" id="CVE-2022-27380" type="cve" title="CVE-2022-27380"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27381" id="CVE-2022-27381" type="cve" title="CVE-2022-27381"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27383" id="CVE-2022-27383" type="cve" title="CVE-2022-27383"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27384" id="CVE-2022-27384" type="cve" title="CVE-2022-27384"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27386" id="CVE-2022-27386" type="cve" title="CVE-2022-27386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27387" id="CVE-2022-27387" type="cve" title="CVE-2022-27387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27445" id="CVE-2022-27445" type="cve" title="CVE-2022-27445"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27447" id="CVE-2022-27447" type="cve" title="CVE-2022-27447"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27448" id="CVE-2022-27448" type="cve" title="CVE-2022-27448"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27449" id="CVE-2022-27449" type="cve" title="CVE-2022-27449"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27452" id="CVE-2022-27452" type="cve" title="CVE-2022-27452"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27456" id="CVE-2022-27456" type="cve" title="CVE-2022-27456"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27458" id="CVE-2022-27458" type="cve" title="CVE-2022-27458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31622" id="CVE-2022-31622" type="cve" title="CVE-2022-31622"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31623" id="CVE-2022-31623" type="cve" title="CVE-2022-31623"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32083" id="CVE-2022-32083" type="cve" title="CVE-2022-32083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32085" id="CVE-2022-32085" type="cve" title="CVE-2022-32085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32087" id="CVE-2022-32087" type="cve" title="CVE-2022-32087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32088" id="CVE-2022-32088" type="cve" title="CVE-2022-32088"/>
      <reference href="https://bugzilla.redhat.com/2049302" id="2049302" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050017" id="2050017" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050022" id="2050022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050024" id="2050024" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050026" id="2050026" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050032" id="2050032" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050034" id="2050034" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2068211" id="2068211" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2068233" id="2068233" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2068234" id="2068234" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2069833" id="2069833" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074817" id="2074817" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074947" id="2074947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074949" id="2074949" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074951" id="2074951" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074966" id="2074966" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074981" id="2074981" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074996" id="2074996" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074999" id="2074999" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075005" id="2075005" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075006" id="2075006" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075691" id="2075691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075693" id="2075693" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075694" id="2075694" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075695" id="2075695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075697" id="2075697" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075700" id="2075700" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2076145" id="2076145" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082644" id="2082644" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092354" id="2092354" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092360" id="2092360" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2104425" id="2104425" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2104431" id="2104431" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2104434" id="2104434" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106008" id="2106008" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6443.html" id="ALSA-2022:6443" type="self" title="ALSA-2022:6443"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <module name="mariadb" stream="10.5" version="8060020220803092659" context="9edba152" arch="s390x"/>
        <package name="mariadb-embedded-devel" version="10.3.35" release="1.module_el8.6.0+3265+230ed96b" epoch="3" arch="s390x" src="mariadb-10.3.35-1.module_el8.6.0+3265+230ed96b.src.rpm">
          <filename>mariadb-embedded-devel-10.3.35-1.module_el8.6.0+3265+230ed96b.s390x.rpm</filename>
          <sum type="sha256">3c3b0c00d80a3f586e34bffb735ff7f2038dc06ff2bcf2c2a95403aee82f16cf</sum>
        </package>
        <package name="mariadb-test" version="10.3.35" release="1.module_el8.6.0+3265+230ed96b" epoch="3" arch="s390x" src="mariadb-10.3.35-1.module_el8.6.0+3265+230ed96b.src.rpm">
          <filename>mariadb-test-10.3.35-1.module_el8.6.0+3265+230ed96b.s390x.rpm</filename>
          <sum type="sha256">4b79ed164106e29e052adb237ed499b2ff517c01253219e37b90bcc8c28060c9</sum>
        </package>
        <package name="mariadb-backup" version="10.3.35" release="1.module_el8.6.0+3265+230ed96b" epoch="3" arch="s390x" src="mariadb-10.3.35-1.module_el8.6.0+3265+230ed96b.src.rpm">
          <filename>mariadb-backup-10.3.35-1.module_el8.6.0+3265+230ed96b.s390x.rpm</filename>
          <sum type="sha256">500da89d41fe4826851f7632cdea3a9ad117fcea12f2c656545624557c6c1309</sum>
        </package>
        <package name="mariadb-devel" version="10.3.35" release="1.module_el8.6.0+3265+230ed96b" epoch="3" arch="s390x" src="mariadb-10.3.35-1.module_el8.6.0+3265+230ed96b.src.rpm">
          <filename>mariadb-devel-10.3.35-1.module_el8.6.0+3265+230ed96b.s390x.rpm</filename>
          <sum type="sha256">5511158b35b9f6ca054323a1e20cd3dda643e4b150e88cd3d871b0aec5347576</sum>
        </package>
        <package name="Judy" version="1.0.5" release="18.module_el8.6.0+3139+3c630e87" epoch="0" arch="s390x" src="Judy-1.0.5-18.module_el8.6.0+3139+3c630e87.src.rpm">
          <filename>Judy-1.0.5-18.module_el8.6.0+3139+3c630e87.s390x.rpm</filename>
          <sum type="sha256">59dbe47a24dd747f379e9f6d5ffd2bc78e4a00761f786bda069dc504479a570e</sum>
        </package>
        <package name="galera" version="25.3.35" release="1.module_el8.6.0+3265+230ed96b" epoch="0" arch="s390x" src="galera-25.3.35-1.module_el8.6.0+3265+230ed96b.src.rpm">
          <filename>galera-25.3.35-1.module_el8.6.0+3265+230ed96b.s390x.rpm</filename>
          <sum type="sha256">5c0f59872a828a13537e65eb3aed0e3e8f7b6ef50f9136210851f381c5cac309</sum>
        </package>
        <package name="mariadb-server-utils" version="10.3.35" release="1.module_el8.6.0+3265+230ed96b" epoch="3" arch="s390x" src="mariadb-10.3.35-1.module_el8.6.0+3265+230ed96b.src.rpm">
          <filename>mariadb-server-utils-10.3.35-1.module_el8.6.0+3265+230ed96b.s390x.rpm</filename>
          <sum type="sha256">5c962b1ca4424ccf2134007135712963ef9160b11d112ddf01eac1e14aad5f71</sum>
        </package>
        <package name="mariadb-gssapi-server" version="10.3.35" release="1.module_el8.6.0+3265+230ed96b" epoch="3" arch="s390x" src="mariadb-10.3.35-1.module_el8.6.0+3265+230ed96b.src.rpm">
          <filename>mariadb-gssapi-server-10.3.35-1.module_el8.6.0+3265+230ed96b.s390x.rpm</filename>
          <sum type="sha256">5ca9f0f4066e62411259eb4a07698fc86152d778f8799469f27a1c169f0197fb</sum>
        </package>
        <package name="mariadb-common" version="10.3.35" release="1.module_el8.6.0+3265+230ed96b" epoch="3" arch="s390x" src="mariadb-10.3.35-1.module_el8.6.0+3265+230ed96b.src.rpm">
          <filename>mariadb-common-10.3.35-1.module_el8.6.0+3265+230ed96b.s390x.rpm</filename>
          <sum type="sha256">6897c0d746241182af282ccfba93b0aae02d49bbca9387ce7824fb2dacd26706</sum>
        </package>
        <package name="mariadb-embedded" version="10.3.35" release="1.module_el8.6.0+3265+230ed96b" epoch="3" arch="s390x" src="mariadb-10.3.35-1.module_el8.6.0+3265+230ed96b.src.rpm">
          <filename>mariadb-embedded-10.3.35-1.module_el8.6.0+3265+230ed96b.s390x.rpm</filename>
          <sum type="sha256">7c0d336fcd1ca8dd80596ce3a55953a7f5263c71681f6978d778fff42d7d93ef</sum>
        </package>
        <package name="mariadb-server-galera" version="10.3.35" release="1.module_el8.6.0+3265+230ed96b" epoch="3" arch="s390x" src="mariadb-10.3.35-1.module_el8.6.0+3265+230ed96b.src.rpm">
          <filename>mariadb-server-galera-10.3.35-1.module_el8.6.0+3265+230ed96b.s390x.rpm</filename>
          <sum type="sha256">c80868c95223581ad9a2f8affd084200356bdbec35a98d049598de2db17d4b1e</sum>
        </package>
        <package name="mariadb-errmsg" version="10.3.35" release="1.module_el8.6.0+3265+230ed96b" epoch="3" arch="s390x" src="mariadb-10.3.35-1.module_el8.6.0+3265+230ed96b.src.rpm">
          <filename>mariadb-errmsg-10.3.35-1.module_el8.6.0+3265+230ed96b.s390x.rpm</filename>
          <sum type="sha256">d1a5b07ea33afd0bccfac8d6e9544879614473032d0949d0533367f503b6e242</sum>
        </package>
        <package name="mariadb-server" version="10.3.35" release="1.module_el8.6.0+3265+230ed96b" epoch="3" arch="s390x" src="mariadb-10.3.35-1.module_el8.6.0+3265+230ed96b.src.rpm">
          <filename>mariadb-server-10.3.35-1.module_el8.6.0+3265+230ed96b.s390x.rpm</filename>
          <sum type="sha256">d7e9fcd6df8be218369d31d363eb611f1ee9eb39db04342f254e22b9e50c95d9</sum>
        </package>
        <package name="mariadb" version="10.3.35" release="1.module_el8.6.0+3265+230ed96b" epoch="3" arch="s390x" src="mariadb-10.3.35-1.module_el8.6.0+3265+230ed96b.src.rpm">
          <filename>mariadb-10.3.35-1.module_el8.6.0+3265+230ed96b.s390x.rpm</filename>
          <sum type="sha256">e791819b231144f10735a5d0fa109ff07d47e47994e5f40ad2284e1fd015f96a</sum>
        </package>
        <package name="mariadb-oqgraph-engine" version="10.3.35" release="1.module_el8.6.0+3265+230ed96b" epoch="3" arch="s390x" src="mariadb-10.3.35-1.module_el8.6.0+3265+230ed96b.src.rpm">
          <filename>mariadb-oqgraph-engine-10.3.35-1.module_el8.6.0+3265+230ed96b.s390x.rpm</filename>
          <sum type="sha256">f6ffbf8b43ba2028d975edc908e8c24da9085d242948357c285abd6d3564cb44</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6447</id>
    <title>Moderate: ruby:2.7 security, bug fix, and enhancement update</title>
    <issued date="2022-09-13 00:00:00"/>
    <updated date="2022-11-23 22:19:29"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby:2.7 security, bug fix, and enhancement update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (2.7.6). (BZ#2109424)

Security Fix(es):

* ruby: Regular expression denial of service vulnerability of Date parsing methods (CVE-2021-41817)
* ruby: Cookie prefix spoofing in CGI::Cookie.parse (CVE-2021-41819)
* Ruby: Buffer overrun in String-to-Float conversion (CVE-2022-28739)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6447" id="RHSA-2022:6447" type="rhsa" title="RHSA-2022:6447"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-41817" id="CVE-2021-41817" type="cve" title="CVE-2021-41817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-41819" id="CVE-2021-41819" type="cve" title="CVE-2021-41819"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28739" id="CVE-2022-28739" type="cve" title="CVE-2022-28739"/>
      <reference href="https://bugzilla.redhat.com/2025104" id="2025104" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2026757" id="2026757" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075687" id="2075687" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6447.html" id="ALSA-2022:6447" type="self" title="ALSA-2022:6447"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <module name="ruby" stream="2.7" version="8060020220913133502" context="9edba152" arch="s390x"/>
        <package name="rubygem-io-console" version="0.5.6" release="138.module_el8.6.0+3263+904da987" epoch="0" arch="s390x" src="ruby-2.7.6-138.module_el8.6.0+3263+904da987.src.rpm">
          <filename>rubygem-io-console-0.5.6-138.module_el8.6.0+3263+904da987.s390x.rpm</filename>
          <sum type="sha256">002c293341d840d7cd3111b177976d1b87896788cc706f27a362ed07f36eb2d0</sum>
        </package>
        <package name="rubygem-bigdecimal" version="2.0.0" release="138.module_el8.6.0+3263+904da987" epoch="0" arch="s390x" src="ruby-2.7.6-138.module_el8.6.0+3263+904da987.src.rpm">
          <filename>rubygem-bigdecimal-2.0.0-138.module_el8.6.0+3263+904da987.s390x.rpm</filename>
          <sum type="sha256">0d322554a9fee7c0f74e76660b6d608efedb3dbef7917ac9a945b6f9dfc8a101</sum>
        </package>
        <package name="rubygem-irb" version="1.2.6" release="138.module_el8.6.0+3263+904da987" epoch="0" arch="noarch" src="ruby-2.7.6-138.module_el8.6.0+3263+904da987.src.rpm">
          <filename>rubygem-irb-1.2.6-138.module_el8.6.0+3263+904da987.noarch.rpm</filename>
          <sum type="sha256">0fa8ec5d6faebfb0a5b0d54e86aa10e6c072bb8eb96ee1a41926243a25f3bb66</sum>
        </package>
        <package name="rubygem-openssl" version="2.1.3" release="138.module_el8.6.0+3263+904da987" epoch="0" arch="s390x" src="ruby-2.7.6-138.module_el8.6.0+3263+904da987.src.rpm">
          <filename>rubygem-openssl-2.1.3-138.module_el8.6.0+3263+904da987.s390x.rpm</filename>
          <sum type="sha256">1790707e6120989269188f4ca765e33d6eb5788e908d71c1b75df9f4b6863db1</sum>
        </package>
        <package name="ruby" version="2.7.6" release="138.module_el8.6.0+3263+904da987" epoch="0" arch="s390x" src="ruby-2.7.6-138.module_el8.6.0+3263+904da987.src.rpm">
          <filename>ruby-2.7.6-138.module_el8.6.0+3263+904da987.s390x.rpm</filename>
          <sum type="sha256">24287c421f2d83dc11bfaa83aa46cd3f41eef9300eb662702c71b54daa3ad026</sum>
        </package>
        <package name="rubygem-bundler" version="2.2.24" release="138.module_el8.6.0+3263+904da987" epoch="0" arch="noarch" src="ruby-2.7.6-138.module_el8.6.0+3263+904da987.src.rpm">
          <filename>rubygem-bundler-2.2.24-138.module_el8.6.0+3263+904da987.noarch.rpm</filename>
          <sum type="sha256">28d924a2176905f071ee04ccab9ce9fb312f1a2f3c64e26ee3ee25a4e19b0440</sum>
        </package>
        <package name="ruby-libs" version="2.7.6" release="138.module_el8.6.0+3263+904da987" epoch="0" arch="s390x" src="ruby-2.7.6-138.module_el8.6.0+3263+904da987.src.rpm">
          <filename>ruby-libs-2.7.6-138.module_el8.6.0+3263+904da987.s390x.rpm</filename>
          <sum type="sha256">298a3f25ea54d19a09b73b520ea0c5527b9df8c280e7909b4c35e1eb034813ca</sum>
        </package>
        <package name="rubygem-bson" version="4.8.1" release="1.module_el8.6.0+3167+957ef55e" epoch="0" arch="s390x" src="rubygem-bson-4.8.1-1.module_el8.6.0+3167+957ef55e.src.rpm">
          <filename>rubygem-bson-4.8.1-1.module_el8.6.0+3167+957ef55e.s390x.rpm</filename>
          <sum type="sha256">2a1c9bfebe53083619a613d8126b1bb5be2267cb45dbf45e35e4f3d470626d3c</sum>
        </package>
        <package name="rubygem-rdoc" version="6.2.1.1" release="138.module_el8.6.0+3263+904da987" epoch="0" arch="noarch" src="ruby-2.7.6-138.module_el8.6.0+3263+904da987.src.rpm">
          <filename>rubygem-rdoc-6.2.1.1-138.module_el8.6.0+3263+904da987.noarch.rpm</filename>
          <sum type="sha256">3b332a04b9063caab183b428cff969c95ff45b355cd75ef6b7253f37b886c991</sum>
        </package>
        <package name="rubygem-net-telnet" version="0.2.0" release="138.module_el8.6.0+3263+904da987" epoch="0" arch="noarch" src="ruby-2.7.6-138.module_el8.6.0+3263+904da987.src.rpm">
          <filename>rubygem-net-telnet-0.2.0-138.module_el8.6.0+3263+904da987.noarch.rpm</filename>
          <sum type="sha256">3e991294ffb09b1d0c9b63c6e9e3c667741ccb94db5b560126adaf53c071be30</sum>
        </package>
        <package name="ruby-devel" version="2.7.6" release="138.module_el8.6.0+3263+904da987" epoch="0" arch="s390x" src="ruby-2.7.6-138.module_el8.6.0+3263+904da987.src.rpm">
          <filename>ruby-devel-2.7.6-138.module_el8.6.0+3263+904da987.s390x.rpm</filename>
          <sum type="sha256">3fd8bc6490e8edcf0705fa2e84d2354cdb9885fc4aeece177a78673fcea14586</sum>
        </package>
        <package name="rubygem-rake" version="13.0.1" release="138.module_el8.6.0+3263+904da987" epoch="0" arch="noarch" src="ruby-2.7.6-138.module_el8.6.0+3263+904da987.src.rpm">
          <filename>rubygem-rake-13.0.1-138.module_el8.6.0+3263+904da987.noarch.rpm</filename>
          <sum type="sha256">4a9da2eee80d7fdbe4e66506ac6553b89705361eee0442e0f64a760d11db6539</sum>
        </package>
        <package name="rubygem-xmlrpc" version="0.3.0" release="138.module_el8.6.0+3263+904da987" epoch="0" arch="noarch" src="ruby-2.7.6-138.module_el8.6.0+3263+904da987.src.rpm">
          <filename>rubygem-xmlrpc-0.3.0-138.module_el8.6.0+3263+904da987.noarch.rpm</filename>
          <sum type="sha256">58e81cb339a404ef78bb260d5462b2278deee0b016ec5f84e1c323499de7b35f</sum>
        </package>
        <package name="rubygems" version="3.1.6" release="138.module_el8.6.0+3263+904da987" epoch="0" arch="noarch" src="ruby-2.7.6-138.module_el8.6.0+3263+904da987.src.rpm">
          <filename>rubygems-3.1.6-138.module_el8.6.0+3263+904da987.noarch.rpm</filename>
          <sum type="sha256">7462d9ec967392c9bbea2a87eab3ed301b1b2c1a2a8d73c23cbd1e13f8deb903</sum>
        </package>
        <package name="rubygem-mysql2" version="0.5.3" release="1.module_el8.6.0+3167+957ef55e" epoch="0" arch="s390x" src="rubygem-mysql2-0.5.3-1.module_el8.6.0+3167+957ef55e.src.rpm">
          <filename>rubygem-mysql2-0.5.3-1.module_el8.6.0+3167+957ef55e.s390x.rpm</filename>
          <sum type="sha256">79063b35e11fc313e8d4c71bd581d7eb8c2cbd54ac5e556b61b9812748965b4e</sum>
        </package>
        <package name="rubygem-test-unit" version="3.3.4" release="138.module_el8.6.0+3263+904da987" epoch="0" arch="noarch" src="ruby-2.7.6-138.module_el8.6.0+3263+904da987.src.rpm">
          <filename>rubygem-test-unit-3.3.4-138.module_el8.6.0+3263+904da987.noarch.rpm</filename>
          <sum type="sha256">7a79d0ec0ca81b2fce8c9ea0f3e064e48b9098c5244a47168fef18b7f22bcbf9</sum>
        </package>
        <package name="ruby-default-gems" version="2.7.6" release="138.module_el8.6.0+3263+904da987" epoch="0" arch="noarch" src="ruby-2.7.6-138.module_el8.6.0+3263+904da987.src.rpm">
          <filename>ruby-default-gems-2.7.6-138.module_el8.6.0+3263+904da987.noarch.rpm</filename>
          <sum type="sha256">8100b4c18d9d9aa8c104980679e7c620a7b827882f7ba64263bc9c0c4b27498c</sum>
        </package>
        <package name="ruby-doc" version="2.7.6" release="138.module_el8.6.0+3263+904da987" epoch="0" arch="noarch" src="ruby-2.7.6-138.module_el8.6.0+3263+904da987.src.rpm">
          <filename>ruby-doc-2.7.6-138.module_el8.6.0+3263+904da987.noarch.rpm</filename>
          <sum type="sha256">8c1db6c4468cefba79883a5ce6bb1e8c4c66ac57f2a1f38ff2f1640de3e9a2aa</sum>
        </package>
        <package name="rubygem-json" version="2.3.0" release="138.module_el8.6.0+3263+904da987" epoch="0" arch="s390x" src="ruby-2.7.6-138.module_el8.6.0+3263+904da987.src.rpm">
          <filename>rubygem-json-2.3.0-138.module_el8.6.0+3263+904da987.s390x.rpm</filename>
          <sum type="sha256">8ce624e4e622afdd7b678a55656b7b1142dd0077be12e4f68738e4f941d174d2</sum>
        </package>
        <package name="rubygems-devel" version="3.1.6" release="138.module_el8.6.0+3263+904da987" epoch="0" arch="noarch" src="ruby-2.7.6-138.module_el8.6.0+3263+904da987.src.rpm">
          <filename>rubygems-devel-3.1.6-138.module_el8.6.0+3263+904da987.noarch.rpm</filename>
          <sum type="sha256">9e9e4b6120c3d10225e0d8015bde5f10489ab39033f8e55da13f482d40ccffda</sum>
        </package>
        <package name="rubygem-power_assert" version="1.1.7" release="138.module_el8.6.0+3263+904da987" epoch="0" arch="noarch" src="ruby-2.7.6-138.module_el8.6.0+3263+904da987.src.rpm">
          <filename>rubygem-power_assert-1.1.7-138.module_el8.6.0+3263+904da987.noarch.rpm</filename>
          <sum type="sha256">a53be252924ed11f2f5fd4116d86fd7b6d391375295cbda44a4488cb83f0f242</sum>
        </package>
        <package name="rubygem-pg" version="1.2.3" release="1.module_el8.6.0+3167+957ef55e" epoch="0" arch="s390x" src="rubygem-pg-1.2.3-1.module_el8.6.0+3167+957ef55e.src.rpm">
          <filename>rubygem-pg-1.2.3-1.module_el8.6.0+3167+957ef55e.s390x.rpm</filename>
          <sum type="sha256">de09a395a3b29b1b0c373dff33b129853b989ad2726e1d89ac48a963bcdbaade</sum>
        </package>
        <package name="rubygem-minitest" version="5.13.0" release="138.module_el8.6.0+3263+904da987" epoch="0" arch="noarch" src="ruby-2.7.6-138.module_el8.6.0+3263+904da987.src.rpm">
          <filename>rubygem-minitest-5.13.0-138.module_el8.6.0+3263+904da987.noarch.rpm</filename>
          <sum type="sha256">eca759011c65255421756a391904c933d709ec5a6f7aaad0a2861293885e8ad7</sum>
        </package>
        <package name="rubygem-psych" version="3.1.0" release="138.module_el8.6.0+3263+904da987" epoch="0" arch="s390x" src="ruby-2.7.6-138.module_el8.6.0+3263+904da987.src.rpm">
          <filename>rubygem-psych-3.1.0-138.module_el8.6.0+3263+904da987.s390x.rpm</filename>
          <sum type="sha256">ed66793752b397c5f5b98c86b10ee01c34c9ff9a83704a15b6b0a8e0e2669b6a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6448</id>
    <title>Moderate: nodejs:14 security and bug fix update</title>
    <issued date="2022-09-13 00:00:00"/>
    <updated date="2022-10-10 22:13:20"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs:14 security and bug fix update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

Security Fix(es):

* nodejs: DNS rebinding in --inspect via invalid IP addresses (CVE-2022-32212)
* nodejs: HTTP request smuggling due to flawed parsing of Transfer-Encoding (CVE-2022-32213)
* nodejs: HTTP request smuggling due to improper delimiting of header fields (CVE-2022-32214)
* nodejs: HTTP request smuggling due to incorrect parsing of multi-line Transfer-Encoding (CVE-2022-32215)
* got: missing verification of requested URLs allows redirects to UNIX sockets (CVE-2022-33987)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* nodejs:14/nodejs: rebase to latest upstream release (BZ#2106367)
* nodejs:14/nodejs: Specify --with-default-icu-data-dir when using bootstrap build (BZ#2111417)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6448" id="RHSA-2022:6448" type="rhsa" title="RHSA-2022:6448"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32212" id="CVE-2022-32212" type="cve" title="CVE-2022-32212"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32213" id="CVE-2022-32213" type="cve" title="CVE-2022-32213"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32214" id="CVE-2022-32214" type="cve" title="CVE-2022-32214"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32215" id="CVE-2022-32215" type="cve" title="CVE-2022-32215"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-33987" id="CVE-2022-33987" type="cve" title="CVE-2022-33987"/>
      <reference href="https://bugzilla.redhat.com/2102001" id="2102001" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2105422" id="2105422" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2105426" id="2105426" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2105428" id="2105428" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2105430" id="2105430" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6448.html" id="ALSA-2022:6448" type="self" title="ALSA-2022:6448"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <module name="nodejs" stream="14" version="8060020220913100258" context="9edba152" arch="s390x"/>
        <package name="npm" version="6.14.17" release="1.14.20.0.2.module_el8.6.0+3261+490666b3" epoch="1" arch="s390x" src="nodejs-14.20.0-2.module_el8.6.0+3261+490666b3.src.rpm">
          <filename>npm-6.14.17-1.14.20.0.2.module_el8.6.0+3261+490666b3.s390x.rpm</filename>
          <sum type="sha256">0d50e3afeb36db8df6a90eb8e3da5caa525942ac26715e0c979c0327736c5e5d</sum>
        </package>
        <package name="nodejs-devel" version="14.20.0" release="2.module_el8.6.0+3261+490666b3" epoch="1" arch="s390x" src="nodejs-14.20.0-2.module_el8.6.0+3261+490666b3.src.rpm">
          <filename>nodejs-devel-14.20.0-2.module_el8.6.0+3261+490666b3.s390x.rpm</filename>
          <sum type="sha256">1090bfafb645fb0486ed18e3ed23621fe322fd14c911981c836c2fb6e2ab6b9a</sum>
        </package>
        <package name="nodejs-full-i18n" version="14.20.0" release="2.module_el8.6.0+3261+490666b3" epoch="1" arch="s390x" src="nodejs-14.20.0-2.module_el8.6.0+3261+490666b3.src.rpm">
          <filename>nodejs-full-i18n-14.20.0-2.module_el8.6.0+3261+490666b3.s390x.rpm</filename>
          <sum type="sha256">3cf649430f8dc5e062efa3a554e9f9ba5835f8388ce524fd6501fa78423a4bfe</sum>
        </package>
        <package name="nodejs-nodemon" version="2.0.19" release="2.module_el8.6.0+3261+490666b3" epoch="0" arch="noarch" src="nodejs-nodemon-2.0.19-2.module_el8.6.0+3261+490666b3.src.rpm">
          <filename>nodejs-nodemon-2.0.19-2.module_el8.6.0+3261+490666b3.noarch.rpm</filename>
          <sum type="sha256">3fc1746096791c98b03b70040c6e2a76c192ed1f045020f5190e0632fd6f75a9</sum>
        </package>
        <package name="nodejs-docs" version="14.20.0" release="2.module_el8.6.0+3261+490666b3" epoch="1" arch="noarch" src="nodejs-14.20.0-2.module_el8.6.0+3261+490666b3.src.rpm">
          <filename>nodejs-docs-14.20.0-2.module_el8.6.0+3261+490666b3.noarch.rpm</filename>
          <sum type="sha256">9472612815c3448084714a861049790a3858e6f58d18761ec7ecf5e0970f68d4</sum>
        </package>
        <package name="nodejs" version="14.20.0" release="2.module_el8.6.0+3261+490666b3" epoch="1" arch="s390x" src="nodejs-14.20.0-2.module_el8.6.0+3261+490666b3.src.rpm">
          <filename>nodejs-14.20.0-2.module_el8.6.0+3261+490666b3.s390x.rpm</filename>
          <sum type="sha256">d3b7eda24cad654bf0ffe415f5fd7477c4040013bf1ccdbcf4a0031c2c695b08</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6450</id>
    <title>Moderate: ruby:3.0 security, bug fix, and enhancement update</title>
    <issued date="2022-09-13 00:00:00"/>
    <updated date="2023-01-03 12:15:28"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby:3.0 security, bug fix, and enhancement update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.0.4). (BZ#2109431)

Security Fix(es):

* ruby: Regular expression denial of service vulnerability of Date parsing methods (CVE-2021-41817)
* ruby: Cookie prefix spoofing in CGI::Cookie.parse (CVE-2021-41819)
* Ruby: Double free in Regexp compilation (CVE-2022-28738)
* Ruby: Buffer overrun in String-to-Float conversion (CVE-2022-28739)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* ruby 3.0: User-installed rubygems plugins are not being loaded [AlmaLinux8] (BZ#2110981)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6450" id="RHSA-2022:6450" type="rhsa" title="RHSA-2022:6450"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-41817" id="CVE-2021-41817" type="cve" title="CVE-2021-41817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-41819" id="CVE-2021-41819" type="cve" title="CVE-2021-41819"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28738" id="CVE-2022-28738" type="cve" title="CVE-2022-28738"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28739" id="CVE-2022-28739" type="cve" title="CVE-2022-28739"/>
      <reference href="https://bugzilla.redhat.com/2025104" id="2025104" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2026757" id="2026757" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075685" id="2075685" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075687" id="2075687" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6450.html" id="ALSA-2022:6450" type="self" title="ALSA-2022:6450"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <module name="ruby" stream="3.0" version="8060020220913133609" context="9edba152" arch="s390x"/>
        <package name="rubygems" version="3.2.33" release="141.module_el8.6.0+3263+41cde0c0" epoch="0" arch="noarch" src="ruby-3.0.4-141.module_el8.6.0+3263+41cde0c0.src.rpm">
          <filename>rubygems-3.2.33-141.module_el8.6.0+3263+41cde0c0.noarch.rpm</filename>
          <sum type="sha256">063d4b6c53b7c48ee451f40f2a9b4c0a9d3f85b748093681167fe2a9a25c7f24</sum>
        </package>
        <package name="rubygem-rexml" version="3.2.5" release="141.module_el8.6.0+3263+41cde0c0" epoch="0" arch="noarch" src="ruby-3.0.4-141.module_el8.6.0+3263+41cde0c0.src.rpm">
          <filename>rubygem-rexml-3.2.5-141.module_el8.6.0+3263+41cde0c0.noarch.rpm</filename>
          <sum type="sha256">06ea780c7e71d2bb32df747d16b328d5541ac770133dbbfe9f3a1364f5f4cc7a</sum>
        </package>
        <package name="rubygems-devel" version="3.2.33" release="141.module_el8.6.0+3263+41cde0c0" epoch="0" arch="noarch" src="ruby-3.0.4-141.module_el8.6.0+3263+41cde0c0.src.rpm">
          <filename>rubygems-devel-3.2.33-141.module_el8.6.0+3263+41cde0c0.noarch.rpm</filename>
          <sum type="sha256">2524acea1c3152538c00c1f0c39334ac6c9b77eea65d2cfdca2e6415379c3e8e</sum>
        </package>
        <package name="rubygem-io-console" version="0.5.7" release="141.module_el8.6.0+3263+41cde0c0" epoch="0" arch="s390x" src="ruby-3.0.4-141.module_el8.6.0+3263+41cde0c0.src.rpm">
          <filename>rubygem-io-console-0.5.7-141.module_el8.6.0+3263+41cde0c0.s390x.rpm</filename>
          <sum type="sha256">26faa57ca4bef1608fb81722dbb0c80bdc8c951f6d0151d40e546849eef65aa9</sum>
        </package>
        <package name="rubygem-rss" version="0.2.9" release="141.module_el8.6.0+3263+41cde0c0" epoch="0" arch="noarch" src="ruby-3.0.4-141.module_el8.6.0+3263+41cde0c0.src.rpm">
          <filename>rubygem-rss-0.2.9-141.module_el8.6.0+3263+41cde0c0.noarch.rpm</filename>
          <sum type="sha256">2fd25d8ee6bbbc58d5d3dfa510294e95a35b2d7fe407856b9d22a09ac091a7bf</sum>
        </package>
        <package name="rubygem-json" version="2.5.1" release="141.module_el8.6.0+3263+41cde0c0" epoch="0" arch="s390x" src="ruby-3.0.4-141.module_el8.6.0+3263+41cde0c0.src.rpm">
          <filename>rubygem-json-2.5.1-141.module_el8.6.0+3263+41cde0c0.s390x.rpm</filename>
          <sum type="sha256">34af17155ca32368316f8830c7d7a072656b04411b6dbb33f903f4054bc09f46</sum>
        </package>
        <package name="rubygem-rbs" version="1.4.0" release="141.module_el8.6.0+3263+41cde0c0" epoch="0" arch="noarch" src="ruby-3.0.4-141.module_el8.6.0+3263+41cde0c0.src.rpm">
          <filename>rubygem-rbs-1.4.0-141.module_el8.6.0+3263+41cde0c0.noarch.rpm</filename>
          <sum type="sha256">4230d4b2b98c534253ed18440ea09a67e1a1888e2fb001f2652f4a874a2d9aa2</sum>
        </package>
        <package name="rubygem-bundler" version="2.2.33" release="141.module_el8.6.0+3263+41cde0c0" epoch="0" arch="noarch" src="ruby-3.0.4-141.module_el8.6.0+3263+41cde0c0.src.rpm">
          <filename>rubygem-bundler-2.2.33-141.module_el8.6.0+3263+41cde0c0.noarch.rpm</filename>
          <sum type="sha256">49c0fa7810925c6363e812bcc43203c76f1050381cb88d12fd7de1f4afe20dd3</sum>
        </package>
        <package name="rubygem-mysql2" version="0.5.3" release="1.module_el8.6.0+3144+d138acf1" epoch="0" arch="s390x" src="rubygem-mysql2-0.5.3-1.module_el8.6.0+3167+957ef55e.src.rpm">
          <filename>rubygem-mysql2-0.5.3-1.module_el8.6.0+3144+d138acf1.s390x.rpm</filename>
          <sum type="sha256">59e9d62673de701106fd8f1405f4920b571b33a716b254625d8554a340823854</sum>
        </package>
        <package name="ruby-doc" version="3.0.4" release="141.module_el8.6.0+3263+41cde0c0" epoch="0" arch="noarch" src="ruby-3.0.4-141.module_el8.6.0+3263+41cde0c0.src.rpm">
          <filename>ruby-doc-3.0.4-141.module_el8.6.0+3263+41cde0c0.noarch.rpm</filename>
          <sum type="sha256">5a761bc9301edce8bcb9e810cc8f2f091c91ec257444278e9915c9230b44ee9b</sum>
        </package>
        <package name="rubygem-rdoc" version="6.3.3" release="141.module_el8.6.0+3263+41cde0c0" epoch="0" arch="noarch" src="ruby-3.0.4-141.module_el8.6.0+3263+41cde0c0.src.rpm">
          <filename>rubygem-rdoc-6.3.3-141.module_el8.6.0+3263+41cde0c0.noarch.rpm</filename>
          <sum type="sha256">67f860a4b267716103a91e0f06c1951ac8fe0ce287111dbcf4cac4065c23e630</sum>
        </package>
        <package name="rubygem-psych" version="3.3.2" release="141.module_el8.6.0+3263+41cde0c0" epoch="0" arch="s390x" src="ruby-3.0.4-141.module_el8.6.0+3263+41cde0c0.src.rpm">
          <filename>rubygem-psych-3.3.2-141.module_el8.6.0+3263+41cde0c0.s390x.rpm</filename>
          <sum type="sha256">6a43427c6ce3de051e4b06a50111bff840be70a4e5069bf06292120f9727fd27</sum>
        </package>
        <package name="ruby-default-gems" version="3.0.4" release="141.module_el8.6.0+3263+41cde0c0" epoch="0" arch="noarch" src="ruby-3.0.4-141.module_el8.6.0+3263+41cde0c0.src.rpm">
          <filename>ruby-default-gems-3.0.4-141.module_el8.6.0+3263+41cde0c0.noarch.rpm</filename>
          <sum type="sha256">7eae71965c3d2693240f3eb04e74ae02c3c4c955e8dd7d67f96b501326679748</sum>
        </package>
        <package name="rubygem-bigdecimal" version="3.0.0" release="141.module_el8.6.0+3263+41cde0c0" epoch="0" arch="s390x" src="ruby-3.0.4-141.module_el8.6.0+3263+41cde0c0.src.rpm">
          <filename>rubygem-bigdecimal-3.0.0-141.module_el8.6.0+3263+41cde0c0.s390x.rpm</filename>
          <sum type="sha256">8111fdce24fb57ebdb7e489ba117fe5e772651889e1b76bc2f9c7fff9c33033c</sum>
        </package>
        <package name="rubygem-irb" version="1.3.5" release="141.module_el8.6.0+3263+41cde0c0" epoch="0" arch="noarch" src="ruby-3.0.4-141.module_el8.6.0+3263+41cde0c0.src.rpm">
          <filename>rubygem-irb-1.3.5-141.module_el8.6.0+3263+41cde0c0.noarch.rpm</filename>
          <sum type="sha256">9d8bc01ebd37cd498a5e1bd6e5556f768150d5c727435220e060a36f58f3e7a2</sum>
        </package>
        <package name="ruby" version="3.0.4" release="141.module_el8.6.0+3263+41cde0c0" epoch="0" arch="s390x" src="ruby-3.0.4-141.module_el8.6.0+3263+41cde0c0.src.rpm">
          <filename>ruby-3.0.4-141.module_el8.6.0+3263+41cde0c0.s390x.rpm</filename>
          <sum type="sha256">a2f1d6dd4f632b340a8d1108a2544292af9fd4ed70c5f5c8b3e5161001766957</sum>
        </package>
        <package name="rubygem-typeprof" version="0.15.2" release="141.module_el8.6.0+3263+41cde0c0" epoch="0" arch="noarch" src="ruby-3.0.4-141.module_el8.6.0+3263+41cde0c0.src.rpm">
          <filename>rubygem-typeprof-0.15.2-141.module_el8.6.0+3263+41cde0c0.noarch.rpm</filename>
          <sum type="sha256">afee837ce4e7df8393c8c83dd6e3908501e9904d34a92b76f97c205d23ec3be0</sum>
        </package>
        <package name="rubygem-minitest" version="5.14.2" release="141.module_el8.6.0+3263+41cde0c0" epoch="0" arch="noarch" src="ruby-3.0.4-141.module_el8.6.0+3263+41cde0c0.src.rpm">
          <filename>rubygem-minitest-5.14.2-141.module_el8.6.0+3263+41cde0c0.noarch.rpm</filename>
          <sum type="sha256">c1be903bb2c036137f108a61cce5f9404d063f9e3000c5d6677f3cb185a657f0</sum>
        </package>
        <package name="rubygem-test-unit" version="3.3.7" release="141.module_el8.6.0+3263+41cde0c0" epoch="0" arch="noarch" src="ruby-3.0.4-141.module_el8.6.0+3263+41cde0c0.src.rpm">
          <filename>rubygem-test-unit-3.3.7-141.module_el8.6.0+3263+41cde0c0.noarch.rpm</filename>
          <sum type="sha256">e0c729d5f2c30f426dff2b3184bf048fac7622184cf2d7ea4e8f878f4cfd86be</sum>
        </package>
        <package name="rubygem-rake" version="13.0.3" release="141.module_el8.6.0+3263+41cde0c0" epoch="0" arch="noarch" src="ruby-3.0.4-141.module_el8.6.0+3263+41cde0c0.src.rpm">
          <filename>rubygem-rake-13.0.3-141.module_el8.6.0+3263+41cde0c0.noarch.rpm</filename>
          <sum type="sha256">e1822d95b3cb3d9c316cecb547638c3850117dccac2df5ca82c5f683ae85cafa</sum>
        </package>
        <package name="rubygem-power_assert" version="1.2.0" release="141.module_el8.6.0+3263+41cde0c0" epoch="0" arch="noarch" src="ruby-3.0.4-141.module_el8.6.0+3263+41cde0c0.src.rpm">
          <filename>rubygem-power_assert-1.2.0-141.module_el8.6.0+3263+41cde0c0.noarch.rpm</filename>
          <sum type="sha256">e1844e94f45601ee1b7f7633ed07ba2709e374cf3a327d4b9fe5af385e4365e0</sum>
        </package>
        <package name="rubygem-pg" version="1.2.3" release="1.module_el8.6.0+3144+d138acf1" epoch="0" arch="s390x" src="rubygem-pg-1.2.3-1.module_el8.6.0+3167+957ef55e.src.rpm">
          <filename>rubygem-pg-1.2.3-1.module_el8.6.0+3144+d138acf1.s390x.rpm</filename>
          <sum type="sha256">e5e418e782fc2d4ec7746c1c503d1e951f6b0e366a1ff9e81c67d85da1ef9552</sum>
        </package>
        <package name="ruby-devel" version="3.0.4" release="141.module_el8.6.0+3263+41cde0c0" epoch="0" arch="s390x" src="ruby-3.0.4-141.module_el8.6.0+3263+41cde0c0.src.rpm">
          <filename>ruby-devel-3.0.4-141.module_el8.6.0+3263+41cde0c0.s390x.rpm</filename>
          <sum type="sha256">ee346b6efd337b40ae77721a8af94ba9a754ff01c523562086f0e189878f5765</sum>
        </package>
        <package name="ruby-libs" version="3.0.4" release="141.module_el8.6.0+3263+41cde0c0" epoch="0" arch="s390x" src="ruby-3.0.4-141.module_el8.6.0+3263+41cde0c0.src.rpm">
          <filename>ruby-libs-3.0.4-141.module_el8.6.0+3263+41cde0c0.s390x.rpm</filename>
          <sum type="sha256">ef8aebd3a877c6aaffde2522899e7c98e386c3bdeabe77884015867bbf6d36f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6457</id>
    <title>Moderate: python3 security update</title>
    <issued date="2022-09-13 00:00:00"/>
    <updated date="2022-10-07 09:31:40"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. 

Security Fix(es):

* python(mailcap): findmatch() function does not sanitise the second argument (CVE-2015-20107)
* python: urllib.parse does not sanitize URLs containing ASCII newline and tabs (CVE-2022-0391)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6457" id="RHSA-2022:6457" type="rhsa" title="RHSA-2022:6457"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2015-20107" id="CVE-2015-20107" type="cve" title="CVE-2015-20107"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0391" id="CVE-2022-0391" type="cve" title="CVE-2022-0391"/>
      <reference href="https://bugzilla.redhat.com/2047376" id="2047376" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075390" id="2075390" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6457.html" id="ALSA-2022:6457" type="self" title="ALSA-2022:6457"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="platform-python-debug" version="3.6.8" release="47.el8_6.alma" epoch="0" arch="s390x" src="python3-3.6.8-47.el8_6.alma.src.rpm">
          <filename>platform-python-debug-3.6.8-47.el8_6.alma.s390x.rpm</filename>
          <sum type="sha256">55e6689f12e32e1c1f5125ea2dfddb974ec99cd212b5fe9afd7a7e6721064b4d</sum>
        </package>
        <package name="python3-tkinter" version="3.6.8" release="47.el8_6.alma" epoch="0" arch="s390x" src="python3-3.6.8-47.el8_6.alma.src.rpm">
          <filename>python3-tkinter-3.6.8-47.el8_6.alma.s390x.rpm</filename>
          <sum type="sha256">69d3fe96e101bc66802c3f444dfb79934c4547e8bdf5c79203f579420254973c</sum>
        </package>
        <package name="python3-idle" version="3.6.8" release="47.el8_6.alma" epoch="0" arch="s390x" src="python3-3.6.8-47.el8_6.alma.src.rpm">
          <filename>python3-idle-3.6.8-47.el8_6.alma.s390x.rpm</filename>
          <sum type="sha256">77e9f569533c20e95e64392d5eb5597dd49da645823389a85b0d8afe49784d4b</sum>
        </package>
        <package name="platform-python-devel" version="3.6.8" release="47.el8_6.alma" epoch="0" arch="s390x" src="python3-3.6.8-47.el8_6.alma.src.rpm">
          <filename>platform-python-devel-3.6.8-47.el8_6.alma.s390x.rpm</filename>
          <sum type="sha256">dcb6292d0b306af654efffc3a1b68f6b3d20ca9f4754d682ea835ba0fca3fd44</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6539</id>
    <title>Moderate: .NET 6.0 security and bugfix update</title>
    <issued date="2022-09-15 00:00:00"/>
    <updated date="2022-10-14 12:23:06"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security and bugfix update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.109 and .NET Runtime 6.0.9.

Security Fix(es):

* dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. (CVE-2022-38013)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6539" id="RHSA-2022:6539" type="rhsa" title="RHSA-2022:6539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38013" id="CVE-2022-38013" type="cve" title="CVE-2022-38013"/>
      <reference href="https://bugzilla.redhat.com/2125124" id="2125124" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6539.html" id="ALSA-2022:6539" type="self" title="ALSA-2022:6539"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="dotnet-apphost-pack-6.0" version="6.0.9" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.109-1.el8_6.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.9-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">20fd207008dc2a4edb3319e2e62b20af052469c54ee199d2276a383b067ee5e4</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.109" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.109-1.el8_6.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.109-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">39e813eea5e47350f6a85067f935f3efad4fc19bf078d8e14afb90c476a8522e</sum>
        </package>
        <package name="dotnet" version="6.0.109" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.109-1.el8_6.src.rpm">
          <filename>dotnet-6.0.109-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">3b04947a9cfb703325c3e7111cebafda38faff4307c5342a153f466c18748474</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.9" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.109-1.el8_6.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.9-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">5e91bb959adb8f9f28cb631904bce513c3fc3ca5597b2f235512a43ec3e0e834</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="6.0.109" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.109-1.el8_6.src.rpm">
          <filename>netstandard-targeting-pack-2.1-6.0.109-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">5ed1442f6e2f39068e73558a0a731f74c4ab87ca38f6ce627516e17e157aedbe</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.9" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.109-1.el8_6.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.9-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">6dc25aecf0d3ccb59b33b4ad6325facc39f94af15ded20be7379677a52438389</sum>
        </package>
        <package name="dotnet-host" version="6.0.9" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.109-1.el8_6.src.rpm">
          <filename>dotnet-host-6.0.9-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">ad06fa712a55b64db32d7fc4a5cfd79d2918f05a310d2829b19b63ec48e5c5b0</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.9" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.109-1.el8_6.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.9-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">adb9769b2202b4cb909dd7e19fd8c8f607a03adcf6eaa3cdf1adebaf3075cc8b</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.9" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.109-1.el8_6.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.9-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">c71d298b3170bb03d0315176f26c5cec2f1f0327dbda66259787b7d63b88585b</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.9" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.109-1.el8_6.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.9-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">d2294c5a82990dc22a7214283267e4a3e0a2a34a338589b68cdf37dbbf22f0cc</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.109" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.109-1.el8_6.src.rpm">
          <filename>dotnet-templates-6.0-6.0.109-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">d68b6c21630c7e661add73dd199174c758157bd912caff5c83222b03c94e82c1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6540</id>
    <title>Moderate: webkit2gtk3 security update</title>
    <issued date="2022-09-15 00:00:00"/>
    <updated date="2022-10-14 13:09:15"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

The following packages have been upgraded to a later upstream version: webkit2gtk3 (2.36.7).

Security Fix(es):

* webkitgtk: processing maliciously crafted web content may lead to arbitrary code execution (CVE-2022-32893)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6540" id="RHSA-2022:6540" type="rhsa" title="RHSA-2022:6540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32893" id="CVE-2022-32893" type="cve" title="CVE-2022-32893"/>
      <reference href="https://bugzilla.redhat.com/2121645" id="2121645" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6540.html" id="ALSA-2022:6540" type="self" title="ALSA-2022:6540"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="webkit2gtk3-jsc" version="2.36.7" release="1.el8_6" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el8_6.src.rpm">
          <filename>webkit2gtk3-jsc-2.36.7-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">01986d64536cd544a34e329448137d41397b80862b9d35bfbcf144cb94fbd48f</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.36.7" release="1.el8_6" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el8_6.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.36.7-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">9323847205454c2c63fa8dcfd7e3589b60e3fb037c8fcbe14b89145595269008</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.36.7" release="1.el8_6" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el8_6.src.rpm">
          <filename>webkit2gtk3-devel-2.36.7-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">9f2bda84c5f0fc5e1ec3d68d1eaa01db8c9bcdde2ef526e020a334403a2acbdf</sum>
        </package>
        <package name="webkit2gtk3" version="2.36.7" release="1.el8_6" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el8_6.src.rpm">
          <filename>webkit2gtk3-2.36.7-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">eddbafac1c928a6a12581008b13ddc1cb4e939ef43d5a6341458ab3b25bd4ac9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6542</id>
    <title>Moderate: php:7.4 security update</title>
    <issued date="2022-09-15 00:00:00"/>
    <updated date="2022-10-14 12:38:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>php:7.4 security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

* Archive_Tar: allows an unserialization attack because phar: is blocked but PHAR: is not blocked (CVE-2020-28948)
* Archive_Tar: improper filename sanitization leads to file overwrites (CVE-2020-28949)
* Archive_Tar: directory traversal due to inadequate checking of symbolic links (CVE-2020-36193)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6542" id="RHSA-2022:6542" type="rhsa" title="RHSA-2022:6542"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-28948" id="CVE-2020-28948" type="cve" title="CVE-2020-28948"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-28949" id="CVE-2020-28949" type="cve" title="CVE-2020-28949"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-36193" id="CVE-2020-36193" type="cve" title="CVE-2020-36193"/>
      <reference href="https://bugzilla.redhat.com/1904001" id="1904001" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1910323" id="1910323" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1942961" id="1942961" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6542.html" id="ALSA-2022:6542" type="self" title="ALSA-2022:6542"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <module name="php" stream="7.4" version="8060020220824162156" context="4c984ee0" arch="s390x"/>
        <package name="php-pear" version="1.10.13" release="1.module_el8.6.0+3268+b150a051" epoch="1" arch="noarch" src="php-pear-1.10.13-1.module_el8.6.0+3268+b150a051.src.rpm">
          <filename>php-pear-1.10.13-1.module_el8.6.0+3268+b150a051.noarch.rpm</filename>
          <sum type="sha256">0cce4d216b43c4b38de6e0f49d7e0705d81c35d448903204b93b913865a2007c</sum>
        </package>
        <package name="php-embedded" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-embedded-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">0ec2ad3d2788dc1a5717ea1471ba956823fb5c00238a8b67dd989d65b33a7e64</sum>
        </package>
        <package name="php-enchant" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-enchant-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">10a438667263354dafdd31711eba697ea7cb25a45c32b95509625c45a7af7b28</sum>
        </package>
        <package name="php-dbg" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-dbg-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">11956afc16ed712922e5673d1eb5de5835af43ed519ca87a91da18630ee54f58</sum>
        </package>
        <package name="php-cli" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-cli-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">25a74f81bdcfb1c3e956dfd8600188de8379688508ea58ee40b8c60ea32e92b7</sum>
        </package>
        <package name="php-pecl-apcu-devel" version="5.1.18" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.18-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pecl-apcu-devel-5.1.18-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">2bd2e6d5e9f3b9a675fe03108c8444fb82eac045a2c0fe6c2d1f24a709c39d33</sum>
        </package>
        <package name="php-common" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-common-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">2dc7b9e141e83d4d4447da8c3cba27618539f30ae98a1e35cdae2042c70f038e</sum>
        </package>
        <package name="php-xmlrpc" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-xmlrpc-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">2e4b9cde3ce26c368bc9b60aaeb24901ea7e2c537c6e5b88728adae52d4fdbe2</sum>
        </package>
        <package name="php-opcache" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-opcache-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">36aff76975e1632868f17365802cef0b4e88c8fb7a524230fade5730c57e937f</sum>
        </package>
        <package name="php-dba" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-dba-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">4094fd7da964246b9ceedbd4f9e67083dafaa42de7d70215fdf393a9cad2fe44</sum>
        </package>
        <package name="php-json" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-json-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">48e3e7bcb98e659fc53ae936ad221db78497d94ec0c93939fbbbcb29658d61e8</sum>
        </package>
        <package name="libzip-tools" version="1.6.1" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>libzip-tools-1.6.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">4dcd7aacc8eb606c28a6d4707bf2d928045c38a99d7f40e5818bdfd63931d7c0</sum>
        </package>
        <package name="php-pecl-rrd" version="2.0.1" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-pecl-rrd-2.0.1-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pecl-rrd-2.0.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">5e91b3f33f42fdf8f7e58dc4a81af0f2cf8a51cb967a3803f55a275bb7a2b1f1</sum>
        </package>
        <package name="php-ldap" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-ldap-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">63e08bea11606f03a4ca37173f722386e2b4b7729dc6b762f3899b918fa9b87c</sum>
        </package>
        <package name="php-process" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-process-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">682080e9e36a377ab7852225f7179395c533e546c7d1b7224dc3a0805c3dd1a0</sum>
        </package>
        <package name="php-pecl-apcu" version="5.1.18" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.18-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pecl-apcu-5.1.18-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">6a5268e949f13c64c1e1e2d58b6ca9d81f1215941caa92adcf0b40eb6727bf08</sum>
        </package>
        <package name="php-snmp" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-snmp-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">75fbde2c74f003af7719ff65a101f93ad051086dd4c13c8aef93e07201c2ad82</sum>
        </package>
        <package name="php-pgsql" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pgsql-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">7e97b4a28322c7589ba97c7e8d6a9e7637f13a6e6a12f563bea8838d008fc20d</sum>
        </package>
        <package name="php-pecl-zip" version="1.18.2" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-pecl-zip-1.18.2-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pecl-zip-1.18.2-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">801fd66e96d056487f697bb442ce1eba14196571735ca21d7c3e4d5a722c4006</sum>
        </package>
        <package name="php-gd" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-gd-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">80ba1063db46e61c55efc627a610a52e5e8f197fc17f13c7d8a11df215314ac3</sum>
        </package>
        <package name="php-soap" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-soap-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">837ebc03d889cad0d16e6077a3d69292be783db5c97460202987fa9bb1d03638</sum>
        </package>
        <package name="php-pecl-xdebug" version="2.9.5" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-pecl-xdebug-2.9.5-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pecl-xdebug-2.9.5-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">864cae889833ed12fd18cf7183adf90631fed1cf2cfe6eb1cbc4e31f2ae6ebee</sum>
        </package>
        <package name="php-devel" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-devel-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">907f3cb162c42f5764811f1f3c023c62effbb4726ce2d746ad47bbddb176cb09</sum>
        </package>
        <package name="libzip" version="1.6.1" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">9a9e43a839757a5b4aea25cc7ffbca0524546f9b9177562674854f7d3c042ed1</sum>
        </package>
        <package name="php-fpm" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-fpm-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">9ced74802ed4fb20056674d210791719734fd2e138e00e500c894f5c35f6c3f0</sum>
        </package>
        <package name="php-mbstring" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-mbstring-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">a24d60215250b4112c78d1839cb1ced5535a4ee1798a80a55a77453332abd87f</sum>
        </package>
        <package name="libzip-devel" version="1.6.1" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>libzip-devel-1.6.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">a3859fbd79933d7d04d80ad2041fa602d3f20b3cefd633660c5dee5365df1f35</sum>
        </package>
        <package name="php-bcmath" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-bcmath-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">a7bb30747f4b4158c3c886436f2b21c6a6e0c3bed3203dedf6c362720546913e</sum>
        </package>
        <package name="php-ffi" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-ffi-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">bfe2c6af2300973be5ae2a47dc155efd9bc1c2fee1838a8df79c14b39546fcb9</sum>
        </package>
        <package name="php-xml" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-xml-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">cc7e0860c4c49c721263a34f086a27c7e31a7da86f01f7487d62fecdc27c38e4</sum>
        </package>
        <package name="php-gmp" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-gmp-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">d063d55128a9b8f7d6d4b0e9b82001cd6f2b5d417b668a3d8e9232a0becf2b19</sum>
        </package>
        <package name="php" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">d369b61a0109a4cd44d1ef02580400847829d69c3597fc9ab31d35db9b288e17</sum>
        </package>
        <package name="php-pdo" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pdo-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">d52ae70e74c90e0137dffa89615267ccff61ab3a8e0eef89abfaf6c4545ffb85</sum>
        </package>
        <package name="php-mysqlnd" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-mysqlnd-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">d74880f37ac8947c22da3000ec5f20e5d7c0cb049195bc84621463e52c39fe05</sum>
        </package>
        <package name="php-odbc" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-odbc-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">d8090f5f5c72bbd42971aa3bf049147d2f5e0d6e3fb835d1c7765f1941a3b44f</sum>
        </package>
        <package name="php-intl" version="7.4.19" release="4.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-7.4.19-4.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-intl-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">e9ced8ea7b99da618b5fd3417cb44a986b6e14bca4f70022b87fb0ef3c39449d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6702</id>
    <title>Important: firefox security update</title>
    <issued date="2022-09-26 00:00:00"/>
    <updated date="2022-10-14 14:48:59"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.3.0 ESR.

Security Fix(es):

* Mozilla: Bypassing FeaturePolicy restrictions on transient pages (CVE-2022-40959)
* Mozilla: Data-race when parsing non-UTF-8 URLs in threads (CVE-2022-40960)
* Mozilla: Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3 (CVE-2022-40962)
* Mozilla: Bypassing Secure Context restriction for cookies with __Host and __Secure prefix (CVE-2022-40958)
* Mozilla: Content-Security-Policy base-uri bypass (CVE-2022-40956)
* Mozilla: Incoherent instruction cache when building WASM on ARM64 (CVE-2022-40957)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6702" id="RHSA-2022:6702" type="rhsa" title="RHSA-2022:6702"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40956" id="CVE-2022-40956" type="cve" title="CVE-2022-40956"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40957" id="CVE-2022-40957" type="cve" title="CVE-2022-40957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40958" id="CVE-2022-40958" type="cve" title="CVE-2022-40958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40959" id="CVE-2022-40959" type="cve" title="CVE-2022-40959"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40960" id="CVE-2022-40960" type="cve" title="CVE-2022-40960"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40962" id="CVE-2022-40962" type="cve" title="CVE-2022-40962"/>
      <reference href="https://bugzilla.redhat.com/2128792" id="2128792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128793" id="2128793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128794" id="2128794" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128795" id="2128795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128796" id="2128796" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128797" id="2128797" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6702.html" id="ALSA-2022:6702" type="self" title="ALSA-2022:6702"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="firefox" version="102.3.0" release="6.el8_6.alma" epoch="0" arch="s390x" src="firefox-102.3.0-6.el8_6.alma.src.rpm">
          <filename>firefox-102.3.0-6.el8_6.alma.s390x.rpm</filename>
          <sum type="sha256">6ae19617ffac718b3e35afb2559157787dbc42edf89410339dad618eeb67d977</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6708</id>
    <title>Important: thunderbird security update</title>
    <issued date="2022-09-26 00:00:00"/>
    <updated date="2022-10-14 15:08:36"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.3.0.

Security Fix(es):

* Mozilla: Leaking of sensitive information when composing a response to an HTML email with a META refresh tag (CVE-2022-3033)
* Mozilla: Bypassing FeaturePolicy restrictions on transient pages (CVE-2022-40959)
* Mozilla: Data-race when parsing non-UTF-8 URLs in threads (CVE-2022-40960)
* Mozilla: Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3 (CVE-2022-40962)
* Mozilla: Remote content specified in an HTML document that was nested inside an iframe's srcdoc attribute was not blocked (CVE-2022-3032)
* Mozilla: An iframe element in an HTML email could trigger a network request (CVE-2022-3034)
* Mozilla: Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack (CVE-2022-36059)
* Mozilla: Bypassing Secure Context restriction for cookies with __Host and __Secure prefix (CVE-2022-40958)
* Mozilla: Content-Security-Policy base-uri bypass (CVE-2022-40956)
* Mozilla: Incoherent instruction cache when building WASM on ARM64 (CVE-2022-40957)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6708" id="RHSA-2022:6708" type="rhsa" title="RHSA-2022:6708"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3032" id="CVE-2022-3032" type="cve" title="CVE-2022-3032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3033" id="CVE-2022-3033" type="cve" title="CVE-2022-3033"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3034" id="CVE-2022-3034" type="cve" title="CVE-2022-3034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36059" id="CVE-2022-36059" type="cve" title="CVE-2022-36059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40956" id="CVE-2022-40956" type="cve" title="CVE-2022-40956"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40957" id="CVE-2022-40957" type="cve" title="CVE-2022-40957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40958" id="CVE-2022-40958" type="cve" title="CVE-2022-40958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40959" id="CVE-2022-40959" type="cve" title="CVE-2022-40959"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40960" id="CVE-2022-40960" type="cve" title="CVE-2022-40960"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40962" id="CVE-2022-40962" type="cve" title="CVE-2022-40962"/>
      <reference href="https://bugzilla.redhat.com/2123255" id="2123255" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123256" id="2123256" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123257" id="2123257" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123258" id="2123258" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128792" id="2128792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128793" id="2128793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128794" id="2128794" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128795" id="2128795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128796" id="2128796" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128797" id="2128797" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6708.html" id="ALSA-2022:6708" type="self" title="ALSA-2022:6708"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="thunderbird" version="102.3.0" release="3.el8_6.alma" epoch="0" arch="s390x" src="thunderbird-102.3.0-3.el8_6.alma.src.rpm">
          <filename>thunderbird-102.3.0-3.el8_6.alma.s390x.rpm</filename>
          <sum type="sha256">55e84337706c8933d0d74c0f168da4783f7351eb2f55d937e637e259cf34259e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6775</id>
    <title>Important: squid:4 security update</title>
    <issued date="2022-10-04 00:00:00"/>
    <updated date="2022-10-14 16:42:29"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>squid:4 security update</summary>
    <description>Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

* squid: buffer-over-read in SSPI and SMB authentication (CVE-2022-41318)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6775" id="RHSA-2022:6775" type="rhsa" title="RHSA-2022:6775"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41318" id="CVE-2022-41318" type="cve" title="CVE-2022-41318"/>
      <reference href="https://bugzilla.redhat.com/2129771" id="2129771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6775.html" id="ALSA-2022:6775" type="self" title="ALSA-2022:6775"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <module name="squid" stream="4" version="8060020220707110313" context="9edba152" arch="s390x"/>
        <package name="squid" version="4.15" release="3.module_el8.6.0+3275+7a670b72.2" epoch="7" arch="s390x" src="squid-4.15-3.module_el8.6.0+3275+7a670b72.2.src.rpm">
          <filename>squid-4.15-3.module_el8.6.0+3275+7a670b72.2.s390x.rpm</filename>
          <sum type="sha256">49338e3523775807cd97187db4ee65a89142c3f6db759c2d544c09e5f39e26cb</sum>
        </package>
        <package name="libecap" version="1.0.1" release="2.module_el8.6.0+3048+383bc947" epoch="0" arch="s390x" src="libecap-1.0.1-2.module_el8.6.0+3048+383bc947.src.rpm">
          <filename>libecap-1.0.1-2.module_el8.6.0+3048+383bc947.s390x.rpm</filename>
          <sum type="sha256">6f8eb1f500a9dca1949f5f05aedf6b97764817d9f17284be3612eec04618f4e1</sum>
        </package>
        <package name="libecap-devel" version="1.0.1" release="2.module_el8.6.0+3048+383bc947" epoch="0" arch="s390x" src="libecap-1.0.1-2.module_el8.6.0+3048+383bc947.src.rpm">
          <filename>libecap-devel-1.0.1-2.module_el8.6.0+3048+383bc947.s390x.rpm</filename>
          <sum type="sha256">96f15e87a90682f6ec87bc4ed7c8edae439f414cd0382f1865dcf76ac3a7807d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6778</id>
    <title>Important: bind security update</title>
    <issued date="2022-10-04 00:00:00"/>
    <updated date="2022-10-14 17:12:11"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: memory leak in ECDSA DNSSEC verification code (CVE-2022-38177)
* bind: memory leaks in EdDSA DNSSEC verification code (CVE-2022-38178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6778" id="RHSA-2022:6778" type="rhsa" title="RHSA-2022:6778"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38177" id="CVE-2022-38177" type="cve" title="CVE-2022-38177"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38178" id="CVE-2022-38178" type="cve" title="CVE-2022-38178"/>
      <reference href="https://bugzilla.redhat.com/2128601" id="2128601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128602" id="2128602" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6778.html" id="ALSA-2022:6778" type="self" title="ALSA-2022:6778"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="bind-utils" version="9.11.36" release="3.el8_6.1" epoch="32" arch="s390x" src="bind-9.11.36-3.el8_6.1.src.rpm">
          <filename>bind-utils-9.11.36-3.el8_6.1.s390x.rpm</filename>
          <sum type="sha256">02541d9e7a31b4714645ef8033a22d64cad1eafa92e92da366fbe8aee3174d81</sum>
        </package>
        <package name="bind-sdb" version="9.11.36" release="3.el8_6.1" epoch="32" arch="s390x" src="bind-9.11.36-3.el8_6.1.src.rpm">
          <filename>bind-sdb-9.11.36-3.el8_6.1.s390x.rpm</filename>
          <sum type="sha256">0a3807febe77e923c9f34b3bcebde23e77cdb155dd381c35202da3e8a044506a</sum>
        </package>
        <package name="bind-pkcs11" version="9.11.36" release="3.el8_6.1" epoch="32" arch="s390x" src="bind-9.11.36-3.el8_6.1.src.rpm">
          <filename>bind-pkcs11-9.11.36-3.el8_6.1.s390x.rpm</filename>
          <sum type="sha256">4bed36845056e16195e13de609632397b0b95b314267ea8badfb13bfdc29b01e</sum>
        </package>
        <package name="bind-pkcs11-libs" version="9.11.36" release="3.el8_6.1" epoch="32" arch="s390x" src="bind-9.11.36-3.el8_6.1.src.rpm">
          <filename>bind-pkcs11-libs-9.11.36-3.el8_6.1.s390x.rpm</filename>
          <sum type="sha256">521e81111503101d64eb1ada1b3f71e2f5cd508847b1e356af0a08067dc0654c</sum>
        </package>
        <package name="bind-license" version="9.11.36" release="3.el8_6.1" epoch="32" arch="noarch" src="bind-9.11.36-3.el8_6.1.src.rpm">
          <filename>bind-license-9.11.36-3.el8_6.1.noarch.rpm</filename>
          <sum type="sha256">57c8189848c73678b32aeb975918c3a8afd467035d3ce649194aed85896716f6</sum>
        </package>
        <package name="bind-chroot" version="9.11.36" release="3.el8_6.1" epoch="32" arch="s390x" src="bind-9.11.36-3.el8_6.1.src.rpm">
          <filename>bind-chroot-9.11.36-3.el8_6.1.s390x.rpm</filename>
          <sum type="sha256">59dfd8c141ecc0ce3201fdc689b13b615bdc134d77ec60ac3b437ca67934ae37</sum>
        </package>
        <package name="bind-libs-lite" version="9.11.36" release="3.el8_6.1" epoch="32" arch="s390x" src="bind-9.11.36-3.el8_6.1.src.rpm">
          <filename>bind-libs-lite-9.11.36-3.el8_6.1.s390x.rpm</filename>
          <sum type="sha256">60df2b5afd8816a0169602c00f20cb42b599f40a43d4f2d5f5afe5b9e32ad4b1</sum>
        </package>
        <package name="bind-pkcs11-devel" version="9.11.36" release="3.el8_6.1" epoch="32" arch="s390x" src="bind-9.11.36-3.el8_6.1.src.rpm">
          <filename>bind-pkcs11-devel-9.11.36-3.el8_6.1.s390x.rpm</filename>
          <sum type="sha256">6836f43ca44342628490d2d86009660b22e4f206a09108b21437f8a4072c5859</sum>
        </package>
        <package name="bind-pkcs11-utils" version="9.11.36" release="3.el8_6.1" epoch="32" arch="s390x" src="bind-9.11.36-3.el8_6.1.src.rpm">
          <filename>bind-pkcs11-utils-9.11.36-3.el8_6.1.s390x.rpm</filename>
          <sum type="sha256">6cc3d2a3d4392785b7d201f245e1b31c345365c51258ecc74e15f87e59cb8f4c</sum>
        </package>
        <package name="bind-sdb-chroot" version="9.11.36" release="3.el8_6.1" epoch="32" arch="s390x" src="bind-9.11.36-3.el8_6.1.src.rpm">
          <filename>bind-sdb-chroot-9.11.36-3.el8_6.1.s390x.rpm</filename>
          <sum type="sha256">704a553496ec4a24341c9aee127b6e16eb0a3dddd8c5246a1d4f27f60f74ea81</sum>
        </package>
        <package name="python3-bind" version="9.11.36" release="3.el8_6.1" epoch="32" arch="noarch" src="bind-9.11.36-3.el8_6.1.src.rpm">
          <filename>python3-bind-9.11.36-3.el8_6.1.noarch.rpm</filename>
          <sum type="sha256">76d5aceaee6764c08fcf5524f0eb8aeae4e9b7418645fc1914d6d9dbbb21cbf9</sum>
        </package>
        <package name="bind-lite-devel" version="9.11.36" release="3.el8_6.1" epoch="32" arch="s390x" src="bind-9.11.36-3.el8_6.1.src.rpm">
          <filename>bind-lite-devel-9.11.36-3.el8_6.1.s390x.rpm</filename>
          <sum type="sha256">7acd684cc2a44fda22c7307f33c832b8becb75f7be2b67b11703470ee2a67545</sum>
        </package>
        <package name="bind" version="9.11.36" release="3.el8_6.1" epoch="32" arch="s390x" src="bind-9.11.36-3.el8_6.1.src.rpm">
          <filename>bind-9.11.36-3.el8_6.1.s390x.rpm</filename>
          <sum type="sha256">9e22ba4368a500bdac124205f367e6da2914b0c77e490d5d8a5f758702fe0763</sum>
        </package>
        <package name="bind-libs" version="9.11.36" release="3.el8_6.1" epoch="32" arch="s390x" src="bind-9.11.36-3.el8_6.1.src.rpm">
          <filename>bind-libs-9.11.36-3.el8_6.1.s390x.rpm</filename>
          <sum type="sha256">bc98596abf24b22b9b28ded5406b70064da0b49daffc8d101da4a12a3a1f0688</sum>
        </package>
        <package name="bind-devel" version="9.11.36" release="3.el8_6.1" epoch="32" arch="s390x" src="bind-9.11.36-3.el8_6.1.src.rpm">
          <filename>bind-devel-9.11.36-3.el8_6.1.s390x.rpm</filename>
          <sum type="sha256">d24d82fc7579d1652785c441fde3e2e257b3c4155a462dafd0807b924127f838</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6781</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2022-10-04 00:00:00"/>
    <updated date="2022-10-14 16:12:12"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: BIND 9 resolvers configured to answer from cache with zero stale-answer-timeout may terminate unexpectedly (CVE-2022-3080)
* bind: memory leak in ECDSA DNSSEC verification code (CVE-2022-38177)
* bind: memory leaks in EdDSA DNSSEC verification code (CVE-2022-38178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6781" id="RHSA-2022:6781" type="rhsa" title="RHSA-2022:6781"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3080" id="CVE-2022-3080" type="cve" title="CVE-2022-3080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38177" id="CVE-2022-38177" type="cve" title="CVE-2022-38177"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38178" id="CVE-2022-38178" type="cve" title="CVE-2022-38178"/>
      <reference href="https://bugzilla.redhat.com/2128600" id="2128600" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128601" id="2128601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128602" id="2128602" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6781.html" id="ALSA-2022:6781" type="self" title="ALSA-2022:6781"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="bind9.16-chroot" version="9.16.23" release="0.7.el8_6.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.7.el8_6.1.src.rpm">
          <filename>bind9.16-chroot-9.16.23-0.7.el8_6.1.s390x.rpm</filename>
          <sum type="sha256">2c50b0152a5fb3a9bf19b842dbfc88129523a024cdea0f9679c925ed6ed44dd9</sum>
        </package>
        <package name="bind9.16-utils" version="9.16.23" release="0.7.el8_6.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.7.el8_6.1.src.rpm">
          <filename>bind9.16-utils-9.16.23-0.7.el8_6.1.s390x.rpm</filename>
          <sum type="sha256">335cb145f750f505520d044d83e37870147cc62133e937328f9a10fc3bafd29b</sum>
        </package>
        <package name="bind9.16-license" version="9.16.23" release="0.7.el8_6.1" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.7.el8_6.1.src.rpm">
          <filename>bind9.16-license-9.16.23-0.7.el8_6.1.noarch.rpm</filename>
          <sum type="sha256">80ce5c8e0cec15d7ce450a5b3f71af5ec595edc64ea6a1fbb52b861dc2cdbb0f</sum>
        </package>
        <package name="bind9.16" version="9.16.23" release="0.7.el8_6.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.7.el8_6.1.src.rpm">
          <filename>bind9.16-9.16.23-0.7.el8_6.1.s390x.rpm</filename>
          <sum type="sha256">ab5e40007f51146d2d94446c023dcd5e8de871d1c5f2d73abe59b78a30305d36</sum>
        </package>
        <package name="bind9.16-libs" version="9.16.23" release="0.7.el8_6.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.7.el8_6.1.src.rpm">
          <filename>bind9.16-libs-9.16.23-0.7.el8_6.1.s390x.rpm</filename>
          <sum type="sha256">fd88ad3bbc715a2a54054e33ba6c8a6b82307d2e2b0fe85b13d12dbc0773ed4c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6820</id>
    <title>Moderate: prometheus-jmx-exporter security update</title>
    <issued date="2022-10-06 00:00:00"/>
    <updated date="2022-10-07 12:10:35"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>prometheus-jmx-exporter security update</summary>
    <description>Prometheus JMX Exporter is a JMX to Prometheus exporter: a collector that can be configured to scrape and expose MBeans of a JMX target.

Security Fix(es):

* snakeyaml: Denial of Service due to missing nested depth limitation for collections (CVE-2022-25857)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6820" id="RHSA-2022:6820" type="rhsa" title="RHSA-2022:6820"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25857" id="CVE-2022-25857" type="cve" title="CVE-2022-25857"/>
      <reference href="https://bugzilla.redhat.com/2126789" id="2126789" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6820.html" id="ALSA-2022:6820" type="self" title="ALSA-2022:6820"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="prometheus-jmx-exporter" version="0.12.0" release="8.el8_6" epoch="0" arch="noarch" src="prometheus-jmx-exporter-0.12.0-8.el8_6.src.rpm">
          <filename>prometheus-jmx-exporter-0.12.0-8.el8_6.noarch.rpm</filename>
          <sum type="sha256">697f86793a5d3ad1bdee413b8583b760cb77d07b0ca82164d44ec0e609dece0b</sum>
        </package>
        <package name="prometheus-jmx-exporter-openjdk11" version="0.12.0" release="8.el8_6" epoch="0" arch="noarch" src="prometheus-jmx-exporter-0.12.0-8.el8_6.src.rpm">
          <filename>prometheus-jmx-exporter-openjdk11-0.12.0-8.el8_6.noarch.rpm</filename>
          <sum type="sha256">e9d2446f87bd55b4e6fc74cf1de60dab732f540b9cb44117f8c52b1d061cd88f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6911</id>
    <title>Moderate: .NET 6.0 security and bugfix update</title>
    <issued date="2022-10-12 00:00:00"/>
    <updated date="2022-10-19 07:59:42"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security and bugfix update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK  6.0.110 and .NET Runtime 6.0.10.

Security Fix(es):

* dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6911" id="RHSA-2022:6911" type="rhsa" title="RHSA-2022:6911"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41032" id="CVE-2022-41032" type="cve" title="CVE-2022-41032"/>
      <reference href="https://bugzilla.redhat.com/2132614" id="2132614" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6911.html" id="ALSA-2022:6911" type="self" title="ALSA-2022:6911"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="dotnet-templates-6.0" version="6.0.110" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.110-1.el8_6.src.rpm">
          <filename>dotnet-templates-6.0-6.0.110-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">0860f3d1950ad2da8b1c085db08fd151513b4938181f72744e991b16e32de978</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.10" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.110-1.el8_6.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.10-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">10b503935add3cd2f26c83b1ad4401f8679ee4df1de04c8dbcfce4224d8f4e2d</sum>
        </package>
        <package name="dotnet" version="6.0.110" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.110-1.el8_6.src.rpm">
          <filename>dotnet-6.0.110-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">40036abcf221f2f12f0742c12790a4b45df2505d63f039c41667b2afb740d511</sum>
        </package>
        <package name="dotnet-host" version="6.0.10" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.110-1.el8_6.src.rpm">
          <filename>dotnet-host-6.0.10-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">46764c7999669d105ff71f157f760982b73ec24fc0d51ceaa866ac5a12ed4929</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.10" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.110-1.el8_6.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.10-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">5169b2b9071877dc59537d9cebd230ff1ef51c9fe7ee116bf62fd75365c97e95</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.10" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.110-1.el8_6.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.10-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">55fd981a08ac5bc9f06be2b839cd66f42e1bf941cc69601afa21eaf7990977bc</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.110" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.110-1.el8_6.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.110-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">647c3508d9a24ed1e3342f85e960ddaf055278f13d339f102e3df42664693c6c</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.10" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.110-1.el8_6.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.10-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">6ecc69fdf63b3b192052b1c3495133a4101bf2e153ff0eae41529273348e197f</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.10" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.110-1.el8_6.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.10-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">99f92e69112d58dc1bdc2c5a54475018cf00b7f1d8ec84dc71932d3470789cbe</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.10" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.110-1.el8_6.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.10-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">c004f8cce5f8989c2eaa7cbd28d9e69443f87cfcefb446590c5ceb2db67dd852</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="6.0.110" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.110-1.el8_6.src.rpm">
          <filename>netstandard-targeting-pack-2.1-6.0.110-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">f5bc0d29c392968c8a20d8a3db293e7ffcfc8434eadb00c353e6ed10c204e93c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6964</id>
    <title>Important: nodejs:16 security update</title>
    <issued date="2022-10-17 00:00:00"/>
    <updated date="2022-10-27 10:15:14"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:16 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

The following packages have been upgraded to a later upstream version: nodejs 16.

Security Fix(es):

* nodejs: weak randomness in WebCrypto keygen (CVE-2022-35255)
* nodejs: HTTP Request Smuggling due to incorrect parsing of header fields (CVE-2022-35256)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6964" id="RHSA-2022:6964" type="rhsa" title="RHSA-2022:6964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-35255" id="CVE-2022-35255" type="cve" title="CVE-2022-35255"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-35256" id="CVE-2022-35256" type="cve" title="CVE-2022-35256"/>
      <reference href="https://bugzilla.redhat.com/2130517" id="2130517" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2130518" id="2130518" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6964.html" id="ALSA-2022:6964" type="self" title="ALSA-2022:6964"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <module name="nodejs" stream="16" version="8060020221017123257" context="9edba152" arch="s390x"/>
        <package name="nodejs-nodemon" version="2.0.19" release="2.module_el8.6.0+3261+490666b3" epoch="0" arch="noarch" src="nodejs-nodemon-2.0.19-2.module_el8.6.0+3261+490666b3.src.rpm">
          <filename>nodejs-nodemon-2.0.19-2.module_el8.6.0+3261+490666b3.noarch.rpm</filename>
          <sum type="sha256">3fc1746096791c98b03b70040c6e2a76c192ed1f045020f5190e0632fd6f75a9</sum>
        </package>
        <package name="nodejs-docs" version="16.17.1" release="1.module_el8.6.0+3328+2e4711d7" epoch="1" arch="noarch" src="nodejs-16.17.1-1.module_el8.6.0+3328+2e4711d7.src.rpm">
          <filename>nodejs-docs-16.17.1-1.module_el8.6.0+3328+2e4711d7.noarch.rpm</filename>
          <sum type="sha256">6c16fd1d18a221b7b5bae12caf123529d9c7c5fea9a20df50486027577db9d1e</sum>
        </package>
        <package name="nodejs-full-i18n" version="16.17.1" release="1.module_el8.6.0+3328+2e4711d7" epoch="1" arch="s390x" src="nodejs-16.17.1-1.module_el8.6.0+3328+2e4711d7.src.rpm">
          <filename>nodejs-full-i18n-16.17.1-1.module_el8.6.0+3328+2e4711d7.s390x.rpm</filename>
          <sum type="sha256">9b3bb0179ebd3b413472a0cc6c69dae97a32571f4bf1bdd5dc6931a82aecb1aa</sum>
        </package>
        <package name="npm" version="8.15.0" release="1.16.17.1.1.module_el8.6.0+3328+2e4711d7" epoch="1" arch="s390x" src="nodejs-16.17.1-1.module_el8.6.0+3328+2e4711d7.src.rpm">
          <filename>npm-8.15.0-1.16.17.1.1.module_el8.6.0+3328+2e4711d7.s390x.rpm</filename>
          <sum type="sha256">b3ca4135efecb85b08b3d1e6c6bbc7ab172e869f36d6a03f407ac774d04f796e</sum>
        </package>
        <package name="nodejs" version="16.17.1" release="1.module_el8.6.0+3328+2e4711d7" epoch="1" arch="s390x" src="nodejs-16.17.1-1.module_el8.6.0+3328+2e4711d7.src.rpm">
          <filename>nodejs-16.17.1-1.module_el8.6.0+3328+2e4711d7.s390x.rpm</filename>
          <sum type="sha256">cd808f6339789affd47c123c9330f3edea6a6edae7308a4880230d33bd3c44f4</sum>
        </package>
        <package name="nodejs-devel" version="16.17.1" release="1.module_el8.6.0+3328+2e4711d7" epoch="1" arch="s390x" src="nodejs-16.17.1-1.module_el8.6.0+3328+2e4711d7.src.rpm">
          <filename>nodejs-devel-16.17.1-1.module_el8.6.0+3328+2e4711d7.s390x.rpm</filename>
          <sum type="sha256">d23dc601a49fb26db3d4e433af4c469508d376ddf4d828c7a9a0d0eef07ef6f0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7000</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2022-10-19 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077) (CVE-2022-21618)
* OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626)
* OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628)
* OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619)
* OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624)
* OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366) (CVE-2022-39399)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2022-10, 17.0.5) [almalinux-8] (BZ#2132503)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7000" id="RHSA-2022:7000" type="rhsa" title="RHSA-2022:7000"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21618" id="CVE-2022-21618" type="cve" title="CVE-2022-21618"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21619" id="CVE-2022-21619" type="cve" title="CVE-2022-21619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21624" id="CVE-2022-21624" type="cve" title="CVE-2022-21624"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21626" id="CVE-2022-21626" type="cve" title="CVE-2022-21626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21628" id="CVE-2022-21628" type="cve" title="CVE-2022-21628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39399" id="CVE-2022-39399" type="cve" title="CVE-2022-39399"/>
      <reference href="https://bugzilla.redhat.com/2133745" id="2133745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133753" id="2133753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133765" id="2133765" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133769" id="2133769" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133776" id="2133776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133817" id="2133817" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7000.html" id="ALSA-2022:7000" type="self" title="ALSA-2022:7000"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="java-17-openjdk-demo" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-demo-17.0.5.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">031ce9dc3dca83af06110ca387e02c72ea776d4b7eca48a59cfe98903e5ca9cf</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.5.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">2c3e11824ccc21c3629bd90a86ff62ca199a61b13fd24b96d9699a041f994706</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.5.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">4f868d5ab4b7fddd49718f4f532d027fd84d5d2a308c8be9c0d24eff335b4488</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-src-17.0.5.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">6cfa70c8e19ffe22aa63d712013ef4f33c6ac14f99494325a273104a50580c66</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.5.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">881fe5e0811a5b14efe9c33ff5bf110ad1adcb6a6d767587ddf663cbb714eadf</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.5.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">975d95796b9951e4dac06cc7cfa2fb80771e41a1d65149b5c0716a621bf6a45d</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-17.0.5.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">bd5585239a5f7e7b547fca9b014041a504503fe211ec5d447946a1a6a5c08e3c</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-headless-17.0.5.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">c18122b19b3b77a3c5488c81da0968a2bd3b047f4ac4d42c4bdf948fc0b56b4b</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-devel-17.0.5.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">c90a28e3d709b1068a32e163a903d20444b5a62189f9b2c1019e1c44955f870c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7006</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2022-10-19 00:00:00"/>
    <updated date="2022-10-21 14:14:42"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626)
* OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628)
* OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619)
* OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7006" id="RHSA-2022:7006" type="rhsa" title="RHSA-2022:7006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21619" id="CVE-2022-21619" type="cve" title="CVE-2022-21619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21624" id="CVE-2022-21624" type="cve" title="CVE-2022-21624"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21626" id="CVE-2022-21626" type="cve" title="CVE-2022-21626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21628" id="CVE-2022-21628" type="cve" title="CVE-2022-21628"/>
      <reference href="https://bugzilla.redhat.com/2133745" id="2133745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133753" id="2133753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133765" id="2133765" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133769" id="2133769" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7006.html" id="ALSA-2022:7006" type="self" title="ALSA-2022:7006"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.352.b08" release="2.el8_6" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.352.b08-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">36fd3c0d8825c69a2880985ba8b2e3aaee0aab5bc7aa986828e861ad771af47c</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.352.b08" release="2.el8_6" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.352.b08-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">3bf6f9aa0b5226e765510e9f622e2819d42c205a7f83eb7e1c3f9dc42f052b80</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.352.b08" release="2.el8_6" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.352.b08-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">3c04cb3b74476c732d1ec0121bd68e625ca64abf4b1c0b8cd90038ea0e5f5dcd</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.352.b08" release="2.el8_6" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.352.b08-2.el8_6.noarch.rpm</filename>
          <sum type="sha256">55964cfffeb257fc3e34d4c2349bf130fbccdd38eaccb1d685e1e5af5773b591</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.352.b08" release="2.el8_6" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.352.b08-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">a893153906f36d92e43b842bf36a822fbd9fdd670a0011917e6d7106a27548ba</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility" version="1.8.0.352.b08" release="2.el8_6" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-1.8.0.352.b08-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">baeb3344aaf1d1be065638e698bfbb3505b19ea21b315bfa93aa9683baf89311</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.352.b08" release="2.el8_6" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.352.b08-2.el8_6.noarch.rpm</filename>
          <sum type="sha256">bfffdb240a8a67012a8302e3c6569a3ce751c79d8a70d8f7a79e7440461bf924</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.352.b08" release="2.el8_6" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.352.b08-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">cdd95264d85ad45b292ea7e38f5e7863fb2f7ea82b09ee3b4dbf272145bc2c7a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7012</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2022-10-19 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077) (CVE-2022-21618)
* OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626)
* OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628)
* OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619)
* OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624)
* OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366) (CVE-2022-39399)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2022-10, 11.0.17) [almalinux-8] (BZ#2131863)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7012" id="RHSA-2022:7012" type="rhsa" title="RHSA-2022:7012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21618" id="CVE-2022-21618" type="cve" title="CVE-2022-21618"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21619" id="CVE-2022-21619" type="cve" title="CVE-2022-21619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21624" id="CVE-2022-21624" type="cve" title="CVE-2022-21624"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21626" id="CVE-2022-21626" type="cve" title="CVE-2022-21626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21628" id="CVE-2022-21628" type="cve" title="CVE-2022-21628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39399" id="CVE-2022-39399" type="cve" title="CVE-2022-39399"/>
      <reference href="https://bugzilla.redhat.com/2133745" id="2133745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133753" id="2133753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133765" id="2133765" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133769" id="2133769" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133776" id="2133776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133817" id="2133817" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7012.html" id="ALSA-2022:7012" type="self" title="ALSA-2022:7012"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="java-11-openjdk-src" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-src-11.0.17.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">221a06587f6fc9837980943b28db0496fea6d1848717c74a09ac912890059719</sum>
        </package>
        <package name="java-11-openjdk" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-11.0.17.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">255e8a91d6c53fa2aa631554b381a4fef64a5bc28224096919829b0662d82083</sum>
        </package>
        <package name="java-11-openjdk-headless" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-headless-11.0.17.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">2a74c03fc9b86fd554eeeef3ce3af22a46f6b46f6fdcd689d3fefd9908b86402</sum>
        </package>
        <package name="java-11-openjdk-demo" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-demo-11.0.17.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">3aefc8f77a3bea71f31aae837eedfb570df93da8500e7456728ed06c27f528a2</sum>
        </package>
        <package name="java-11-openjdk-javadoc" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-javadoc-11.0.17.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">6ed1637874cde4edbea16c4876c7373f2e721d1665fcb0dadf501c5b233d495b</sum>
        </package>
        <package name="java-11-openjdk-javadoc-zip" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-javadoc-zip-11.0.17.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">8bccd49ae6c749c319b414086170cf31504099e1ef950637a13580ac08d2aff1</sum>
        </package>
        <package name="java-11-openjdk-devel" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-devel-11.0.17.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">9e11b654a074059d8b3f32e0b862462a91435a74a7e2e901d2a8fc12d330879a</sum>
        </package>
        <package name="java-11-openjdk-static-libs" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-static-libs-11.0.17.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">c30eb10f2d428c33a04d37c0b938fcfbf5b9d7c020de2c0c4f1864023f354d08</sum>
        </package>
        <package name="java-11-openjdk-jmods" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-jmods-11.0.17.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">dd0fdb4ad770a308581c7363c3ab2291ae6aa703f197313f8abe6f58dcdd7560</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7023</id>
    <title>Important: thunderbird security update</title>
    <issued date="2022-10-18 00:00:00"/>
    <updated date="2022-10-19 12:01:44"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.3.0.

Security Fix(es):

* expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7023" id="RHSA-2022:7023" type="rhsa" title="RHSA-2022:7023"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40674" id="CVE-2022-40674" type="cve" title="CVE-2022-40674"/>
      <reference href="https://bugzilla.redhat.com/2130769" id="2130769" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7023.html" id="ALSA-2022:7023" type="self" title="ALSA-2022:7023"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="thunderbird" version="102.3.0" release="4.el8_6.alma" epoch="0" arch="s390x" src="thunderbird-102.3.0-4.el8_6.alma.src.rpm">
          <filename>thunderbird-102.3.0-4.el8_6.alma.s390x.rpm</filename>
          <sum type="sha256">c0cf82f5a4343d61ba6a4b8f52092794e47f36524c03c3465edef0bcbc340865</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7024</id>
    <title>Important: firefox security update</title>
    <issued date="2022-10-18 00:00:00"/>
    <updated date="2022-10-19 12:01:44"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.3.0 ESR.

Security Fix(es):

* expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7024" id="RHSA-2022:7024" type="rhsa" title="RHSA-2022:7024"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40674" id="CVE-2022-40674" type="cve" title="CVE-2022-40674"/>
      <reference href="https://bugzilla.redhat.com/2130769" id="2130769" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7024.html" id="ALSA-2022:7024" type="self" title="ALSA-2022:7024"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="firefox" version="102.3.0" release="7.el8_6.alma" epoch="0" arch="s390x" src="firefox-102.3.0-7.el8_6.alma.src.rpm">
          <filename>firefox-102.3.0-7.el8_6.alma.s390x.rpm</filename>
          <sum type="sha256">2ca4021736ae8d437b5e2053827eb2958ccc2e8e91c010d316cfe33010d2d658</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7070</id>
    <title>Important: firefox security update</title>
    <issued date="2022-10-20 00:00:00"/>
    <updated date="2022-10-21 11:16:54"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.4.0 ESR.

Security Fix(es):

* Mozilla: Same-origin policy violation could have leaked cross-origin URLs (CVE-2022-42927)
* Mozilla: Memory Corruption in JS Engine (CVE-2022-42928)
* Mozilla: Denial of Service via window.print (CVE-2022-42929)
* Mozilla: Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4 (CVE-2022-42932)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7070" id="RHSA-2022:7070" type="rhsa" title="RHSA-2022:7070"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42927" id="CVE-2022-42927" type="cve" title="CVE-2022-42927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42928" id="CVE-2022-42928" type="cve" title="CVE-2022-42928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42929" id="CVE-2022-42929" type="cve" title="CVE-2022-42929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42932" id="CVE-2022-42932" type="cve" title="CVE-2022-42932"/>
      <reference href="https://bugzilla.redhat.com/2136156" id="2136156" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2136157" id="2136157" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2136158" id="2136158" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2136159" id="2136159" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7070.html" id="ALSA-2022:7070" type="self" title="ALSA-2022:7070"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="firefox" version="102.4.0" release="1.el8_6.alma" epoch="0" arch="s390x" src="firefox-102.4.0-1.el8_6.alma.src.rpm">
          <filename>firefox-102.4.0-1.el8_6.alma.s390x.rpm</filename>
          <sum type="sha256">935f188294a261ee2abda9a29e1a03224df34bbe2cabb64608fcad209ef5389a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7105</id>
    <title>Moderate: gnutls security update</title>
    <issued date="2022-10-25 00:00:00"/>
    <updated date="2022-10-27 09:21:12"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls security update</summary>
    <description>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

* gnutls: Double free during gnutls_pkcs7_verify. (CVE-2022-2509)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7105" id="RHSA-2022:7105" type="rhsa" title="RHSA-2022:7105"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2509" id="CVE-2022-2509" type="cve" title="CVE-2022-2509"/>
      <reference href="https://bugzilla.redhat.com/2108977" id="2108977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7105.html" id="ALSA-2022:7105" type="self" title="ALSA-2022:7105"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="gnutls-dane" version="3.6.16" release="5.el8_6" epoch="0" arch="s390x" src="gnutls-3.6.16-5.el8_6.src.rpm">
          <filename>gnutls-dane-3.6.16-5.el8_6.s390x.rpm</filename>
          <sum type="sha256">27624b6d413a803acc764f161863d40b912234232cb44255a69177b7366352a1</sum>
        </package>
        <package name="gnutls-utils" version="3.6.16" release="5.el8_6" epoch="0" arch="s390x" src="gnutls-3.6.16-5.el8_6.src.rpm">
          <filename>gnutls-utils-3.6.16-5.el8_6.s390x.rpm</filename>
          <sum type="sha256">55167db3e02c063daffd0584299377aad47ede9d9cbda628eda01090e921a8ca</sum>
        </package>
        <package name="gnutls-devel" version="3.6.16" release="5.el8_6" epoch="0" arch="s390x" src="gnutls-3.6.16-5.el8_6.src.rpm">
          <filename>gnutls-devel-3.6.16-5.el8_6.s390x.rpm</filename>
          <sum type="sha256">5d14a88a902145546a0887e60e808e672175860d5584665b7c076c566a892ae7</sum>
        </package>
        <package name="gnutls-c++" version="3.6.16" release="5.el8_6" epoch="0" arch="s390x" src="gnutls-3.6.16-5.el8_6.src.rpm">
          <filename>gnutls-c++-3.6.16-5.el8_6.s390x.rpm</filename>
          <sum type="sha256">7f39dd1d198217d12b36392232732b87416cc87477b9ced3a73fb66088d96ee4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7108</id>
    <title>Moderate: sqlite security update</title>
    <issued date="2022-10-25 00:00:00"/>
    <updated date="2022-10-27 09:44:59"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>sqlite security update</summary>
    <description>SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server.

Security Fix(es):

* sqlite: Out of bounds access during table rename (CVE-2020-35527)
* sqlite: Null pointer derreference in src/select.c (CVE-2020-35525)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7108" id="RHSA-2022:7108" type="rhsa" title="RHSA-2022:7108"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-35525" id="CVE-2020-35525" type="cve" title="CVE-2020-35525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-35527" id="CVE-2020-35527" type="cve" title="CVE-2020-35527"/>
      <reference href="https://bugzilla.redhat.com/2122324" id="2122324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122329" id="2122329" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7108.html" id="ALSA-2022:7108" type="self" title="ALSA-2022:7108"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="lemon" version="3.26.0" release="16.el8_6" epoch="0" arch="s390x" src="sqlite-3.26.0-16.el8_6.src.rpm">
          <filename>lemon-3.26.0-16.el8_6.s390x.rpm</filename>
          <sum type="sha256">395c01ee7fc4b13a550c8776beb0f527b63f19c6829bc30c38b7cfd4fcb0dd2f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7111</id>
    <title>Moderate: samba security and bug fix update</title>
    <issued date="2022-10-25 00:00:00"/>
    <updated date="2022-10-27 09:05:24"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security and bug fix update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: server memory information leak via SMB1 (CVE-2022-32742)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* python3-samba requires samba and that is a bug (BZ#2126041)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7111" id="RHSA-2022:7111" type="rhsa" title="RHSA-2022:7111"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32742" id="CVE-2022-32742" type="cve" title="CVE-2022-32742"/>
      <reference href="https://bugzilla.redhat.com/2108196" id="2108196" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7111.html" id="ALSA-2022:7111" type="self" title="ALSA-2022:7111"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="samba-vfs-iouring" version="4.15.5" release="10.el8_6" epoch="0" arch="s390x" src="samba-4.15.5-10.el8_6.src.rpm">
          <filename>samba-vfs-iouring-4.15.5-10.el8_6.s390x.rpm</filename>
          <sum type="sha256">349e614f511769ca58215b39fb9c1956854b02141c5abd5f43fb80d62c487f71</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7119</id>
    <title>Moderate: mysql:8.0 security, bug fix, and enhancement update</title>
    <issued date="2022-10-25 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql:8.0 security, bug fix, and enhancement update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.30).

Security Fix(es):

* mysql: Server: DML multiple unspecified vulnerabilities (CVE-2021-2478, CVE-2021-2479, CVE-2021-35591, CVE-2021-35607, CVE-2022-21301, CVE-2022-21413)
* mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2021-2481, CVE-2021-35575, CVE-2021-35577, CVE-2021-35610, CVE-2021-35612, CVE-2021-35626, CVE-2021-35627, CVE-2021-35628, CVE-2021-35634, CVE-2021-35635, CVE-2021-35636, CVE-2021-35638, CVE-2021-35641, CVE-2021-35642, CVE-2021-35643, CVE-2021-35644, CVE-2021-35645, CVE-2021-35646, CVE-2021-35647, CVE-2022-21253, CVE-2022-21254, CVE-2022-21264, CVE-2022-21278, CVE-2022-21297, CVE-2022-21339, CVE-2022-21342, CVE-2022-21351, CVE-2022-21370, CVE-2022-21378, CVE-2022-21412, CVE-2022-21414, CVE-2022-21435, CVE-2022-21436, CVE-2022-21437, CVE-2022-21438, CVE-2022-21440, CVE-2022-21452, CVE-2022-21459, CVE-2022-21462, CVE-2022-21478, CVE-2022-21479, CVE-2022-21509, CVE-2022-21525, CVE-2022-21526, CVE-2022-21527, CVE-2022-21528, CVE-2022-21529, CVE-2022-21530, CVE-2022-21531, CVE-2022-21553, CVE-2022-21569, CVE-2022-21265)
* mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2021-35546, CVE-2022-21344, CVE-2022-21415)
* mysql: Server: Error Handling unspecified vulnerability (CVE-2021-35596)
* mysql: C API unspecified vulnerability (CVE-2021-35597)
* mysql: Server: Options multiple unspecified vulnerabilities (CVE-2021-35602, CVE-2021-35630, CVE-2022-21515)
* mysql: InnoDB multiple unspecified vulnerabilities (CVE-2021-35604, CVE-2022-21302, CVE-2022-21348, CVE-2022-21352, CVE-2022-21417, CVE-2022-21418, CVE-2022-21451, CVE-2022-21517, CVE-2022-21537, CVE-2022-21539, CVE-2022-21423)
* mysql: Server: Group Replication Plugin multiple unspecified vulnerabilities (CVE-2021-35608, CVE-2022-21256, CVE-2022-21379, CVE-2022-21454)
* mysql: Server: Security: Encryption multiple unspecified vulnerabilities (CVE-2021-35622, CVE-2022-21358, CVE-2022-21372, CVE-2022-21538)
* mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2021-35624, CVE-2022-21245, CVE-2021-35625)
* mysql: Server: GIS unspecified vulnerability (CVE-2021-35631)
* mysql: Server: Data Dictionary unspecified vulnerability (CVE-2021-35632)
* mysql: Server: PS unspecified vulnerability (CVE-2021-35637)
* mysql: Server: Stored Procedure multiple unspecified vulnerabilities (CVE-2021-35639, CVE-2022-21303, CVE-2022-21522, CVE-2022-21534)
* mysql: Server: FTS multiple unspecified vulnerabilities (CVE-2021-35648, CVE-2022-21427)
* mysql: Server: Federated multiple unspecified vulnerabilities (CVE-2022-21270, CVE-2022-21547)
* mysql: Server: Parser unspecified vulnerability (CVE-2022-21304)
* mysql: Server: Information Schema multiple unspecified vulnerabilities (CVE-2022-21362, CVE-2022-21374)
* mysql: Server: Compiling unspecified vulnerability (CVE-2022-21367)
* mysql: Server: Components Services unspecified vulnerability (CVE-2022-21368)
* mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2022-21425, CVE-2022-21444, CVE-2021-35640, CVE-2022-21249)
* mysql: Server: PAM Auth Plugin unspecified vulnerability (CVE-2022-21457)
* mysql: Server: Logging multiple unspecified vulnerabilities (CVE-2022-21460, CVE-2021-35633)
* mysql: Server: Security: Roles unspecified vulnerability (CVE-2021-35623)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Rebuild mecab due to change in the suffix (from .el8 to .el8.0.0) [almalinux-8] (BZ#2110940)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7119" id="RHSA-2022:7119" type="rhsa" title="RHSA-2022:7119"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-2478" id="CVE-2021-2478" type="cve" title="CVE-2021-2478"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-2479" id="CVE-2021-2479" type="cve" title="CVE-2021-2479"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-2481" id="CVE-2021-2481" type="cve" title="CVE-2021-2481"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35546" id="CVE-2021-35546" type="cve" title="CVE-2021-35546"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35575" id="CVE-2021-35575" type="cve" title="CVE-2021-35575"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35577" id="CVE-2021-35577" type="cve" title="CVE-2021-35577"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35591" id="CVE-2021-35591" type="cve" title="CVE-2021-35591"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35596" id="CVE-2021-35596" type="cve" title="CVE-2021-35596"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35597" id="CVE-2021-35597" type="cve" title="CVE-2021-35597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35602" id="CVE-2021-35602" type="cve" title="CVE-2021-35602"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35604" id="CVE-2021-35604" type="cve" title="CVE-2021-35604"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35607" id="CVE-2021-35607" type="cve" title="CVE-2021-35607"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35608" id="CVE-2021-35608" type="cve" title="CVE-2021-35608"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35610" id="CVE-2021-35610" type="cve" title="CVE-2021-35610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35612" id="CVE-2021-35612" type="cve" title="CVE-2021-35612"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35622" id="CVE-2021-35622" type="cve" title="CVE-2021-35622"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35623" id="CVE-2021-35623" type="cve" title="CVE-2021-35623"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35624" id="CVE-2021-35624" type="cve" title="CVE-2021-35624"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35625" id="CVE-2021-35625" type="cve" title="CVE-2021-35625"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35626" id="CVE-2021-35626" type="cve" title="CVE-2021-35626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35627" id="CVE-2021-35627" type="cve" title="CVE-2021-35627"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35628" id="CVE-2021-35628" type="cve" title="CVE-2021-35628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35630" id="CVE-2021-35630" type="cve" title="CVE-2021-35630"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35631" id="CVE-2021-35631" type="cve" title="CVE-2021-35631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35632" id="CVE-2021-35632" type="cve" title="CVE-2021-35632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35633" id="CVE-2021-35633" type="cve" title="CVE-2021-35633"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35634" id="CVE-2021-35634" type="cve" title="CVE-2021-35634"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35635" id="CVE-2021-35635" type="cve" title="CVE-2021-35635"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35636" id="CVE-2021-35636" type="cve" title="CVE-2021-35636"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35637" id="CVE-2021-35637" type="cve" title="CVE-2021-35637"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35638" id="CVE-2021-35638" type="cve" title="CVE-2021-35638"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35639" id="CVE-2021-35639" type="cve" title="CVE-2021-35639"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35640" id="CVE-2021-35640" type="cve" title="CVE-2021-35640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35641" id="CVE-2021-35641" type="cve" title="CVE-2021-35641"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35642" id="CVE-2021-35642" type="cve" title="CVE-2021-35642"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35643" id="CVE-2021-35643" type="cve" title="CVE-2021-35643"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35644" id="CVE-2021-35644" type="cve" title="CVE-2021-35644"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35645" id="CVE-2021-35645" type="cve" title="CVE-2021-35645"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35646" id="CVE-2021-35646" type="cve" title="CVE-2021-35646"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35647" id="CVE-2021-35647" type="cve" title="CVE-2021-35647"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35648" id="CVE-2021-35648" type="cve" title="CVE-2021-35648"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21245" id="CVE-2022-21245" type="cve" title="CVE-2022-21245"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21249" id="CVE-2022-21249" type="cve" title="CVE-2022-21249"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21253" id="CVE-2022-21253" type="cve" title="CVE-2022-21253"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21254" id="CVE-2022-21254" type="cve" title="CVE-2022-21254"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21256" id="CVE-2022-21256" type="cve" title="CVE-2022-21256"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21264" id="CVE-2022-21264" type="cve" title="CVE-2022-21264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21265" id="CVE-2022-21265" type="cve" title="CVE-2022-21265"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21270" id="CVE-2022-21270" type="cve" title="CVE-2022-21270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21278" id="CVE-2022-21278" type="cve" title="CVE-2022-21278"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21297" id="CVE-2022-21297" type="cve" title="CVE-2022-21297"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21301" id="CVE-2022-21301" type="cve" title="CVE-2022-21301"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21302" id="CVE-2022-21302" type="cve" title="CVE-2022-21302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21303" id="CVE-2022-21303" type="cve" title="CVE-2022-21303"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21304" id="CVE-2022-21304" type="cve" title="CVE-2022-21304"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21339" id="CVE-2022-21339" type="cve" title="CVE-2022-21339"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21342" id="CVE-2022-21342" type="cve" title="CVE-2022-21342"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21344" id="CVE-2022-21344" type="cve" title="CVE-2022-21344"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21348" id="CVE-2022-21348" type="cve" title="CVE-2022-21348"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21351" id="CVE-2022-21351" type="cve" title="CVE-2022-21351"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21352" id="CVE-2022-21352" type="cve" title="CVE-2022-21352"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21358" id="CVE-2022-21358" type="cve" title="CVE-2022-21358"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21362" id="CVE-2022-21362" type="cve" title="CVE-2022-21362"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21367" id="CVE-2022-21367" type="cve" title="CVE-2022-21367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21368" id="CVE-2022-21368" type="cve" title="CVE-2022-21368"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21370" id="CVE-2022-21370" type="cve" title="CVE-2022-21370"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21372" id="CVE-2022-21372" type="cve" title="CVE-2022-21372"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21374" id="CVE-2022-21374" type="cve" title="CVE-2022-21374"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21378" id="CVE-2022-21378" type="cve" title="CVE-2022-21378"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21379" id="CVE-2022-21379" type="cve" title="CVE-2022-21379"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21412" id="CVE-2022-21412" type="cve" title="CVE-2022-21412"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21413" id="CVE-2022-21413" type="cve" title="CVE-2022-21413"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21414" id="CVE-2022-21414" type="cve" title="CVE-2022-21414"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21415" id="CVE-2022-21415" type="cve" title="CVE-2022-21415"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21417" id="CVE-2022-21417" type="cve" title="CVE-2022-21417"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21418" id="CVE-2022-21418" type="cve" title="CVE-2022-21418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21423" id="CVE-2022-21423" type="cve" title="CVE-2022-21423"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21425" id="CVE-2022-21425" type="cve" title="CVE-2022-21425"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21427" id="CVE-2022-21427" type="cve" title="CVE-2022-21427"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21435" id="CVE-2022-21435" type="cve" title="CVE-2022-21435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21436" id="CVE-2022-21436" type="cve" title="CVE-2022-21436"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21437" id="CVE-2022-21437" type="cve" title="CVE-2022-21437"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21438" id="CVE-2022-21438" type="cve" title="CVE-2022-21438"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21440" id="CVE-2022-21440" type="cve" title="CVE-2022-21440"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21444" id="CVE-2022-21444" type="cve" title="CVE-2022-21444"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21451" id="CVE-2022-21451" type="cve" title="CVE-2022-21451"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21452" id="CVE-2022-21452" type="cve" title="CVE-2022-21452"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21454" id="CVE-2022-21454" type="cve" title="CVE-2022-21454"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21457" id="CVE-2022-21457" type="cve" title="CVE-2022-21457"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21459" id="CVE-2022-21459" type="cve" title="CVE-2022-21459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21460" id="CVE-2022-21460" type="cve" title="CVE-2022-21460"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21462" id="CVE-2022-21462" type="cve" title="CVE-2022-21462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21478" id="CVE-2022-21478" type="cve" title="CVE-2022-21478"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21479" id="CVE-2022-21479" type="cve" title="CVE-2022-21479"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21509" id="CVE-2022-21509" type="cve" title="CVE-2022-21509"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21515" id="CVE-2022-21515" type="cve" title="CVE-2022-21515"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21517" id="CVE-2022-21517" type="cve" title="CVE-2022-21517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21522" id="CVE-2022-21522" type="cve" title="CVE-2022-21522"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21525" id="CVE-2022-21525" type="cve" title="CVE-2022-21525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21526" id="CVE-2022-21526" type="cve" title="CVE-2022-21526"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21527" id="CVE-2022-21527" type="cve" title="CVE-2022-21527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21528" id="CVE-2022-21528" type="cve" title="CVE-2022-21528"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21529" id="CVE-2022-21529" type="cve" title="CVE-2022-21529"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21530" id="CVE-2022-21530" type="cve" title="CVE-2022-21530"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21531" id="CVE-2022-21531" type="cve" title="CVE-2022-21531"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21534" id="CVE-2022-21534" type="cve" title="CVE-2022-21534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21537" id="CVE-2022-21537" type="cve" title="CVE-2022-21537"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21538" id="CVE-2022-21538" type="cve" title="CVE-2022-21538"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21539" id="CVE-2022-21539" type="cve" title="CVE-2022-21539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21547" id="CVE-2022-21547" type="cve" title="CVE-2022-21547"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21553" id="CVE-2022-21553" type="cve" title="CVE-2022-21553"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21569" id="CVE-2022-21569" type="cve" title="CVE-2022-21569"/>
      <reference href="https://bugzilla.redhat.com/2016089" id="2016089" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016090" id="2016090" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016091" id="2016091" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016093" id="2016093" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016094" id="2016094" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016095" id="2016095" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016097" id="2016097" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016098" id="2016098" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016099" id="2016099" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016100" id="2016100" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016101" id="2016101" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016104" id="2016104" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016105" id="2016105" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016106" id="2016106" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016107" id="2016107" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016108" id="2016108" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016109" id="2016109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016110" id="2016110" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016111" id="2016111" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016112" id="2016112" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016113" id="2016113" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016114" id="2016114" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016117" id="2016117" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016118" id="2016118" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016119" id="2016119" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016120" id="2016120" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016121" id="2016121" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016122" id="2016122" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016124" id="2016124" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016126" id="2016126" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016127" id="2016127" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016128" id="2016128" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016129" id="2016129" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016130" id="2016130" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016131" id="2016131" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016132" id="2016132" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016133" id="2016133" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016134" id="2016134" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016135" id="2016135" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016137" id="2016137" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2016138" id="2016138" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043620" id="2043620" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043621" id="2043621" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043622" id="2043622" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043623" id="2043623" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043624" id="2043624" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043625" id="2043625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043626" id="2043626" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043627" id="2043627" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043628" id="2043628" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043629" id="2043629" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043630" id="2043630" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043631" id="2043631" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043632" id="2043632" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043633" id="2043633" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043634" id="2043634" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043635" id="2043635" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043636" id="2043636" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043637" id="2043637" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043638" id="2043638" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043639" id="2043639" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043640" id="2043640" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043641" id="2043641" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043642" id="2043642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043643" id="2043643" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043644" id="2043644" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043645" id="2043645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043646" id="2043646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043647" id="2043647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043648" id="2043648" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082636" id="2082636" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082637" id="2082637" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082638" id="2082638" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082639" id="2082639" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082640" id="2082640" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082641" id="2082641" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082642" id="2082642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082643" id="2082643" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082644" id="2082644" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082645" id="2082645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082646" id="2082646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082647" id="2082647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082648" id="2082648" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082649" id="2082649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082650" id="2082650" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082651" id="2082651" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082652" id="2082652" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082653" id="2082653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082654" id="2082654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082655" id="2082655" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082656" id="2082656" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082657" id="2082657" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082658" id="2082658" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082659" id="2082659" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115283" id="2115283" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115284" id="2115284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115285" id="2115285" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115286" id="2115286" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115287" id="2115287" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115288" id="2115288" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115289" id="2115289" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115290" id="2115290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115291" id="2115291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115292" id="2115292" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115293" id="2115293" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115294" id="2115294" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115295" id="2115295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115296" id="2115296" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115297" id="2115297" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115298" id="2115298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115299" id="2115299" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115301" id="2115301" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7119.html" id="ALSA-2022:7119" type="self" title="ALSA-2022:7119"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <module name="mysql" stream="8.0" version="8060020221025181128" context="9edba152" arch="s390x"/>
        <package name="mysql-common" version="8.0.30" release="1.module_el8.6.0+3340+d764b636" epoch="0" arch="s390x" src="mysql-8.0.30-1.module_el8.6.0+3340+d764b636.src.rpm">
          <filename>mysql-common-8.0.30-1.module_el8.6.0+3340+d764b636.s390x.rpm</filename>
          <sum type="sha256">2fd4d29f3d4926176a66a01c8b7c822feb1084a9bc3997c41f489fdf18f46847</sum>
        </package>
        <package name="mysql-devel" version="8.0.30" release="1.module_el8.6.0+3340+d764b636" epoch="0" arch="s390x" src="mysql-8.0.30-1.module_el8.6.0+3340+d764b636.src.rpm">
          <filename>mysql-devel-8.0.30-1.module_el8.6.0+3340+d764b636.s390x.rpm</filename>
          <sum type="sha256">43f2b0f69b1588c199713f28d265a217c7c70f064ab407070127927c52061564</sum>
        </package>
        <package name="mecab-ipadic" version="2.7.0.20070801" release="16.module_el8.6.0+3151+3a7073b7" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-16.module_el8.6.0+3151+3a7073b7.src.rpm">
          <filename>mecab-ipadic-2.7.0.20070801-16.module_el8.6.0+3151+3a7073b7.s390x.rpm</filename>
          <sum type="sha256">4ea3bb465b611d2f0eae325740c52e63da14adfc41916df2caf893b6908b913f</sum>
        </package>
        <package name="mysql-errmsg" version="8.0.30" release="1.module_el8.6.0+3340+d764b636" epoch="0" arch="s390x" src="mysql-8.0.30-1.module_el8.6.0+3340+d764b636.src.rpm">
          <filename>mysql-errmsg-8.0.30-1.module_el8.6.0+3340+d764b636.s390x.rpm</filename>
          <sum type="sha256">7341d11077a9ca75724e9ed00e64326c6812478ad6161221ad01ae0d26b1a748</sum>
        </package>
        <package name="mysql-server" version="8.0.30" release="1.module_el8.6.0+3340+d764b636" epoch="0" arch="s390x" src="mysql-8.0.30-1.module_el8.6.0+3340+d764b636.src.rpm">
          <filename>mysql-server-8.0.30-1.module_el8.6.0+3340+d764b636.s390x.rpm</filename>
          <sum type="sha256">a31591b018a83ff49ea9e8deda572550b9948b41ed0e942c9e57ab37f9619bc4</sum>
        </package>
        <package name="mysql-libs" version="8.0.30" release="1.module_el8.6.0+3340+d764b636" epoch="0" arch="s390x" src="mysql-8.0.30-1.module_el8.6.0+3340+d764b636.src.rpm">
          <filename>mysql-libs-8.0.30-1.module_el8.6.0+3340+d764b636.s390x.rpm</filename>
          <sum type="sha256">ab1d4a0c7bcb063dcfeb22acd45cdaac194db2a4daf7c634e975423de6e0316b</sum>
        </package>
        <package name="mecab" version="0.996" release="2.module_el8.6.0+3340+d764b636" epoch="0" arch="s390x" src="mecab-0.996-2.module_el8.6.0+3340+d764b636.src.rpm">
          <filename>mecab-0.996-2.module_el8.6.0+3340+d764b636.s390x.rpm</filename>
          <sum type="sha256">ac9101824269dda084c450648ac939c4c8fc017d05d6f1a13bf138bda748fa52</sum>
        </package>
        <package name="mysql" version="8.0.30" release="1.module_el8.6.0+3340+d764b636" epoch="0" arch="s390x" src="mysql-8.0.30-1.module_el8.6.0+3340+d764b636.src.rpm">
          <filename>mysql-8.0.30-1.module_el8.6.0+3340+d764b636.s390x.rpm</filename>
          <sum type="sha256">f12bccf62ffc1bace05ea6a415c9cc177b07eb5162bcd96255227e6ad703527a</sum>
        </package>
        <package name="mysql-test" version="8.0.30" release="1.module_el8.6.0+3340+d764b636" epoch="0" arch="s390x" src="mysql-8.0.30-1.module_el8.6.0+3340+d764b636.src.rpm">
          <filename>mysql-test-8.0.30-1.module_el8.6.0+3340+d764b636.s390x.rpm</filename>
          <sum type="sha256">f2c0cd597d05a31af77c5d45e9564c97ffd37631bec39062c791734fbb3c18af</sum>
        </package>
        <package name="mecab-ipadic-EUCJP" version="2.7.0.20070801" release="16.module_el8.6.0+3151+3a7073b7" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-16.module_el8.6.0+3151+3a7073b7.src.rpm">
          <filename>mecab-ipadic-EUCJP-2.7.0.20070801-16.module_el8.6.0+3151+3a7073b7.s390x.rpm</filename>
          <sum type="sha256">f516c4c762d9a360ae46cbbf93b663f44d46105232f44f441f3cc3b692d3fbe6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7128</id>
    <title>Moderate: postgresql:12 security update</title>
    <issued date="2022-10-25 00:00:00"/>
    <updated date="2022-11-03 11:36:34"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql:12 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: Extension scripts replace objects not belonging to the extension. (CVE-2022-2625)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7128" id="RHSA-2022:7128" type="rhsa" title="RHSA-2022:7128"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2625" id="CVE-2022-2625" type="cve" title="CVE-2022-2625"/>
      <reference href="https://bugzilla.redhat.com/2113825" id="2113825" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7128.html" id="ALSA-2022:7128" type="self" title="ALSA-2022:7128"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <module name="postgresql" stream="13" version="8060020220601105339" context="9edba152" arch="s390x"/>
        <package name="postgresql-pltcl" version="12.12" release="1.module_el8.6.0+3336+e779e518" epoch="0" arch="s390x" src="postgresql-12.12-1.module_el8.6.0+3336+e779e518.src.rpm">
          <filename>postgresql-pltcl-12.12-1.module_el8.6.0+3336+e779e518.s390x.rpm</filename>
          <sum type="sha256">567309bcc5a8f03864bafff42db96ea1508f39f558e72a47a1952125228b49da</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="12.12" release="1.module_el8.6.0+3336+e779e518" epoch="0" arch="s390x" src="postgresql-12.12-1.module_el8.6.0+3336+e779e518.src.rpm">
          <filename>postgresql-upgrade-devel-12.12-1.module_el8.6.0+3336+e779e518.s390x.rpm</filename>
          <sum type="sha256">582fde5ba9730d796ae6487531c50e41c04058169313359bbee51695e75dbb75</sum>
        </package>
        <package name="postgresql-plpython3" version="12.12" release="1.module_el8.6.0+3336+e779e518" epoch="0" arch="s390x" src="postgresql-12.12-1.module_el8.6.0+3336+e779e518.src.rpm">
          <filename>postgresql-plpython3-12.12-1.module_el8.6.0+3336+e779e518.s390x.rpm</filename>
          <sum type="sha256">5ff0f7eea0462e6245f3cfd2d51cba20c05204df0b28e32cb07d09707cf67ecb</sum>
        </package>
        <package name="postgresql" version="12.12" release="1.module_el8.6.0+3336+e779e518" epoch="0" arch="s390x" src="postgresql-12.12-1.module_el8.6.0+3336+e779e518.src.rpm">
          <filename>postgresql-12.12-1.module_el8.6.0+3336+e779e518.s390x.rpm</filename>
          <sum type="sha256">6e6f3ccc1470c9b284a00a17e7ddef1aabec798a8923b5c6a380b019bca3f92f</sum>
        </package>
        <package name="postgresql-upgrade" version="12.12" release="1.module_el8.6.0+3336+e779e518" epoch="0" arch="s390x" src="postgresql-12.12-1.module_el8.6.0+3336+e779e518.src.rpm">
          <filename>postgresql-upgrade-12.12-1.module_el8.6.0+3336+e779e518.s390x.rpm</filename>
          <sum type="sha256">774a61385cd887e2e292d7b8cbe3b65c06157cbfdc6f0b37b2641367c6c741ca</sum>
        </package>
        <package name="postgresql-static" version="12.12" release="1.module_el8.6.0+3336+e779e518" epoch="0" arch="s390x" src="postgresql-12.12-1.module_el8.6.0+3336+e779e518.src.rpm">
          <filename>postgresql-static-12.12-1.module_el8.6.0+3336+e779e518.s390x.rpm</filename>
          <sum type="sha256">81b463e876f67439a7ca36bd6df29056601b4d2b84c2848e356ba975559d4b50</sum>
        </package>
        <package name="postgresql-server" version="12.12" release="1.module_el8.6.0+3336+e779e518" epoch="0" arch="s390x" src="postgresql-12.12-1.module_el8.6.0+3336+e779e518.src.rpm">
          <filename>postgresql-server-12.12-1.module_el8.6.0+3336+e779e518.s390x.rpm</filename>
          <sum type="sha256">877725398fd4e8321cf4c7818d9c7ebc7e4fe31c6b9a9f5f0066800e4c41f0f0</sum>
        </package>
        <package name="postgresql-server-devel" version="12.12" release="1.module_el8.6.0+3336+e779e518" epoch="0" arch="s390x" src="postgresql-12.12-1.module_el8.6.0+3336+e779e518.src.rpm">
          <filename>postgresql-server-devel-12.12-1.module_el8.6.0+3336+e779e518.s390x.rpm</filename>
          <sum type="sha256">a87ad32fa28a50a0cc656285013e7a0bf42032fc6221cf8f149b040506f92d53</sum>
        </package>
        <package name="postgres-decoderbufs" version="0.10.0" release="2.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">b11226898b888f8213eefe941cece0f636a08ccce2ceaa8bee2a38e6058ed4f3</sum>
        </package>
        <package name="postgresql-docs" version="12.12" release="1.module_el8.6.0+3336+e779e518" epoch="0" arch="s390x" src="postgresql-12.12-1.module_el8.6.0+3336+e779e518.src.rpm">
          <filename>postgresql-docs-12.12-1.module_el8.6.0+3336+e779e518.s390x.rpm</filename>
          <sum type="sha256">b8bc860b42583fb6f0411478a22921cd5508cea53345ce454b5cb205bc4b5783</sum>
        </package>
        <package name="postgresql-contrib" version="12.12" release="1.module_el8.6.0+3336+e779e518" epoch="0" arch="s390x" src="postgresql-12.12-1.module_el8.6.0+3336+e779e518.src.rpm">
          <filename>postgresql-contrib-12.12-1.module_el8.6.0+3336+e779e518.s390x.rpm</filename>
          <sum type="sha256">bb6f98caac790d505936e701a22dd7250524405e975227136c11b081e9463528</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="12.12" release="1.module_el8.6.0+3336+e779e518" epoch="0" arch="noarch" src="postgresql-12.12-1.module_el8.6.0+3336+e779e518.src.rpm">
          <filename>postgresql-test-rpm-macros-12.12-1.module_el8.6.0+3336+e779e518.noarch.rpm</filename>
          <sum type="sha256">bbcaea04cda8fa104df75965518a64ec7e7b53df1b8ad2533ef2d769d88065cc</sum>
        </package>
        <package name="postgresql-plperl" version="12.12" release="1.module_el8.6.0+3336+e779e518" epoch="0" arch="s390x" src="postgresql-12.12-1.module_el8.6.0+3336+e779e518.src.rpm">
          <filename>postgresql-plperl-12.12-1.module_el8.6.0+3336+e779e518.s390x.rpm</filename>
          <sum type="sha256">bf2bd2e05527482fa85a464346bae84b707d0ea040ad27642c76348dc410cdba</sum>
        </package>
        <package name="pg_repack" version="1.4.6" release="3.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="pg_repack-1.4.6-3.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>pg_repack-1.4.6-3.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">c1b386540b304a4de3ff8d840ec35dc9d67ecd1827aa06cd695f06060e8d2ea7</sum>
        </package>
        <package name="postgresql-test" version="12.12" release="1.module_el8.6.0+3336+e779e518" epoch="0" arch="s390x" src="postgresql-12.12-1.module_el8.6.0+3336+e779e518.src.rpm">
          <filename>postgresql-test-12.12-1.module_el8.6.0+3336+e779e518.s390x.rpm</filename>
          <sum type="sha256">dfa7319f368b057b0ddbcdea1b2198e52a7d7b61b05900da1418b6af0547b4fa</sum>
        </package>
        <package name="pgaudit" version="1.4.0" release="5.module_el8.6.0+3094+eb237fb8" epoch="0" arch="s390x" src="pgaudit-1.4.0-5.module_el8.6.0+3094+eb237fb8.src.rpm">
          <filename>pgaudit-1.4.0-5.module_el8.6.0+3094+eb237fb8.s390x.rpm</filename>
          <sum type="sha256">ebe8d0086c062c5f70bc02c543c76de308bbcc91aecac318050e04c0ee330f84</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7129</id>
    <title>Moderate: git-lfs security and bug fix update</title>
    <issued date="2022-10-25 00:00:00"/>
    <updated date="2022-10-27 09:34:45"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>git-lfs security and bug fix update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.

Security Fix(es):

* golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extension (CVE-2020-28851)
* golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tag (CVE-2020-28852)
* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)
* golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)
* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)
* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)
* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)
* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)
* golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* git-lfs needs to be rebuild with golang 1.17.7-1 or above</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7129" id="RHSA-2022:7129" type="rhsa" title="RHSA-2022:7129"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-28851" id="CVE-2020-28851" type="cve" title="CVE-2020-28851"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-28852" id="CVE-2020-28852" type="cve" title="CVE-2020-28852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1705" id="CVE-2022-1705" type="cve" title="CVE-2022-1705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27664" id="CVE-2022-27664" type="cve" title="CVE-2022-27664"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30630" id="CVE-2022-30630" type="cve" title="CVE-2022-30630"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30632" id="CVE-2022-30632" type="cve" title="CVE-2022-30632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30635" id="CVE-2022-30635" type="cve" title="CVE-2022-30635"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32148" id="CVE-2022-32148" type="cve" title="CVE-2022-32148"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32189" id="CVE-2022-32189" type="cve" title="CVE-2022-32189"/>
      <reference href="https://bugzilla.redhat.com/1913333" id="1913333" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1913338" id="1913338" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107371" id="2107371" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107374" id="2107374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107383" id="2107383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107386" id="2107386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107388" id="2107388" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2113814" id="2113814" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2124669" id="2124669" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7129.html" id="ALSA-2022:7129" type="self" title="ALSA-2022:7129"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="git-lfs" version="2.13.3" release="3.el8_6" epoch="0" arch="s390x" src="git-lfs-2.13.3-3.el8_6.src.rpm">
          <filename>git-lfs-2.13.3-3.el8_6.s390x.rpm</filename>
          <sum type="sha256">185e2f9820f03b424874b79ea390ddc542aaa8c36dfb2c4716ec7bc4da76d126</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7133</id>
    <title>Moderate: 389-ds:1.4 security update</title>
    <issued date="2022-10-25 00:00:00"/>
    <updated date="2022-10-27 10:05:54"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>389-ds:1.4 security update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. 

Security Fix(es):

* 389-ds-base: SIGSEGV in sync_repl (CVE-2022-2850)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7133" id="RHSA-2022:7133" type="rhsa" title="RHSA-2022:7133"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2850" id="CVE-2022-2850" type="cve" title="CVE-2022-2850"/>
      <reference href="https://bugzilla.redhat.com/2118691" id="2118691" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7133.html" id="ALSA-2022:7133" type="self" title="ALSA-2022:7133"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <module name="389-ds" stream="1.4" version="8060020221025134811" context="17499975" arch="s390x"/>
        <package name="389-ds-base-snmp" version="1.4.3.28" release="8.module_el8.6.0+3338+ebccfef1" epoch="0" arch="s390x" src="389-ds-base-1.4.3.28-8.module_el8.6.0+3338+ebccfef1.src.rpm">
          <filename>389-ds-base-snmp-1.4.3.28-8.module_el8.6.0+3338+ebccfef1.s390x.rpm</filename>
          <sum type="sha256">28e997cc3995aa1117b998789bb4794630062c1e310943f843aa8b05a1573b64</sum>
        </package>
        <package name="389-ds-base-devel" version="1.4.3.28" release="8.module_el8.6.0+3338+ebccfef1" epoch="0" arch="s390x" src="389-ds-base-1.4.3.28-8.module_el8.6.0+3338+ebccfef1.src.rpm">
          <filename>389-ds-base-devel-1.4.3.28-8.module_el8.6.0+3338+ebccfef1.s390x.rpm</filename>
          <sum type="sha256">39c60ed9e8d18aa642fd5a6c9a6fc8c0a7a8ca261faa8a5abd3549c19983a9a3</sum>
        </package>
        <package name="389-ds-base-libs" version="1.4.3.28" release="8.module_el8.6.0+3338+ebccfef1" epoch="0" arch="s390x" src="389-ds-base-1.4.3.28-8.module_el8.6.0+3338+ebccfef1.src.rpm">
          <filename>389-ds-base-libs-1.4.3.28-8.module_el8.6.0+3338+ebccfef1.s390x.rpm</filename>
          <sum type="sha256">6d59196aab660f0ad076aaf05b82b0bceb39c0091e69e57a89563a7441abb99a</sum>
        </package>
        <package name="389-ds-base-legacy-tools" version="1.4.3.28" release="8.module_el8.6.0+3338+ebccfef1" epoch="0" arch="s390x" src="389-ds-base-1.4.3.28-8.module_el8.6.0+3338+ebccfef1.src.rpm">
          <filename>389-ds-base-legacy-tools-1.4.3.28-8.module_el8.6.0+3338+ebccfef1.s390x.rpm</filename>
          <sum type="sha256">83ea25adcc34971eb74bf103cfa412d559305f43c17de86df4333752efd820a3</sum>
        </package>
        <package name="389-ds-base" version="1.4.3.28" release="8.module_el8.6.0+3338+ebccfef1" epoch="0" arch="s390x" src="389-ds-base-1.4.3.28-8.module_el8.6.0+3338+ebccfef1.src.rpm">
          <filename>389-ds-base-1.4.3.28-8.module_el8.6.0+3338+ebccfef1.s390x.rpm</filename>
          <sum type="sha256">a72ffa7417b779954e1368bd667ed6be371e9623cec84a7b66b8e03a203adcdf</sum>
        </package>
        <package name="python3-lib389" version="1.4.3.28" release="8.module_el8.6.0+3338+ebccfef1" epoch="0" arch="noarch" src="389-ds-base-1.4.3.28-8.module_el8.6.0+3338+ebccfef1.src.rpm">
          <filename>python3-lib389-1.4.3.28-8.module_el8.6.0+3338+ebccfef1.noarch.rpm</filename>
          <sum type="sha256">ad27dbe393632d3bdc415966769b94d6fd3ecba26b698633204a8312639c179d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7190</id>
    <title>Important: thunderbird security update</title>
    <issued date="2022-10-25 00:00:00"/>
    <updated date="2022-10-26 07:18:12"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.4.0.

Security Fix(es):

* Mozilla: Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack by malicious server administrators (CVE-2022-39249)
* Mozilla: Matrix SDK bundled with Thunderbird vulnerable to a device verification attack (CVE-2022-39250)
* Mozilla: Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack (CVE-2022-39251)
* Mozilla: Same-origin policy violation could have leaked cross-origin URLs (CVE-2022-42927)
* Mozilla: Memory Corruption in JS Engine (CVE-2022-42928)
* Mozilla: Matrix SDK bundled with Thunderbird vulnerable to a data corruption issue (CVE-2022-39236)
* Mozilla: Denial of Service via window.print (CVE-2022-42929)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.4 and Thunderbird 102.4 (CVE-2022-42932)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7190" id="RHSA-2022:7190" type="rhsa" title="RHSA-2022:7190"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39236" id="CVE-2022-39236" type="cve" title="CVE-2022-39236"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39249" id="CVE-2022-39249" type="cve" title="CVE-2022-39249"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39250" id="CVE-2022-39250" type="cve" title="CVE-2022-39250"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39251" id="CVE-2022-39251" type="cve" title="CVE-2022-39251"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42927" id="CVE-2022-42927" type="cve" title="CVE-2022-42927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42928" id="CVE-2022-42928" type="cve" title="CVE-2022-42928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42929" id="CVE-2022-42929" type="cve" title="CVE-2022-42929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42932" id="CVE-2022-42932" type="cve" title="CVE-2022-42932"/>
      <reference href="https://bugzilla.redhat.com/2135391" id="2135391" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2135393" id="2135393" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2135395" id="2135395" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2135396" id="2135396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2136156" id="2136156" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2136157" id="2136157" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2136158" id="2136158" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2136159" id="2136159" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7190.html" id="ALSA-2022:7190" type="self" title="ALSA-2022:7190"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="thunderbird" version="102.4.0" release="1.el8_6.alma" epoch="0" arch="s390x" src="thunderbird-102.4.0-1.el8_6.alma.src.rpm">
          <filename>thunderbird-102.4.0-1.el8_6.alma.s390x.rpm</filename>
          <sum type="sha256">234a3100118b0fb8cb34ce66cd0392a42f29ea7dd0db53d384aeb8ce06a3612a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7458</id>
    <title>Moderate: flatpak-builder security and bug fix update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 03:00:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>flatpak-builder security and bug fix update</summary>
    <description>Flatpak-builder is a tool for building flatpaks from sources.

Security Fix(es):

* flatpak: flatpak-builder --mirror-screenshots-url can access files outside the build directory (CVE-2022-21682)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7458" id="RHSA-2022:7458" type="rhsa" title="RHSA-2022:7458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21682" id="CVE-2022-21682" type="cve" title="CVE-2022-21682"/>
      <reference href="https://bugzilla.redhat.com/2041592" id="2041592" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7458.html" id="ALSA-2022:7458" type="self" title="ALSA-2022:7458"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="flatpak-builder" version="1.0.14" release="2.el8" epoch="0" arch="s390x" src="flatpak-builder-1.0.14-2.el8.src.rpm">
          <filename>flatpak-builder-1.0.14-2.el8.s390x.rpm</filename>
          <sum type="sha256">7dee126155fb08f818eff0e261755b27aa5eb60ed57ecb7fc86f85d7d07872d2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7461</id>
    <title>Moderate: libreoffice security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 02:53:32"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libreoffice security update</summary>
    <description>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

Security Fix(es):

* libreoffice: Incorrect trust validation of signature with ambiguous KeyInfo children (CVE-2021-25636)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7461" id="RHSA-2022:7461" type="rhsa" title="RHSA-2022:7461"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-25636" id="CVE-2021-25636" type="cve" title="CVE-2021-25636"/>
      <reference href="https://bugzilla.redhat.com/2056955" id="2056955" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7461.html" id="ALSA-2022:7461" type="self" title="ALSA-2022:7461"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="libreoffice-data" version="6.4.7.2" release="11.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-11.el8.alma.src.rpm">
          <filename>libreoffice-data-6.4.7.2-11.el8.alma.noarch.rpm</filename>
          <sum type="sha256">164adca0d048d8f0f33caf961ddfaea811e7afa849fdbfe8fe30d9885c261a29</sum>
        </package>
        <package name="libreoffice-impress" version="6.4.7.2" release="11.el8.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-11.el8.alma.src.rpm">
          <filename>libreoffice-impress-6.4.7.2-11.el8.alma.s390x.rpm</filename>
          <sum type="sha256">2d0de8164f27936c095077a135521659200b2f03068ce4bcd2a7177f027efbfc</sum>
        </package>
        <package name="libreoffice-help-en" version="6.4.7.2" release="11.el8.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-11.el8.alma.src.rpm">
          <filename>libreoffice-help-en-6.4.7.2-11.el8.alma.s390x.rpm</filename>
          <sum type="sha256">2d8bd41cd0e817650c13b16035f94b9f063c61c680efb8b02f6ecfdd2522ce33</sum>
        </package>
        <package name="libreoffice-graphicfilter" version="6.4.7.2" release="11.el8.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-11.el8.alma.src.rpm">
          <filename>libreoffice-graphicfilter-6.4.7.2-11.el8.alma.s390x.rpm</filename>
          <sum type="sha256">32c730774e83e28e91f0fbc5753144e703a693c86dd5f335d6a474ad3c12533b</sum>
        </package>
        <package name="libreoffice-ogltrans" version="6.4.7.2" release="11.el8.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-11.el8.alma.src.rpm">
          <filename>libreoffice-ogltrans-6.4.7.2-11.el8.alma.s390x.rpm</filename>
          <sum type="sha256">35b2e9a8e17a5f55701a4a3b75c28022f59fbb2db6b24f93083cc290be84ee01</sum>
        </package>
        <package name="autocorr-en" version="6.4.7.2" release="11.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-11.el8.alma.src.rpm">
          <filename>autocorr-en-6.4.7.2-11.el8.alma.noarch.rpm</filename>
          <sum type="sha256">5ccac7030c2b81bd75c2c77409f19d5e06fbd3ed1c1449676f128ef24dca6c97</sum>
        </package>
        <package name="libreoffice-calc" version="6.4.7.2" release="11.el8.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-11.el8.alma.src.rpm">
          <filename>libreoffice-calc-6.4.7.2-11.el8.alma.s390x.rpm</filename>
          <sum type="sha256">681f344933cd1c44ed688039dddaa363c77ec81f9b16513a27c4cd33853b02d8</sum>
        </package>
        <package name="libreoffice-ure" version="6.4.7.2" release="11.el8.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-11.el8.alma.src.rpm">
          <filename>libreoffice-ure-6.4.7.2-11.el8.alma.s390x.rpm</filename>
          <sum type="sha256">80a3f71efa37a56d73e47102882b82feb907f2c956556158fd48d117ff6c9dc8</sum>
        </package>
        <package name="libreoffice-pdfimport" version="6.4.7.2" release="11.el8.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-11.el8.alma.src.rpm">
          <filename>libreoffice-pdfimport-6.4.7.2-11.el8.alma.s390x.rpm</filename>
          <sum type="sha256">88a5f313e8597f23662ef0ba5379876cd73e7d5d84f1f2efe4beddf619c00cc9</sum>
        </package>
        <package name="libreoffice-core" version="6.4.7.2" release="11.el8.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-11.el8.alma.src.rpm">
          <filename>libreoffice-core-6.4.7.2-11.el8.alma.s390x.rpm</filename>
          <sum type="sha256">999f702c510017a7d2efa7e9f5696c08994157f6e747aae892f49b075bc56fd0</sum>
        </package>
        <package name="libreoffice-ure-common" version="6.4.7.2" release="11.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-11.el8.alma.src.rpm">
          <filename>libreoffice-ure-common-6.4.7.2-11.el8.alma.noarch.rpm</filename>
          <sum type="sha256">ad95009801f99afde5926fcf180fc6f4755503dba51fc95b1c4a8392c4038db4</sum>
        </package>
        <package name="libreoffice-writer" version="6.4.7.2" release="11.el8.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-11.el8.alma.src.rpm">
          <filename>libreoffice-writer-6.4.7.2-11.el8.alma.s390x.rpm</filename>
          <sum type="sha256">cdb88de21b86a877371087f1edfbce49b5aca6de0de63c2371b1dad8ccc46a55</sum>
        </package>
        <package name="libreoffice-pyuno" version="6.4.7.2" release="11.el8.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-11.el8.alma.src.rpm">
          <filename>libreoffice-pyuno-6.4.7.2-11.el8.alma.s390x.rpm</filename>
          <sum type="sha256">dfd09aa99847dd40cb0cb80890bb3d6b398abe037aaaa6c5ef4fff13bb7dc401</sum>
        </package>
        <package name="libreoffice-langpack-en" version="6.4.7.2" release="11.el8.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-11.el8.alma.src.rpm">
          <filename>libreoffice-langpack-en-6.4.7.2-11.el8.alma.s390x.rpm</filename>
          <sum type="sha256">f0ceb023d607bc71a527323952d72e88402882a8d943299bea5688ea170643cd</sum>
        </package>
        <package name="libreoffice-opensymbol-fonts" version="6.4.7.2" release="11.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-11.el8.alma.src.rpm">
          <filename>libreoffice-opensymbol-fonts-6.4.7.2-11.el8.alma.noarch.rpm</filename>
          <sum type="sha256">fd38da701a6ad58e65c3b235706299f4d0dfc44fc4cc456de031dfc67129e0e5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7464</id>
    <title>Moderate: protobuf security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 02:30:58"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>protobuf security update</summary>
    <description>The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.

Security Fix(es):

* protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference (CVE-2021-22570)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7464" id="RHSA-2022:7464" type="rhsa" title="RHSA-2022:7464"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-22570" id="CVE-2021-22570" type="cve" title="CVE-2021-22570"/>
      <reference href="https://bugzilla.redhat.com/2049429" id="2049429" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7464.html" id="ALSA-2022:7464" type="self" title="ALSA-2022:7464"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="protobuf" version="3.5.0" release="15.el8" epoch="0" arch="s390x" src="protobuf-3.5.0-15.el8.src.rpm">
          <filename>protobuf-3.5.0-15.el8.s390x.rpm</filename>
          <sum type="sha256">50e8ef95715c6fe13061f435ce9b77e2ac64f1736cb753eea20fdf2342b17b75</sum>
        </package>
        <package name="protobuf-compiler" version="3.5.0" release="15.el8" epoch="0" arch="s390x" src="protobuf-3.5.0-15.el8.src.rpm">
          <filename>protobuf-compiler-3.5.0-15.el8.s390x.rpm</filename>
          <sum type="sha256">98ecddb2ef49245c856d1f8b7e054527fcce04f6e2b7ccb1567a39dff00533cb</sum>
        </package>
        <package name="python3-protobuf" version="3.5.0" release="15.el8" epoch="0" arch="noarch" src="protobuf-3.5.0-15.el8.src.rpm">
          <filename>python3-protobuf-3.5.0-15.el8.noarch.rpm</filename>
          <sum type="sha256">cb6846b0fddb5f21afc525c09bb6354d43adc4baa8c70231beba84f12760be4b</sum>
        </package>
        <package name="protobuf-lite" version="3.5.0" release="15.el8" epoch="0" arch="s390x" src="protobuf-3.5.0-15.el8.src.rpm">
          <filename>protobuf-lite-3.5.0-15.el8.s390x.rpm</filename>
          <sum type="sha256">d50a323d2e4c21274cda716616c7b4804a12ba0bcc321fef4e2b9f8219e13a85</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7469</id>
    <title>Moderate: container-tools:4.0 security and bug fix update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2023-01-03 12:15:28"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>container-tools:4.0 security and bug fix update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* cri-o: memory exhaustion on the node when access to the kube api (CVE-2022-1708)
* golang: crash in a golang.org/x/crypto/ssh server (CVE-2022-27191)
* runc: incorrect handling of inheritable capabilities (CVE-2022-29162)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7469" id="RHSA-2022:7469" type="rhsa" title="RHSA-2022:7469"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1708" id="CVE-2022-1708" type="cve" title="CVE-2022-1708"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27191" id="CVE-2022-27191" type="cve" title="CVE-2022-27191"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29162" id="CVE-2022-29162" type="cve" title="CVE-2022-29162"/>
      <reference href="https://bugzilla.redhat.com/2064702" id="2064702" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2085361" id="2085361" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2086398" id="2086398" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7469.html" id="ALSA-2022:7469" type="self" title="ALSA-2022:7469"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <module name="container-tools" stream="4.0" version="8070020221108190219" context="20125149" arch="s390x"/>
        <package name="containers-common" version="1" release="35.module_el8.7.0+3344+5bcd850f" epoch="2" arch="s390x" src="containers-common-1-35.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>containers-common-1-35.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">00e4a43d8cc71d76fa13e94bb2ac567fffb1b5b02c4e73bda539903f45ddff24</sum>
        </package>
        <package name="podman-plugins" version="4.0.2" release="8.module_el8.7.0+3344+5bcd850f" epoch="2" arch="s390x" src="podman-4.0.2-8.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>podman-plugins-4.0.2-8.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">0d8097779ee8f433346263091d8317336513ba1e8ae68c613d1928edce0a87c5</sum>
        </package>
        <package name="netavark" version="1.0.1" release="35.module_el8.7.0+3344+5bcd850f" epoch="2" arch="s390x" src="containers-common-1-35.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>netavark-1.0.1-35.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">0f8d13ae690c88151c25de31c944eb07c6f24f14a385e4cec958cb514ad094fe</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="1.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="libslirp-4.4.0-1.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>libslirp-devel-4.4.0-1.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">23a930ac511e216078f3ebd78a7940a7f4a6b6d16fe2d3c7f7c04c5dd9050b3b</sum>
        </package>
        <package name="fuse-overlayfs" version="1.9" release="1.module_el8.7.0+3344+5bcd850f" epoch="0" arch="s390x" src="fuse-overlayfs-1.9-1.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>fuse-overlayfs-1.9-1.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">2b7258ad1b1c59dcb5a615337a043ce7e32977606f7ffa243a903122b2237a99</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.5" release="1.module_el8.7.0+3344+5bcd850f" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.5-1.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.5-1.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">321314db0c5cb40e7a42ad22aab067824bcdf5683d8e5063cf858456c43bf70d</sum>
        </package>
        <package name="criu-devel" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>criu-devel-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">3b5df64c4e5adb160d2985d7477aa84f2df350f8b8651dee3d1a73cb22e4ff2b</sum>
        </package>
        <package name="buildah" version="1.24.5" release="2.module_el8.7.0+3344+5bcd850f" epoch="1" arch="s390x" src="buildah-1.24.5-2.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>buildah-1.24.5-2.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">44552a35ed8224f4e3ffcdde56bdb1a7c89057bf5bb816acfd18cf185e10ca06</sum>
        </package>
        <package name="podman-tests" version="4.0.2" release="8.module_el8.7.0+3344+5bcd850f" epoch="2" arch="s390x" src="podman-4.0.2-8.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>podman-tests-4.0.2-8.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">446b5a7a645413609babfa63d96a71808ddf7aeb43ff26f046a9a7a6d6eec1f7</sum>
        </package>
        <package name="cockpit-podman" version="46" release="1.module_el8.7.0+3344+5bcd850f" epoch="0" arch="noarch" src="cockpit-podman-46-1.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>cockpit-podman-46-1.module_el8.7.0+3344+5bcd850f.noarch.rpm</filename>
          <sum type="sha256">4befd0793ef210df16649c866d5c1c4e69991cc174ecf348a5fbe591aa93b387</sum>
        </package>
        <package name="conmon" version="2.1.4" release="1.module_el8.7.0+3344+5bcd850f" epoch="2" arch="s390x" src="conmon-2.1.4-1.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>conmon-2.1.4-1.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">51183592198a872cf2496d2f3767c18ab10b2989849be5b32a9a479ca11bfd82</sum>
        </package>
        <package name="runc" version="1.1.4" release="1.module_el8.7.0+3344+484dae7b" epoch="1" arch="s390x" src="runc-1.1.4-1.module_el8.7.0+3344+484dae7b.src.rpm">
          <filename>runc-1.1.4-1.module_el8.7.0+3344+484dae7b.s390x.rpm</filename>
          <sum type="sha256">533384a92eaf1feb65434ec5dbad4c9ba501383482642277aed4825598a0fa1e</sum>
        </package>
        <package name="aardvark-dns" version="1.0.1" release="35.module_el8.7.0+3344+5bcd850f" epoch="2" arch="s390x" src="containers-common-1-35.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>aardvark-dns-1.0.1-35.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">5db16e2cba813567c71749e1cb68e9d8fffcf9e1824910012a1c96925cb50a41</sum>
        </package>
        <package name="crit" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>crit-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">63e66b7937f70ee985aabe920c4d8c1e590159f72b4b79a311e986f58bc147e1</sum>
        </package>
        <package name="python3-criu" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>python3-criu-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">6b152daf504ff66ecb343dfbca61a7adb1ddceb7d77ba0af696194d2d2d0db43</sum>
        </package>
        <package name="podman-docker" version="4.0.2" release="8.module_el8.7.0+3344+5bcd850f" epoch="2" arch="noarch" src="podman-4.0.2-8.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>podman-docker-4.0.2-8.module_el8.7.0+3344+5bcd850f.noarch.rpm</filename>
          <sum type="sha256">6c4fe4f86b0d3f856efdcdce4b8a1bfb02c16f3cb3e7d86a1231aef8631ebf37</sum>
        </package>
        <package name="slirp4netns" version="1.1.8" release="2.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="slirp4netns-1.1.8-2.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>slirp4netns-1.1.8-2.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">7987f96d013c18fd2fe55b235405e2b835e357d84d6d08b6674a9e58ae3a5dd8</sum>
        </package>
        <package name="container-selinux" version="2.189.0" release="1.module_el8.7.0+3344+5bcd850f" epoch="2" arch="noarch" src="container-selinux-2.189.0-1.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>container-selinux-2.189.0-1.module_el8.7.0+3344+5bcd850f.noarch.rpm</filename>
          <sum type="sha256">926c7c345065b7b54f2a1aeea09eb7674f8d27be8e6618e591b60a642cde2f41</sum>
        </package>
        <package name="crun" version="1.5" release="1.module_el8.7.0+3344+5bcd850f" epoch="0" arch="s390x" src="crun-1.5-1.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>crun-1.5-1.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">9395cf916c3dab725055a3bf06911ceebf70806bdd3e4e185e807b42adb6745f</sum>
        </package>
        <package name="toolbox" version="0.0.99.3" release="0.5.module_el8.7.0+3344+5bcd850f" epoch="0" arch="s390x" src="toolbox-0.0.99.3-0.5.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>toolbox-0.0.99.3-0.5.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">a1beae279a1b599b1a1be0f70d5cf84a4ceebb61805aa892e2a48e3e2baf5692</sum>
        </package>
        <package name="buildah-tests" version="1.24.5" release="2.module_el8.7.0+3344+5bcd850f" epoch="1" arch="s390x" src="buildah-1.24.5-2.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>buildah-tests-1.24.5-2.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">a56634deecef421e1fba50ff228832073aac19908a6e3c9327fe10aed301e76c</sum>
        </package>
        <package name="podman-remote" version="4.0.2" release="8.module_el8.7.0+3344+5bcd850f" epoch="2" arch="s390x" src="podman-4.0.2-8.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>podman-remote-4.0.2-8.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">aa448b20dbc5edd3fc5c7ea45e2ce28cfb9586e20a4e23a55a6626fd8c468460</sum>
        </package>
        <package name="skopeo" version="1.6.2" release="5.module_el8.7.0+3344+5bcd850f" epoch="2" arch="s390x" src="skopeo-1.6.2-5.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>skopeo-1.6.2-5.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">aae8d79fecb0dbe2c62d627306192d17730e79bcf46a0f8352410a61406e0d63</sum>
        </package>
        <package name="containernetworking-plugins" version="1.1.1" release="2.module_el8.7.0+3344+5bcd850f" epoch="1" arch="s390x" src="containernetworking-plugins-1.1.1-2.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>containernetworking-plugins-1.1.1-2.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">be9664e888fba07628f1924dcc8ce71b5546e04b9940d377932496ff080687e8</sum>
        </package>
        <package name="criu" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>criu-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">c08a42b3160aaaca1d8eb6f81df59b8ea0a45448fd676479d2cae70b46600d46</sum>
        </package>
        <package name="podman" version="4.0.2" release="8.module_el8.7.0+3344+5bcd850f" epoch="2" arch="s390x" src="podman-4.0.2-8.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>podman-4.0.2-8.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">cc84a36d22e8c9c6bf3b97723bb0c3aa111ba20a1c613b0d6b46859b26767bcd</sum>
        </package>
        <package name="skopeo-tests" version="1.6.2" release="5.module_el8.7.0+3344+5bcd850f" epoch="2" arch="s390x" src="skopeo-1.6.2-5.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>skopeo-tests-1.6.2-5.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">d8dc932cf6a2b6f982bc6e1775d1713bbdf416829fed9701d9a81f5d525574d4</sum>
        </package>
        <package name="criu-libs" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>criu-libs-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">e4c16247d9bcf785747fb00cd48e60e73f98ce6fcb5202032c264dfb343a7bce</sum>
        </package>
        <package name="udica" version="0.2.6" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="noarch" src="udica-0.2.6-3.module_el8.7.0+3344+484dae7b.src.rpm">
          <filename>udica-0.2.6-3.module_el8.6.0+3137+d33c3efb.noarch.rpm</filename>
          <sum type="sha256">ea718407cf95a567d3a22512dc0dbfa4279f2af8ee21809ca6bbf311fc68b601</sum>
        </package>
        <package name="podman-gvproxy" version="4.0.2" release="8.module_el8.7.0+3344+5bcd850f" epoch="2" arch="s390x" src="podman-4.0.2-8.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>podman-gvproxy-4.0.2-8.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">ee0d2ceb510f21a83cbe01d8469396c7a6c2d67b77e07ed3ab49d99a103a1959</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="1.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="libslirp-4.4.0-1.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>libslirp-4.4.0-1.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">f2c8aa7fab8501dbdf33f68a74cb5600af266839424a6d637732ac248a58edc7</sum>
        </package>
        <package name="podman-catatonit" version="4.0.2" release="8.module_el8.7.0+3344+5bcd850f" epoch="2" arch="s390x" src="podman-4.0.2-8.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>podman-catatonit-4.0.2-8.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">f8755ca8964b62a11125daa4d399d8cfc64dd51c83a469ba971c2a8a0b8f5455</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.3" release="0.5.module_el8.7.0+3344+5bcd850f" epoch="0" arch="s390x" src="toolbox-0.0.99.3-0.5.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>toolbox-tests-0.0.99.3-0.5.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">fec8077679126268c378d66bd8d26c263eb19d5db64d67bb00fafccbfad66de5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7470</id>
    <title>Important: pki-core:10.6 and pki-deps:10.6 security and bug fix update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-23 22:19:29"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pki-core:10.6 and pki-deps:10.6 security and bug fix update</summary>
    <description>The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.

Security Fix(es):

* pki-core: access to external entities when parsing XML can lead to XXE (CVE-2022-2414)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7470" id="RHSA-2022:7470" type="rhsa" title="RHSA-2022:7470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2414" id="CVE-2022-2414" type="cve" title="CVE-2022-2414"/>
      <reference href="https://bugzilla.redhat.com/2104676" id="2104676" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7470.html" id="ALSA-2022:7470" type="self" title="ALSA-2022:7470"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <module name="pki-core" stream="10.6" version="8070020221012183101" context="338751f5" arch="s390x"/>
        <package name="python3-idm-pki" version="10.12.0" release="4.module_el8.7.0+3316+50b99934" epoch="0" arch="noarch" src="pki-core-10.12.0-4.module_el8.7.0+3316+50b99934.src.rpm">
          <filename>python3-idm-pki-10.12.0-4.module_el8.7.0+3316+50b99934.noarch.rpm</filename>
          <sum type="sha256">33479959847b34de679cf6b40184cd2267b220ec624ac5c817fbf1a864e8a746</sum>
        </package>
        <package name="idm-pki-ca" version="10.12.0" release="4.module_el8.7.0+3316+50b99934" epoch="0" arch="noarch" src="pki-core-10.12.0-4.module_el8.7.0+3316+50b99934.src.rpm">
          <filename>idm-pki-ca-10.12.0-4.module_el8.7.0+3316+50b99934.noarch.rpm</filename>
          <sum type="sha256">3c6bc9643839ffaeaa51044b728087d6aa76ce88364150cd6d99c479f1af5d12</sum>
        </package>
        <package name="idm-pki-tools" version="10.12.0" release="4.module_el8.7.0+3316+50b99934" epoch="0" arch="s390x" src="pki-core-10.12.0-4.module_el8.7.0+3316+50b99934.src.rpm">
          <filename>idm-pki-tools-10.12.0-4.module_el8.7.0+3316+50b99934.s390x.rpm</filename>
          <sum type="sha256">473b80ea988a01032df59130848f8c20574988beb2b52504b2b904cc7cee0764</sum>
        </package>
        <package name="idm-pki-base" version="10.12.0" release="4.module_el8.7.0+3316+50b99934" epoch="0" arch="noarch" src="pki-core-10.12.0-4.module_el8.7.0+3316+50b99934.src.rpm">
          <filename>idm-pki-base-10.12.0-4.module_el8.7.0+3316+50b99934.noarch.rpm</filename>
          <sum type="sha256">9e664fa2ed100d4eb3767487a943b6c2918f995a0e1b57058aac336b571390a2</sum>
        </package>
        <package name="idm-pki-acme" version="10.12.0" release="4.module_el8.7.0+3316+50b99934" epoch="0" arch="noarch" src="pki-core-10.12.0-4.module_el8.7.0+3316+50b99934.src.rpm">
          <filename>idm-pki-acme-10.12.0-4.module_el8.7.0+3316+50b99934.noarch.rpm</filename>
          <sum type="sha256">a6b98c62b3a56cc5d85d908ac88b2c798978b1420a418ed41dea36ccd46d6ce7</sum>
        </package>
        <package name="idm-pki-symkey" version="10.12.0" release="4.module_el8.7.0+3316+50b99934" epoch="0" arch="s390x" src="pki-core-10.12.0-4.module_el8.7.0+3316+50b99934.src.rpm">
          <filename>idm-pki-symkey-10.12.0-4.module_el8.7.0+3316+50b99934.s390x.rpm</filename>
          <sum type="sha256">e57761bca39e33164771515b2c142918907d6f291ac9fb6e9dae88968a7a6159</sum>
        </package>
        <package name="idm-pki-server" version="10.12.0" release="4.module_el8.7.0+3316+50b99934" epoch="0" arch="noarch" src="pki-core-10.12.0-4.module_el8.7.0+3316+50b99934.src.rpm">
          <filename>idm-pki-server-10.12.0-4.module_el8.7.0+3316+50b99934.noarch.rpm</filename>
          <sum type="sha256">e992bc539342b866b92f76af88ccc0f8301747ffe82ea61d6ddbb1923984a168</sum>
        </package>
        <package name="idm-pki-kra" version="10.12.0" release="4.module_el8.7.0+3316+50b99934" epoch="0" arch="noarch" src="pki-core-10.12.0-4.module_el8.7.0+3316+50b99934.src.rpm">
          <filename>idm-pki-kra-10.12.0-4.module_el8.7.0+3316+50b99934.noarch.rpm</filename>
          <sum type="sha256">fb7b07dd270c084122bbec35f1af3c87c588e3d66e5fbc4816d13319be441fc6</sum>
        </package>
        <package name="idm-pki-base-java" version="10.12.0" release="4.module_el8.7.0+3316+50b99934" epoch="0" arch="noarch" src="pki-core-10.12.0-4.module_el8.7.0+3316+50b99934.src.rpm">
          <filename>idm-pki-base-java-10.12.0-4.module_el8.7.0+3316+50b99934.noarch.rpm</filename>
          <sum type="sha256">fbaa0a93d8800a932e914c797eae53aba3f00fdf088a22b2b0e93fede76d7289</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7482</id>
    <title>Moderate: qt5 security, bug fix, and enhancement update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 02:11:31"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt5 security, bug fix, and enhancement update</summary>
    <description>The Qt5 libraries packages provide Qt 5, version 5 of the Qt cross-platform application framework.

The following packages have been upgraded to a later upstream version: qt5 (5.15.3). (BZ#2061377)

Security Fix(es):

* qt: QProcess could execute a binary from the current working directory when not found in the PATH (CVE-2022-25255)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7482" id="RHSA-2022:7482" type="rhsa" title="RHSA-2022:7482"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25255" id="CVE-2022-25255" type="cve" title="CVE-2022-25255"/>
      <reference href="https://bugzilla.redhat.com/2055505" id="2055505" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7482.html" id="ALSA-2022:7482" type="self" title="ALSA-2022:7482"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="qt5-rpm-macros" version="5.15.3" release="1.el8" epoch="0" arch="noarch" src="qt5-5.15.3-1.el8.src.rpm">
          <filename>qt5-rpm-macros-5.15.3-1.el8.noarch.rpm</filename>
          <sum type="sha256">0a5b4d151946f41822efba8eaea31131e58ebd09d671283dfe8db64c782d9e3e</sum>
        </package>
        <package name="qt5-srpm-macros" version="5.15.3" release="1.el8" epoch="0" arch="noarch" src="qt5-5.15.3-1.el8.src.rpm">
          <filename>qt5-srpm-macros-5.15.3-1.el8.noarch.rpm</filename>
          <sum type="sha256">21ed6f36e843aff573c5f3256a2bce62f9be440048c0675aa71e11a7ac524c2f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7514</id>
    <title>Moderate: fribidi security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 02:04:03"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fribidi security update</summary>
    <description>FriBidi is a library to handle bidirectional scripts (for example Hebrew, Arabic), so that the display is done in the proper way, while the text data itself is always written in logical order.

Security Fix(es):

* fribidi: Stack based buffer overflow (CVE-2022-25308)
* fribidi: Heap-buffer-overflow in fribidi_cap_rtl_to_unicode (CVE-2022-25309)
* fribidi: SEGV in fribidi_remove_bidi_marks (CVE-2022-25310)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7514" id="RHSA-2022:7514" type="rhsa" title="RHSA-2022:7514"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25308" id="CVE-2022-25308" type="cve" title="CVE-2022-25308"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25309" id="CVE-2022-25309" type="cve" title="CVE-2022-25309"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25310" id="CVE-2022-25310" type="cve" title="CVE-2022-25310"/>
      <reference href="https://bugzilla.redhat.com/2047890" id="2047890" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2047896" id="2047896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2047923" id="2047923" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7514.html" id="ALSA-2022:7514" type="self" title="ALSA-2022:7514"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="fribidi" version="1.0.4" release="9.el8" epoch="0" arch="s390x" src="fribidi-1.0.4-9.el8.src.rpm">
          <filename>fribidi-1.0.4-9.el8.s390x.rpm</filename>
          <sum type="sha256">78aae8072d9000df17b5376ce5d2da70474566b704f05feb3e9578a7b1ae5609</sum>
        </package>
        <package name="fribidi-devel" version="1.0.4" release="9.el8" epoch="0" arch="s390x" src="fribidi-1.0.4-9.el8.src.rpm">
          <filename>fribidi-devel-1.0.4-9.el8.s390x.rpm</filename>
          <sum type="sha256">e5791ed5eca53582b6ff9492c4dd7652f1e7507eec8ad644c0dff84ac4634e2b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7519</id>
    <title>Moderate: grafana security, bug fix, and enhancement update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 01:59:13"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grafana security, bug fix, and enhancement update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB. 

The following packages have been upgraded to a later upstream version: grafana (7.5.15). (BZ#2055348)

Security Fix(es):

* sanitize-url: XSS due to improper sanitization in sanitizeUrl function (CVE-2021-23648)
* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)
* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)
* grafana: Forward OAuth Identity Token can allow users to access some data sources (CVE-2022-21673)
* prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698)
* grafana: XSS vulnerability in data source handling (CVE-2022-21702)
* grafana: CSRF vulnerability can lead to privilege escalation (CVE-2022-21703)
* grafana: IDOR vulnerability can lead to information disclosure (CVE-2022-21713)
* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)
* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)
* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)
* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)
* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)
* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)
* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7519" id="RHSA-2022:7519" type="rhsa" title="RHSA-2022:7519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-23648" id="CVE-2021-23648" type="cve" title="CVE-2021-23648"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1705" id="CVE-2022-1705" type="cve" title="CVE-2022-1705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1962" id="CVE-2022-1962" type="cve" title="CVE-2022-1962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21673" id="CVE-2022-21673" type="cve" title="CVE-2022-21673"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21698" id="CVE-2022-21698" type="cve" title="CVE-2022-21698"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21702" id="CVE-2022-21702" type="cve" title="CVE-2022-21702"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21703" id="CVE-2022-21703" type="cve" title="CVE-2022-21703"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21713" id="CVE-2022-21713" type="cve" title="CVE-2022-21713"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28131" id="CVE-2022-28131" type="cve" title="CVE-2022-28131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30630" id="CVE-2022-30630" type="cve" title="CVE-2022-30630"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30631" id="CVE-2022-30631" type="cve" title="CVE-2022-30631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30632" id="CVE-2022-30632" type="cve" title="CVE-2022-30632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30633" id="CVE-2022-30633" type="cve" title="CVE-2022-30633"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30635" id="CVE-2022-30635" type="cve" title="CVE-2022-30635"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32148" id="CVE-2022-32148" type="cve" title="CVE-2022-32148"/>
      <reference href="https://bugzilla.redhat.com/2044628" id="2044628" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2045880" id="2045880" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050648" id="2050648" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050742" id="2050742" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050743" id="2050743" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2065290" id="2065290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107342" id="2107342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107371" id="2107371" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107374" id="2107374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107376" id="2107376" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107383" id="2107383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107386" id="2107386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107388" id="2107388" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107390" id="2107390" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107392" id="2107392" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7519.html" id="ALSA-2022:7519" type="self" title="ALSA-2022:7519"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="grafana" version="7.5.15" release="3.el8" epoch="0" arch="s390x" src="grafana-7.5.15-3.el8.src.rpm">
          <filename>grafana-7.5.15-3.el8.s390x.rpm</filename>
          <sum type="sha256">bdc9b7c7f26a2af7374489f8bfa3195ee2c1f15954bbfb66fd192d1c51e3ae46</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7524</id>
    <title>Moderate: yajl security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 01:50:35"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>yajl security update</summary>
    <description>Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C and a small validating JSON generator.

Security Fix(es):

* yajl: heap-based buffer overflow when handling large inputs due to an integer overflow (CVE-2022-24795)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7524" id="RHSA-2022:7524" type="rhsa" title="RHSA-2022:7524"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24795" id="CVE-2022-24795" type="cve" title="CVE-2022-24795"/>
      <reference href="https://bugzilla.redhat.com/2072912" id="2072912" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7524.html" id="ALSA-2022:7524" type="self" title="ALSA-2022:7524"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="yajl" version="2.1.0" release="11.el8" epoch="0" arch="s390x" src="yajl-2.1.0-11.el8.src.rpm">
          <filename>yajl-2.1.0-11.el8.s390x.rpm</filename>
          <sum type="sha256">23e7b239ce8f935af654242ea3dd1b60bbe84d283904827118991cfaff004353</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7529</id>
    <title>Moderate: container-tools:3.0 security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2023-01-03 12:15:28"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>container-tools:3.0 security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)
* cri-o: memory exhaustion on the node when access to the kube api (CVE-2022-1708)
* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)
* prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698)
* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)
* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)
* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)
* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)
* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)
* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7529" id="RHSA-2022:7529" type="rhsa" title="RHSA-2022:7529"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1705" id="CVE-2022-1705" type="cve" title="CVE-2022-1705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1708" id="CVE-2022-1708" type="cve" title="CVE-2022-1708"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1962" id="CVE-2022-1962" type="cve" title="CVE-2022-1962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21698" id="CVE-2022-21698" type="cve" title="CVE-2022-21698"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28131" id="CVE-2022-28131" type="cve" title="CVE-2022-28131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30630" id="CVE-2022-30630" type="cve" title="CVE-2022-30630"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30631" id="CVE-2022-30631" type="cve" title="CVE-2022-30631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30632" id="CVE-2022-30632" type="cve" title="CVE-2022-30632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30633" id="CVE-2022-30633" type="cve" title="CVE-2022-30633"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32148" id="CVE-2022-32148" type="cve" title="CVE-2022-32148"/>
      <reference href="https://bugzilla.redhat.com/2045880" id="2045880" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2085361" id="2085361" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107342" id="2107342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107371" id="2107371" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107374" id="2107374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107376" id="2107376" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107383" id="2107383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107386" id="2107386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107390" id="2107390" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107392" id="2107392" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7529.html" id="ALSA-2022:7529" type="self" title="ALSA-2022:7529"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <module name="container-tools" stream="3.0" version="8070020221011090717" context="20125149" arch="s390x"/>
        <package name="podman" version="3.0.1" release="13.module_el8.7.0+3297+1eb250cf" epoch="0" arch="s390x" src="podman-3.0.1-13.module_el8.7.0+3297+1eb250cf.src.rpm">
          <filename>podman-3.0.1-13.module_el8.7.0+3297+1eb250cf.s390x.rpm</filename>
          <sum type="sha256">062760bbdbc9c397432b8f0623d15e5a73742ddcedeaae15a978bfc9083106c8</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.3" release="1.module_el8.6.0+3136+bfcd65b6" epoch="0" arch="s390x" src="toolbox-0.0.99.3-1.module_el8.6.0+3136+bfcd65b6.src.rpm">
          <filename>toolbox-tests-0.0.99.3-1.module_el8.6.0+3136+bfcd65b6.s390x.rpm</filename>
          <sum type="sha256">146300e552a2c5398f65a1c520614e81bbf5d372b293ef5fc3cc9170e4ac708d</sum>
        </package>
        <package name="skopeo" version="1.2.4" release="2.module_el8.7.0+3297+1eb250cf" epoch="1" arch="s390x" src="skopeo-1.2.4-2.module_el8.7.0+3297+1eb250cf.src.rpm">
          <filename>skopeo-1.2.4-2.module_el8.7.0+3297+1eb250cf.s390x.rpm</filename>
          <sum type="sha256">265dc0101e83e5c87d916008485ba328098d09fdfbd48afbbe7dcd0f3b2ea8af</sum>
        </package>
        <package name="podman-plugins" version="3.0.1" release="13.module_el8.7.0+3297+1eb250cf" epoch="0" arch="s390x" src="podman-3.0.1-13.module_el8.7.0+3297+1eb250cf.src.rpm">
          <filename>podman-plugins-3.0.1-13.module_el8.7.0+3297+1eb250cf.s390x.rpm</filename>
          <sum type="sha256">2cfef59536f860184c1d3b6358df61403576d3df8cb89ee2f9866655dbe08958</sum>
        </package>
        <package name="libslirp" version="4.3.1" release="1.module_el8.6.0+3136+bfcd65b6" epoch="0" arch="s390x" src="libslirp-4.3.1-1.module_el8.6.0+3136+bfcd65b6.src.rpm">
          <filename>libslirp-4.3.1-1.module_el8.6.0+3136+bfcd65b6.s390x.rpm</filename>
          <sum type="sha256">35ebe73e2602fb36faf49047d3cc15845c0eda223eb3b9416f3a39cb15b47a77</sum>
        </package>
        <package name="crun" version="0.18" release="3.module_el8.6.0+3136+bfcd65b6" epoch="0" arch="s390x" src="crun-0.18-3.module_el8.6.0+3136+bfcd65b6.src.rpm">
          <filename>crun-0.18-3.module_el8.6.0+3136+bfcd65b6.s390x.rpm</filename>
          <sum type="sha256">402bb3464fa6112259d5c080831d436a9f8263af4f57c88124c36bb899c207b8</sum>
        </package>
        <package name="podman-docker" version="3.0.1" release="13.module_el8.7.0+3297+1eb250cf" epoch="0" arch="noarch" src="podman-3.0.1-13.module_el8.7.0+3297+1eb250cf.src.rpm">
          <filename>podman-docker-3.0.1-13.module_el8.7.0+3297+1eb250cf.noarch.rpm</filename>
          <sum type="sha256">50986d6cb60c8c39aa4baf607a333483a539e781efbf56700d7c3af684d79e00</sum>
        </package>
        <package name="podman-catatonit" version="3.0.1" release="13.module_el8.7.0+3297+1eb250cf" epoch="0" arch="s390x" src="podman-3.0.1-13.module_el8.7.0+3297+1eb250cf.src.rpm">
          <filename>podman-catatonit-3.0.1-13.module_el8.7.0+3297+1eb250cf.s390x.rpm</filename>
          <sum type="sha256">542bd7dc3ff0272c5c33b676b14abb9cddc670943a15274b35c560b4274f112b</sum>
        </package>
        <package name="buildah-tests" version="1.19.9" release="6.module_el8.7.0+3297+1eb250cf" epoch="0" arch="s390x" src="buildah-1.19.9-6.module_el8.7.0+3297+1eb250cf.src.rpm">
          <filename>buildah-tests-1.19.9-6.module_el8.7.0+3297+1eb250cf.s390x.rpm</filename>
          <sum type="sha256">56e711e0fd161d03bfac86fdf5722a47c332b2cae51939cf684f18612733dc64</sum>
        </package>
        <package name="runc" version="1.0.0" release="73.rc95.module_el8.6.0+3136+bfcd65b6" epoch="0" arch="s390x" src="runc-1.0.0-73.rc95.module_el8.6.0+3136+bfcd65b6.src.rpm">
          <filename>runc-1.0.0-73.rc95.module_el8.6.0+3136+bfcd65b6.s390x.rpm</filename>
          <sum type="sha256">58dbf92b624b0441fdf90df01b96cb9f5d463b1d2023c2e3d5caeffb8b54334d</sum>
        </package>
        <package name="toolbox" version="0.0.99.3" release="1.module_el8.6.0+3136+bfcd65b6" epoch="0" arch="s390x" src="toolbox-0.0.99.3-1.module_el8.6.0+3136+bfcd65b6.src.rpm">
          <filename>toolbox-0.0.99.3-1.module_el8.6.0+3136+bfcd65b6.s390x.rpm</filename>
          <sum type="sha256">6e0a3bc113ac26bd51debae6ac346c79286ce445dae37d3b5375297e3c405e8a</sum>
        </package>
        <package name="skopeo-tests" version="1.2.4" release="2.module_el8.7.0+3297+1eb250cf" epoch="1" arch="s390x" src="skopeo-1.2.4-2.module_el8.7.0+3297+1eb250cf.src.rpm">
          <filename>skopeo-tests-1.2.4-2.module_el8.7.0+3297+1eb250cf.s390x.rpm</filename>
          <sum type="sha256">74087fe49f4973fdc12e1faafcd02ace31f0a3ab8ac82532a1e6a61356ac75b4</sum>
        </package>
        <package name="containernetworking-plugins" version="0.9.1" release="1.module_el8.6.0+3136+bfcd65b6" epoch="0" arch="s390x" src="containernetworking-plugins-0.9.1-1.module_el8.6.0+3136+bfcd65b6.src.rpm">
          <filename>containernetworking-plugins-0.9.1-1.module_el8.6.0+3136+bfcd65b6.s390x.rpm</filename>
          <sum type="sha256">82c508d1b321dfa6efa91ade939611c491f8322e8f92fbd99f78cff46884f470</sum>
        </package>
        <package name="python3-criu" version="3.15" release="1.module_el8.6.0+3136+bfcd65b6" epoch="0" arch="s390x" src="criu-3.15-1.module_el8.6.0+3136+bfcd65b6.src.rpm">
          <filename>python3-criu-3.15-1.module_el8.6.0+3136+bfcd65b6.s390x.rpm</filename>
          <sum type="sha256">87dde38ba78f68fdd77da58acf795e8d98af7f5484a54c0c740365da7e4bc41d</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.0" release="3.module_el8.6.0+3136+bfcd65b6" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.0-3.module_el8.6.0+3136+bfcd65b6.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.0-3.module_el8.6.0+3136+bfcd65b6.s390x.rpm</filename>
          <sum type="sha256">940164b543561dbc18eca4cc4502c53f96a383316f1b6678348293c2cd8cc1fa</sum>
        </package>
        <package name="conmon" version="2.0.26" release="3.module_el8.7.0+3297+1eb250cf" epoch="2" arch="s390x" src="conmon-2.0.26-3.module_el8.7.0+3297+1eb250cf.src.rpm">
          <filename>conmon-2.0.26-3.module_el8.7.0+3297+1eb250cf.s390x.rpm</filename>
          <sum type="sha256">961f0449be43da2d1e1003964a18f1388386572d105be4431409f8e68f531f7a</sum>
        </package>
        <package name="libslirp-devel" version="4.3.1" release="1.module_el8.6.0+3136+bfcd65b6" epoch="0" arch="s390x" src="libslirp-4.3.1-1.module_el8.6.0+3136+bfcd65b6.src.rpm">
          <filename>libslirp-devel-4.3.1-1.module_el8.6.0+3136+bfcd65b6.s390x.rpm</filename>
          <sum type="sha256">9653699b46e834b602a07ea751aff2d49bc69dce7bc06f82318e54eb42d853bc</sum>
        </package>
        <package name="containers-common" version="1.2.4" release="2.module_el8.7.0+3297+1eb250cf" epoch="1" arch="s390x" src="skopeo-1.2.4-2.module_el8.7.0+3297+1eb250cf.src.rpm">
          <filename>containers-common-1.2.4-2.module_el8.7.0+3297+1eb250cf.s390x.rpm</filename>
          <sum type="sha256">a3f5e863cfd9e28d497f00a4469b9e05c0985d9396fe3e4831b2f78f8281c6d7</sum>
        </package>
        <package name="fuse-overlayfs" version="1.4.0" release="2.module_el8.6.0+3136+bfcd65b6" epoch="0" arch="s390x" src="fuse-overlayfs-1.4.0-2.module_el8.6.0+3136+bfcd65b6.src.rpm">
          <filename>fuse-overlayfs-1.4.0-2.module_el8.6.0+3136+bfcd65b6.s390x.rpm</filename>
          <sum type="sha256">b930aeccc13c4b78962ea7bc0cfd87638080a179cbc4645729c7b6ada307bbc9</sum>
        </package>
        <package name="crit" version="3.15" release="1.module_el8.6.0+3136+bfcd65b6" epoch="0" arch="s390x" src="criu-3.15-1.module_el8.6.0+3136+bfcd65b6.src.rpm">
          <filename>crit-3.15-1.module_el8.6.0+3136+bfcd65b6.s390x.rpm</filename>
          <sum type="sha256">c876a1c221aab01c6dc9125e187bdcfe13145571885c044b74831fedd267e5b6</sum>
        </package>
        <package name="slirp4netns" version="1.1.8" release="1.module_el8.6.0+3136+bfcd65b6" epoch="0" arch="s390x" src="slirp4netns-1.1.8-1.module_el8.6.0+3136+bfcd65b6.src.rpm">
          <filename>slirp4netns-1.1.8-1.module_el8.6.0+3136+bfcd65b6.s390x.rpm</filename>
          <sum type="sha256">d4fd33ac6fc285e45742bebb77f7e0b8a21636f5da643d0a98ec9bb01e272b5c</sum>
        </package>
        <package name="podman-tests" version="3.0.1" release="13.module_el8.7.0+3297+1eb250cf" epoch="0" arch="s390x" src="podman-3.0.1-13.module_el8.7.0+3297+1eb250cf.src.rpm">
          <filename>podman-tests-3.0.1-13.module_el8.7.0+3297+1eb250cf.s390x.rpm</filename>
          <sum type="sha256">dc79ed10c49dd6385d2139fb0a16713a44519c8d787d058fb3b5d81aee5680d1</sum>
        </package>
        <package name="criu" version="3.15" release="1.module_el8.6.0+3136+bfcd65b6" epoch="0" arch="s390x" src="criu-3.15-1.module_el8.6.0+3136+bfcd65b6.src.rpm">
          <filename>criu-3.15-1.module_el8.6.0+3136+bfcd65b6.s390x.rpm</filename>
          <sum type="sha256">dfbf95768f25dc5aca1595b9c7af598f19ede5e8c4f8bcc75727fd351a9dc788</sum>
        </package>
        <package name="buildah" version="1.19.9" release="6.module_el8.7.0+3297+1eb250cf" epoch="0" arch="s390x" src="buildah-1.19.9-6.module_el8.7.0+3297+1eb250cf.src.rpm">
          <filename>buildah-1.19.9-6.module_el8.7.0+3297+1eb250cf.s390x.rpm</filename>
          <sum type="sha256">e3abe40e1546ac79557adac13ca0d169055342d7abe9054f6466886067da468c</sum>
        </package>
        <package name="podman-remote" version="3.0.1" release="13.module_el8.7.0+3297+1eb250cf" epoch="0" arch="s390x" src="podman-3.0.1-13.module_el8.7.0+3297+1eb250cf.src.rpm">
          <filename>podman-remote-3.0.1-13.module_el8.7.0+3297+1eb250cf.s390x.rpm</filename>
          <sum type="sha256">f16c5a77bcd27b5bd92062b20042b4c4beb2219ab6bf067b250af3c64bf2cd58</sum>
        </package>
        <package name="container-selinux" version="2.189.0" release="1.module_el8.7.0+3297+1eb250cf" epoch="2" arch="noarch" src="container-selinux-2.189.0-1.module_el8.6.0+3336+00d107d5.src.rpm">
          <filename>container-selinux-2.189.0-1.module_el8.7.0+3297+1eb250cf.noarch.rpm</filename>
          <sum type="sha256">f9a51ca8f0600508895259569c3816bb3bb2f1357ccc56053063a5d7a58b1ebb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7541</id>
    <title>Low: redis:6 security, bug fix, and enhancement update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 01:43:09"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>redis:6 security, bug fix, and enhancement update</summary>
    <description>Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.

The following packages have been upgraded to a later upstream version: redis (6.2.7). (BZ#1999873)

Security Fix(es):

* redis: Code injection via Lua script execution environment (CVE-2022-24735)
* redis: Malformed Lua script can crash Redis (CVE-2022-24736)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7541" id="RHSA-2022:7541" type="rhsa" title="RHSA-2022:7541"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24735" id="CVE-2022-24735" type="cve" title="CVE-2022-24735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24736" id="CVE-2022-24736" type="cve" title="CVE-2022-24736"/>
      <reference href="https://bugzilla.redhat.com/2080286" id="2080286" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2080289" id="2080289" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7541.html" id="ALSA-2022:7541" type="self" title="ALSA-2022:7541"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <module name="redis" stream="6" version="8070020221010140112" context="9edba152" arch="s390x"/>
        <package name="redis-devel" version="6.2.7" release="1.module_el8.7.0+3288+a82c1b48" epoch="0" arch="s390x" src="redis-6.2.7-1.module_el8.7.0+3288+a82c1b48.src.rpm">
          <filename>redis-devel-6.2.7-1.module_el8.7.0+3288+a82c1b48.s390x.rpm</filename>
          <sum type="sha256">143a133363e7d96a8d6e48ff89b1da603ab7c3e6c65825c07ad8687145911aec</sum>
        </package>
        <package name="redis-doc" version="6.2.7" release="1.module_el8.7.0+3288+a82c1b48" epoch="0" arch="noarch" src="redis-6.2.7-1.module_el8.7.0+3288+a82c1b48.src.rpm">
          <filename>redis-doc-6.2.7-1.module_el8.7.0+3288+a82c1b48.noarch.rpm</filename>
          <sum type="sha256">7e2788a456459c34391f9ad43639ea0a1979262177ba13bd73b23fc35dc0b52c</sum>
        </package>
        <package name="redis" version="6.2.7" release="1.module_el8.7.0+3288+a82c1b48" epoch="0" arch="s390x" src="redis-6.2.7-1.module_el8.7.0+3288+a82c1b48.src.rpm">
          <filename>redis-6.2.7-1.module_el8.7.0+3288+a82c1b48.s390x.rpm</filename>
          <sum type="sha256">83cc95bbfff0ff1cd94f02e53e50425a5e39285eb9d8fb467a721da639b66e6c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7548</id>
    <title>Low: Image Builder security, bug fix, and enhancement update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 01:36:40"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>Image Builder security, bug fix, and enhancement update</summary>
    <description>Image Builder is a service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood.

Security Fix(es):

* golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7548" id="RHSA-2022:7548" type="rhsa" title="RHSA-2022:7548"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32189" id="CVE-2022-32189" type="cve" title="CVE-2022-32189"/>
      <reference href="https://bugzilla.redhat.com/2113814" id="2113814" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7548.html" id="ALSA-2022:7548" type="self" title="ALSA-2022:7548"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="weldr-client" version="35.5" release="4.el8" epoch="0" arch="s390x" src="weldr-client-35.5-4.el8.src.rpm">
          <filename>weldr-client-35.5-4.el8.s390x.rpm</filename>
          <sum type="sha256">24c1cf0ea1902a1787c2b9068a7749f2357a242b809d5680a6ed46a506abee47</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7558</id>
    <title>Low: wavpack security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 01:29:27"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>wavpack security update</summary>
    <description>WavPack is a completely open audio compression format providing lossless, high-quality lossy and a unique hybrid compression mode. 

Security Fix(es):

* wavpack: Heap out-of-bounds read in WavpackPackSamples() (CVE-2021-44269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7558" id="RHSA-2022:7558" type="rhsa" title="RHSA-2022:7558"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-44269" id="CVE-2021-44269" type="cve" title="CVE-2021-44269"/>
      <reference href="https://bugzilla.redhat.com/2064457" id="2064457" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7558.html" id="ALSA-2022:7558" type="self" title="ALSA-2022:7558"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="wavpack" version="5.1.0" release="16.el8" epoch="0" arch="s390x" src="wavpack-5.1.0-16.el8.src.rpm">
          <filename>wavpack-5.1.0-16.el8.s390x.rpm</filename>
          <sum type="sha256">9f776ac2b76e405120053189af71500949960116ef294d8ff8f4a1334c0fa9ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7581</id>
    <title>Moderate: python38:3.8 and python38-devel:3.8 security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-14 15:20:22"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python38:3.8 and python38-devel:3.8 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. 

Security Fix(es):

* python: mailcap: findmatch() function does not sanitize the second argument (CVE-2015-20107)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7581" id="RHSA-2022:7581" type="rhsa" title="RHSA-2022:7581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2015-20107" id="CVE-2015-20107" type="cve" title="CVE-2015-20107"/>
      <reference href="https://bugzilla.redhat.com/2075390" id="2075390" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7581.html" id="ALSA-2022:7581" type="self" title="ALSA-2022:7581"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <module name="python38" stream="3.8" version="8070020221108190517" context="a51370e3" arch="s390x"/>
        <package name="python38-scipy" version="1.3.1" release="4.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="scipy-1.3.1-4.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-scipy-1.3.1-4.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">1d6d7820b635f332143f691d85f916c40ed3d8fcbd3466346803caf5611b569f</sum>
        </package>
        <package name="python38-idle" version="3.8.13" release="1.module_el8.7.0+3344+99a6a656" epoch="0" arch="s390x" src="python38-3.8.13-1.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-idle-3.8.13-1.module_el8.7.0+3344+99a6a656.s390x.rpm</filename>
          <sum type="sha256">25d1e0dad953267b634ff1d8cce09e0879adc0b815e3387d6b0deb5e64d0446d</sum>
        </package>
        <package name="python38-psycopg2" version="2.8.4" release="4.module_el8.7.0+3344+99a6a656" epoch="0" arch="s390x" src="python-psycopg2-2.8.4-4.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-psycopg2-2.8.4-4.module_el8.7.0+3344+99a6a656.s390x.rpm</filename>
          <sum type="sha256">30db40e718410952d3168ec995a3a3e6a88afa5543f3b1f2d2ee69ebfbacb49d</sum>
        </package>
        <package name="python38" version="3.8.13" release="1.module_el8.7.0+3344+99a6a656" epoch="0" arch="s390x" src="python38-3.8.13-1.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-3.8.13-1.module_el8.7.0+3344+99a6a656.s390x.rpm</filename>
          <sum type="sha256">31c22fce7bedb01375177d0c994bf187ac4c158078f18ccf1222166c6969f632</sum>
        </package>
        <package name="python38-jinja2" version="2.11.3" release="1.module_el8.7.0+3344+99a6a656" epoch="0" arch="noarch" src="python-jinja2-2.11.3-1.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-jinja2-2.11.3-1.module_el8.7.0+3344+99a6a656.noarch.rpm</filename>
          <sum type="sha256">65f05e5ed7e1f7c21b8cdb919d8ad743417c596227acb6b504d8495f6af8db4f</sum>
        </package>
        <package name="python38-pyyaml" version="5.4.1" release="1.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="PyYAML-5.4.1-1.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-pyyaml-5.4.1-1.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">70a32bae16b374e4ec238a9fd23d4a57f36df2786a18231fe0b431925278fc98</sum>
        </package>
        <package name="python38-devel" version="3.8.13" release="1.module_el8.7.0+3344+99a6a656" epoch="0" arch="s390x" src="python38-3.8.13-1.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-devel-3.8.13-1.module_el8.7.0+3344+99a6a656.s390x.rpm</filename>
          <sum type="sha256">72cebb4a7a5788164f914db82ba580c224df9f18f095cf5dfce7badedb8d4ce4</sum>
        </package>
        <package name="python38-pip" version="19.3.1" release="6.module_el8.7.0+3344+99a6a656" epoch="0" arch="noarch" src="python3x-pip-19.3.1-6.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-pip-19.3.1-6.module_el8.7.0+3344+99a6a656.noarch.rpm</filename>
          <sum type="sha256">74ddf13a354d40775b394ae0e723b1d794d70c8c4f0ab1b48ba2f3d299c259b2</sum>
        </package>
        <package name="python38-psutil" version="5.6.4" release="4.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="python-psutil-5.6.4-4.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-psutil-5.6.4-4.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">7a32568dcb13525ef3a54999d5d6022761e68246dbc5327a8c52e8cea96ac30f</sum>
        </package>
        <package name="python38-libs" version="3.8.13" release="1.module_el8.7.0+3344+99a6a656" epoch="0" arch="s390x" src="python38-3.8.13-1.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-libs-3.8.13-1.module_el8.7.0+3344+99a6a656.s390x.rpm</filename>
          <sum type="sha256">7adda1137ac8b5e1d969182ed1d1490093332e081508852f235aa48115735d06</sum>
        </package>
        <package name="python38-debug" version="3.8.13" release="1.module_el8.7.0+3344+99a6a656" epoch="0" arch="s390x" src="python38-3.8.13-1.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-debug-3.8.13-1.module_el8.7.0+3344+99a6a656.s390x.rpm</filename>
          <sum type="sha256">80cba1aa104e75d50e68cb3cc3bccac1ec26fba3a3bac32295966daf589db03e</sum>
        </package>
        <package name="python38-tkinter" version="3.8.13" release="1.module_el8.7.0+3344+99a6a656" epoch="0" arch="s390x" src="python38-3.8.13-1.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-tkinter-3.8.13-1.module_el8.7.0+3344+99a6a656.s390x.rpm</filename>
          <sum type="sha256">acff9614bcb9906e18ba55918ac4b980ab37ec559054dfc6bd6eae6de4588834</sum>
        </package>
        <package name="python38-cffi" version="1.13.2" release="3.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="python-cffi-1.13.2-3.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-cffi-1.13.2-3.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">b34229e6288a56b9976d01b3f297bc8b4fedf6c1a14716687dc4632a24d5369a</sum>
        </package>
        <package name="python38-psycopg2-doc" version="2.8.4" release="4.module_el8.7.0+3344+99a6a656" epoch="0" arch="s390x" src="python-psycopg2-2.8.4-4.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-psycopg2-doc-2.8.4-4.module_el8.7.0+3344+99a6a656.s390x.rpm</filename>
          <sum type="sha256">baf86e5160816eb2e8f2bf04d47041e6b3e44b64e3f596897a65d41ad3a6dbc4</sum>
        </package>
        <package name="python38-cryptography" version="2.8" release="3.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="python-cryptography-2.8-3.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-cryptography-2.8-3.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">c11ed086ba644d0143cd534d4990e790f907a66482da70752528a45f14289f10</sum>
        </package>
        <package name="python38-psycopg2-tests" version="2.8.4" release="4.module_el8.7.0+3344+99a6a656" epoch="0" arch="s390x" src="python-psycopg2-2.8.4-4.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-psycopg2-tests-2.8.4-4.module_el8.7.0+3344+99a6a656.s390x.rpm</filename>
          <sum type="sha256">c1e089d3030080f30316251830f59bc6fcd22b63ea830a68e88121af77b3ad41</sum>
        </package>
        <package name="python38-numpy" version="1.17.3" release="6.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="numpy-1.17.3-6.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-numpy-1.17.3-6.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">c809f45c93a9ef3caf2163524cafd253b08685c2854354b09933b4cbf88d4c97</sum>
        </package>
        <package name="python38-Cython" version="0.29.14" release="4.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="Cython-0.29.14-4.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-Cython-0.29.14-4.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">c8e257796e097667f73bdfb94f0b28a681d5cdf71fdc1b96f1a39d0159912c44</sum>
        </package>
        <package name="python38-test" version="3.8.13" release="1.module_el8.7.0+3344+99a6a656" epoch="0" arch="s390x" src="python38-3.8.13-1.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-test-3.8.13-1.module_el8.7.0+3344+99a6a656.s390x.rpm</filename>
          <sum type="sha256">d843c17fc8562249323824badbfdb16cc979d3b0657d8b3995d5edaa67ad2839</sum>
        </package>
        <package name="python38-markupsafe" version="1.1.1" release="6.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="python-markupsafe-1.1.1-6.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-markupsafe-1.1.1-6.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">dde3e871e78ef455929f983e9dc8bd23504f64efac25ca963276ea0f06947c46</sum>
        </package>
        <package name="python38-mod_wsgi" version="4.6.8" release="4.module_el8.7.0+3344+99a6a656" epoch="0" arch="s390x" src="mod_wsgi-4.6.8-4.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-mod_wsgi-4.6.8-4.module_el8.7.0+3344+99a6a656.s390x.rpm</filename>
          <sum type="sha256">e76b00dc2331143d0185c2ad8c30e0cd4542d83984ac1bfab9a71f180d8b22f0</sum>
        </package>
        <package name="python38-rpm-macros" version="3.8.13" release="1.module_el8.7.0+3344+99a6a656" epoch="0" arch="noarch" src="python38-3.8.13-1.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-rpm-macros-3.8.13-1.module_el8.7.0+3344+99a6a656.noarch.rpm</filename>
          <sum type="sha256">e87250d7cc2fd497eb07fa2a9aea8c48acc8c047871bdaa67301538938593636</sum>
        </package>
        <package name="python38-lxml" version="4.4.1" release="7.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="python-lxml-4.4.1-7.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-lxml-4.4.1-7.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">f5fb51b73bf02fc264e24d5940eadc2644c978ae7ce30f8ee844b11f6e4cd4df</sum>
        </package>
        <package name="python38-pip-wheel" version="19.3.1" release="6.module_el8.7.0+3344+99a6a656" epoch="0" arch="noarch" src="python3x-pip-19.3.1-6.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-pip-wheel-19.3.1-6.module_el8.7.0+3344+99a6a656.noarch.rpm</filename>
          <sum type="sha256">f79a89f3b2d4d0230e89c14c66807a9f5e579d503056a5a3a7069f20574e22d1</sum>
        </package>
        <package name="python38-numpy-f2py" version="1.17.3" release="6.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="numpy-1.17.3-6.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-numpy-f2py-1.17.3-6.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">fe62b9c13128772672df4a275edbcaa6238bbb16edb3e67f12fb85b82a39c4c9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7583</id>
    <title>Moderate: xorg-x11-server and xorg-x11-server-Xwayland security and bug fix update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 01:19:50"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server and xorg-x11-server-Xwayland security and bug fix update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

* xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access (CVE-2022-2319)
* xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension (CVE-2022-2320)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7583" id="RHSA-2022:7583" type="rhsa" title="RHSA-2022:7583"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2319" id="CVE-2022-2319" type="cve" title="CVE-2022-2319"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2320" id="CVE-2022-2320" type="cve" title="CVE-2022-2320"/>
      <reference href="https://bugzilla.redhat.com/2106671" id="2106671" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106683" id="2106683" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7583.html" id="ALSA-2022:7583" type="self" title="ALSA-2022:7583"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="xorg-x11-server-Xephyr" version="1.20.11" release="9.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-9.el8.src.rpm">
          <filename>xorg-x11-server-Xephyr-1.20.11-9.el8.s390x.rpm</filename>
          <sum type="sha256">07ec49ed292c31b79298cb08ee0d8633dd5e809c6f5115b6104ff2785e7cc120</sum>
        </package>
        <package name="xorg-x11-server-common" version="1.20.11" release="9.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-9.el8.src.rpm">
          <filename>xorg-x11-server-common-1.20.11-9.el8.s390x.rpm</filename>
          <sum type="sha256">5f05ee6ee47742f3a7d400f989671cf6d4eb4b19d03dbadd5330411cd6427816</sum>
        </package>
        <package name="xorg-x11-server-Xorg" version="1.20.11" release="9.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-9.el8.src.rpm">
          <filename>xorg-x11-server-Xorg-1.20.11-9.el8.s390x.rpm</filename>
          <sum type="sha256">7e10c1a8164df7a5bc94e0e5368e8e07b38cf4a3eab95862c7fe46cc335b0257</sum>
        </package>
        <package name="xorg-x11-server-Xwayland" version="21.1.3" release="6.el8" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-21.1.3-6.el8.src.rpm">
          <filename>xorg-x11-server-Xwayland-21.1.3-6.el8.s390x.rpm</filename>
          <sum type="sha256">9af26351635a3fd0043ba8afdc2e2626619496620a9ab408b6897342374be032</sum>
        </package>
        <package name="xorg-x11-server-Xdmx" version="1.20.11" release="9.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-9.el8.src.rpm">
          <filename>xorg-x11-server-Xdmx-1.20.11-9.el8.s390x.rpm</filename>
          <sum type="sha256">a2bb4085fab8e2d3ed0033605b2d020a72800af55ccff01b765121eb8a8983b9</sum>
        </package>
        <package name="xorg-x11-server-Xnest" version="1.20.11" release="9.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-9.el8.src.rpm">
          <filename>xorg-x11-server-Xnest-1.20.11-9.el8.s390x.rpm</filename>
          <sum type="sha256">a4a00e144e5d447a07438e89630de92057f6328dc8320a4de599087fe64d4a8e</sum>
        </package>
        <package name="xorg-x11-server-Xvfb" version="1.20.11" release="9.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-9.el8.src.rpm">
          <filename>xorg-x11-server-Xvfb-1.20.11-9.el8.s390x.rpm</filename>
          <sum type="sha256">a707f7f7d8e0e501bc3dbb6c26a3a642b7b65b2b7b717eb6f9f53aef4dc1cf15</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7585</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 01:13:26"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: Denial of Service via crafted TIFF file (CVE-2022-0561)
* libtiff: Null source pointer lead to Denial of Service via crafted TIFF file (CVE-2022-0562)
* libtiff: reachable assertion (CVE-2022-0865)
* libtiff: Out-of-bounds Read error in tiffcp (CVE-2022-0924)
* libtiff: stack-buffer-overflow in tiffcp.c in main() (CVE-2022-1355)
* libtiff: out-of-bounds read in _TIFFmemcpy() in tif_unix.c (CVE-2022-22844)
* libtiff: heap buffer overflow in extractImageSection (CVE-2022-0891)
* tiff: Null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() in tif_dirread.c (CVE-2022-0908)
* tiff: Divide By Zero error in tiffcrop (CVE-2022-0909)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7585" id="RHSA-2022:7585" type="rhsa" title="RHSA-2022:7585"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0561" id="CVE-2022-0561" type="cve" title="CVE-2022-0561"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0562" id="CVE-2022-0562" type="cve" title="CVE-2022-0562"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0865" id="CVE-2022-0865" type="cve" title="CVE-2022-0865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0891" id="CVE-2022-0891" type="cve" title="CVE-2022-0891"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0908" id="CVE-2022-0908" type="cve" title="CVE-2022-0908"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0909" id="CVE-2022-0909" type="cve" title="CVE-2022-0909"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0924" id="CVE-2022-0924" type="cve" title="CVE-2022-0924"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1355" id="CVE-2022-1355" type="cve" title="CVE-2022-1355"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22844" id="CVE-2022-22844" type="cve" title="CVE-2022-22844"/>
      <reference href="https://bugzilla.redhat.com/2042603" id="2042603" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2054494" id="2054494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2054495" id="2054495" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064145" id="2064145" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064146" id="2064146" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064148" id="2064148" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064406" id="2064406" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064411" id="2064411" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074415" id="2074415" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7585.html" id="ALSA-2022:7585" type="self" title="ALSA-2022:7585"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="libtiff" version="4.0.9" release="23.el8" epoch="0" arch="s390x" src="libtiff-4.0.9-23.el8.src.rpm">
          <filename>libtiff-4.0.9-23.el8.s390x.rpm</filename>
          <sum type="sha256">10286efe88b206eb871008f9bd904ac8ea3119e386748ae1ecaf5db273d91e7c</sum>
        </package>
        <package name="libtiff-devel" version="4.0.9" release="23.el8" epoch="0" arch="s390x" src="libtiff-4.0.9-23.el8.src.rpm">
          <filename>libtiff-devel-4.0.9-23.el8.s390x.rpm</filename>
          <sum type="sha256">2feef590fccb0c2bc88ee556507938e194580b785cfca2439c0c43272794d659</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7592</id>
    <title>Moderate: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-14 14:01:20"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: mailcap: findmatch() function does not sanitize the second argument (CVE-2015-20107)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7592" id="RHSA-2022:7592" type="rhsa" title="RHSA-2022:7592"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2015-20107" id="CVE-2015-20107" type="cve" title="CVE-2015-20107"/>
      <reference href="https://bugzilla.redhat.com/2075390" id="2075390" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7592.html" id="ALSA-2022:7592" type="self" title="ALSA-2022:7592"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <module name="python39" stream="3.9" version="8070020221108190631" context="0a5380d9" arch="s390x"/>
        <package name="python39-idle" version="3.9.13" release="1.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python39-3.9.13-1.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-idle-3.9.13-1.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">1823f807dc2ff908dca1812f140715c349a0d244f8231547e28cef3e2e3e9d4c</sum>
        </package>
        <package name="python39-scipy" version="1.5.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="scipy-1.5.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-scipy-1.5.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">29c1816d1b128f5b3a9f8863106cc1a21a9e75b10be7a14561be4ebb36951957</sum>
        </package>
        <package name="python39-tkinter" version="3.9.13" release="1.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python39-3.9.13-1.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-tkinter-3.9.13-1.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">33df7fc52e858b1d4c0b1cb3438bb0a563d1e533b52a72819292aa3a85670bf4</sum>
        </package>
        <package name="python39-cryptography" version="3.3.1" release="2.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-cryptography-3.3.1-2.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-cryptography-3.3.1-2.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">56a1136df87128c9c969dff35385bd263b36300d3c30efa3c5110f2cec64c371</sum>
        </package>
        <package name="python39-numpy-f2py" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-f2py-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">56f4a39fc3b7cacfec741e84c3c59e67da9e3b2f122f09e59cac8a8020a4ba7c</sum>
        </package>
        <package name="python39-libs" version="3.9.13" release="1.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python39-3.9.13-1.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-libs-3.9.13-1.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">812690f53e3dba59dedb0bfd51aec396ae7285b568ae7a1632ba84cb02cd1fc9</sum>
        </package>
        <package name="python39-test" version="3.9.13" release="1.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python39-3.9.13-1.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-test-3.9.13-1.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">906e3d6689af3364779596df099e68c99b056f5caa80b0eecff2af23174b7fc2</sum>
        </package>
        <package name="python39-psutil" version="5.8.0" release="4.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9300840b5b4e742063f5617bc74cc2b05b4f3d5bdcd113ee5b3a9745baf3d0dc</sum>
        </package>
        <package name="python39-rpm-macros" version="3.9.13" release="1.module_el8.7.0+3344+df07b58a" epoch="0" arch="noarch" src="python39-3.9.13-1.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-rpm-macros-3.9.13-1.module_el8.7.0+3344+df07b58a.noarch.rpm</filename>
          <sum type="sha256">9c07fe8392fcba9db5f66a285c827a2560306711c4a83eca9ba4493578a4ca33</sum>
        </package>
        <package name="python39-numpy" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9ffe33f6e51a25e79b88e45fa5cdca37a3b77d0868fe40e156f615224308810c</sum>
        </package>
        <package name="python39-psycopg2-tests" version="2.8.6" release="2.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-psycopg2-tests-2.8.6-2.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">aea9e9377b4ce6484c9cab9cc63b725b12a55d4895321eaa422328a4b79bb21b</sum>
        </package>
        <package name="python39-psycopg2" version="2.8.6" release="2.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">b7c35659538650d156ec7273186c4f59fa5fecab60c4ccfd3a93bbe67c0af914</sum>
        </package>
        <package name="python39-psycopg2-doc" version="2.8.6" release="2.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-psycopg2-doc-2.8.6-2.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">b973731de198689b345b74939539b99cd20047bf9b09cd68ab7b166eae5773fe</sum>
        </package>
        <package name="python39-devel" version="3.9.13" release="1.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python39-3.9.13-1.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-devel-3.9.13-1.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">ba6da77d9bd311902ec5a54959a75017f8d8ceb9e03a71ca6a9e0337347bc63e</sum>
        </package>
        <package name="python39" version="3.9.13" release="1.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python39-3.9.13-1.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-3.9.13-1.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">d622a62040ae5922da9cb48d18bfb8cc16509328427360d109b802d67c9c9a3f</sum>
        </package>
        <package name="python39-lxml" version="4.6.5" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">dc2ce0990738ea69e2b3641de1886825066554244cf58815971db30e321b56b2</sum>
        </package>
        <package name="python39-mod_wsgi" version="4.7.1" release="5.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="mod_wsgi-4.7.1-5.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-mod_wsgi-4.7.1-5.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">e45288562bc7c28ad66653998a34bc52fe2539e305ea984f6ebebac9a1c49030</sum>
        </package>
        <package name="python39-cffi" version="1.14.3" release="2.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">ec3acbe8ceecf82559556caacd8c41e2b40e69348f2e6893f0b7598aa36371fd</sum>
        </package>
        <package name="python39-pyyaml" version="5.4.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="PyYAML-5.4.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pyyaml-5.4.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">faa90d54ace8329c64942f01e18434bce14edf19cc3a534ae07de7bc301cd27f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7593</id>
    <title>Moderate: python27:2.7 security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 01:06:03"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python27:2.7 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing.

Security Fix(es):

* python: mailcap: findmatch() function does not sanitize the second argument (CVE-2015-20107).

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7593" id="RHSA-2022:7593" type="rhsa" title="RHSA-2022:7593"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2015-20107" id="CVE-2015-20107" type="cve" title="CVE-2015-20107"/>
      <reference href="https://bugzilla.redhat.com/2075390" id="2075390" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7593.html" id="ALSA-2022:7593" type="self" title="ALSA-2022:7593"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <module name="python27" stream="2.7" version="8060020220421123549" context="182f7c73" arch="s390x"/>
        <package name="python2-tkinter" version="2.7.18" release="11.module_el8.7.0+3331+6c5bd851.alma" epoch="0" arch="s390x" src="python2-2.7.18-11.module_el8.7.0+3331+6c5bd851.alma.src.rpm">
          <filename>python2-tkinter-2.7.18-11.module_el8.7.0+3331+6c5bd851.alma.s390x.rpm</filename>
          <sum type="sha256">16889aea6d6e3b5f1f57e903f5158806d864f78a3fc88fd3d3c0f3909c9c7dc1</sum>
        </package>
        <package name="python2-Cython" version="0.28.1" release="7.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="Cython-0.28.1-7.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-Cython-0.28.1-7.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">33e5c6fee3819774cc5605ac9884d333321fd0e18a2e6ad15bd4cc626854bf92</sum>
        </package>
        <package name="python2-lxml" version="4.2.3" release="6.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-lxml-4.2.3-6.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-lxml-4.2.3-6.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">34d05166229eef26e630797e84fd32f0aa76104895186ba2de4852d1931449c2</sum>
        </package>
        <package name="python2-tools" version="2.7.18" release="11.module_el8.7.0+3331+6c5bd851.alma" epoch="0" arch="s390x" src="python2-2.7.18-11.module_el8.7.0+3331+6c5bd851.alma.src.rpm">
          <filename>python2-tools-2.7.18-11.module_el8.7.0+3331+6c5bd851.alma.s390x.rpm</filename>
          <sum type="sha256">3888ee24965829b318c5b5c4f0f0e3b4c6d272e0acdef3b45e248643db6120c4</sum>
        </package>
        <package name="python2-markupsafe" version="0.23" release="19.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-markupsafe-0.23-19.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-markupsafe-0.23-19.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">4df63f354ef866a6834b7ae6bbf00de4e90db40a23c0175d0a8e091f46c3831b</sum>
        </package>
        <package name="python2-numpy-f2py" version="1.14.2" release="16.module_el8.6.0+3162+01a09e5a" epoch="1" arch="s390x" src="numpy-1.14.2-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-numpy-f2py-1.14.2-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">5122909fad88771bdc7f253154548be55681207a76858df98d83aee4c019fb99</sum>
        </package>
        <package name="python-psycopg2-doc" version="2.7.5" release="7.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-7.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python-psycopg2-doc-2.7.5-7.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">5244c8d18dfd502b39b8ef31626e36d7fad138955a3e659b6a0aa1f41c37e45b</sum>
        </package>
        <package name="python2-psycopg2-tests" version="2.7.5" release="7.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-7.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-psycopg2-tests-2.7.5-7.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">5531ddd2cf70dd5de39bd273d89c0cbb56da7a0b546589c5cd1a4f68d21546d2</sum>
        </package>
        <package name="python2-test" version="2.7.18" release="11.module_el8.7.0+3331+6c5bd851.alma" epoch="0" arch="s390x" src="python2-2.7.18-11.module_el8.7.0+3331+6c5bd851.alma.src.rpm">
          <filename>python2-test-2.7.18-11.module_el8.7.0+3331+6c5bd851.alma.s390x.rpm</filename>
          <sum type="sha256">5d16f2361738101e5c49a0597ee73e2711d1c7ad2ef3665e58d3b5ba5b6afa64</sum>
        </package>
        <package name="python2-pymongo" version="3.7.0" release="1.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">6b7bcb16061d074203f3da5d62159766e919e5fc57ef7c9df634c2d56dbe44e1</sum>
        </package>
        <package name="python2-scipy" version="1.0.0" release="21.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="scipy-1.0.0-21.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-scipy-1.0.0-21.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">81de1440a78869d680e428d1a0bca31199b203067f1d24c27c6676507af7c68f</sum>
        </package>
        <package name="python2-psycopg2-debug" version="2.7.5" release="7.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-7.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-psycopg2-debug-2.7.5-7.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">83fda0ce9cab16410651f67b969d7a8bd6bdeeb57844f48416c137e5a2490135</sum>
        </package>
        <package name="python2-numpy" version="1.14.2" release="16.module_el8.6.0+3162+01a09e5a" epoch="1" arch="s390x" src="numpy-1.14.2-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-numpy-1.14.2-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">852f2d82ccc6de54efa8bf6c6dcf9ede79257d3aa5144c12fc290d43e20b4ab1</sum>
        </package>
        <package name="python2-sqlalchemy" version="1.3.2" release="2.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-sqlalchemy-1.3.2-2.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-sqlalchemy-1.3.2-2.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">854347b4f4c344b9ee4f49435eb2f75b9be1a134ed76388c16d4affae402f809</sum>
        </package>
        <package name="python2-backports" version="1.0" release="16.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-backports-1.0-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-backports-1.0-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">8ce54e96fff1eff1c45e38503fc221bb6e8866180e9e558fe581fa8cc4059796</sum>
        </package>
        <package name="python2-pymongo-gridfs" version="3.7.0" release="1.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-pymongo-gridfs-3.7.0-1.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">b28d3022855edc1cc4a549f1d3ce67a23d2da958f852bbf7821b325e67895d64</sum>
        </package>
        <package name="python2-devel" version="2.7.18" release="11.module_el8.7.0+3331+6c5bd851.alma" epoch="0" arch="s390x" src="python2-2.7.18-11.module_el8.7.0+3331+6c5bd851.alma.src.rpm">
          <filename>python2-devel-2.7.18-11.module_el8.7.0+3331+6c5bd851.alma.s390x.rpm</filename>
          <sum type="sha256">bab30a8b59830047cac4e1aa83dc8b0d62d55e8adf8b7bfb9e9fa9c06bddc54c</sum>
        </package>
        <package name="python2" version="2.7.18" release="11.module_el8.7.0+3331+6c5bd851.alma" epoch="0" arch="s390x" src="python2-2.7.18-11.module_el8.7.0+3331+6c5bd851.alma.src.rpm">
          <filename>python2-2.7.18-11.module_el8.7.0+3331+6c5bd851.alma.s390x.rpm</filename>
          <sum type="sha256">cf3ec278ee63cb565fd9fcc226ecefc07bbd861361aee07d979bddce7064e088</sum>
        </package>
        <package name="python2-debug" version="2.7.18" release="11.module_el8.7.0+3331+6c5bd851.alma" epoch="0" arch="s390x" src="python2-2.7.18-11.module_el8.7.0+3331+6c5bd851.alma.src.rpm">
          <filename>python2-debug-2.7.18-11.module_el8.7.0+3331+6c5bd851.alma.s390x.rpm</filename>
          <sum type="sha256">d82809616a35064432cc384618e98148f79325c8ed54d546acb5c7c6afbf1a18</sum>
        </package>
        <package name="python2-bson" version="3.7.0" release="1.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-bson-3.7.0-1.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">de74cd7b4f4870f2bac803f8a8aeca7062cc342d4bf9533f9939bf03f306ebfb</sum>
        </package>
        <package name="python2-psycopg2" version="2.7.5" release="7.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-7.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-psycopg2-2.7.5-7.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">dfef98c52b1b501aac8ea1b769a1db7cca4665eb671e41f824cd894346493e6b</sum>
        </package>
        <package name="python2-coverage" version="4.5.1" release="4.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-coverage-4.5.1-4.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-coverage-4.5.1-4.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">e24b9859ffcdb0d4bd5c3bc2ad9395b0aa55175b96fd08d2a7ae4b026d2ee0ed</sum>
        </package>
        <package name="python2-libs" version="2.7.18" release="11.module_el8.7.0+3331+6c5bd851.alma" epoch="0" arch="s390x" src="python2-2.7.18-11.module_el8.7.0+3331+6c5bd851.alma.src.rpm">
          <filename>python2-libs-2.7.18-11.module_el8.7.0+3331+6c5bd851.alma.s390x.rpm</filename>
          <sum type="sha256">fbd43901d5e0b6b43a8b56938309b29185750e1ec7f8399a634835ff144fb94f</sum>
        </package>
        <package name="python2-pyyaml" version="3.12" release="16.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="PyYAML-3.12-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-pyyaml-3.12-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">fd83c9d2f395a877fc6cc657333bc13305e5d5ebe62c39ec0e2040e8e36542e7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7594</id>
    <title>Moderate: poppler security and bug fix update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 23:27:03"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security and bug fix update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

* poppler: A logic error in the Hints::Hints function can cause denial of service (CVE-2022-27337)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7594" id="RHSA-2022:7594" type="rhsa" title="RHSA-2022:7594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27337" id="CVE-2022-27337" type="cve" title="CVE-2022-27337"/>
      <reference href="https://bugzilla.redhat.com/2087190" id="2087190" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7594.html" id="ALSA-2022:7594" type="self" title="ALSA-2022:7594"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="poppler-glib" version="20.11.0" release="5.el8" epoch="0" arch="s390x" src="poppler-20.11.0-5.el8.src.rpm">
          <filename>poppler-glib-20.11.0-5.el8.s390x.rpm</filename>
          <sum type="sha256">324cc7746fdfbfbdb8e2352a09248cb3df293551c14811bc0ce9cd2f049c5b4a</sum>
        </package>
        <package name="poppler-utils" version="20.11.0" release="5.el8" epoch="0" arch="s390x" src="poppler-20.11.0-5.el8.src.rpm">
          <filename>poppler-utils-20.11.0-5.el8.s390x.rpm</filename>
          <sum type="sha256">6d4b65b738516eff794b525d7ee969eda235955e0e395e90ad5559718492c3d8</sum>
        </package>
        <package name="poppler-qt5" version="20.11.0" release="5.el8" epoch="0" arch="s390x" src="poppler-20.11.0-5.el8.src.rpm">
          <filename>poppler-qt5-20.11.0-5.el8.s390x.rpm</filename>
          <sum type="sha256">f627bd11d4a9a1014a17ab985d0d94ceb2d469a33bf88cbec2e46d79121de7d0</sum>
        </package>
        <package name="poppler" version="20.11.0" release="5.el8" epoch="0" arch="s390x" src="poppler-20.11.0-5.el8.src.rpm">
          <filename>poppler-20.11.0-5.el8.s390x.rpm</filename>
          <sum type="sha256">febdea39d2b88d61a9b04cbca37f24868730539dc9af80e6555574703f23077d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7618</id>
    <title>Moderate: gstreamer1-plugins-good security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 23:14:47"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gstreamer1-plugins-good security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters that operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.

Security Fix(es):

* gstreamer-plugins-good: Use-after-free in matroska demuxing (CVE-2021-3497)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7618" id="RHSA-2022:7618" type="rhsa" title="RHSA-2022:7618"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3497" id="CVE-2021-3497" type="cve" title="CVE-2021-3497"/>
      <reference href="https://bugzilla.redhat.com/1945339" id="1945339" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7618.html" id="ALSA-2022:7618" type="self" title="ALSA-2022:7618"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="gstreamer1-plugins-good-gtk" version="1.16.1" release="3.el8" epoch="0" arch="s390x" src="gstreamer1-plugins-good-1.16.1-3.el8.src.rpm">
          <filename>gstreamer1-plugins-good-gtk-1.16.1-3.el8.s390x.rpm</filename>
          <sum type="sha256">6eb4da579737d56077290a0b0d1be68be83fb9acb8238c5b9d3379d6123426cc</sum>
        </package>
        <package name="gstreamer1-plugins-good" version="1.16.1" release="3.el8" epoch="0" arch="s390x" src="gstreamer1-plugins-good-1.16.1-3.el8.src.rpm">
          <filename>gstreamer1-plugins-good-1.16.1-3.el8.s390x.rpm</filename>
          <sum type="sha256">daf1522e73c2ee6cc348786e6147706fd49243bf5382ae1334131ba673c3acdc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7622</id>
    <title>Moderate: unbound security, bug fix, and enhancement update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 23:08:56"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>unbound security, bug fix, and enhancement update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. 

The following packages have been upgraded to a later upstream version: unbound (1.16.2). (BZ#2027735)

Security Fix(es):

* unbound: the novel ghost domain where malicious users to trigger continued resolvability of malicious domain names (CVE-2022-30698)
* unbound: novel ghost domain attack where malicious users to trigger continued resolvability of malicious domain names (CVE-2022-30699)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7622" id="RHSA-2022:7622" type="rhsa" title="RHSA-2022:7622"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30698" id="CVE-2022-30698" type="cve" title="CVE-2022-30698"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30699" id="CVE-2022-30699" type="cve" title="CVE-2022-30699"/>
      <reference href="https://bugzilla.redhat.com/2116725" id="2116725" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2116729" id="2116729" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7622.html" id="ALSA-2022:7622" type="self" title="ALSA-2022:7622"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="unbound" version="1.16.2" release="2.el8" epoch="0" arch="s390x" src="unbound-1.16.2-2.el8.src.rpm">
          <filename>unbound-1.16.2-2.el8.s390x.rpm</filename>
          <sum type="sha256">2d96095310db8037bda9112a74317377af72cce8ed0e7557683110cefc1a2650</sum>
        </package>
        <package name="unbound-libs" version="1.16.2" release="2.el8" epoch="0" arch="s390x" src="unbound-1.16.2-2.el8.src.rpm">
          <filename>unbound-libs-1.16.2-2.el8.s390x.rpm</filename>
          <sum type="sha256">62b8013a8ac6e4e420bcb7838391176d9420d7d471675a33817920e1ab39ebb5</sum>
        </package>
        <package name="unbound-devel" version="1.16.2" release="2.el8" epoch="0" arch="s390x" src="unbound-1.16.2-2.el8.src.rpm">
          <filename>unbound-devel-1.16.2-2.el8.s390x.rpm</filename>
          <sum type="sha256">ae6d92b8e4167b83ef807b35e724594721b25bef7d9daacbd23aaf056766a83d</sum>
        </package>
        <package name="python3-unbound" version="1.16.2" release="2.el8" epoch="0" arch="s390x" src="unbound-1.16.2-2.el8.src.rpm">
          <filename>python3-unbound-1.16.2-2.el8.s390x.rpm</filename>
          <sum type="sha256">c100265de01e7b7478029f1bdd18bcc9ac07a2268e13c37e1287c69c01ee955e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7623</id>
    <title>Moderate: dovecot security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 23:00:27"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dovecot security update</summary>
    <description>Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. 

Security Fix(es):

* dovecot: Privilege escalation when similar master and non-master passdbs are used (CVE-2022-30550)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7623" id="RHSA-2022:7623" type="rhsa" title="RHSA-2022:7623"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30550" id="CVE-2022-30550" type="cve" title="CVE-2022-30550"/>
      <reference href="https://bugzilla.redhat.com/2105070" id="2105070" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7623.html" id="ALSA-2022:7623" type="self" title="ALSA-2022:7623"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="dovecot" version="2.3.16" release="3.el8" epoch="1" arch="s390x" src="dovecot-2.3.16-3.el8.src.rpm">
          <filename>dovecot-2.3.16-3.el8.s390x.rpm</filename>
          <sum type="sha256">435d57eed59a10c86e22d5793e71e603e2f4d4b6a34a8a2d1eb42ef82e096974</sum>
        </package>
        <package name="dovecot-pigeonhole" version="2.3.16" release="3.el8" epoch="1" arch="s390x" src="dovecot-2.3.16-3.el8.src.rpm">
          <filename>dovecot-pigeonhole-2.3.16-3.el8.s390x.rpm</filename>
          <sum type="sha256">78ee7a3494d9198d3af2f7c01095083a6f24f1efc7cdf35f98ed2a82b639abf8</sum>
        </package>
        <package name="dovecot-pgsql" version="2.3.16" release="3.el8" epoch="1" arch="s390x" src="dovecot-2.3.16-3.el8.src.rpm">
          <filename>dovecot-pgsql-2.3.16-3.el8.s390x.rpm</filename>
          <sum type="sha256">e278a8161d2e54a864e3a53aad16971adb91baf3da4077c2ab0a666f75452af5</sum>
        </package>
        <package name="dovecot-mysql" version="2.3.16" release="3.el8" epoch="1" arch="s390x" src="dovecot-2.3.16-3.el8.src.rpm">
          <filename>dovecot-mysql-2.3.16-3.el8.s390x.rpm</filename>
          <sum type="sha256">eb65b402824e0e25f1c16c6b6380e672374f7f7d88ccfada84c3bfffd85085f5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7624</id>
    <title>Moderate: php:8.0 security, bug fix, and enhancement update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2023-01-03 12:15:28"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>php:8.0 security, bug fix, and enhancement update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

The following packages have been upgraded to a later upstream version: php (8.0.20). (BZ#2100876)

Security Fix(es):

* php: Use after free due to php_filter_float() failing for ints (CVE-2021-21708)
* php: Uninitialized array in pg_query_params() leading to RCE (CVE-2022-31625)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7624" id="RHSA-2022:7624" type="rhsa" title="RHSA-2022:7624"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-21708" id="CVE-2021-21708" type="cve" title="CVE-2021-21708"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31625" id="CVE-2022-31625" type="cve" title="CVE-2022-31625"/>
      <reference href="https://bugzilla.redhat.com/2055879" id="2055879" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2098521" id="2098521" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7624.html" id="ALSA-2022:7624" type="self" title="ALSA-2022:7624"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <module name="php" stream="8.0" version="8060020220701053234" context="4c984ee0" arch="s390x"/>
        <package name="php-dba" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-dba-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">032210bf541424bc1d1308ea8660c76c61aa419a619bc5bc23c40752f97d0916</sum>
        </package>
        <package name="php-gmp" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-gmp-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">049a4160948b713f799743ba0f7b4d3409502697f3f1418916bee2b257279b6c</sum>
        </package>
        <package name="php-embedded" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-embedded-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">16fb9991333297630fb7a9398b588d0ac82b857de5bb81512132f8d376171fe3</sum>
        </package>
        <package name="php-pecl-rrd" version="2.0.3" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="php-pecl-rrd-2.0.3-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>php-pecl-rrd-2.0.3-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">1815b836403954c7082e11cd6249dc3342bd651cc381b3f165c199c6a22b203d</sum>
        </package>
        <package name="php-snmp" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-snmp-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">218beae3947affeba2d5d5ff0afca630b00bbecbe9d63437d5e221fbdd71a93c</sum>
        </package>
        <package name="php-process" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-process-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">44f5cccaaf534a25db0ba963d7c5606e2df8a5758bcf354cb6d31b7db2330363</sum>
        </package>
        <package name="php-ldap" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-ldap-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">4fccb00a65e1af865fef665f277d5cea53881ca933b153c2767dc2f0964cead8</sum>
        </package>
        <package name="libzip" version="1.7.3" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="libzip-1.7.3-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>libzip-1.7.3-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">5962ee62531b91b8d089dda94343f02f6278557e387f3aa076843e7d6ebcec89</sum>
        </package>
        <package name="php-dbg" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-dbg-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">64be167245ff54cc16446553d26ad9aa3c20d5f2140ada2864bdbdeb3e1cdf5f</sum>
        </package>
        <package name="php-pdo" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-pdo-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">66cbc6fa0833e45ea65640d180f062cb6f943d63de6dba4d26dac20937a57d5a</sum>
        </package>
        <package name="php-enchant" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-enchant-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">6a15904ce127503da7d77836f16e406cfb8ed86be2a520bec663fa483e0011a2</sum>
        </package>
        <package name="php-pecl-apcu" version="5.1.20" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.20-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>php-pecl-apcu-5.1.20-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">6a2a352400dc0dfaf36d2e796cf5419699675bcd79fb8833e2b9886e765eb0ca</sum>
        </package>
        <package name="php-pgsql" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-pgsql-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">819c09bcd7aae5f5102252f7b042ce6a20c5c57e5201b85006d9194d6a5af822</sum>
        </package>
        <package name="php-xml" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-xml-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">81f702fed21cc473c173089382e069d5a142b14e014079b75f99b8c1f62c8f28</sum>
        </package>
        <package name="libzip-tools" version="1.7.3" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="libzip-1.7.3-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>libzip-tools-1.7.3-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">82f44435fd17b8150202e9da2ccd129a9337445a3e95f12d0faef344bf26b60d</sum>
        </package>
        <package name="php-gd" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-gd-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">86f1631da8c415d12a26d769c35f7243c41dcb92ff002e9411d78a6eea82b380</sum>
        </package>
        <package name="php-cli" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-cli-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">8ac23337bd0d38f0e1c9e2ed55f05fe8c721406bd3f839728b86bd06593370b9</sum>
        </package>
        <package name="php-mysqlnd" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-mysqlnd-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">8f9d1330d4761ee1e61f1c561fcc968e73cb790c2bedead361ce4e2c961fac4f</sum>
        </package>
        <package name="php-ffi" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-ffi-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">95c222eb9b60d849ce047bcd41dfaa614e787ccee10c734a64462239ba031c9a</sum>
        </package>
        <package name="php-pear" version="1.10.13" release="1.module_el8.6.0+3061+6878dd1b" epoch="1" arch="noarch" src="php-pear-1.10.13-1.module_el8.6.0+3268+b150a051.src.rpm">
          <filename>php-pear-1.10.13-1.module_el8.6.0+3061+6878dd1b.noarch.rpm</filename>
          <sum type="sha256">a6125b26ebd50171e8ae4d26739fb5ef5a060ee3e792572cf092281501a0be9d</sum>
        </package>
        <package name="php-devel" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-devel-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">ac07aa1711b7d36331dc1fa0c70510e5576ec80e4d2741f5b1d356354933f255</sum>
        </package>
        <package name="php-pecl-zip" version="1.19.2" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="php-pecl-zip-1.19.2-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>php-pecl-zip-1.19.2-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">ba120b545a1f35a3c47c106a002c8f5b85137e17a1b438c5222818ac9ecd89a9</sum>
        </package>
        <package name="php-soap" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-soap-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">bed5076fc3505cc7555ad60bd855f328b8b421ddf38061206e5d375506d14d9b</sum>
        </package>
        <package name="php-fpm" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-fpm-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">c598320bde7551521024ed94f6f9648e0780b34cca63803bdb50370adc64d9fe</sum>
        </package>
        <package name="php-common" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-common-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">c9b4763c460c52ecefe6de7992d04ea4c753fbcd8ab3b128556a88826fc92285</sum>
        </package>
        <package name="php-opcache" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-opcache-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">ccd854629b04808e82d1e56c6333a88c11c37c0ef57c241e84d4344909744653</sum>
        </package>
        <package name="php-intl" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-intl-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">ced59fcb29cd201ed2799d83f4fe34d5d9ea51e41a7b5d9b9c5b2ff8f625925a</sum>
        </package>
        <package name="php-pecl-apcu-devel" version="5.1.20" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.20-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>php-pecl-apcu-devel-5.1.20-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">d8b1ca7ae8a8163bf0c24aedde00491313cb3724e4dc44a314ad369de4b944c0</sum>
        </package>
        <package name="php-pecl-xdebug3" version="3.1.2" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="php-pecl-xdebug3-3.1.2-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>php-pecl-xdebug3-3.1.2-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">df908d724c4ed5f547dfd7ba483e35309af5e2089a72a24f2c05ba1ddc9529e8</sum>
        </package>
        <package name="libzip-devel" version="1.7.3" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="libzip-1.7.3-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>libzip-devel-1.7.3-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">e47efaf25e1c9dcaad2fd645d6bf07cc6e4c97e78b3e08594aeb21eff49e3be9</sum>
        </package>
        <package name="php-bcmath" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-bcmath-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">e9b3e3d227d3948809a4646ce8136585825750d6cb5844d1ecbbcfec5edf3598</sum>
        </package>
        <package name="php-mbstring" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-mbstring-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">f2ef75fc563ae206861f9af163166e9e13006da95ae1867f375e3dd4f2ebd45f</sum>
        </package>
        <package name="php-odbc" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-odbc-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">f78c1a7d2e9c2599476d40612ed8b802976effb476dcfba4e18f0e4fe07c5461</sum>
        </package>
        <package name="php" version="8.0.20" release="2.module_el8.7.0+3286+6cee236e" epoch="0" arch="s390x" src="php-8.0.20-2.module_el8.7.0+3286+6cee236e.src.rpm">
          <filename>php-8.0.20-2.module_el8.7.0+3286+6cee236e.s390x.rpm</filename>
          <sum type="sha256">fda1774f1425063480c8081e01d36a1845f0501e8e5dae5025756fee9ccec0b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7628</id>
    <title>Moderate: php:7.4 security, bug fix, and enhancement update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 22:43:30"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>php:7.4 security, bug fix, and enhancement update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

The following packages have been upgraded to a later upstream version: php (7.4.30), php-pear (1.10.13). (BZ#2055422)

Security Fix(es):

* php: Special character breaks path in xml parsing (CVE-2021-21707)
* php: Use after free due to php_filter_float() failing for ints (CVE-2021-21708)
* php-pear: Directory traversal vulnerability (CVE-2021-32610)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7628" id="RHSA-2022:7628" type="rhsa" title="RHSA-2022:7628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-21707" id="CVE-2021-21707" type="cve" title="CVE-2021-21707"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-21708" id="CVE-2021-21708" type="cve" title="CVE-2021-21708"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-32610" id="CVE-2021-32610" type="cve" title="CVE-2021-32610"/>
      <reference href="https://bugzilla.redhat.com/1988558" id="1988558" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2026045" id="2026045" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2055879" id="2055879" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7628.html" id="ALSA-2022:7628" type="self" title="ALSA-2022:7628"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <module name="php" stream="7.4" version="8060020220824162156" context="4c984ee0" arch="s390x"/>
        <package name="php-intl" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-intl-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">09fe783f8aad662161e967a5dfd91bc20a240084cf361e5e19f82a9aa5bb00fd</sum>
        </package>
        <package name="php-pear" version="1.10.13" release="1.module_el8.6.0+3268+b150a051" epoch="1" arch="noarch" src="php-pear-1.10.13-1.module_el8.6.0+3268+b150a051.src.rpm">
          <filename>php-pear-1.10.13-1.module_el8.6.0+3268+b150a051.noarch.rpm</filename>
          <sum type="sha256">0cce4d216b43c4b38de6e0f49d7e0705d81c35d448903204b93b913865a2007c</sum>
        </package>
        <package name="php-dba" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-dba-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">1e8baea3c487229254857ede59d6d3fd62c70f8e162384e288fc66561a570e41</sum>
        </package>
        <package name="php-xml" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-xml-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">20955657c1e23cddb07ac409f6453baec8ff711afe7329783887872ca845abee</sum>
        </package>
        <package name="php-enchant" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-enchant-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">237cc45084f94829c6bbdae8ec7d8e8ad81c25ededeb1f5ccc5256e3338189f3</sum>
        </package>
        <package name="php-pecl-apcu-devel" version="5.1.18" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.18-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pecl-apcu-devel-5.1.18-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">2bd2e6d5e9f3b9a675fe03108c8444fb82eac045a2c0fe6c2d1f24a709c39d33</sum>
        </package>
        <package name="php-bcmath" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-bcmath-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">38943bcc5cdb36c5941805bc6011437b03638166c9c5666d84b67227fcf30d92</sum>
        </package>
        <package name="php-xmlrpc" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-xmlrpc-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">39c0080a034a60217a53481a7528b93d6f6b7b9201ac4b353aa8c453cb14d82b</sum>
        </package>
        <package name="php-snmp" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-snmp-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">3c60a6085bb890906e29ebbb3cf8cb7c279eb8f197f3e6dadaf461681d01159a</sum>
        </package>
        <package name="php-embedded" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-embedded-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">4205d57a1a46016f226422bf3a3003e4d4f8493d162ea8d5c9a02191bc345ac4</sum>
        </package>
        <package name="php" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">47c8712dea6840c69fe4ea727763bcb881103348ce7e3e1b96e0eb5d2d4f06ef</sum>
        </package>
        <package name="libzip-tools" version="1.6.1" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>libzip-tools-1.6.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">4dcd7aacc8eb606c28a6d4707bf2d928045c38a99d7f40e5818bdfd63931d7c0</sum>
        </package>
        <package name="php-json" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-json-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">55b6924d57d34328bf93045509212a7afeb9edb6269b6a040dd5035fff904cac</sum>
        </package>
        <package name="php-cli" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-cli-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">5c0136e1973efd80cf107d95cd7e2d518e71d6affaf9d8ad004b6a4e3fa088f7</sum>
        </package>
        <package name="php-pecl-rrd" version="2.0.1" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-pecl-rrd-2.0.1-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pecl-rrd-2.0.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">5e91b3f33f42fdf8f7e58dc4a81af0f2cf8a51cb967a3803f55a275bb7a2b1f1</sum>
        </package>
        <package name="php-pecl-apcu" version="5.1.18" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.18-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pecl-apcu-5.1.18-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">6a5268e949f13c64c1e1e2d58b6ca9d81f1215941caa92adcf0b40eb6727bf08</sum>
        </package>
        <package name="php-dbg" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-dbg-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">6bfd8349ca82769bd2f35bccfdf0186cfcaeb9478f672aef2de56b723e242b70</sum>
        </package>
        <package name="php-fpm" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-fpm-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">7c7bf0d4a042ca414d28e8c62f19f13fa0a0bc3f3db1841879bea721e2db99c7</sum>
        </package>
        <package name="php-mbstring" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-mbstring-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">7e644737736ddacd1d7ce4bc595d2e8f3cd07c94f4dba853656f649a1487e837</sum>
        </package>
        <package name="php-pecl-zip" version="1.18.2" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-pecl-zip-1.18.2-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pecl-zip-1.18.2-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">801fd66e96d056487f697bb442ce1eba14196571735ca21d7c3e4d5a722c4006</sum>
        </package>
        <package name="php-pecl-xdebug" version="2.9.5" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-pecl-xdebug-2.9.5-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pecl-xdebug-2.9.5-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">864cae889833ed12fd18cf7183adf90631fed1cf2cfe6eb1cbc4e31f2ae6ebee</sum>
        </package>
        <package name="php-ldap" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-ldap-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">8887ecaf343feb74bc364e1fe790a9e5bc7679391350a7512db56a639a2426d6</sum>
        </package>
        <package name="php-gd" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-gd-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">9913901c3f3438c39e17cd2fb039d66282df2f68dc7dfc60bc2f2c79f05190ce</sum>
        </package>
        <package name="libzip" version="1.6.1" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">9a9e43a839757a5b4aea25cc7ffbca0524546f9b9177562674854f7d3c042ed1</sum>
        </package>
        <package name="php-devel" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-devel-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">9cde1baa1e0fab8401e0e6df07c338a1a0748b229326336ad42ab95f15b38b0d</sum>
        </package>
        <package name="libzip-devel" version="1.6.1" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>libzip-devel-1.6.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">a3859fbd79933d7d04d80ad2041fa602d3f20b3cefd633660c5dee5365df1f35</sum>
        </package>
        <package name="php-odbc" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-odbc-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">b7504902bb86b768e9935c87eb54d6c4280eb23234d9e07567a084525617d792</sum>
        </package>
        <package name="php-mysqlnd" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-mysqlnd-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">b8f836a1ffc9bd4832f3dda98006b75f2861b2b7dcb61ef4c85456d773b16f9e</sum>
        </package>
        <package name="php-ffi" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-ffi-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">c5878d22b339a8c591472f70fd74cc2c43f9de04b23f126c43115806bbf12ca5</sum>
        </package>
        <package name="php-soap" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-soap-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">ca040ce7ebd92425fa6173ad084d1c61750689953044508c2200f717cdd8469e</sum>
        </package>
        <package name="php-pgsql" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-pgsql-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">cad112f64848ccbf3f67bd4082310efd8b8bb9858a512601681cf842a8a77cb9</sum>
        </package>
        <package name="php-opcache" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-opcache-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">d31623e2d33066545043a7bc203b10d5999aaad2582b7c227dc9db50e6bd53ea</sum>
        </package>
        <package name="php-process" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-process-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">e451e4b2ba479a3a66c62787c672f555820690fe395023a2c74d604184079715</sum>
        </package>
        <package name="php-gmp" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-gmp-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">f06d3b39d95fddae5b2d3875a97b00efd10c87cf2131fc3ceb69c74ed60183f6</sum>
        </package>
        <package name="php-common" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-common-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">f50d61be9c9bc82c0c2e0b41dc8c7730bed81dfc00130435ccac7174a2ca5794</sum>
        </package>
        <package name="php-pdo" version="7.4.30" release="1.module_el8.7.0+3286+227f3cf0" epoch="0" arch="s390x" src="php-7.4.30-1.module_el8.7.0+3286+227f3cf0.src.rpm">
          <filename>php-pdo-7.4.30-1.module_el8.7.0+3286+227f3cf0.s390x.rpm</filename>
          <sum type="sha256">fc46531e9c84988e3a5bc7dbe5aab56adce17649985f94d59a131ff4b3397a4a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7633</id>
    <title>Moderate: dnsmasq security and bug fix update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 22:32:10"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dnsmasq security and bug fix update</summary>
    <description>The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.

Security Fix(es):

* dnsmasq: Heap use after free in dhcp6_no_relay (CVE-2022-0934)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7633" id="RHSA-2022:7633" type="rhsa" title="RHSA-2022:7633"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0934" id="CVE-2022-0934" type="cve" title="CVE-2022-0934"/>
      <reference href="https://bugzilla.redhat.com/2057075" id="2057075" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7633.html" id="ALSA-2022:7633" type="self" title="ALSA-2022:7633"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="dnsmasq-utils" version="2.79" release="24.el8" epoch="0" arch="s390x" src="dnsmasq-2.79-24.el8.src.rpm">
          <filename>dnsmasq-utils-2.79-24.el8.s390x.rpm</filename>
          <sum type="sha256">58407a692d5db06f92f9e9667855783c6a9ee66c2f63b6f5e7409aeb97d83c2f</sum>
        </package>
        <package name="dnsmasq" version="2.79" release="24.el8" epoch="0" arch="s390x" src="dnsmasq-2.79-24.el8.src.rpm">
          <filename>dnsmasq-2.79-24.el8.s390x.rpm</filename>
          <sum type="sha256">7ab6c0405df447b1cbe38aa24d306b8c74443e5ffb8c36020153c698a663264b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7639</id>
    <title>Moderate: openblas security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 22:18:43"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openblas security update</summary>
    <description>OpenBLAS is an optimized BLAS library based on GotoBLAS2 1.13 BSD version.

Security Fix(es):

* lapack: Out-of-bounds read in *larrv (CVE-2021-4048)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7639" id="RHSA-2022:7639" type="rhsa" title="RHSA-2022:7639"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-4048" id="CVE-2021-4048" type="cve" title="CVE-2021-4048"/>
      <reference href="https://bugzilla.redhat.com/2024358" id="2024358" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7639.html" id="ALSA-2022:7639" type="self" title="ALSA-2022:7639"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="openblas" version="0.3.15" release="4.el8" epoch="0" arch="s390x" src="openblas-0.3.15-4.el8.src.rpm">
          <filename>openblas-0.3.15-4.el8.s390x.rpm</filename>
          <sum type="sha256">2ee5205c472337b4814d8133ff85abe95913a80b94033db4b192384b4b7c8965</sum>
        </package>
        <package name="openblas-threads" version="0.3.15" release="4.el8" epoch="0" arch="s390x" src="openblas-0.3.15-4.el8.src.rpm">
          <filename>openblas-threads-0.3.15-4.el8.s390x.rpm</filename>
          <sum type="sha256">ec7f2a79db0334c78e4141b5d8a0227698000dac4b899d775c5fa9a309fe69da</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7640</id>
    <title>Moderate: mutt security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 22:13:16"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mutt security update</summary>
    <description>Mutt is a low resource, highly configurable, text-based MIME e-mail client. Mutt supports most e-mail storing formats, such as mbox and Maildir, as well as most protocols, including POP3 and IMAP.

Security Fix(es):

* mutt: buffer overflow in uudecoder function (CVE-2022-1328)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7640" id="RHSA-2022:7640" type="rhsa" title="RHSA-2022:7640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1328" id="CVE-2022-1328" type="cve" title="CVE-2022-1328"/>
      <reference href="https://bugzilla.redhat.com/2076058" id="2076058" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7640.html" id="ALSA-2022:7640" type="self" title="ALSA-2022:7640"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="mutt" version="2.0.7" release="2.el8" epoch="5" arch="s390x" src="mutt-2.0.7-2.el8.src.rpm">
          <filename>mutt-2.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">811db32d3ed8fc1f430cb5726ed5c7c4cf159cd5144bba4240b444bd5c8f985a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7643</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 22:00:47"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: DNS forwarders - cache poisoning vulnerability (CVE-2021-25220)
* bind: DoS from specifically crafted TCP packets (CVE-2022-0396)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7643" id="RHSA-2022:7643" type="rhsa" title="RHSA-2022:7643"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-25220" id="CVE-2021-25220" type="cve" title="CVE-2021-25220"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0396" id="CVE-2022-0396" type="cve" title="CVE-2022-0396"/>
      <reference href="https://bugzilla.redhat.com/2064512" id="2064512" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064513" id="2064513" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7643.html" id="ALSA-2022:7643" type="self" title="ALSA-2022:7643"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="bind9.16-libs" version="9.16.23" release="0.9.el8.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.9.el8.1.src.rpm">
          <filename>bind9.16-libs-9.16.23-0.9.el8.1.s390x.rpm</filename>
          <sum type="sha256">0d7516d9fad5e92cdac4c54d5d6738fced21b0d9c4e84f352164a55521fc1866</sum>
        </package>
        <package name="bind9.16-license" version="9.16.23" release="0.9.el8.1" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.9.el8.1.src.rpm">
          <filename>bind9.16-license-9.16.23-0.9.el8.1.noarch.rpm</filename>
          <sum type="sha256">14d82c760a71afc2e9fe5ca729700d723347f568aea57ee0c60d1604d236f903</sum>
        </package>
        <package name="bind9.16-utils" version="9.16.23" release="0.9.el8.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.9.el8.1.src.rpm">
          <filename>bind9.16-utils-9.16.23-0.9.el8.1.s390x.rpm</filename>
          <sum type="sha256">2743a9319c1c908221e94b033dc3661a7c3c33628e82013dff93ff2d4d4bc152</sum>
        </package>
        <package name="bind9.16" version="9.16.23" release="0.9.el8.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.9.el8.1.src.rpm">
          <filename>bind9.16-9.16.23-0.9.el8.1.s390x.rpm</filename>
          <sum type="sha256">c790e5eba610fc6fd73dfc0f6079d68b509ad680378840213ad9d69c2ae3c022</sum>
        </package>
        <package name="bind9.16-chroot" version="9.16.23" release="0.9.el8.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.9.el8.1.src.rpm">
          <filename>bind9.16-chroot-9.16.23-0.9.el8.1.s390x.rpm</filename>
          <sum type="sha256">e9f85e4ea1e8e165a2d8b8f8baa81751f7409c5bd8d0c43b8c8b6e686a382375</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7645</id>
    <title>Low: openjpeg2 security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 21:47:47"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>openjpeg2 security update</summary>
    <description>OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.

Security Fix(es):

* openjpeg: segmentation fault in opj2_decompress due to uninitialized pointer (CVE-2022-1122)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7645" id="RHSA-2022:7645" type="rhsa" title="RHSA-2022:7645"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1122" id="CVE-2022-1122" type="cve" title="CVE-2022-1122"/>
      <reference href="https://bugzilla.redhat.com/2067052" id="2067052" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7645.html" id="ALSA-2022:7645" type="self" title="ALSA-2022:7645"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="openjpeg2-tools" version="2.4.0" release="5.el8" epoch="0" arch="s390x" src="openjpeg2-2.4.0-5.el8.src.rpm">
          <filename>openjpeg2-tools-2.4.0-5.el8.s390x.rpm</filename>
          <sum type="sha256">78938fd9191edc8ba03e9ce8b4782d925e353122cd39d8afc89c975cf095a6f4</sum>
        </package>
        <package name="openjpeg2" version="2.4.0" release="5.el8" epoch="0" arch="s390x" src="openjpeg2-2.4.0-5.el8.src.rpm">
          <filename>openjpeg2-2.4.0-5.el8.s390x.rpm</filename>
          <sum type="sha256">79c7c449fa8faac6d3bca00e389e9aca723f63041a1d22d2b632a91e3ed45cd6</sum>
        </package>
        <package name="openjpeg2-devel-docs" version="2.4.0" release="5.el8" epoch="0" arch="noarch" src="openjpeg2-2.4.0-5.el8.src.rpm">
          <filename>openjpeg2-devel-docs-2.4.0-5.el8.noarch.rpm</filename>
          <sum type="sha256">b39170607980e4e3f5c72b6393e48efa85edfecdf75623c98499cbb2616109bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7647</id>
    <title>Moderate: httpd:2.4 security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 21:41:22"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>httpd:2.4 security update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: mod_sed: Read/write beyond bounds (CVE-2022-23943)
* httpd: mod_lua: Use of uninitialized value of in r:parsebody (CVE-2022-22719)
* httpd: core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody (CVE-2022-22721)
* httpd: mod_proxy_ajp: Possible request smuggling (CVE-2022-26377)
* httpd: mod_lua: DoS in r:parsebody (CVE-2022-29404)
* httpd: mod_sed: DoS vulnerability (CVE-2022-30522)
* httpd: mod_proxy: X-Forwarded-For dropped by hop-by-hop mechanism (CVE-2022-31813)
* httpd: Out-of-bounds read via ap_rwrite() (CVE-2022-28614)
* httpd: Out-of-bounds read in ap_strcmp_match() (CVE-2022-28615)
* httpd: mod_lua: Information disclosure with websockets (CVE-2022-30556)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7647" id="RHSA-2022:7647" type="rhsa" title="RHSA-2022:7647"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22719" id="CVE-2022-22719" type="cve" title="CVE-2022-22719"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22721" id="CVE-2022-22721" type="cve" title="CVE-2022-22721"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-23943" id="CVE-2022-23943" type="cve" title="CVE-2022-23943"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26377" id="CVE-2022-26377" type="cve" title="CVE-2022-26377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28614" id="CVE-2022-28614" type="cve" title="CVE-2022-28614"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28615" id="CVE-2022-28615" type="cve" title="CVE-2022-28615"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29404" id="CVE-2022-29404" type="cve" title="CVE-2022-29404"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30522" id="CVE-2022-30522" type="cve" title="CVE-2022-30522"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30556" id="CVE-2022-30556" type="cve" title="CVE-2022-30556"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31813" id="CVE-2022-31813" type="cve" title="CVE-2022-31813"/>
      <reference href="https://bugzilla.redhat.com/2064319" id="2064319" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064320" id="2064320" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064322" id="2064322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2094997" id="2094997" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2095002" id="2095002" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2095006" id="2095006" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2095012" id="2095012" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2095015" id="2095015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2095018" id="2095018" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2095020" id="2095020" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7647.html" id="ALSA-2022:7647" type="self" title="ALSA-2022:7647"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <module name="httpd" stream="2.4" version="8070020221010123511" context="9edba152" arch="s390x"/>
        <package name="mod_proxy_html" version="2.4.37" release="51.module_el8.7.0+3281+01e58653" epoch="1" arch="s390x" src="httpd-2.4.37-51.module_el8.7.0+3281+01e58653.src.rpm">
          <filename>mod_proxy_html-2.4.37-51.module_el8.7.0+3281+01e58653.s390x.rpm</filename>
          <sum type="sha256">03ebd7d41b7ea4e96a0c180939f37200b981a06dffa46ead348beb55f6a1e6dc</sum>
        </package>
        <package name="httpd-manual" version="2.4.37" release="51.module_el8.7.0+3281+01e58653" epoch="0" arch="noarch" src="httpd-2.4.37-51.module_el8.7.0+3281+01e58653.src.rpm">
          <filename>httpd-manual-2.4.37-51.module_el8.7.0+3281+01e58653.noarch.rpm</filename>
          <sum type="sha256">0cd97552465075dfd022c0bd6d4ac969d921055fbd543d30f5ed6c2f43378584</sum>
        </package>
        <package name="httpd" version="2.4.37" release="51.module_el8.7.0+3281+01e58653" epoch="0" arch="s390x" src="httpd-2.4.37-51.module_el8.7.0+3281+01e58653.src.rpm">
          <filename>httpd-2.4.37-51.module_el8.7.0+3281+01e58653.s390x.rpm</filename>
          <sum type="sha256">764246738095a92f65016f9c306a454bcc2a63580ebb569bab946e32e2d83d37</sum>
        </package>
        <package name="mod_ldap" version="2.4.37" release="51.module_el8.7.0+3281+01e58653" epoch="0" arch="s390x" src="httpd-2.4.37-51.module_el8.7.0+3281+01e58653.src.rpm">
          <filename>mod_ldap-2.4.37-51.module_el8.7.0+3281+01e58653.s390x.rpm</filename>
          <sum type="sha256">84766343e7ad27252a98be834a0cfb8472725bf754155e763f4265b1498261a1</sum>
        </package>
        <package name="httpd-devel" version="2.4.37" release="51.module_el8.7.0+3281+01e58653" epoch="0" arch="s390x" src="httpd-2.4.37-51.module_el8.7.0+3281+01e58653.src.rpm">
          <filename>httpd-devel-2.4.37-51.module_el8.7.0+3281+01e58653.s390x.rpm</filename>
          <sum type="sha256">b424a8cbd8b5a2ff49e599f1fd0042674dcb317aa82c3402386733a858d07952</sum>
        </package>
        <package name="httpd-tools" version="2.4.37" release="51.module_el8.7.0+3281+01e58653" epoch="0" arch="s390x" src="httpd-2.4.37-51.module_el8.7.0+3281+01e58653.src.rpm">
          <filename>httpd-tools-2.4.37-51.module_el8.7.0+3281+01e58653.s390x.rpm</filename>
          <sum type="sha256">beddede9851f1e0dc48770865ea4a65ee422aa6dde2fb7c31858feeded672010</sum>
        </package>
        <package name="mod_ssl" version="2.4.37" release="51.module_el8.7.0+3281+01e58653" epoch="1" arch="s390x" src="httpd-2.4.37-51.module_el8.7.0+3281+01e58653.src.rpm">
          <filename>mod_ssl-2.4.37-51.module_el8.7.0+3281+01e58653.s390x.rpm</filename>
          <sum type="sha256">ccc4846034f2867326cf8a4a0ea3436c1874a9bfea329dd85ba423e1b3fe7391</sum>
        </package>
        <package name="mod_session" version="2.4.37" release="51.module_el8.7.0+3281+01e58653" epoch="0" arch="s390x" src="httpd-2.4.37-51.module_el8.7.0+3281+01e58653.src.rpm">
          <filename>mod_session-2.4.37-51.module_el8.7.0+3281+01e58653.s390x.rpm</filename>
          <sum type="sha256">cda5bfedcd8ecbd6fa74f5d5b3a2c5f1b54a2af4bc928e59b5d20f1b2ab3362c</sum>
        </package>
        <package name="httpd-filesystem" version="2.4.37" release="51.module_el8.7.0+3281+01e58653" epoch="0" arch="noarch" src="httpd-2.4.37-51.module_el8.7.0+3281+01e58653.src.rpm">
          <filename>httpd-filesystem-2.4.37-51.module_el8.7.0+3281+01e58653.noarch.rpm</filename>
          <sum type="sha256">da54bbf61cbf677cc198efb89651ab45c00796962dd6d3c1902ca2b08545f758</sum>
        </package>
        <package name="mod_md" version="2.0.8" release="8.module_el8.6.0+3031+fb177b09" epoch="1" arch="s390x" src="mod_md-2.0.8-8.module_el8.6.0+3031+fb177b09.src.rpm">
          <filename>mod_md-2.0.8-8.module_el8.6.0+3031+fb177b09.s390x.rpm</filename>
          <sum type="sha256">e47754aea99df8718074dd3d1df288b448b0af9d0ba4f0f8c6a3b5c8a164a1a7</sum>
        </package>
        <package name="mod_http2" version="1.15.7" release="5.module_el8.6.0+3031+fb177b09" epoch="0" arch="s390x" src="mod_http2-1.15.7-5.module_el8.6.0+3031+fb177b09.src.rpm">
          <filename>mod_http2-1.15.7-5.module_el8.6.0+3031+fb177b09.s390x.rpm</filename>
          <sum type="sha256">e8187fd68cc4d43ebb70e094da2d353e580a7da3f03882c5c03f6dce81d7fac5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7648</id>
    <title>Moderate: grafana-pcp security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 21:33:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grafana-pcp security update</summary>
    <description>The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.

Security Fix(es):

* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)
* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)
* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)
* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)
* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)
* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7648" id="RHSA-2022:7648" type="rhsa" title="RHSA-2022:7648"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1705" id="CVE-2022-1705" type="cve" title="CVE-2022-1705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30630" id="CVE-2022-30630" type="cve" title="CVE-2022-30630"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30631" id="CVE-2022-30631" type="cve" title="CVE-2022-30631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30632" id="CVE-2022-30632" type="cve" title="CVE-2022-30632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30635" id="CVE-2022-30635" type="cve" title="CVE-2022-30635"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32148" id="CVE-2022-32148" type="cve" title="CVE-2022-32148"/>
      <reference href="https://bugzilla.redhat.com/2107342" id="2107342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107371" id="2107371" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107374" id="2107374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107383" id="2107383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107386" id="2107386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107388" id="2107388" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7648.html" id="ALSA-2022:7648" type="self" title="ALSA-2022:7648"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="grafana-pcp" version="3.2.0" release="2.el8" epoch="0" arch="s390x" src="grafana-pcp-3.2.0-2.el8.src.rpm">
          <filename>grafana-pcp-3.2.0-2.el8.s390x.rpm</filename>
          <sum type="sha256">230d457eb48f01a95ed30449b2fd574280ed25cf4c9ffae4afc975fcf2387e48</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7704</id>
    <title>Moderate: webkit2gtk3 security and bug fix update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-15 06:02:31"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>webkit2gtk3 security and bug fix update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-22624)
* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-22628)
* webkitgtk: Buffer overflow leading to arbitrary code execution (CVE-2022-22629)
* webkitgtk: Cookie management issue leading to sensitive user information disclosure (CVE-2022-22662)
* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26700)
* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-26709)
* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-26710)
* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26716)
* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-26717)
* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26719)
* webkitgtk: Heap buffer overflow in WebCore::TextureMapperLayer::setContentsLayer leading to arbitrary code execution (CVE-2022-30293)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7704" id="RHSA-2022:7704" type="rhsa" title="RHSA-2022:7704"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22624" id="CVE-2022-22624" type="cve" title="CVE-2022-22624"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22628" id="CVE-2022-22628" type="cve" title="CVE-2022-22628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22629" id="CVE-2022-22629" type="cve" title="CVE-2022-22629"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22662" id="CVE-2022-22662" type="cve" title="CVE-2022-22662"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26700" id="CVE-2022-26700" type="cve" title="CVE-2022-26700"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26709" id="CVE-2022-26709" type="cve" title="CVE-2022-26709"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26710" id="CVE-2022-26710" type="cve" title="CVE-2022-26710"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26716" id="CVE-2022-26716" type="cve" title="CVE-2022-26716"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26717" id="CVE-2022-26717" type="cve" title="CVE-2022-26717"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26719" id="CVE-2022-26719" type="cve" title="CVE-2022-26719"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30293" id="CVE-2022-30293" type="cve" title="CVE-2022-30293"/>
      <reference href="https://bugzilla.redhat.com/2073893" id="2073893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2073896" id="2073896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2073899" id="2073899" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082548" id="2082548" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092732" id="2092732" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092733" id="2092733" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092734" id="2092734" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092735" id="2092735" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092736" id="2092736" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2104787" id="2104787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2104789" id="2104789" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7704.html" id="ALSA-2022:7704" type="self" title="ALSA-2022:7704"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="webkit2gtk3" version="2.36.7" release="1.el8" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el8.src.rpm">
          <filename>webkit2gtk3-2.36.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">041acbdd8e214d92ec412b976f5cc94acfb37e56ee1e142f34cedcf6024a8fcc</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.36.7" release="1.el8" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el8.src.rpm">
          <filename>webkit2gtk3-jsc-2.36.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">1bed2ba90604a58caa987ea86246de54c2ca9b4a1d72816ea8ae681b67a3731f</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.36.7" release="1.el8" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el8.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.36.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">30e55caa9add9722d46172867f5ad13718feaa04ec16b4fbd0cde28a0638296e</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.36.7" release="1.el8" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el8.src.rpm">
          <filename>webkit2gtk3-devel-2.36.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">c677c6f092f54bee36f47c9f20f947e8e4068651f232fd36e278e46529c8db57</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7715</id>
    <title>Moderate: libxml2 security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 20:22:32"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

* libxml2: Incorrect server side include parsing can lead to XSS (CVE-2016-3709)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7715" id="RHSA-2022:7715" type="rhsa" title="RHSA-2022:7715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2016-3709" id="CVE-2016-3709" type="cve" title="CVE-2016-3709"/>
      <reference href="https://bugzilla.redhat.com/2112766" id="2112766" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7715.html" id="ALSA-2022:7715" type="self" title="ALSA-2022:7715"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="libxml2-devel" version="2.9.7" release="15.el8" epoch="0" arch="s390x" src="libxml2-2.9.7-15.el8.src.rpm">
          <filename>libxml2-devel-2.9.7-15.el8.s390x.rpm</filename>
          <sum type="sha256">ca36f828ee32764dec795732e6b7a49e4113715af82426a3eec6fb65be767de6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7790</id>
    <title>Moderate: bind security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 19:49:36"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: DNS forwarders - cache poisoning vulnerability (CVE-2021-25220)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7790" id="RHSA-2022:7790" type="rhsa" title="RHSA-2022:7790"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-25220" id="CVE-2021-25220" type="cve" title="CVE-2021-25220"/>
      <reference href="https://bugzilla.redhat.com/2064512" id="2064512" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7790.html" id="ALSA-2022:7790" type="self" title="ALSA-2022:7790"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="bind-utils" version="9.11.36" release="5.el8" epoch="32" arch="s390x" src="bind-9.11.36-5.el8.src.rpm">
          <filename>bind-utils-9.11.36-5.el8.s390x.rpm</filename>
          <sum type="sha256">205dd3cbac7ecd3899801ad346d92b0fd313387bd5f187657603d0a061b292b8</sum>
        </package>
        <package name="bind-libs-lite" version="9.11.36" release="5.el8" epoch="32" arch="s390x" src="bind-9.11.36-5.el8.src.rpm">
          <filename>bind-libs-lite-9.11.36-5.el8.s390x.rpm</filename>
          <sum type="sha256">3453d4f4361ce47c8db4873e30576612ad346dac86cf75dd13f6d706cb59aa1a</sum>
        </package>
        <package name="bind-sdb-chroot" version="9.11.36" release="5.el8" epoch="32" arch="s390x" src="bind-9.11.36-5.el8.src.rpm">
          <filename>bind-sdb-chroot-9.11.36-5.el8.s390x.rpm</filename>
          <sum type="sha256">61e140cb32afc977ef247c2e983534f59f43d5dbf78f5aa50a507132ac7fd109</sum>
        </package>
        <package name="bind-pkcs11-utils" version="9.11.36" release="5.el8" epoch="32" arch="s390x" src="bind-9.11.36-5.el8.src.rpm">
          <filename>bind-pkcs11-utils-9.11.36-5.el8.s390x.rpm</filename>
          <sum type="sha256">6738f13ae5be39301a78e17455a4f219aa255b106982e8e7c55d4ac83b8ed6e3</sum>
        </package>
        <package name="bind" version="9.11.36" release="5.el8" epoch="32" arch="s390x" src="bind-9.11.36-5.el8.src.rpm">
          <filename>bind-9.11.36-5.el8.s390x.rpm</filename>
          <sum type="sha256">76ab63693acd1405cfdcd65006dba6db9881938b46ee7e0d70e012067ca25d9c</sum>
        </package>
        <package name="python3-bind" version="9.11.36" release="5.el8" epoch="32" arch="noarch" src="bind-9.11.36-5.el8.src.rpm">
          <filename>python3-bind-9.11.36-5.el8.noarch.rpm</filename>
          <sum type="sha256">8d728f9990745ed853df85845bb2737434ec97bf2693efd6c90588ed8bf717f3</sum>
        </package>
        <package name="bind-lite-devel" version="9.11.36" release="5.el8" epoch="32" arch="s390x" src="bind-9.11.36-5.el8.src.rpm">
          <filename>bind-lite-devel-9.11.36-5.el8.s390x.rpm</filename>
          <sum type="sha256">934fd4d0d86182f55389c977b5a6802e68c687ace176d6a9ee2553b02ac8eafa</sum>
        </package>
        <package name="bind-pkcs11" version="9.11.36" release="5.el8" epoch="32" arch="s390x" src="bind-9.11.36-5.el8.src.rpm">
          <filename>bind-pkcs11-9.11.36-5.el8.s390x.rpm</filename>
          <sum type="sha256">9e4be35990ad3e312ce231d31a0d0606c0a9fbb6d7cb7ce3e25d7fa72150875e</sum>
        </package>
        <package name="bind-chroot" version="9.11.36" release="5.el8" epoch="32" arch="s390x" src="bind-9.11.36-5.el8.src.rpm">
          <filename>bind-chroot-9.11.36-5.el8.s390x.rpm</filename>
          <sum type="sha256">ba131df0c7a8dadd8e426ef61b88f993bf17a7152d211aac2aa6fcb4c243c3bd</sum>
        </package>
        <package name="bind-libs" version="9.11.36" release="5.el8" epoch="32" arch="s390x" src="bind-9.11.36-5.el8.src.rpm">
          <filename>bind-libs-9.11.36-5.el8.s390x.rpm</filename>
          <sum type="sha256">c64960ab1135d96c7185637dcfd056c9d12da8dc920abf843a4a2917e0b13e91</sum>
        </package>
        <package name="bind-pkcs11-devel" version="9.11.36" release="5.el8" epoch="32" arch="s390x" src="bind-9.11.36-5.el8.src.rpm">
          <filename>bind-pkcs11-devel-9.11.36-5.el8.s390x.rpm</filename>
          <sum type="sha256">ca6ea8a1e950f2ef992d8709f9c839ffac9316d6f0ca79a4300e15d26c048661</sum>
        </package>
        <package name="bind-pkcs11-libs" version="9.11.36" release="5.el8" epoch="32" arch="s390x" src="bind-9.11.36-5.el8.src.rpm">
          <filename>bind-pkcs11-libs-9.11.36-5.el8.s390x.rpm</filename>
          <sum type="sha256">cdff3196d0739af2a0bf42469fef50ec3ee74830818a84f861812579aa68903e</sum>
        </package>
        <package name="bind-devel" version="9.11.36" release="5.el8" epoch="32" arch="s390x" src="bind-9.11.36-5.el8.src.rpm">
          <filename>bind-devel-9.11.36-5.el8.s390x.rpm</filename>
          <sum type="sha256">d6ccf7a1320aea9ada9dd39158f2e3eded6688d4afcc7fbdedc9eda3a7a8afd3</sum>
        </package>
        <package name="bind-license" version="9.11.36" release="5.el8" epoch="32" arch="noarch" src="bind-9.11.36-5.el8.src.rpm">
          <filename>bind-license-9.11.36-5.el8.noarch.rpm</filename>
          <sum type="sha256">e7ce35d4893a83ab095c42216f677239e4f1248ea90a2be9f0e9600fddd39f88</sum>
        </package>
        <package name="bind-sdb" version="9.11.36" release="5.el8" epoch="32" arch="s390x" src="bind-9.11.36-5.el8.src.rpm">
          <filename>bind-sdb-9.11.36-5.el8.s390x.rpm</filename>
          <sum type="sha256">ebc9425d900294ef2b1936b7aa06d90726e316cccbac39d5fa70d8bfbc37725b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7821</id>
    <title>Important: nodejs:18 security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 19:27:35"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:18 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

The following packages have been upgraded to a later upstream version: nodejs (18.9.1). (BZ#2130559, BZ#2131750)

Security Fix(es):

* nodejs: weak randomness in WebCrypto keygen (CVE-2022-35255)
* nodejs: HTTP Request Smuggling due to incorrect parsing of header fields (CVE-2022-35256)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7821" id="RHSA-2022:7821" type="rhsa" title="RHSA-2022:7821"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-35255" id="CVE-2022-35255" type="cve" title="CVE-2022-35255"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-35256" id="CVE-2022-35256" type="cve" title="CVE-2022-35256"/>
      <reference href="https://bugzilla.redhat.com/2130517" id="2130517" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2130518" id="2130518" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7821.html" id="ALSA-2022:7821" type="self" title="ALSA-2022:7821"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <module name="nodejs" stream="18" version="8070020221108121319" context="9edba152" arch="s390x"/>
        <package name="nodejs-docs" version="18.9.1" release="1.module_el8.7.0+3343+ea2b7901" epoch="1" arch="noarch" src="nodejs-18.9.1-1.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-docs-18.9.1-1.module_el8.7.0+3343+ea2b7901.noarch.rpm</filename>
          <sum type="sha256">3872af599a757c986898c477f028b0622a7b92a00d693d80e795068af06330f8</sum>
        </package>
        <package name="nodejs-nodemon" version="2.0.19" release="1.module_el8.7.0+3343+ea2b7901" epoch="0" arch="noarch" src="nodejs-nodemon-2.0.19-1.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-nodemon-2.0.19-1.module_el8.7.0+3343+ea2b7901.noarch.rpm</filename>
          <sum type="sha256">5c25dc7f64c208c71abad8e87002398690aaf8356d5339a7c3502825d9b14e1b</sum>
        </package>
        <package name="nodejs-full-i18n" version="18.9.1" release="1.module_el8.7.0+3343+ea2b7901" epoch="1" arch="s390x" src="nodejs-18.9.1-1.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-full-i18n-18.9.1-1.module_el8.7.0+3343+ea2b7901.s390x.rpm</filename>
          <sum type="sha256">74e5c556588bcccc14fe1197c0642951f39284956f845138ad3328afe1ce8449</sum>
        </package>
        <package name="nodejs-devel" version="18.9.1" release="1.module_el8.7.0+3343+ea2b7901" epoch="1" arch="s390x" src="nodejs-18.9.1-1.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-devel-18.9.1-1.module_el8.7.0+3343+ea2b7901.s390x.rpm</filename>
          <sum type="sha256">8f27eaced0d3912ee7ce9f258fb4a3a9a5e99f0e7d2ff8c33fec9876f0622882</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el8.7.0+3343+ea2b7901" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.noarch.rpm</filename>
          <sum type="sha256">9430d44c78a3cfbe1ae3d39b8531f651606661943959bc0c3de87b2f91ea6f67</sum>
        </package>
        <package name="nodejs" version="18.9.1" release="1.module_el8.7.0+3343+ea2b7901" epoch="1" arch="s390x" src="nodejs-18.9.1-1.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-18.9.1-1.module_el8.7.0+3343+ea2b7901.s390x.rpm</filename>
          <sum type="sha256">c46aa535bcf7308f6eed69579eca75412c5a299294035b7b2e122f9ef4316ed5</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el8.7.0+3343+ea2b7901" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el8.7.0+3343+ea2b7901.noarch.rpm</filename>
          <sum type="sha256">dca36d100028686323583aeddaa86efff902ff7fe29cb97d4356c309e3e899d9</sum>
        </package>
        <package name="npm" version="8.19.1" release="1.18.9.1.1.module_el8.7.0+3343+ea2b7901" epoch="1" arch="s390x" src="nodejs-18.9.1-1.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>npm-8.19.1-1.18.9.1.1.module_el8.7.0+3343+ea2b7901.s390x.rpm</filename>
          <sum type="sha256">eb9ba9202672f8e3988f430e2cbe3c2e71080499170061744df461034c30783d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7822</id>
    <title>Low: container-tools:rhel8 security, bug fix, and enhancement update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2023-01-03 12:15:28"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>container-tools:rhel8 security, bug fix, and enhancement update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* podman: possible information disclosure and modification (CVE-2022-2989)
* buildah: possible information disclosure and modification (CVE-2022-2990)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* podman creates lock file in /etc/cni/net.d/cni.lock instead of /run/lock/ (BZ#2125644)
* (podman image trust) does not support the new trust type "sigstoreSigned " (BZ#2125645)
* podman kill may deadlock (BZ#2125647)
* Error: runc: exec failed: unable to start container process: open /dev/pts/0: operation not permitted: OCI permission denied [AlmaLinux 8.7] (BZ#2125648)
* containers-common-1-44 is missing RPM-GPG-KEY-AlmaLinux-beta [AlmaLinux 8.7] (BZ#2125686)
* ADD Dockerfile reference is not validating HTTP status code [rhel8-8.7.0] (BZ#2129767)
* Two aardvark-dns instances trying to use the same port on the same interface. [rhel-8.7.0.z] (netavark) (BZ#2130234)
* containers config.json gets empty after sudden power loss (BZ#2130236)
* PANIC podman API service endpoint handler panic (BZ#2132412)
* Podman container got global IPv6 address unexpectedly even when macvlan network is created for pure IPv4 network (BZ#2133390)
* Skopeo push image to AlmaLinux quay with sigstore was failed (BZ#2136406)
* Podman push image to AlmaLinux quay with sigstore was failed (BZ#2136433)
* Buildah push image to AlmaLinux quay with sigstore was failed (BZ#2136438)
* Two aardvark-dns instances trying to use the same port on the same interface. [rhel-8.8] (aardvark-dns) (BZ#2137295)

Enhancement(s):

* [RFE]Podman support to perform custom actions on unhealthy containers (BZ#2130911)
* [RFE] python-podman: Podman support to perform custom actions on unhealthy containers (BZ#2132360)
* Podman volume plugin timeout should be configurable (BZ#2132992)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7822" id="RHSA-2022:7822" type="rhsa" title="RHSA-2022:7822"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2989" id="CVE-2022-2989" type="cve" title="CVE-2022-2989"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2990" id="CVE-2022-2990" type="cve" title="CVE-2022-2990"/>
      <reference href="https://bugzilla.redhat.com/2121445" id="2121445" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2121453" id="2121453" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7822.html" id="ALSA-2022:7822" type="self" title="ALSA-2022:7822"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <module name="container-tools" stream="rhel8" version="8070020221108190354" context="20125149" arch="s390x"/>
        <package name="skopeo" version="1.9.3" release="1.module_el8.7.0+3344+484dae7b" epoch="2" arch="s390x" src="skopeo-1.9.3-1.module_el8.7.0+3344+484dae7b.src.rpm">
          <filename>skopeo-1.9.3-1.module_el8.7.0+3344+484dae7b.s390x.rpm</filename>
          <sum type="sha256">0c2e471825f9a1e8efdacdde36de9a55f8f1bcf2479b73f77128996f062eddaf</sum>
        </package>
        <package name="udica" version="0.2.6" release="3.module_el8.7.0+3344+484dae7b" epoch="0" arch="noarch" src="udica-0.2.6-3.module_el8.7.0+3344+484dae7b.src.rpm">
          <filename>udica-0.2.6-3.module_el8.7.0+3344+484dae7b.noarch.rpm</filename>
          <sum type="sha256">1868b279d5d378ca40e974fd5a2ae4b89801acc2fdee204e45e830f79c97f742</sum>
        </package>
        <package name="containers-common" version="1" release="43.module_el8.7.0+3344+484dae7b" epoch="2" arch="s390x" src="containers-common-1-43.module_el8.7.0+3344+484dae7b.src.rpm">
          <filename>containers-common-1-43.module_el8.7.0+3344+484dae7b.s390x.rpm</filename>
          <sum type="sha256">2046fd821dd3f637a9cc925cce010df4c8419deb4ef0ad7cce5c02887dd5e7f9</sum>
        </package>
        <package name="cockpit-podman" version="53" release="1.module_el8.7.0+3344+484dae7b" epoch="0" arch="noarch" src="cockpit-podman-53-1.module_el8.7.0+3344+484dae7b.src.rpm">
          <filename>cockpit-podman-53-1.module_el8.7.0+3344+484dae7b.noarch.rpm</filename>
          <sum type="sha256">2118d185c4a6cdffcc184c92a7b2b93c5ff0bec02f37be22a685a97bcf783631</sum>
        </package>
        <package name="podman-catatonit" version="4.2.0" release="4.module_el8.7.0+3344+484dae7b" epoch="3" arch="s390x" src="podman-4.2.0-4.module_el8.7.0+3344+484dae7b.src.rpm">
          <filename>podman-catatonit-4.2.0-4.module_el8.7.0+3344+484dae7b.s390x.rpm</filename>
          <sum type="sha256">2a59e44dbdb99537610fc6de683f5423df21639b7c99b58fb436758f040cf36d</sum>
        </package>
        <package name="netavark" version="1.1.0" release="7.module_el8.7.0+3344+484dae7b" epoch="2" arch="s390x" src="netavark-1.1.0-7.module_el8.7.0+3344+484dae7b.src.rpm">
          <filename>netavark-1.1.0-7.module_el8.7.0+3344+484dae7b.s390x.rpm</filename>
          <sum type="sha256">310b3167cf4ec0675072162edd89e70d16737e8e2570b532f3b08ac17b488092</sum>
        </package>
        <package name="container-selinux" version="2.189.0" release="1.module_el8.7.0+3407+95aa0ca9" epoch="2" arch="noarch" src="container-selinux-2.189.0-1.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>container-selinux-2.189.0-1.module_el8.7.0+3407+95aa0ca9.noarch.rpm</filename>
          <sum type="sha256">3f4c1c731d4bd48fd9f34818a4a62d0bec71212b3c6b9a91bb84cc8e3eab2bb0</sum>
        </package>
        <package name="buildah" version="1.27.2" release="2.module_el8.7.0+3348+f3135399" epoch="1" arch="s390x" src="buildah-1.27.2-2.module_el8.7.0+3348+f3135399.src.rpm">
          <filename>buildah-1.27.2-2.module_el8.7.0+3348+f3135399.s390x.rpm</filename>
          <sum type="sha256">45295a2b3348ec0a39e2e4b1cbca53fa566e51110284e0ef25c9642d441909b2</sum>
        </package>
        <package name="criu-libs" version="3.15" release="3.module_el8.7.0+3407+95aa0ca9" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>criu-libs-3.15-3.module_el8.7.0+3407+95aa0ca9.s390x.rpm</filename>
          <sum type="sha256">46a7f577f55a6e9a2da9d31ef02030ce687a7664516772ee9aca3d805ba91a90</sum>
        </package>
        <package name="runc" version="1.1.4" release="1.module_el8.7.0+3344+484dae7b" epoch="1" arch="s390x" src="runc-1.1.4-1.module_el8.7.0+3344+484dae7b.src.rpm">
          <filename>runc-1.1.4-1.module_el8.7.0+3344+484dae7b.s390x.rpm</filename>
          <sum type="sha256">533384a92eaf1feb65434ec5dbad4c9ba501383482642277aed4825598a0fa1e</sum>
        </package>
        <package name="crun" version="1.5" release="1.module_el8.7.0+3407+95aa0ca9" epoch="0" arch="s390x" src="crun-1.5-1.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>crun-1.5-1.module_el8.7.0+3407+95aa0ca9.s390x.rpm</filename>
          <sum type="sha256">5e8afc3b2aaaf1d20fc3f403370440335684c8a68ac9ca32c1647d7e4d63b5dc</sum>
        </package>
        <package name="buildah-tests" version="1.27.2" release="2.module_el8.7.0+3348+f3135399" epoch="1" arch="s390x" src="buildah-1.27.2-2.module_el8.7.0+3348+f3135399.src.rpm">
          <filename>buildah-tests-1.27.2-2.module_el8.7.0+3348+f3135399.s390x.rpm</filename>
          <sum type="sha256">650ce2876b213da05d1cf74b32be005a06d174a9f4d44a8caa440627bd335fe9</sum>
        </package>
        <package name="toolbox" version="0.0.99.3" release="0.6.module_el8.6.0+3128+1510fbd1" epoch="0" arch="s390x" src="toolbox-0.0.99.3-0.6.module_el8.6.0+3128+1510fbd1.src.rpm">
          <filename>toolbox-0.0.99.3-0.6.module_el8.6.0+3128+1510fbd1.s390x.rpm</filename>
          <sum type="sha256">77f2a4f87aaf23c10877b58fdf4f10c94e59b11548f1085abf85419049fc43b7</sum>
        </package>
        <package name="crit" version="3.15" release="3.module_el8.7.0+3407+95aa0ca9" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>crit-3.15-3.module_el8.7.0+3407+95aa0ca9.s390x.rpm</filename>
          <sum type="sha256">8d693fabb52e50d93dc0d9a39aa7fb39a096557a7c3c7d2b81ed9da97a3aa687</sum>
        </package>
        <package name="podman-tests" version="4.2.0" release="4.module_el8.7.0+3344+484dae7b" epoch="3" arch="s390x" src="podman-4.2.0-4.module_el8.7.0+3344+484dae7b.src.rpm">
          <filename>podman-tests-4.2.0-4.module_el8.7.0+3344+484dae7b.s390x.rpm</filename>
          <sum type="sha256">8dda932cdace7da45a13da6d1447bd388be02a050801f6b7f0412f684dc8f043</sum>
        </package>
        <package name="podman-remote" version="4.2.0" release="4.module_el8.7.0+3344+484dae7b" epoch="3" arch="s390x" src="podman-4.2.0-4.module_el8.7.0+3344+484dae7b.src.rpm">
          <filename>podman-remote-4.2.0-4.module_el8.7.0+3344+484dae7b.s390x.rpm</filename>
          <sum type="sha256">9040d2767200e72276813ce701d492989246ebb9fe07dfe0f2b6816892c0cc47</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.3" release="0.6.module_el8.6.0+3128+1510fbd1" epoch="0" arch="s390x" src="toolbox-0.0.99.3-0.6.module_el8.6.0+3128+1510fbd1.src.rpm">
          <filename>toolbox-tests-0.0.99.3-0.6.module_el8.6.0+3128+1510fbd1.s390x.rpm</filename>
          <sum type="sha256">915e61d58e88be3f80dae6065e51f522ac53c230c96ddfd9396c7b0a30d67e7e</sum>
        </package>
        <package name="podman-docker" version="4.2.0" release="4.module_el8.7.0+3344+484dae7b" epoch="3" arch="noarch" src="podman-4.2.0-4.module_el8.7.0+3344+484dae7b.src.rpm">
          <filename>podman-docker-4.2.0-4.module_el8.7.0+3344+484dae7b.noarch.rpm</filename>
          <sum type="sha256">91c0f8ae74773578b71f55a980354fa51283c2276fcab65254744c010ee790bd</sum>
        </package>
        <package name="podman" version="4.2.0" release="4.module_el8.7.0+3344+484dae7b" epoch="3" arch="s390x" src="podman-4.2.0-4.module_el8.7.0+3344+484dae7b.src.rpm">
          <filename>podman-4.2.0-4.module_el8.7.0+3344+484dae7b.s390x.rpm</filename>
          <sum type="sha256">93cf35a8f1b0c31bafbc52cb6e1dfca144946a16ff2662289d404267e6a1010e</sum>
        </package>
        <package name="aardvark-dns" version="1.1.0" release="5.module_el8.7.0+3344+484dae7b" epoch="2" arch="s390x" src="aardvark-dns-1.1.0-5.module_el8.7.0+3344+484dae7b.src.rpm">
          <filename>aardvark-dns-1.1.0-5.module_el8.7.0+3344+484dae7b.s390x.rpm</filename>
          <sum type="sha256">a93b253e451d78ef381e620ee61043e0e6ae0cfde241e94fbf6facb57a27037f</sum>
        </package>
        <package name="criu-devel" version="3.15" release="3.module_el8.7.0+3407+95aa0ca9" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>criu-devel-3.15-3.module_el8.7.0+3407+95aa0ca9.s390x.rpm</filename>
          <sum type="sha256">ab919af780bfdb79571a0f29bfe39aa9e76b34f49d63b6529f15def1ce4e9d93</sum>
        </package>
        <package name="podman-gvproxy" version="4.2.0" release="4.module_el8.7.0+3344+484dae7b" epoch="3" arch="s390x" src="podman-4.2.0-4.module_el8.7.0+3344+484dae7b.src.rpm">
          <filename>podman-gvproxy-4.2.0-4.module_el8.7.0+3344+484dae7b.s390x.rpm</filename>
          <sum type="sha256">b294e7104260f648a7dfd53fbab4ff6f3f56a9b7ae0b0188aee172b8b366d12c</sum>
        </package>
        <package name="slirp4netns" version="1.2.0" release="2.module_el8.6.0+3128+1510fbd1" epoch="0" arch="s390x" src="slirp4netns-1.2.0-2.module_el8.6.0+3128+1510fbd1.src.rpm">
          <filename>slirp4netns-1.2.0-2.module_el8.6.0+3128+1510fbd1.s390x.rpm</filename>
          <sum type="sha256">badb290a72081a08ee84125fad9e55ef35ae9f5afb6bb0b06e9aab628ab70bcd</sum>
        </package>
        <package name="python3-podman" version="4.2.1" release="1.module_el8.7.0+3344+484dae7b" epoch="0" arch="noarch" src="python-podman-4.2.1-1.module_el8.7.0+3344+484dae7b.src.rpm">
          <filename>python3-podman-4.2.1-1.module_el8.7.0+3344+484dae7b.noarch.rpm</filename>
          <sum type="sha256">c0d14ac37714db0b672f6aae7f687f1a9f478e993bf56968011897a4b4493911</sum>
        </package>
        <package name="podman-plugins" version="4.2.0" release="4.module_el8.7.0+3344+484dae7b" epoch="3" arch="s390x" src="podman-4.2.0-4.module_el8.7.0+3344+484dae7b.src.rpm">
          <filename>podman-plugins-4.2.0-4.module_el8.7.0+3344+484dae7b.s390x.rpm</filename>
          <sum type="sha256">c3eebcc8da7b41bedc9b5d63b55b765cac166bb787a48d714be04a812285ac70</sum>
        </package>
        <package name="python3-criu" version="3.15" release="3.module_el8.7.0+3407+95aa0ca9" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>python3-criu-3.15-3.module_el8.7.0+3407+95aa0ca9.s390x.rpm</filename>
          <sum type="sha256">caf0c9cad2a7ce540719cef8131f61df93e037a1abaef0248183a670e9bf50fa</sum>
        </package>
        <package name="fuse-overlayfs" version="1.9" release="1.module_el8.7.0+3407+95aa0ca9" epoch="0" arch="s390x" src="fuse-overlayfs-1.9-1.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>fuse-overlayfs-1.9-1.module_el8.7.0+3407+95aa0ca9.s390x.rpm</filename>
          <sum type="sha256">da0d165707a50722031a02e4fc918f80f5c2bf71dbcf6b3654f774ed41bbe933</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="1.module_el8.7.0+3407+95aa0ca9" epoch="0" arch="s390x" src="libslirp-4.4.0-1.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>libslirp-4.4.0-1.module_el8.7.0+3407+95aa0ca9.s390x.rpm</filename>
          <sum type="sha256">e3cf6bbda53346ef0244a58972b3a341818eb28b2d8ebf604953aed23ff228a0</sum>
        </package>
        <package name="criu" version="3.15" release="3.module_el8.7.0+3407+95aa0ca9" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>criu-3.15-3.module_el8.7.0+3407+95aa0ca9.s390x.rpm</filename>
          <sum type="sha256">f4d794e8544cab3266b44e64daacabcbb9999da62623e4b15e2b328f63c7ffb5</sum>
        </package>
        <package name="containernetworking-plugins" version="1.1.1" release="3.module_el8.6.0+3128+1510fbd1" epoch="1" arch="s390x" src="containernetworking-plugins-1.1.1-3.module_el8.6.0+3128+1510fbd1.src.rpm">
          <filename>containernetworking-plugins-1.1.1-3.module_el8.6.0+3128+1510fbd1.s390x.rpm</filename>
          <sum type="sha256">f6b836a5fad0abe8a79ee5c244c7c9a5a82f84039fb5a5f919516de72620db4f</sum>
        </package>
        <package name="conmon" version="2.1.4" release="1.module_el8.7.0+3344+484dae7b" epoch="3" arch="s390x" src="conmon-2.1.4-1.module_el8.7.0+3344+484dae7b.src.rpm">
          <filename>conmon-2.1.4-1.module_el8.7.0+3344+484dae7b.s390x.rpm</filename>
          <sum type="sha256">f836a926d7d85dd57d45fa60655aa528ecd057f2b4c949c607612fb07f34e539</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="1.module_el8.7.0+3407+95aa0ca9" epoch="0" arch="s390x" src="libslirp-4.4.0-1.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>libslirp-devel-4.4.0-1.module_el8.7.0+3407+95aa0ca9.s390x.rpm</filename>
          <sum type="sha256">fc314bbef4e4807252caff16892c2d3fe260b828899c933719c618b9dfb07443</sum>
        </package>
        <package name="skopeo-tests" version="1.9.3" release="1.module_el8.7.0+3344+484dae7b" epoch="2" arch="s390x" src="skopeo-1.9.3-1.module_el8.7.0+3344+484dae7b.src.rpm">
          <filename>skopeo-tests-1.9.3-1.module_el8.7.0+3344+484dae7b.s390x.rpm</filename>
          <sum type="sha256">fed44373bf544a56e7bbae05d14b5409351929323e650fae1de6d67069277604</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.6" release="1.module_el8.6.0+3336+00d107d5" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.6-1.module_el8.6.0+3336+00d107d5.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.6-1.module_el8.6.0+3336+00d107d5.s390x.rpm</filename>
          <sum type="sha256">ff517da5901cb54cae20b21c3197080bd049549d534105b70318edcb3cc8ae8b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7826</id>
    <title>Moderate: dotnet7.0 security, bug fix, and enhancement update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 16:57:03"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.100 RC 2 and .NET Runtime 7.0.0 RC 2.

The following packages have been upgraded to a later upstream version: dotnet7.0 (7.0.100). (BZ#2134642).

Security Fix(es):

* dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7826" id="RHSA-2022:7826" type="rhsa" title="RHSA-2022:7826"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41032" id="CVE-2022-41032" type="cve" title="CVE-2022-41032"/>
      <reference href="https://bugzilla.redhat.com/2132614" id="2132614" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7826.html" id="ALSA-2022:7826" type="self" title="ALSA-2022:7826"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.0" release="0.4.rc2.el8_7" epoch="0" arch="s390x" src="dotnet7.0-7.0.100-0.4.rc2.el8_7.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.0-0.4.rc2.el8_7.s390x.rpm</filename>
          <sum type="sha256">03852356b03bc62b826cdefe62375f377f246fa2a66f53544bd0f86718c68c00</sum>
        </package>
        <package name="dotnet-apphost-pack-7.0" version="7.0.0" release="0.4.rc2.el8_7" epoch="0" arch="s390x" src="dotnet7.0-7.0.100-0.4.rc2.el8_7.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.0-0.4.rc2.el8_7.s390x.rpm</filename>
          <sum type="sha256">05717fee224ec49aafd0eb5f7b85e872a28f1b45a485009dfa4f06f0b68ef824</sum>
        </package>
        <package name="dotnet-sdk-7.0" version="7.0.100" release="0.4.rc2.el8_7" epoch="0" arch="s390x" src="dotnet7.0-7.0.100-0.4.rc2.el8_7.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.100-0.4.rc2.el8_7.s390x.rpm</filename>
          <sum type="sha256">067cb7e2df52ec85f84d1ef22e2913984a7d80587f922fb27cdf3e8623510fef</sum>
        </package>
        <package name="aspnetcore-runtime-7.0" version="7.0.0" release="0.4.rc2.el8_7" epoch="0" arch="s390x" src="dotnet7.0-7.0.100-0.4.rc2.el8_7.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.0-0.4.rc2.el8_7.s390x.rpm</filename>
          <sum type="sha256">0c1417ba2748ae5251694ab791082b6aaa2493e9c6cb78ac7b00e2fa7a168bae</sum>
        </package>
        <package name="dotnet-host" version="7.0.0" release="0.4.rc2.el8_7" epoch="0" arch="s390x" src="dotnet7.0-7.0.100-0.4.rc2.el8_7.src.rpm">
          <filename>dotnet-host-7.0.0-0.4.rc2.el8_7.s390x.rpm</filename>
          <sum type="sha256">3ff548a6597cb0ad2a7f5e2bfc57818d65cb73c2cf453bf51d367be064c01682</sum>
        </package>
        <package name="dotnet-hostfxr-7.0" version="7.0.0" release="0.4.rc2.el8_7" epoch="0" arch="s390x" src="dotnet7.0-7.0.100-0.4.rc2.el8_7.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.0-0.4.rc2.el8_7.s390x.rpm</filename>
          <sum type="sha256">55d8de3d507e50fa058ecdc7e52966e91876a6bc2e7f83821bdbf130d60ac645</sum>
        </package>
        <package name="dotnet-templates-7.0" version="7.0.100" release="0.4.rc2.el8_7" epoch="0" arch="s390x" src="dotnet7.0-7.0.100-0.4.rc2.el8_7.src.rpm">
          <filename>dotnet-templates-7.0-7.0.100-0.4.rc2.el8_7.s390x.rpm</filename>
          <sum type="sha256">75991f1f675cfa8eb621d5ea971122be3167759749ce0619bba382d6e1b230b2</sum>
        </package>
        <package name="dotnet-targeting-pack-7.0" version="7.0.0" release="0.4.rc2.el8_7" epoch="0" arch="s390x" src="dotnet7.0-7.0.100-0.4.rc2.el8_7.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.0-0.4.rc2.el8_7.s390x.rpm</filename>
          <sum type="sha256">87fccc52257b7682fcfd08c2848f22fecc20386caf192119cecbe69088cca5e3</sum>
        </package>
        <package name="dotnet-runtime-7.0" version="7.0.0" release="0.4.rc2.el8_7" epoch="0" arch="s390x" src="dotnet7.0-7.0.100-0.4.rc2.el8_7.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.0-0.4.rc2.el8_7.s390x.rpm</filename>
          <sum type="sha256">b4925175f3b9ee6aa2fe4a4bcc6d96d368ab9cd5b774044a00ab883c721a4b9d</sum>
        </package>
        <package name="dotnet" version="7.0.100" release="0.4.rc2.el8_7" epoch="0" arch="s390x" src="dotnet7.0-7.0.100-0.4.rc2.el8_7.src.rpm">
          <filename>dotnet-7.0.100-0.4.rc2.el8_7.s390x.rpm</filename>
          <sum type="sha256">b942267104b7874d4e947816cbd4da5ed320438511a921e70a2bc24beeb36ea9</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="7.0.100" release="0.4.rc2.el8_7" epoch="0" arch="s390x" src="dotnet7.0-7.0.100-0.4.rc2.el8_7.src.rpm">
          <filename>netstandard-targeting-pack-2.1-7.0.100-0.4.rc2.el8_7.s390x.rpm</filename>
          <sum type="sha256">f5d1cb9fc6aa45b3389e108c8798a2dce69dce815480e3a7dfd1145aee5d7d62</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7830</id>
    <title>Moderate: nodejs:14 security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-14 13:27:52"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs:14 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

Security Fix(es):

* nodejs: Improper handling of URI Subject Alternative Names (CVE-2021-44531)
* nodejs: Certificate Verification Bypass via String Injection (CVE-2021-44532)
* nodejs: Incorrect handling of certificate subject and issuer fields (CVE-2021-44533)
* nodejs: HTTP Request Smuggling due to incorrect parsing of header fields (CVE-2022-35256)
* nodejs: Prototype pollution via console.table properties (CVE-2022-21824)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7830" id="RHSA-2022:7830" type="rhsa" title="RHSA-2022:7830"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-44531" id="CVE-2021-44531" type="cve" title="CVE-2021-44531"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-44532" id="CVE-2021-44532" type="cve" title="CVE-2021-44532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-44533" id="CVE-2021-44533" type="cve" title="CVE-2021-44533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21824" id="CVE-2022-21824" type="cve" title="CVE-2022-21824"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-35256" id="CVE-2022-35256" type="cve" title="CVE-2022-35256"/>
      <reference href="https://bugzilla.redhat.com/2040839" id="2040839" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2040846" id="2040846" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2040856" id="2040856" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2040862" id="2040862" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2130518" id="2130518" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7830.html" id="ALSA-2022:7830" type="self" title="ALSA-2022:7830"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_6_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_6_default</name>
        <module name="nodejs" stream="14" version="8070020221108120746" context="9edba152" arch="s390x"/>
        <package name="nodejs-full-i18n" version="14.20.1" release="2.module_el8.7.0+3342+b2df8497" epoch="1" arch="s390x" src="nodejs-14.20.1-2.module_el8.7.0+3342+b2df8497.src.rpm">
          <filename>nodejs-full-i18n-14.20.1-2.module_el8.7.0+3342+b2df8497.s390x.rpm</filename>
          <sum type="sha256">166f65c3053245e2e9dc088ab60d03bdf5ee4dc6dd906d2a04897afbbf5e5547</sum>
        </package>
        <package name="nodejs" version="14.20.1" release="2.module_el8.7.0+3342+b2df8497" epoch="1" arch="s390x" src="nodejs-14.20.1-2.module_el8.7.0+3342+b2df8497.src.rpm">
          <filename>nodejs-14.20.1-2.module_el8.7.0+3342+b2df8497.s390x.rpm</filename>
          <sum type="sha256">2fba05a506bb1d5a28ad43dfda308e9003917b3420922c6bc58424cfb27e3c25</sum>
        </package>
        <package name="nodejs-nodemon" version="2.0.19" release="2.module_el8.6.0+3261+490666b3" epoch="0" arch="noarch" src="nodejs-nodemon-2.0.19-2.module_el8.6.0+3261+490666b3.src.rpm">
          <filename>nodejs-nodemon-2.0.19-2.module_el8.6.0+3261+490666b3.noarch.rpm</filename>
          <sum type="sha256">3fc1746096791c98b03b70040c6e2a76c192ed1f045020f5190e0632fd6f75a9</sum>
        </package>
        <package name="nodejs-docs" version="14.20.1" release="2.module_el8.7.0+3342+b2df8497" epoch="1" arch="noarch" src="nodejs-14.20.1-2.module_el8.7.0+3342+b2df8497.src.rpm">
          <filename>nodejs-docs-14.20.1-2.module_el8.7.0+3342+b2df8497.noarch.rpm</filename>
          <sum type="sha256">560e2efec02dfd517b1324f3a1c44f1dff24ed115cf60c98d569c612ebeffea3</sum>
        </package>
        <package name="npm" version="6.14.17" release="1.14.20.1.2.module_el8.7.0+3342+b2df8497" epoch="1" arch="s390x" src="nodejs-14.20.1-2.module_el8.7.0+3342+b2df8497.src.rpm">
          <filename>npm-6.14.17-1.14.20.1.2.module_el8.7.0+3342+b2df8497.s390x.rpm</filename>
          <sum type="sha256">e2f6723c82b58731cb61a24d298fe522cba5da3d95f35ea4ef84ae0e6d8ba857</sum>
        </package>
        <package name="nodejs-devel" version="14.20.1" release="2.module_el8.7.0+3342+b2df8497" epoch="1" arch="s390x" src="nodejs-14.20.1-2.module_el8.7.0+3342+b2df8497.src.rpm">
          <filename>nodejs-devel-14.20.1-2.module_el8.7.0+3342+b2df8497.s390x.rpm</filename>
          <sum type="sha256">ff26f0ef4c4b89828aac8cef0ebefe0332d21d45cecab9f9fe013aff86682494</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8492</id>
    <title>Important: python39:3.9 security update</title>
    <issued date="2022-11-16 00:00:00"/>
    <updated date="2022-11-21 13:28:15"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python39:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: local privilege escalation via the multiprocessing forkserver start method (CVE-2022-42919)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8492" id="RHSA-2022:8492" type="rhsa" title="RHSA-2022:8492"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42919" id="CVE-2022-42919" type="cve" title="CVE-2022-42919"/>
      <reference href="https://bugzilla.redhat.com/2138705" id="2138705" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-8492.html" id="ALSA-2022:8492" type="self" title="ALSA-2022:8492"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <module name="python39" stream="3.9" version="8070020221116153824" context="0a5380d9" arch="s390x"/>
        <package name="python39-libs" version="3.9.13" release="2.module_el8.7.0+3351+e02cdf9b" epoch="0" arch="s390x" src="python39-3.9.13-2.module_el8.7.0+3351+e02cdf9b.src.rpm">
          <filename>python39-libs-3.9.13-2.module_el8.7.0+3351+e02cdf9b.s390x.rpm</filename>
          <sum type="sha256">0fe980fbe3f23afa3f0dd32df80a02ad2fc93f19409a076815c1b6f690b5bc7a</sum>
        </package>
        <package name="python39-idle" version="3.9.13" release="2.module_el8.7.0+3351+e02cdf9b" epoch="0" arch="s390x" src="python39-3.9.13-2.module_el8.7.0+3351+e02cdf9b.src.rpm">
          <filename>python39-idle-3.9.13-2.module_el8.7.0+3351+e02cdf9b.s390x.rpm</filename>
          <sum type="sha256">1575948d273b25a75b2f75212565a7630c6c66a9a777d6493e59a43c54fb0cc7</sum>
        </package>
        <package name="python39-rpm-macros" version="3.9.13" release="2.module_el8.7.0+3351+e02cdf9b" epoch="0" arch="noarch" src="python39-3.9.13-2.module_el8.7.0+3351+e02cdf9b.src.rpm">
          <filename>python39-rpm-macros-3.9.13-2.module_el8.7.0+3351+e02cdf9b.noarch.rpm</filename>
          <sum type="sha256">27e684ab25b1417aeeae2faff32d259096d561f691240957ce3953892cb8e1cf</sum>
        </package>
        <package name="python39-scipy" version="1.5.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="scipy-1.5.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-scipy-1.5.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">29c1816d1b128f5b3a9f8863106cc1a21a9e75b10be7a14561be4ebb36951957</sum>
        </package>
        <package name="python39-cryptography" version="3.3.1" release="2.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-cryptography-3.3.1-2.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-cryptography-3.3.1-2.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">56a1136df87128c9c969dff35385bd263b36300d3c30efa3c5110f2cec64c371</sum>
        </package>
        <package name="python39-numpy-f2py" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-f2py-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">56f4a39fc3b7cacfec741e84c3c59e67da9e3b2f122f09e59cac8a8020a4ba7c</sum>
        </package>
        <package name="python39-test" version="3.9.13" release="2.module_el8.7.0+3351+e02cdf9b" epoch="0" arch="s390x" src="python39-3.9.13-2.module_el8.7.0+3351+e02cdf9b.src.rpm">
          <filename>python39-test-3.9.13-2.module_el8.7.0+3351+e02cdf9b.s390x.rpm</filename>
          <sum type="sha256">71025aac2d57e1eebfac7654d06ac68525a65ea6024ecb3745faceecc0612aa4</sum>
        </package>
        <package name="python39" version="3.9.13" release="2.module_el8.7.0+3351+e02cdf9b" epoch="0" arch="s390x" src="python39-3.9.13-2.module_el8.7.0+3351+e02cdf9b.src.rpm">
          <filename>python39-3.9.13-2.module_el8.7.0+3351+e02cdf9b.s390x.rpm</filename>
          <sum type="sha256">91ccb97511ea6ed857a11139012a07854356d6438485140860def021e6a3b41c</sum>
        </package>
        <package name="python39-psutil" version="5.8.0" release="4.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9300840b5b4e742063f5617bc74cc2b05b4f3d5bdcd113ee5b3a9745baf3d0dc</sum>
        </package>
        <package name="python39-numpy" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9ffe33f6e51a25e79b88e45fa5cdca37a3b77d0868fe40e156f615224308810c</sum>
        </package>
        <package name="python39-psycopg2-tests" version="2.8.6" release="2.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-psycopg2-tests-2.8.6-2.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">aea9e9377b4ce6484c9cab9cc63b725b12a55d4895321eaa422328a4b79bb21b</sum>
        </package>
        <package name="python39-psycopg2" version="2.8.6" release="2.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">b7c35659538650d156ec7273186c4f59fa5fecab60c4ccfd3a93bbe67c0af914</sum>
        </package>
        <package name="python39-psycopg2-doc" version="2.8.6" release="2.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-psycopg2-doc-2.8.6-2.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">b973731de198689b345b74939539b99cd20047bf9b09cd68ab7b166eae5773fe</sum>
        </package>
        <package name="python39-devel" version="3.9.13" release="2.module_el8.7.0+3351+e02cdf9b" epoch="0" arch="s390x" src="python39-3.9.13-2.module_el8.7.0+3351+e02cdf9b.src.rpm">
          <filename>python39-devel-3.9.13-2.module_el8.7.0+3351+e02cdf9b.s390x.rpm</filename>
          <sum type="sha256">cb479749a0de8807f9d79ee1c08ee1dd00d4d4370925209b327c05bbf4016565</sum>
        </package>
        <package name="python39-lxml" version="4.6.5" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">dc2ce0990738ea69e2b3641de1886825066554244cf58815971db30e321b56b2</sum>
        </package>
        <package name="python39-mod_wsgi" version="4.7.1" release="5.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="mod_wsgi-4.7.1-5.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-mod_wsgi-4.7.1-5.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">e45288562bc7c28ad66653998a34bc52fe2539e305ea984f6ebebac9a1c49030</sum>
        </package>
        <package name="python39-cffi" version="1.14.3" release="2.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">ec3acbe8ceecf82559556caacd8c41e2b40e69348f2e6893f0b7598aa36371fd</sum>
        </package>
        <package name="python39-tkinter" version="3.9.13" release="2.module_el8.7.0+3351+e02cdf9b" epoch="0" arch="s390x" src="python39-3.9.13-2.module_el8.7.0+3351+e02cdf9b.src.rpm">
          <filename>python39-tkinter-3.9.13-2.module_el8.7.0+3351+e02cdf9b.s390x.rpm</filename>
          <sum type="sha256">f02d2a2c25223d95d335bea7ecf3031d04b3a535bea0ae166cf4c9eaa07e693b</sum>
        </package>
        <package name="python39-pyyaml" version="5.4.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="PyYAML-5.4.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pyyaml-5.4.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">faa90d54ace8329c64942f01e18434bce14edf19cc3a534ae07de7bc301cd27f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8547</id>
    <title>Important: thunderbird security update</title>
    <issued date="2022-11-21 00:00:00"/>
    <updated date="2022-11-21 19:01:55"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.5.0.

Security Fix(es):

* Mozilla: Service Workers might have learned size of cross-origin media files (CVE-2022-45403)
* Mozilla: Fullscreen notification bypass (CVE-2022-45404)
* Mozilla: Use-after-free in InputStream implementation (CVE-2022-45405)
* Mozilla: Use-after-free of a JavaScript Realm (CVE-2022-45406)
* Mozilla: Fullscreen notification bypass via windowName (CVE-2022-45408)
* Mozilla: Use-after-free in Garbage Collection (CVE-2022-45409)
* Mozilla: Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5 (CVE-2022-45421)
* Mozilla: ServiceWorker-intercepted requests bypassed SameSite cookie policy (CVE-2022-45410)
* Mozilla: Cross-Site Tracing was possible via non-standard override headers (CVE-2022-45411)
* Mozilla: Symlinks may resolve to partially uninitialized buffers (CVE-2022-45412)
* Mozilla: Keystroke Side-Channel Leakage (CVE-2022-45416)
* Mozilla: Custom mouse cursor could have been drawn over browser UI (CVE-2022-45418)
* Mozilla: Iframe contents could be rendered outside the iframe (CVE-2022-45420)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8547" id="RHSA-2022:8547" type="rhsa" title="RHSA-2022:8547"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45403" id="CVE-2022-45403" type="cve" title="CVE-2022-45403"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45404" id="CVE-2022-45404" type="cve" title="CVE-2022-45404"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45405" id="CVE-2022-45405" type="cve" title="CVE-2022-45405"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45406" id="CVE-2022-45406" type="cve" title="CVE-2022-45406"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45408" id="CVE-2022-45408" type="cve" title="CVE-2022-45408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45409" id="CVE-2022-45409" type="cve" title="CVE-2022-45409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45410" id="CVE-2022-45410" type="cve" title="CVE-2022-45410"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45411" id="CVE-2022-45411" type="cve" title="CVE-2022-45411"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45412" id="CVE-2022-45412" type="cve" title="CVE-2022-45412"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45416" id="CVE-2022-45416" type="cve" title="CVE-2022-45416"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45418" id="CVE-2022-45418" type="cve" title="CVE-2022-45418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45420" id="CVE-2022-45420" type="cve" title="CVE-2022-45420"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45421" id="CVE-2022-45421" type="cve" title="CVE-2022-45421"/>
      <reference href="https://bugzilla.redhat.com/2143197" id="2143197" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143198" id="2143198" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143199" id="2143199" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143200" id="2143200" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143201" id="2143201" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143202" id="2143202" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143203" id="2143203" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143204" id="2143204" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143205" id="2143205" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143240" id="2143240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143241" id="2143241" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143242" id="2143242" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143243" id="2143243" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-8547.html" id="ALSA-2022:8547" type="self" title="ALSA-2022:8547"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="thunderbird" version="102.5.0" release="2.el8_7.alma" epoch="0" arch="s390x" src="thunderbird-102.5.0-2.el8_7.alma.src.rpm">
          <filename>thunderbird-102.5.0-2.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">f2eff374a673f6214d8d0163f1efbc2c726705f8b3d372088b642a5d68224bc8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8554</id>
    <title>Important: firefox security update</title>
    <issued date="2022-11-21 00:00:00"/>
    <updated date="2022-11-21 21:14:16"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.5.0 ESR.

Security Fix(es):

* Mozilla: Service Workers might have learned size of cross-origin media files (CVE-2022-45403)
* Mozilla: Fullscreen notification bypass (CVE-2022-45404)
* Mozilla: Use-after-free in InputStream implementation (CVE-2022-45405)
* Mozilla: Use-after-free of a JavaScript Realm (CVE-2022-45406)
* Mozilla: Fullscreen notification bypass via windowName (CVE-2022-45408)
* Mozilla: Use-after-free in Garbage Collection (CVE-2022-45409)
* Mozilla: Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5 (CVE-2022-45421)
* Mozilla: ServiceWorker-intercepted requests bypassed SameSite cookie policy (CVE-2022-45410)
* Mozilla: Cross-Site Tracing was possible via non-standard override headers (CVE-2022-45411)
* Mozilla: Symlinks may resolve to partially uninitialized buffers (CVE-2022-45412)
* Mozilla: Keystroke Side-Channel Leakage (CVE-2022-45416)
* Mozilla: Custom mouse cursor could have been drawn over browser UI (CVE-2022-45418)
* Mozilla: Iframe contents could be rendered outside the iframe (CVE-2022-45420)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8554" id="RHSA-2022:8554" type="rhsa" title="RHSA-2022:8554"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45403" id="CVE-2022-45403" type="cve" title="CVE-2022-45403"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45404" id="CVE-2022-45404" type="cve" title="CVE-2022-45404"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45405" id="CVE-2022-45405" type="cve" title="CVE-2022-45405"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45406" id="CVE-2022-45406" type="cve" title="CVE-2022-45406"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45408" id="CVE-2022-45408" type="cve" title="CVE-2022-45408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45409" id="CVE-2022-45409" type="cve" title="CVE-2022-45409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45410" id="CVE-2022-45410" type="cve" title="CVE-2022-45410"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45411" id="CVE-2022-45411" type="cve" title="CVE-2022-45411"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45412" id="CVE-2022-45412" type="cve" title="CVE-2022-45412"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45416" id="CVE-2022-45416" type="cve" title="CVE-2022-45416"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45418" id="CVE-2022-45418" type="cve" title="CVE-2022-45418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45420" id="CVE-2022-45420" type="cve" title="CVE-2022-45420"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45421" id="CVE-2022-45421" type="cve" title="CVE-2022-45421"/>
      <reference href="https://bugzilla.redhat.com/2143197" id="2143197" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143198" id="2143198" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143199" id="2143199" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143200" id="2143200" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143201" id="2143201" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143202" id="2143202" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143203" id="2143203" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143204" id="2143204" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143205" id="2143205" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143240" id="2143240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143241" id="2143241" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143242" id="2143242" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143243" id="2143243" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-8554.html" id="ALSA-2022:8554" type="self" title="ALSA-2022:8554"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="firefox" version="102.5.0" release="1.el8_7.alma" epoch="0" arch="s390x" src="firefox-102.5.0-1.el8_7.alma.src.rpm">
          <filename>firefox-102.5.0-1.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">750555ea571f6a103b73f80623a9ac950c7669c2beb681c40a2ff37311b5f7eb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8649</id>
    <title>Important: varnish:6 security update</title>
    <issued date="2022-11-28 00:00:00"/>
    <updated date="2022-12-05 10:39:47"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>varnish:6 security update</summary>
    <description>Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

* varnish: Request Forgery Vulnerability (CVE-2022-45060)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8649" id="RHSA-2022:8649" type="rhsa" title="RHSA-2022:8649"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45060" id="CVE-2022-45060" type="cve" title="CVE-2022-45060"/>
      <reference href="https://bugzilla.redhat.com/2141844" id="2141844" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-8649.html" id="ALSA-2022:8649" type="self" title="ALSA-2022:8649"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <module name="varnish" stream="6" version="8070020221128103530" context="9edba152" arch="s390x"/>
        <package name="varnish-devel" version="6.0.8" release="2.module_el8.7.0+3353+b11d8f2f.1" epoch="0" arch="s390x" src="varnish-6.0.8-2.module_el8.7.0+3353+b11d8f2f.1.src.rpm">
          <filename>varnish-devel-6.0.8-2.module_el8.7.0+3353+b11d8f2f.1.s390x.rpm</filename>
          <sum type="sha256">3f165f99045ff6ef8653bcc0afcb81190339434ca3b2e4e30b8314c69fac330c</sum>
        </package>
        <package name="varnish" version="6.0.8" release="2.module_el8.7.0+3353+b11d8f2f.1" epoch="0" arch="s390x" src="varnish-6.0.8-2.module_el8.7.0+3353+b11d8f2f.1.src.rpm">
          <filename>varnish-6.0.8-2.module_el8.7.0+3353+b11d8f2f.1.s390x.rpm</filename>
          <sum type="sha256">8bf085823a92b5a7a70eab504c463489a45e6fceceb73e22d4d9abf623d4536f</sum>
        </package>
        <package name="varnish-docs" version="6.0.8" release="2.module_el8.7.0+3353+b11d8f2f.1" epoch="0" arch="s390x" src="varnish-6.0.8-2.module_el8.7.0+3353+b11d8f2f.1.src.rpm">
          <filename>varnish-docs-6.0.8-2.module_el8.7.0+3353+b11d8f2f.1.s390x.rpm</filename>
          <sum type="sha256">a4e2f3c95cdd686216493894be2d07eb528fa9d824d2b8477b73529445457d81</sum>
        </package>
        <package name="varnish-modules" version="0.15.0" release="6.module_el8.6.0+3089+dac88e97" epoch="0" arch="s390x" src="varnish-modules-0.15.0-6.module_el8.6.0+3089+dac88e97.src.rpm">
          <filename>varnish-modules-0.15.0-6.module_el8.6.0+3089+dac88e97.s390x.rpm</filename>
          <sum type="sha256">f87b7bda5607c3d394f1298c744e857d5fa547aa968815ad8846b1da44910b24</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8833</id>
    <title>Moderate: nodejs:18 security, bug fix, and enhancement update</title>
    <issued date="2022-12-06 00:00:00"/>
    <updated date="2022-12-07 13:22:27"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs:18 security, bug fix, and enhancement update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

The following packages have been upgraded to a later upstream version: nodejs (18.12.1), nodejs-nodemon (2.0.20). (BZ#2142818)

Security Fix(es):

* nodejs-minimatch: ReDoS via the braceExpand function (CVE-2022-3517)
* nodejs: DNS rebinding in inspect via invalid octal IP address (CVE-2022-43548)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8833" id="RHSA-2022:8833" type="rhsa" title="RHSA-2022:8833"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3517" id="CVE-2022-3517" type="cve" title="CVE-2022-3517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43548" id="CVE-2022-43548" type="cve" title="CVE-2022-43548"/>
      <reference href="https://bugzilla.redhat.com/2134609" id="2134609" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140911" id="2140911" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-8833.html" id="ALSA-2022:8833" type="self" title="ALSA-2022:8833"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <module name="nodejs" stream="18" version="8070020221206160400" context="9edba152" arch="s390x"/>
        <package name="nodejs-docs" version="18.12.1" release="2.module_el8.7.0+3370+40ccb2a8" epoch="1" arch="noarch" src="nodejs-18.12.1-2.module_el8.7.0+3370+40ccb2a8.src.rpm">
          <filename>nodejs-docs-18.12.1-2.module_el8.7.0+3370+40ccb2a8.noarch.rpm</filename>
          <sum type="sha256">12d5f2acb2f58c05be8a803cdad82efc954240c9cb2850e009fa5ad5e3e07f7a</sum>
        </package>
        <package name="nodejs-devel" version="18.12.1" release="2.module_el8.7.0+3370+40ccb2a8" epoch="1" arch="s390x" src="nodejs-18.12.1-2.module_el8.7.0+3370+40ccb2a8.src.rpm">
          <filename>nodejs-devel-18.12.1-2.module_el8.7.0+3370+40ccb2a8.s390x.rpm</filename>
          <sum type="sha256">58a285a58d83ad5d83fd92a3c02d4931cf8d8e6cde60a16a2b8e64194c1fa1dc</sum>
        </package>
        <package name="nodejs-full-i18n" version="18.12.1" release="2.module_el8.7.0+3370+40ccb2a8" epoch="1" arch="s390x" src="nodejs-18.12.1-2.module_el8.7.0+3370+40ccb2a8.src.rpm">
          <filename>nodejs-full-i18n-18.12.1-2.module_el8.7.0+3370+40ccb2a8.s390x.rpm</filename>
          <sum type="sha256">791d75596caafb378666583cf0a1caf53140c9e2a9c9676c4001e916009dcfc3</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el8.7.0+3343+ea2b7901" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.noarch.rpm</filename>
          <sum type="sha256">9430d44c78a3cfbe1ae3d39b8531f651606661943959bc0c3de87b2f91ea6f67</sum>
        </package>
        <package name="npm" version="8.19.2" release="1.18.12.1.2.module_el8.7.0+3370+40ccb2a8" epoch="1" arch="s390x" src="nodejs-18.12.1-2.module_el8.7.0+3370+40ccb2a8.src.rpm">
          <filename>npm-8.19.2-1.18.12.1.2.module_el8.7.0+3370+40ccb2a8.s390x.rpm</filename>
          <sum type="sha256">abffddbbc4cea39a04cbbb98dbfebd65fa1afc787ff91391a36ddddd0f38c39f</sum>
        </package>
        <package name="nodejs-nodemon" version="2.0.20" release="1.module_el8.7.0+3370+40ccb2a8" epoch="0" arch="noarch" src="nodejs-nodemon-2.0.20-1.module_el8.7.0+3370+40ccb2a8.src.rpm">
          <filename>nodejs-nodemon-2.0.20-1.module_el8.7.0+3370+40ccb2a8.noarch.rpm</filename>
          <sum type="sha256">ba19905dba169e9eaa458b192b04ad1956ec1a5eb5668a65733f65a1eec4a755</sum>
        </package>
        <package name="nodejs" version="18.12.1" release="2.module_el8.7.0+3370+40ccb2a8" epoch="1" arch="s390x" src="nodejs-18.12.1-2.module_el8.7.0+3370+40ccb2a8.src.rpm">
          <filename>nodejs-18.12.1-2.module_el8.7.0+3370+40ccb2a8.s390x.rpm</filename>
          <sum type="sha256">d567d5ddf246cb35fd8a0d595d71349f4dea8ea8e0e874e3304485829da33475</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el8.7.0+3343+ea2b7901" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el8.7.0+3343+ea2b7901.noarch.rpm</filename>
          <sum type="sha256">dca36d100028686323583aeddaa86efff902ff7fe29cb97d4356c309e3e899d9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:9058</id>
    <title>Important: prometheus-jmx-exporter security update</title>
    <issued date="2022-12-15 00:00:00"/>
    <updated date="2022-12-16 10:11:54"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>prometheus-jmx-exporter security update</summary>
    <description>Prometheus JMX Exporter is a JMX to Prometheus exporter: a collector that can be configured to scrape and expose MBeans of a JMX target.

Security Fix(es):

* SnakeYaml: Constructor Deserialization Remote Code Execution (CVE-2022-1471)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:9058" id="RHSA-2022:9058" type="rhsa" title="RHSA-2022:9058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1471" id="CVE-2022-1471" type="cve" title="CVE-2022-1471"/>
      <reference href="https://bugzilla.redhat.com/2150009" id="2150009" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-9058.html" id="ALSA-2022:9058" type="self" title="ALSA-2022:9058"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="prometheus-jmx-exporter-openjdk11" version="0.12.0" release="9.el8_7" epoch="0" arch="noarch" src="prometheus-jmx-exporter-0.12.0-9.el8_7.src.rpm">
          <filename>prometheus-jmx-exporter-openjdk11-0.12.0-9.el8_7.noarch.rpm</filename>
          <sum type="sha256">092595c3e3675725ca57c286ed2b02968305444ce9fe5f4f716da9c41776040a</sum>
        </package>
        <package name="prometheus-jmx-exporter-openjdk8" version="0.12.0" release="9.el8_7" epoch="0" arch="noarch" src="prometheus-jmx-exporter-0.12.0-9.el8_7.src.rpm">
          <filename>prometheus-jmx-exporter-openjdk8-0.12.0-9.el8_7.noarch.rpm</filename>
          <sum type="sha256">716f4872b3b42348e3f280dfdec7c8a494cab8538cf3676db28a51c120d64612</sum>
        </package>
        <package name="prometheus-jmx-exporter-openjdk17" version="0.12.0" release="9.el8_7" epoch="0" arch="noarch" src="prometheus-jmx-exporter-0.12.0-9.el8_7.src.rpm">
          <filename>prometheus-jmx-exporter-openjdk17-0.12.0-9.el8_7.noarch.rpm</filename>
          <sum type="sha256">9f16fd5ecb5b22aee02dfb06d9ba8e18f3fb1ab6648e4e07e0f9d89f61a06306</sum>
        </package>
        <package name="prometheus-jmx-exporter" version="0.12.0" release="9.el8_7" epoch="0" arch="noarch" src="prometheus-jmx-exporter-0.12.0-9.el8_7.src.rpm">
          <filename>prometheus-jmx-exporter-0.12.0-9.el8_7.noarch.rpm</filename>
          <sum type="sha256">bb67c53ce5918db88c91dbf399fa57bdd2217245f96e037f6974503852055e5c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:9067</id>
    <title>Important: firefox security update</title>
    <issued date="2022-12-15 00:00:00"/>
    <updated date="2022-12-16 10:20:49"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.6.0 ESR.

Security Fix(es):

* Mozilla: Arbitrary file read from a compromised content process (CVE-2022-46872)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.6 and Thunderbird 102.6 (CVE-2022-46878)
* Mozilla: Use-after-free in WebGL (CVE-2022-46880)
* Mozilla: Memory corruption in WebGL (CVE-2022-46881)
* Mozilla: Drag and Dropped Filenames could have been truncated to malicious extensions (CVE-2022-46874)
* Mozilla: Use-after-free in WebGL (CVE-2022-46882)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:9067" id="RHSA-2022:9067" type="rhsa" title="RHSA-2022:9067"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46872" id="CVE-2022-46872" type="cve" title="CVE-2022-46872"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46874" id="CVE-2022-46874" type="cve" title="CVE-2022-46874"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46878" id="CVE-2022-46878" type="cve" title="CVE-2022-46878"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46880" id="CVE-2022-46880" type="cve" title="CVE-2022-46880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46881" id="CVE-2022-46881" type="cve" title="CVE-2022-46881"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46882" id="CVE-2022-46882" type="cve" title="CVE-2022-46882"/>
      <reference href="https://bugzilla.redhat.com/2153441" id="2153441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2153449" id="2153449" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2153454" id="2153454" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2153463" id="2153463" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2153466" id="2153466" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2153467" id="2153467" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-9067.html" id="ALSA-2022:9067" type="self" title="ALSA-2022:9067"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="firefox" version="102.6.0" release="1.el8_7.alma" epoch="0" arch="s390x" src="firefox-102.6.0-1.el8_7.alma.src.rpm">
          <filename>firefox-102.6.0-1.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">d175ccb80abf17aaa4683f98b20244464322125b023d088caba605c064f98827</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:9073</id>
    <title>Moderate: nodejs:16 security, bug fix, and enhancement update</title>
    <issued date="2022-12-15 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs:16 security, bug fix, and enhancement update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

The following packages were updated to later upstream versions: nodejs (16.18.1), nodejs-nodemon (2.0.20).

Security Fix(es):

* nodejs: Improper handling of URI Subject Alternative Names (CVE-2021-44531)
* nodejs: Certificate Verification Bypass via String Injection (CVE-2021-44532)
* nodejs: Incorrect handling of certificate subject and issuer fields (CVE-2021-44533)
* minimist: prototype pollution (CVE-2021-44906)
* nodejs-minimatch: ReDoS via the braceExpand function (CVE-2022-3517)
* nodejs: DNS rebinding in inspect via invalid octal IP address (CVE-2022-43548)
* nodejs: Prototype pollution via console.table properties (CVE-2022-21824)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* nodejs:16/nodejs: Packaged version of undici does not fit with declared version. [almalinux-8] (BZ#2151625)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:9073" id="RHSA-2022:9073" type="rhsa" title="RHSA-2022:9073"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-44531" id="CVE-2021-44531" type="cve" title="CVE-2021-44531"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-44532" id="CVE-2021-44532" type="cve" title="CVE-2021-44532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-44533" id="CVE-2021-44533" type="cve" title="CVE-2021-44533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-44906" id="CVE-2021-44906" type="cve" title="CVE-2021-44906"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21824" id="CVE-2022-21824" type="cve" title="CVE-2022-21824"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3517" id="CVE-2022-3517" type="cve" title="CVE-2022-3517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43548" id="CVE-2022-43548" type="cve" title="CVE-2022-43548"/>
      <reference href="https://bugzilla.redhat.com/2040839" id="2040839" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2040846" id="2040846" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2040856" id="2040856" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2040862" id="2040862" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2066009" id="2066009" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134609" id="2134609" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140911" id="2140911" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-9073.html" id="ALSA-2022:9073" type="self" title="ALSA-2022:9073"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <module name="nodejs" stream="16" version="8070020221215165249" context="9edba152" arch="s390x"/>
        <package name="npm" version="8.19.2" release="1.16.18.1.3.module_el8.7.0+3371+ed8c43db" epoch="1" arch="s390x" src="nodejs-16.18.1-3.module_el8.7.0+3371+ed8c43db.src.rpm">
          <filename>npm-8.19.2-1.16.18.1.3.module_el8.7.0+3371+ed8c43db.s390x.rpm</filename>
          <sum type="sha256">0028dff9bb57f11eb7e9d46d594505f63c0569fdd7a1d976de1103bebcb74bd1</sum>
        </package>
        <package name="nodejs-nodemon" version="2.0.20" release="2.module_el8.7.0+3371+ed8c43db" epoch="0" arch="noarch" src="nodejs-nodemon-2.0.20-2.module_el8.7.0+3371+ed8c43db.src.rpm">
          <filename>nodejs-nodemon-2.0.20-2.module_el8.7.0+3371+ed8c43db.noarch.rpm</filename>
          <sum type="sha256">54890e68223d51cacf0234467b13a2b148a15a5cf46e20d7413b92f145a2d1da</sum>
        </package>
        <package name="nodejs" version="16.18.1" release="3.module_el8.7.0+3371+ed8c43db" epoch="1" arch="s390x" src="nodejs-16.18.1-3.module_el8.7.0+3371+ed8c43db.src.rpm">
          <filename>nodejs-16.18.1-3.module_el8.7.0+3371+ed8c43db.s390x.rpm</filename>
          <sum type="sha256">82f585073caac76f0d5fcbf897b5b620a8a2a1a579675068d5d9d26b70b7d334</sum>
        </package>
        <package name="nodejs-devel" version="16.18.1" release="3.module_el8.7.0+3371+ed8c43db" epoch="1" arch="s390x" src="nodejs-16.18.1-3.module_el8.7.0+3371+ed8c43db.src.rpm">
          <filename>nodejs-devel-16.18.1-3.module_el8.7.0+3371+ed8c43db.s390x.rpm</filename>
          <sum type="sha256">b3c835f619fc998ba9ada3d9212d0903e0861f1f7afcf59c8962fb52d88a8f54</sum>
        </package>
        <package name="nodejs-docs" version="16.18.1" release="3.module_el8.7.0+3371+ed8c43db" epoch="1" arch="noarch" src="nodejs-16.18.1-3.module_el8.7.0+3371+ed8c43db.src.rpm">
          <filename>nodejs-docs-16.18.1-3.module_el8.7.0+3371+ed8c43db.noarch.rpm</filename>
          <sum type="sha256">dae78dcd8670614a486ebe2a024f7fddf6d1d74dc79f65c7a53ee0e5a83d5d23</sum>
        </package>
        <package name="nodejs-full-i18n" version="16.18.1" release="3.module_el8.7.0+3371+ed8c43db" epoch="1" arch="s390x" src="nodejs-16.18.1-3.module_el8.7.0+3371+ed8c43db.src.rpm">
          <filename>nodejs-full-i18n-16.18.1-3.module_el8.7.0+3371+ed8c43db.s390x.rpm</filename>
          <sum type="sha256">ff087a097fe55f0ddcb7fd017d54a4153925f2f256721461049a305998b0ecda</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:9074</id>
    <title>Important: thunderbird security update</title>
    <issued date="2022-12-15 00:00:00"/>
    <updated date="2022-12-16 10:32:11"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.6.0.

Security Fix(es):

* Mozilla: Arbitrary file read from a compromised content process (CVE-2022-46872)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.6 and Thunderbird 102.6 (CVE-2022-46878)
* Mozilla: Use-after-free in WebGL (CVE-2022-46880)
* Mozilla: Memory corruption in WebGL (CVE-2022-46881)
* Mozilla: Quoting from an HTML email with certain tags will trigger network requests and load remote content, regardless of a configuration to block remote content (CVE-2022-45414)
* Mozilla: Drag and Dropped Filenames could have been truncated to malicious extensions (CVE-2022-46874)
* Mozilla: Use-after-free in WebGL (CVE-2022-46882)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:9074" id="RHSA-2022:9074" type="rhsa" title="RHSA-2022:9074"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45414" id="CVE-2022-45414" type="cve" title="CVE-2022-45414"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46872" id="CVE-2022-46872" type="cve" title="CVE-2022-46872"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46874" id="CVE-2022-46874" type="cve" title="CVE-2022-46874"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46878" id="CVE-2022-46878" type="cve" title="CVE-2022-46878"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46880" id="CVE-2022-46880" type="cve" title="CVE-2022-46880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46881" id="CVE-2022-46881" type="cve" title="CVE-2022-46881"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46882" id="CVE-2022-46882" type="cve" title="CVE-2022-46882"/>
      <reference href="https://bugzilla.redhat.com/2149868" id="2149868" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2153441" id="2153441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2153449" id="2153449" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2153454" id="2153454" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2153463" id="2153463" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2153466" id="2153466" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2153467" id="2153467" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-9074.html" id="ALSA-2022:9074" type="self" title="ALSA-2022:9074"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="thunderbird" version="102.6.0" release="2.el8_7.alma" epoch="0" arch="s390x" src="thunderbird-102.6.0-2.el8_7.alma.src.rpm">
          <filename>thunderbird-102.6.0-2.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">b4ec0784a0ef7bd5603c15704004622f0f8ad95454d8efbf22b0c9f9ad338afd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0016</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2023-01-04 00:00:00"/>
    <updated date="2023-01-12 08:33:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: processing maliciously crafted web content may lead to an arbitrary code execution (CVE-2022-42856)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0016" id="RHSA-2023:0016" type="rhsa" title="RHSA-2023:0016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42856" id="CVE-2022-42856" type="cve" title="CVE-2022-42856"/>
      <reference href="https://bugzilla.redhat.com/2153683" id="2153683" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0016.html" id="ALSA-2023:0016" type="self" title="ALSA-2023:0016"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="webkit2gtk3-jsc" version="2.36.7" release="1.el8_7.1" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el8_7.1.src.rpm">
          <filename>webkit2gtk3-jsc-2.36.7-1.el8_7.1.s390x.rpm</filename>
          <sum type="sha256">39266d36aeea88b2b57281f30bee6c8ef5c9fc32e4e78499436c201e1a7feffb</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.36.7" release="1.el8_7.1" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el8_7.1.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.36.7-1.el8_7.1.s390x.rpm</filename>
          <sum type="sha256">3b3ddf777969e722d35b76643bd932475dd373583fb3d0a213f9ee718b701174</sum>
        </package>
        <package name="webkit2gtk3" version="2.36.7" release="1.el8_7.1" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el8_7.1.src.rpm">
          <filename>webkit2gtk3-2.36.7-1.el8_7.1.s390x.rpm</filename>
          <sum type="sha256">ae268b11f7583044bee7cc154e686c711ff8fbe7d223bea6a9fbd07353111b20</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.36.7" release="1.el8_7.1" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el8_7.1.src.rpm">
          <filename>webkit2gtk3-devel-2.36.7-1.el8_7.1.s390x.rpm</filename>
          <sum type="sha256">d9eabcf9f03e3346d714ee51ae0086d5dcb31b437b916d3f2079766ec9685fa1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0050</id>
    <title>Moderate: nodejs:14 security, bug fix, and enhancement update</title>
    <issued date="2023-01-09 00:00:00"/>
    <updated date="2023-01-10 10:25:18"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs:14 security, bug fix, and enhancement update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

The following packages have been upgraded to a later upstream version: nodejs (14.21.1), nodejs-nodemon (2.0.20).

Security Fix(es):

* minimist: prototype pollution (CVE-2021-44906)
* node-fetch: exposure of sensitive information to an unauthorized actor (CVE-2022-0235)
* nodejs-minimatch: ReDoS via the braceExpand function (CVE-2022-3517)
* express: "qs" prototype poisoning causes the hang of the node process (CVE-2022-24999)
* nodejs: DNS rebinding in inspect via invalid octal IP address (CVE-2022-43548)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0050" id="RHSA-2023:0050" type="rhsa" title="RHSA-2023:0050"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-44906" id="CVE-2021-44906" type="cve" title="CVE-2021-44906"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0235" id="CVE-2022-0235" type="cve" title="CVE-2022-0235"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24999" id="CVE-2022-24999" type="cve" title="CVE-2022-24999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3517" id="CVE-2022-3517" type="cve" title="CVE-2022-3517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43548" id="CVE-2022-43548" type="cve" title="CVE-2022-43548"/>
      <reference href="https://bugzilla.redhat.com/2044591" id="2044591" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2066009" id="2066009" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134609" id="2134609" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140911" id="2140911" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150323" id="2150323" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0050.html" id="ALSA-2023:0050" type="self" title="ALSA-2023:0050"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <module name="nodejs" stream="14" version="8070020230109185405" context="9edba152" arch="s390x"/>
        <package name="nodejs-docs" version="14.21.1" release="2.module_el8.7.0+3373+a4c18c43" epoch="1" arch="noarch" src="nodejs-14.21.1-2.module_el8.7.0+3373+a4c18c43.src.rpm">
          <filename>nodejs-docs-14.21.1-2.module_el8.7.0+3373+a4c18c43.noarch.rpm</filename>
          <sum type="sha256">11fce28fa8ebb5c6f5139b2e3606627dba63da7417a0cefde727fa1bb1ecd8c9</sum>
        </package>
        <package name="nodejs-nodemon" version="2.0.20" release="2.module_el8.7.0+3373+a4c18c43" epoch="0" arch="noarch" src="nodejs-nodemon-2.0.20-2.module_el8.7.0+3373+a4c18c43.src.rpm">
          <filename>nodejs-nodemon-2.0.20-2.module_el8.7.0+3373+a4c18c43.noarch.rpm</filename>
          <sum type="sha256">2b08e68d7502b5bc1de73f1724faf81765879b62007274d2a0bd2a22edb51813</sum>
        </package>
        <package name="nodejs-devel" version="14.21.1" release="2.module_el8.7.0+3373+a4c18c43" epoch="1" arch="s390x" src="nodejs-14.21.1-2.module_el8.7.0+3373+a4c18c43.src.rpm">
          <filename>nodejs-devel-14.21.1-2.module_el8.7.0+3373+a4c18c43.s390x.rpm</filename>
          <sum type="sha256">92e111cc29db11916517ce6aa58a0393de3b7a0915f78a49cdfabb3b37c94642</sum>
        </package>
        <package name="nodejs-full-i18n" version="14.21.1" release="2.module_el8.7.0+3373+a4c18c43" epoch="1" arch="s390x" src="nodejs-14.21.1-2.module_el8.7.0+3373+a4c18c43.src.rpm">
          <filename>nodejs-full-i18n-14.21.1-2.module_el8.7.0+3373+a4c18c43.s390x.rpm</filename>
          <sum type="sha256">acdd9c7c7f1520266f6429c87efc16e087001742b7c8811a240426de95c57048</sum>
        </package>
        <package name="nodejs" version="14.21.1" release="2.module_el8.7.0+3373+a4c18c43" epoch="1" arch="s390x" src="nodejs-14.21.1-2.module_el8.7.0+3373+a4c18c43.src.rpm">
          <filename>nodejs-14.21.1-2.module_el8.7.0+3373+a4c18c43.s390x.rpm</filename>
          <sum type="sha256">c617de723a40b057de397a2ae770901582b70d1c960582f0dbf7a56b30e384c0</sum>
        </package>
        <package name="npm" version="6.14.17" release="1.14.21.1.2.module_el8.7.0+3373+a4c18c43" epoch="1" arch="s390x" src="nodejs-14.21.1-2.module_el8.7.0+3373+a4c18c43.src.rpm">
          <filename>npm-6.14.17-1.14.21.1.2.module_el8.7.0+3373+a4c18c43.s390x.rpm</filename>
          <sum type="sha256">d3975016facdb312f925460f0860ad4efd641e00a7e9ea1c795ba4e69dc1ee62</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0079</id>
    <title>Moderate: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-01-11 00:00:00"/>
    <updated date="2023-01-12 19:43:07"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.113 and .NET Runtime 6.0.13.

The following packages have been upgraded to a later upstream version: dotnet6.0 (6.0.113). (BZ#2154458)

Security Fix(es):

* dotnet: Parsing an empty HTTP response as a JSON.NET JObject causes a stack overflow and crashes a process (CVE-2023-21538)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0079" id="RHSA-2023:0079" type="rhsa" title="RHSA-2023:0079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21538" id="CVE-2023-21538" type="cve" title="CVE-2023-21538"/>
      <reference href="https://bugzilla.redhat.com/2158342" id="2158342" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0079.html" id="ALSA-2023:0079" type="self" title="ALSA-2023:0079"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="aspnetcore-runtime-6.0" version="6.0.13" release="1.el8_7" epoch="0" arch="s390x" src="dotnet6.0-6.0.113-1.el8_7.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.13-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">4792434c1a493e1ca4110ff54dfecdc90cc11c8c7b24c8a3d3a7dee11e6cf686</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.13" release="1.el8_7" epoch="0" arch="s390x" src="dotnet6.0-6.0.113-1.el8_7.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.13-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">64182c6a4b1d1f9175945240ec57270517a6f0940bcb83c73390a520ae0dbff0</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.13" release="1.el8_7" epoch="0" arch="s390x" src="dotnet6.0-6.0.113-1.el8_7.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.13-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">9b3930eabb36fca1710b5d59c473c2c382f09988ad7f125416a35fb271db7ffd</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.113" release="1.el8_7" epoch="0" arch="s390x" src="dotnet6.0-6.0.113-1.el8_7.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.113-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">9f29960eed0020082152ec5e0c57742735cb49b462482236bc219bdb7078218f</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.13" release="1.el8_7" epoch="0" arch="s390x" src="dotnet6.0-6.0.113-1.el8_7.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.13-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">b8e2994e92dfd24658cd891f3c2c87a6a6d728bad90760bfbf9d6c39d89a3d65</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.13" release="1.el8_7" epoch="0" arch="s390x" src="dotnet6.0-6.0.113-1.el8_7.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.13-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">bd8587600a14c68865d3aad02da418d7fc7c963937e72a8c190c44137dc246ba</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.113" release="1.el8_7" epoch="0" arch="s390x" src="dotnet6.0-6.0.113-1.el8_7.src.rpm">
          <filename>dotnet-templates-6.0-6.0.113-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">c337c6a8b8132e16eda9e8b1a5a9a28ee652b3bb682b91e19ae1ed83ae85b75f</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.13" release="1.el8_7" epoch="0" arch="s390x" src="dotnet6.0-6.0.113-1.el8_7.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.13-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">e4e8abab24f1177bece2763647b049c73ad2480680fba617dd5a430a9fcd3b74</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0087</id>
    <title>Moderate: usbguard security update</title>
    <issued date="2023-01-12 00:00:00"/>
    <updated date="2023-01-13 08:37:02"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>usbguard security update</summary>
    <description>The USBGuard software framework provides system protection against intrusive USB devices by implementing basic whitelisting and blacklisting capabilities based on device attributes. To enforce a user-defined policy, USBGuard uses the Linux kernel USB device authorization feature.

Security Fix(es):

* usbguard: Fix unauthorized access via D-Bus (CVE-2019-25058)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0087" id="RHSA-2023:0087" type="rhsa" title="RHSA-2023:0087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-25058" id="CVE-2019-25058" type="cve" title="CVE-2019-25058"/>
      <reference href="https://bugzilla.redhat.com/2058465" id="2058465" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0087.html" id="ALSA-2023:0087" type="self" title="ALSA-2023:0087"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="usbguard" version="1.0.0" release="8.el8_7.2" epoch="0" arch="s390x" src="usbguard-1.0.0-8.el8_7.2.src.rpm">
          <filename>usbguard-1.0.0-8.el8_7.2.s390x.rpm</filename>
          <sum type="sha256">26f5fd57291f81638bc5a149db390bb937c6b646baf9fc06d84ca9293c3a3370</sum>
        </package>
        <package name="usbguard-selinux" version="1.0.0" release="8.el8_7.2" epoch="0" arch="noarch" src="usbguard-1.0.0-8.el8_7.2.src.rpm">
          <filename>usbguard-selinux-1.0.0-8.el8_7.2.noarch.rpm</filename>
          <sum type="sha256">555ebfa41736d99e4baf6089a4a5d613767fdb77366fb14a0bdbb310c7b45a3f</sum>
        </package>
        <package name="usbguard-dbus" version="1.0.0" release="8.el8_7.2" epoch="0" arch="s390x" src="usbguard-1.0.0-8.el8_7.2.src.rpm">
          <filename>usbguard-dbus-1.0.0-8.el8_7.2.s390x.rpm</filename>
          <sum type="sha256">658aba9caaeabbb63411e4df7450071809fca9d08bef9798a898a410646df3c1</sum>
        </package>
        <package name="usbguard-notifier" version="1.0.0" release="8.el8_7.2" epoch="0" arch="s390x" src="usbguard-1.0.0-8.el8_7.2.src.rpm">
          <filename>usbguard-notifier-1.0.0-8.el8_7.2.s390x.rpm</filename>
          <sum type="sha256">cef74f236017b09c3f2baebedb889b63fe2ac1ce0f4f60e54c1a91bbcadb4db6</sum>
        </package>
        <package name="usbguard-tools" version="1.0.0" release="8.el8_7.2" epoch="0" arch="s390x" src="usbguard-1.0.0-8.el8_7.2.src.rpm">
          <filename>usbguard-tools-1.0.0-8.el8_7.2.s390x.rpm</filename>
          <sum type="sha256">e803b4336dee4756bbbb17fc83c7bc9df2b3fd50fbb79134d8e9f23298fb9b1f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0089</id>
    <title>Moderate: libreoffice security update</title>
    <issued date="2023-01-12 00:00:00"/>
    <updated date="2023-01-13 18:11:30"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libreoffice security update</summary>
    <description>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

Security Fix(es):

* libreoffice: Macro URL arbitrary script execution (CVE-2022-3140)
* libreoffice: Execution of Untrusted Macros Due to Improper Certificate Validation (CVE-2022-26305)
* libreoffice: Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password (CVE-2022-26306)
* libreoffice: Weak Master Keys (CVE-2022-26307)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0089" id="RHSA-2023:0089" type="rhsa" title="RHSA-2023:0089"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26305" id="CVE-2022-26305" type="cve" title="CVE-2022-26305"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26306" id="CVE-2022-26306" type="cve" title="CVE-2022-26306"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26307" id="CVE-2022-26307" type="cve" title="CVE-2022-26307"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3140" id="CVE-2022-3140" type="cve" title="CVE-2022-3140"/>
      <reference href="https://bugzilla.redhat.com/2118610" id="2118610" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2118611" id="2118611" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2118613" id="2118613" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134697" id="2134697" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0089.html" id="ALSA-2023:0089" type="self" title="ALSA-2023:0089"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="autocorr-it" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-it-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">000096c3962c63efbfeb6b031816ecaee7660df53ac8ba786039706054845223</sum>
        </package>
        <package name="libreoffice-pdfimport" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>libreoffice-pdfimport-6.4.7.2-12.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">15dc30c867788b7d5f1567fb379edb46d39eee4718ae97c856141183f338e47f</sum>
        </package>
        <package name="autocorr-pl" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-pl-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">17f566161b46d7c8baa18760d6eff583f821b2bccce7a2307bb04e7a2e917ac9</sum>
        </package>
        <package name="autocorr-ja" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-ja-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">1f8ed00b05f662c450f4d155c086fa9d7666bd1dd8b31ee03597236acf9571be</sum>
        </package>
        <package name="libreoffice-ure-common" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>libreoffice-ure-common-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">21378d282941e99bbe6e75ea764c0285834cc5966e1909772230195815f29657</sum>
        </package>
        <package name="autocorr-ru" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-ru-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">2408bfb310970e18484ccbd9a83bce2b4c1ad0c7ac25d43055c8aeadc8769e29</sum>
        </package>
        <package name="autocorr-bg" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-bg-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">25b52a62b3d4f4a873ba89ef11888b02a264ff3390cbb5b9f9e591c05606ecc8</sum>
        </package>
        <package name="libreoffice-graphicfilter" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>libreoffice-graphicfilter-6.4.7.2-12.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">2a1216c0f665e09996befdcaf889e5dd64a71bf03a3bfb242086f9a6757dfd3b</sum>
        </package>
        <package name="autocorr-ro" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-ro-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">3cd6359b326a9c2d3401a89b5c40f12111c31b3d258fa2c4e1cc409329433e4a</sum>
        </package>
        <package name="autocorr-fr" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-fr-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">46e138904c4f30ba34239ba061bc424c761e67cb9d9ca2f1b790d3c54ba17332</sum>
        </package>
        <package name="libreoffice-core" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>libreoffice-core-6.4.7.2-12.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">5029041ed08ff0a3327fefd195f8ccbb93e9975305c8c35fcce6ceda2da96da0</sum>
        </package>
        <package name="autocorr-sr" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-sr-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">57e0a5157934eec196806a8f7b33ec06f6b41c876995e89d5a34848a3cef93be</sum>
        </package>
        <package name="libreoffice-writer" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>libreoffice-writer-6.4.7.2-12.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">5acf0c3b0570afa7640639d48cbca631cdc9bd847bd25bca2623713648444b11</sum>
        </package>
        <package name="libreoffice-ogltrans" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>libreoffice-ogltrans-6.4.7.2-12.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">5c7169b0b780ea682b3cc5c1054b9025c0f9dca2b9885946f15ce0a902a62696</sum>
        </package>
        <package name="autocorr-hr" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-hr-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">5f526b717eaf4212950d416dcc55235e49eab23cd0772dfaff912e52ee4f5252</sum>
        </package>
        <package name="autocorr-nl" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-nl-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">68facb55c6c94bd975a884337fd13b231f6f666b67a1e713348b5ddab4adf926</sum>
        </package>
        <package name="autocorr-pt" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-pt-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">6b674e9d0f93e5cdd202be33149baea50b83f29b94a88b179e0001ebffb16548</sum>
        </package>
        <package name="autocorr-cs" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-cs-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">778cef612b6f876f567810cd1ee06ee511136f0e66f57c4d113af7e3df09ce14</sum>
        </package>
        <package name="libreoffice-opensymbol-fonts" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>libreoffice-opensymbol-fonts-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">7adaaa97fc5ebea2291511c2fc4496bb5f006611bbe55a638ec45d0a310f7e8d</sum>
        </package>
        <package name="autocorr-vi" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-vi-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">7d4399859d7f5ac8cc53cb53ffa75b1995697af3e0974af21c2107643887ace9</sum>
        </package>
        <package name="autocorr-is" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-is-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">8e16d59328abb5b1188ade21acf06f9a8cba6c77665ccb7109060cad14a316a5</sum>
        </package>
        <package name="autocorr-sk" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-sk-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">96b8cebe96e9aec57928657568935eac00b3a31b8775d3e7d00d01e1abb91234</sum>
        </package>
        <package name="libreoffice-impress" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>libreoffice-impress-6.4.7.2-12.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">9f2d6035500f4c2e330e7606805befab38be9e0afdccd528363eb7ff1e14d5ad</sum>
        </package>
        <package name="autocorr-mn" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-mn-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">a08a88ff4aa4d7b7383323d05a403f9f55f92a47eeb5d4ef9d16bec252f17df4</sum>
        </package>
        <package name="autocorr-af" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-af-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">a0da343f3e98ff5477f32e6a84f59d07c00e90e9e1eeb9709e6019ca8b7e962d</sum>
        </package>
        <package name="autocorr-ga" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-ga-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">a8e97d98f437722bd865f716e78ca28519391ccbd9ca1182707486ceb416e5fa</sum>
        </package>
        <package name="autocorr-fa" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-fa-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">ac8b4bd023f1bcd53d237715f77c67c2082fd26f4b6255446894df2c5eeb2c46</sum>
        </package>
        <package name="libreoffice-ure" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>libreoffice-ure-6.4.7.2-12.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">adcae5b96dbaa3c2a82035b76778715c08ff94df553d7243eef592b968ebea05</sum>
        </package>
        <package name="autocorr-sl" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-sl-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">b01ea21005f362d244fc36ac9996405297a1a6127a1c066dbc040867882bc16d</sum>
        </package>
        <package name="autocorr-lb" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-lb-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">b1d64b1be4a061857efa39f6793e8610b564b975b2b39880e0a267998f33a047</sum>
        </package>
        <package name="autocorr-de" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-de-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">bc951cbfa80a95d714c0ef05e6622d0180c307d99963be8bd20f23a34893e400</sum>
        </package>
        <package name="autocorr-en" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-en-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">be9ed8347f3009a8c27b472cebdd4f405d14d88c2e4b23921c9822ae6d8cf1ac</sum>
        </package>
        <package name="autocorr-sv" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-sv-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">c372d53a5ebdd2dc08d9925283e397bf3e5d0b2606651eead25c3e3d8c4b14ff</sum>
        </package>
        <package name="autocorr-lt" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-lt-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">c5ddd80a999fc380c4203cd8249f5abbeab448c88c956e33339376debce67fb7</sum>
        </package>
        <package name="libreoffice-help-en" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>libreoffice-help-en-6.4.7.2-12.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">c65f5b0f4d3f41b408e2999aaaad7487e86868c6093898f4f715cc6fc40bee3a</sum>
        </package>
        <package name="autocorr-tr" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-tr-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">ce19cd7e333ad67650b472187be11833087c3df33d1710dd2a629ca7e930d042</sum>
        </package>
        <package name="autocorr-hu" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-hu-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">d02afc6135bf9544fa6a633555204f51f25c19788bf9768e13ff0177de95d1f8</sum>
        </package>
        <package name="autocorr-da" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-da-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">d5ab7d758e298407f0c4215f8685626d8454d3a90168233438c0d98d586ae840</sum>
        </package>
        <package name="libreoffice-langpack-en" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>libreoffice-langpack-en-6.4.7.2-12.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">dc43c49e6715a03c937ebcfe863f4a5e7bb75e471f82e3acaf0e74d50b1d61cb</sum>
        </package>
        <package name="libreoffice-data" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>libreoffice-data-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">defd3e7ec43437a9bdd9bf0b650c1daaa2c7a44bbca42ac6687652f41a14a867</sum>
        </package>
        <package name="autocorr-fi" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-fi-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">e020ffb3fb6f92931214a964bfa8e501155355b08e7e37613ea9caf1710949f3</sum>
        </package>
        <package name="autocorr-zh" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-zh-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">e155dcf92ef390aeb0124b7c88fd867edfe1230401ea20f8f803e0309a11d540</sum>
        </package>
        <package name="libreoffice-calc" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>libreoffice-calc-6.4.7.2-12.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">e18e53222f88f776bde02fe092d549ff0c60f070a51b9af1dca61615ae4e1cec</sum>
        </package>
        <package name="autocorr-ca" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-ca-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">e3c8b27e49b897f076dd723913033690fedfe8e3352e5a9a19e72c74000b2018</sum>
        </package>
        <package name="libreoffice-pyuno" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>libreoffice-pyuno-6.4.7.2-12.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">e9365176a262d8ea16e45e685acb811485847660c5e6e3575724142b5b95e1f4</sum>
        </package>
        <package name="autocorr-es" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-es-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">ee986b43829e9702107544b4f5350207adb0a4dbcaf5ef094d3cc1727d1de6d1</sum>
        </package>
        <package name="autocorr-ko" version="6.4.7.2" release="12.el8_7.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-12.el8_7.alma.src.rpm">
          <filename>autocorr-ko-6.4.7.2-12.el8_7.alma.noarch.rpm</filename>
          <sum type="sha256">faad53cb227cf2c6e074585a60c0a557ca16aa26d1b8ebd984968a20df95e063</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0095</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-01-12 00:00:00"/>
    <updated date="2023-01-13 08:49:50"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* LibTiff: DoS from Divide By Zero Error (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)
* libtiff: Double free or corruption in rotateImage() function at tiffcrop.c (CVE-2022-2519)
* libtiff: uint32_t underflow leads to out of bounds read and write in tiffcrop.c (CVE-2022-2867)
* libtiff: tiffcrop.c has uint32_t underflow which leads to out of bounds read and write in extractContigSamples8bits() (CVE-2022-2869)
* libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c (CVE-2022-2953)
* libtiff: Assertion fail in rotateImage() function at tiffcrop.c (CVE-2022-2520)
* libtiff: Invalid pointer free operation in TIFFClose() at tif_close.c (CVE-2022-2521)
* libtiff: Invalid crop_width and/or crop_length could cause an out-of-bounds read in reverseSamples16bits() (CVE-2022-2868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0095" id="RHSA-2023:0095" type="rhsa" title="RHSA-2023:0095"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2056" id="CVE-2022-2056" type="cve" title="CVE-2022-2056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2057" id="CVE-2022-2057" type="cve" title="CVE-2022-2057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2058" id="CVE-2022-2058" type="cve" title="CVE-2022-2058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2519" id="CVE-2022-2519" type="cve" title="CVE-2022-2519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2520" id="CVE-2022-2520" type="cve" title="CVE-2022-2520"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2521" id="CVE-2022-2521" type="cve" title="CVE-2022-2521"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2867" id="CVE-2022-2867" type="cve" title="CVE-2022-2867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2868" id="CVE-2022-2868" type="cve" title="CVE-2022-2868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2869" id="CVE-2022-2869" type="cve" title="CVE-2022-2869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2953" id="CVE-2022-2953" type="cve" title="CVE-2022-2953"/>
      <reference href="https://bugzilla.redhat.com/2103222" id="2103222" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2118847" id="2118847" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2118863" id="2118863" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2118869" id="2118869" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122789" id="2122789" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122792" id="2122792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122799" id="2122799" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134432" id="2134432" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0095.html" id="ALSA-2023:0095" type="self" title="ALSA-2023:0095"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="libtiff-devel" version="4.0.9" release="26.el8_7" epoch="0" arch="s390x" src="libtiff-4.0.9-26.el8_7.src.rpm">
          <filename>libtiff-devel-4.0.9-26.el8_7.s390x.rpm</filename>
          <sum type="sha256">858a2e3ed32b5c000f66e591815995d670bb22bd0abf9c0e0febda9c552e3d3b</sum>
        </package>
        <package name="libtiff" version="4.0.9" release="26.el8_7" epoch="0" arch="s390x" src="libtiff-4.0.9-26.el8_7.src.rpm">
          <filename>libtiff-4.0.9-26.el8_7.s390x.rpm</filename>
          <sum type="sha256">c6c88d0a5a25bb3e890cdda9f6c54d85f22ac75162aeea6f04bf8f49f122cf10</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0096</id>
    <title>Moderate: dbus security update</title>
    <issued date="2023-01-12 00:00:00"/>
    <updated date="2023-01-13 08:57:50"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dbus security update</summary>
    <description>D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility.

Security Fix(es):

* dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets (CVE-2022-42010)
* dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type (CVE-2022-42011)
* dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly (CVE-2022-42012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0096" id="RHSA-2023:0096" type="rhsa" title="RHSA-2023:0096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42010" id="CVE-2022-42010" type="cve" title="CVE-2022-42010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42011" id="CVE-2022-42011" type="cve" title="CVE-2022-42011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42012" id="CVE-2022-42012" type="cve" title="CVE-2022-42012"/>
      <reference href="https://bugzilla.redhat.com/2133616" id="2133616" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133617" id="2133617" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133618" id="2133618" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0096.html" id="ALSA-2023:0096" type="self" title="ALSA-2023:0096"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="dbus-x11" version="1.12.8" release="23.el8_7.1" epoch="1" arch="s390x" src="dbus-1.12.8-23.el8_7.1.src.rpm">
          <filename>dbus-x11-1.12.8-23.el8_7.1.s390x.rpm</filename>
          <sum type="sha256">1745508e02d68e395a2857832f1106c1cc568445c96497d2d2a4b8ecb4fd7d80</sum>
        </package>
        <package name="dbus-devel" version="1.12.8" release="23.el8_7.1" epoch="1" arch="s390x" src="dbus-1.12.8-23.el8_7.1.src.rpm">
          <filename>dbus-devel-1.12.8-23.el8_7.1.s390x.rpm</filename>
          <sum type="sha256">c7284b56776d75b86eb97aa3a9cadff1f9a0434ed17b034a3f2a687e233f92f0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0099</id>
    <title>Moderate: virt:rhel and virt-devel:rhel security and bug fix update</title>
    <issued date="2023-01-12 00:00:00"/>
    <updated date="2023-01-13 09:36:23"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>virt:rhel and virt-devel:rhel security and bug fix update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for
Linux on numerous hardware platforms. The virt:rhel module contains packages
which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* QEMU: QXL: qxl_phys2virt unsafe address translation can lead to out-of-bounds read (CVE-2022-4144)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* libvirt kills virtual machine on restart when 2M and 1G hugepages are mounted (BZ#2132176)
* VMs hung on vnc_clipboard_send (BZ#2148504)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0099" id="RHSA-2023:0099" type="rhsa" title="RHSA-2023:0099"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4144" id="CVE-2022-4144" type="cve" title="CVE-2022-4144"/>
      <reference href="https://bugzilla.redhat.com/2148506" id="2148506" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0099.html" id="ALSA-2023:0099" type="self" title="ALSA-2023:0099"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <module name="virt" stream="rhel" version="8060020220803091505" context="9edba152" arch="s390x"/>
        <package name="libguestfs-tools" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>libguestfs-tools-1.44.0-9.module_el8.7.0+3346+68867adb.alma.noarch.rpm</filename>
          <sum type="sha256">02e444d6d29bf20b7319e4274b15a47c2f350da31ca3285b10f639c1365f17bd</sum>
        </package>
        <package name="qemu-kvm-core" version="6.2.0" release="21.module_el8.7.0+3387+571b583b.2" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-21.module_el8.7.0+3387+571b583b.2.src.rpm">
          <filename>qemu-kvm-core-6.2.0-21.module_el8.7.0+3387+571b583b.2.s390x.rpm</filename>
          <sum type="sha256">06c79ef12dd221c1a0186c5c01691013969e2facdc3da039d7831e4d872fd4f0</sum>
        </package>
        <package name="libnbd-devel" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libnbd-devel-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">0c1f0ee145a6b54bb1a2b502a47bc75e63b75d7e6b2e8c60a6c053988fc3b6ab</sum>
        </package>
        <package name="libguestfs-rescue" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>libguestfs-rescue-1.44.0-9.module_el8.7.0+3346+68867adb.alma.s390x.rpm</filename>
          <sum type="sha256">0dc4883556c3397dfd99ebc8b242b81d5ba8a524fcc55193b18e3b86eadbe46a</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">0f89ae040faf04ceac38030ba022c1fabd222061ed4b211352035cbc40de1590</sum>
        </package>
        <package name="libguestfs-xfs" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>libguestfs-xfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.s390x.rpm</filename>
          <sum type="sha256">0f8e08c935219a059c5801d07642dbda4fc4aaa01eb0f0bc8ca7fc331c729862</sum>
        </package>
        <package name="libguestfs-java-devel" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>libguestfs-java-devel-1.44.0-9.module_el8.7.0+3346+68867adb.alma.s390x.rpm</filename>
          <sum type="sha256">148c1328c2d7f8226929ced9085e807ba318f2e6f69fd855d715b9cb825b9c18</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="6.2.0" release="21.module_el8.7.0+3387+571b583b.2" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-21.module_el8.7.0+3387+571b583b.2.src.rpm">
          <filename>qemu-kvm-block-iscsi-6.2.0-21.module_el8.7.0+3387+571b583b.2.s390x.rpm</filename>
          <sum type="sha256">15efbaec02f4b5e09048ca3ac2b216832b357022eb8acdea455152a13a5ee4b6</sum>
        </package>
        <package name="libguestfs-inspect-icons" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>libguestfs-inspect-icons-1.44.0-9.module_el8.7.0+3346+68867adb.alma.noarch.rpm</filename>
          <sum type="sha256">16137e9e8a6c2db5a7041a40ca25c76cecb85f68187723b6e0211878b8bb3951</sum>
        </package>
        <package name="netcf-devel" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-devel-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1888edc09e8d44539c2c7b84b7a8df91477b8a725fe93436ac4d71106e177d48</sum>
        </package>
        <package name="hivex-devel" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>hivex-devel-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1aa145aa6a3f900531fc1c8f1c161197f37539d113d47c14efd9c66def20940a</sum>
        </package>
        <package name="nbdfuse" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdfuse-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1d3157c38399bbfb00c7e7762135285383554b08b780fcf5eb390ce2f5845d23</sum>
        </package>
        <package name="libnbd" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">2220e7631c2178fe00b6e20d56043e2efc51bec8ccbe9c14dabccdb05ec81abf</sum>
        </package>
        <package name="libguestfs-tools-c" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>libguestfs-tools-c-1.44.0-9.module_el8.7.0+3346+68867adb.alma.s390x.rpm</filename>
          <sum type="sha256">2741350b37285bca12abb5174665918d93feb211a184e9d02e640bb028a73248</sum>
        </package>
        <package name="ruby-libguestfs" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>ruby-libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.s390x.rpm</filename>
          <sum type="sha256">2806e26a704af6245e29cb823db9db25b8a9835cc048e6df32d61336ceeac2d2</sum>
        </package>
        <package name="nbdkit-basic-plugins" version="1.24.0" release="4.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="nbdkit-1.24.0-4.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdkit-basic-plugins-1.24.0-4.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">2e0f14d09fa0cfcc24321f8f5b071b046393e6b6b47eb53b3183c3892d16ec10</sum>
        </package>
        <package name="nbdkit-gzip-plugin" version="1.24.0" release="4.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="nbdkit-1.24.0-4.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdkit-gzip-plugin-1.24.0-4.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">3467127b647479740155fb53faa93e50e8b1f75ada8245963d1ae84a354eae23</sum>
        </package>
        <package name="nbdkit-tmpdisk-plugin" version="1.24.0" release="4.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="nbdkit-1.24.0-4.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdkit-tmpdisk-plugin-1.24.0-4.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">34f55817fff3d8b742f9003eeb632773f59a5bd00ae945f17f9548bf43a6cdfb</sum>
        </package>
        <package name="nbdkit-python-plugin" version="1.24.0" release="4.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="nbdkit-1.24.0-4.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdkit-python-plugin-1.24.0-4.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">3827a4bd34cd58eadb5556a9a91d818000a546a136832748a092dec26e1ae46b</sum>
        </package>
        <package name="libguestfs-gobject-devel" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>libguestfs-gobject-devel-1.44.0-9.module_el8.7.0+3346+68867adb.alma.s390x.rpm</filename>
          <sum type="sha256">386321f59ad6ad977f496f91d40d7029aafc3efeecfcd73cf28c02b223285165</sum>
        </package>
        <package name="libvirt-wireshark" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-wireshark-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">39927e875d0ec86cc72e4f6a0c450091cad7180c3332c39074111eecb554b1e8</sum>
        </package>
        <package name="libvirt-daemon" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-daemon-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">39fc2f4f2a2aeafb7ed9e8774ebc8ec62f230467d7b3eac14c38f1fc159587f4</sum>
        </package>
        <package name="nbdkit-tar-filter" version="1.24.0" release="4.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="nbdkit-1.24.0-4.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdkit-tar-filter-1.24.0-4.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">3fc4e72a3786680b24c5406918e93716be0f985ddc77dbb014b237dfd78a7724</sum>
        </package>
        <package name="libguestfs-appliance" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>libguestfs-appliance-1.44.0-9.module_el8.7.0+3346+68867adb.alma.s390x.rpm</filename>
          <sum type="sha256">4202edfbcefd309172886b86f1d4fe560f1c9345b215e743bb7d46d699faa2ba</sum>
        </package>
        <package name="ruby-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ruby-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">4428b40d29de3a3eda15340b2cbacebe838ba363b3897a1a91f904b9f2b4f8b9</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-daemon-driver-storage-logical-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">476992709ead402467ff5a3aea8b850fb0d55effd9c87c4574c028ad76a761a7</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-daemon-driver-qemu-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">47f78e23eadfd9e675baf040d46047a2c6220b14ddef3adc95a1f9466a0a7274</sum>
        </package>
        <package name="nbdkit-nbd-plugin" version="1.24.0" release="4.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="nbdkit-1.24.0-4.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdkit-nbd-plugin-1.24.0-4.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">496a034f31128e3fb69a207b395a3aa2a52cbe17ae903dcfc119e76fff981e06</sum>
        </package>
        <package name="python3-libguestfs" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>python3-libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.s390x.rpm</filename>
          <sum type="sha256">4b70e150a161d9240f5cd451198efccecfcf07e92faad6363aef2edf5a89287e</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-daemon-driver-nodedev-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">4c7467853f6108f82a9a2a602122f8e4773a31e31bf511069b8d9bf0f65b1776</sum>
        </package>
        <package name="qemu-guest-agent" version="6.2.0" release="21.module_el8.7.0+3387+571b583b.2" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-21.module_el8.7.0+3387+571b583b.2.src.rpm">
          <filename>qemu-guest-agent-6.2.0-21.module_el8.7.0+3387+571b583b.2.s390x.rpm</filename>
          <sum type="sha256">4eabce4618391c0561501ab4ac141ff2011cbcb9487865316b017a03c95eadef</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-daemon-driver-storage-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">4f55bef86bffe59751048573d26089ecd45ee5b4fcc19b3cfbd0a3e470f45d66</sum>
        </package>
        <package name="nbdkit-gzip-filter" version="1.24.0" release="4.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="nbdkit-1.24.0-4.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdkit-gzip-filter-1.24.0-4.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">543eec8021d86e39c98492ad5d554737296a9490f91b9d6e14ed442a60ffbcfe</sum>
        </package>
        <package name="nbdkit-xz-filter" version="1.24.0" release="4.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="nbdkit-1.24.0-4.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdkit-xz-filter-1.24.0-4.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">544bc7d627c74d27e9518bbb6852249d51edaf17a82f9a6e0cc9c15750834350</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="6.2.0" release="21.module_el8.7.0+3387+571b583b.2" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-21.module_el8.7.0+3387+571b583b.2.src.rpm">
          <filename>qemu-kvm-block-curl-6.2.0-21.module_el8.7.0+3387+571b583b.2.s390x.rpm</filename>
          <sum type="sha256">55489e2a212881bb54479026ef9ba881982d0fa5f184c02409e4f31309cad28d</sum>
        </package>
        <package name="libvirt-client" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-client-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">59f1d1cebfd0d4e8b6beffe6e1fa9cb5aa538c9ba0245b5582d27f53d608ea13</sum>
        </package>
        <package name="nbdkit-curl-plugin" version="1.24.0" release="4.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="nbdkit-1.24.0-4.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdkit-curl-plugin-1.24.0-4.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">5b957ab5038e5015996a389e29aea4ad1810390ab9a16ff04471f601baf5ac55</sum>
        </package>
        <package name="libvirt-libs" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-libs-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">5e05779cd98dda808aca3e5925c11551e5b8d7c62bedd17826b7a26ee0d74aba</sum>
        </package>
        <package name="python3-libnbd" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>python3-libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">5e93f1875db0f5a6e64e8d785a745072133d63b53e30cf6a7984ebd2e8119320</sum>
        </package>
        <package name="libguestfs-javadoc" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>libguestfs-javadoc-1.44.0-9.module_el8.7.0+3346+68867adb.alma.noarch.rpm</filename>
          <sum type="sha256">5ff0b9412f7f30017134dadd25faa20994f6dc98e48526e8958f4d6783fd75e0</sum>
        </package>
        <package name="libvirt-nss" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-nss-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">61f00e2f36cc3ea36d25d2de96ae559da3b7671395fa617cea488508f7d96ecb</sum>
        </package>
        <package name="nbdkit-linuxdisk-plugin" version="1.24.0" release="4.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="nbdkit-1.24.0-4.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdkit-linuxdisk-plugin-1.24.0-4.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">62fd6ce34b03f41e42c3cf84ac570f13d1353b5d37883d950d39b648f30fd7bd</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-daemon-driver-nwfilter-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">6c42dfcf1a59e7081cdf5824aa6b3a36e12502ef65dc38cc6e1d96a7506d1e22</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-daemon-driver-storage-disk-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">6ebfe04232a27a596dfd711fca407b11091a1a6a056684d379075ff7389f54d1</sum>
        </package>
        <package name="libguestfs-man-pages-uk" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>libguestfs-man-pages-uk-1.44.0-9.module_el8.7.0+3346+68867adb.alma.noarch.rpm</filename>
          <sum type="sha256">6f0f92848440d17b2cc57c8b98e3677ac3b85f9bd3d55cfcaaaba6e998abe0d3</sum>
        </package>
        <package name="nbdkit-devel" version="1.24.0" release="4.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="nbdkit-1.24.0-4.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdkit-devel-1.24.0-4.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">7156b66a0e22dad31e1a0cad0cd7fdc686ef827edbea232c3813e9b4fd1c4843</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-gluster" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-daemon-driver-storage-gluster-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">76b8f898a92aac9e05e035bfa2dc0edb1c1024769c8de8214537f70639ed1456</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-daemon-driver-network-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">780d0f147ac23848f9440887a0a01b020f3125246da90435079102297b50cc99</sum>
        </package>
        <package name="libguestfs-rsync" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>libguestfs-rsync-1.44.0-9.module_el8.7.0+3346+68867adb.alma.s390x.rpm</filename>
          <sum type="sha256">7b2c1400e2e80f48042950b2e0fdaa7efd277915afb908d1d3342e477c9a74fa</sum>
        </package>
        <package name="libvirt-lock-sanlock" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-lock-sanlock-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">827604346d49958520615382a3a090e3bff589cab1eb87f953c39100792fd400</sum>
        </package>
        <package name="libtpms" version="0.9.1" release="1.20211126git1ff6fe1f43.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="libtpms-0.9.1-1.20211126git1ff6fe1f43.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>libtpms-0.9.1-1.20211126git1ff6fe1f43.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">83f852cdafecbbea044fa2bcfd864389be803a14220066c0e9976118686575b2</sum>
        </package>
        <package name="netcf-libs" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-libs-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">843b61e4019e8cec44d5f5823d3c8c0b803997791aecef6ff1023224147cd6f8</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">863b3c56b8c73e3947a7b3a31c2b90e1acaee1c5592ca925ae143eaf386e4d3a</sum>
        </package>
        <package name="swtpm-tools" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-tools-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">87ce1c2ecc368965a92cf71a29a7cb1331508c7c86394cfaa7e4e87d20897d7b</sum>
        </package>
        <package name="supermin-devel" version="5.2.1" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="supermin-5.2.1-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>supermin-devel-5.2.1-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">8a47307269cf95719225e1e27dcd1cebdf6a0481948e4a044db972af12de9ce3</sum>
        </package>
        <package name="lua-guestfs" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>lua-guestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.s390x.rpm</filename>
          <sum type="sha256">8cfb0b3737a9bd6c1fcd66ae0bbf77baa161347356d976c25477a81a3e00f7c5</sum>
        </package>
        <package name="swtpm-tools-pkcs11" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-tools-pkcs11-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">8e7eeb060f1253ff8a48085d0b452c2ba2c1837e286fd23d91426f255d72398a</sum>
        </package>
        <package name="libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>libguestfs-devel-1.44.0-9.module_el8.7.0+3346+68867adb.alma.s390x.rpm</filename>
          <sum type="sha256">909b3811f12cd2be60a252db1d136e856f399aacc4e2dc6d8a1f29590bc19bfd</sum>
        </package>
        <package name="libguestfs-gobject" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>libguestfs-gobject-1.44.0-9.module_el8.7.0+3346+68867adb.alma.s390x.rpm</filename>
          <sum type="sha256">911844dc3eb0d7d2361af358d5cfae64eb3afcd22289d75db75909cf404fbf95</sum>
        </package>
        <package name="netcf" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">9268b4ab854af88a5e511f78b47cf3c4acd66d76f7ea901452f6efd3f9c8bc7c</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-daemon-config-network-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">986ed6c4941ed8f4a1a9e0a48204ef437c503f04db8ec4b0bf5642f35e69e1c5</sum>
        </package>
        <package name="hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">9d259d5ff0ee30b3a2a8e5f897675750f74741ed06d50d3623cf469d1d0f01d8</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">9e708318ce8f8ad0a5e0c0b1d74feaaebf3f72cd2c7d5ad153369e6c3d339d2f</sum>
        </package>
        <package name="libiscsi" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">a1c871e87ebd136bfd498f13824563fd7428fcaf66bcffb341cfbb8370c2a18d</sum>
        </package>
        <package name="libguestfs-man-pages-ja" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>libguestfs-man-pages-ja-1.44.0-9.module_el8.7.0+3346+68867adb.alma.noarch.rpm</filename>
          <sum type="sha256">a24afd94846c83f897f568793855258d00a09c43c5c58b529aa001cebed68899</sum>
        </package>
        <package name="virt-dib" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>virt-dib-1.44.0-9.module_el8.7.0+3346+68867adb.alma.s390x.rpm</filename>
          <sum type="sha256">a2f2c35d52a46741dee79f153c168d30d444cd83bc38317dba68887aba4e3688</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-daemon-kvm-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">a33f5d16342c4c26bb262297981769dcbbe35e0176d8bf69d3eb5d9cbeff85ce</sum>
        </package>
        <package name="libtpms-devel" version="0.9.1" release="1.20211126git1ff6fe1f43.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="libtpms-0.9.1-1.20211126git1ff6fe1f43.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>libtpms-devel-0.9.1-1.20211126git1ff6fe1f43.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">a50381a89f89053ed814be34317b44d9426e22a971d8381376fa5253640989ed</sum>
        </package>
        <package name="swtpm" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">a7fbed17619ce4d6d7d43a459be652ec92882b41903ac386ebfd9815806bc622</sum>
        </package>
        <package name="libguestfs-java" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>libguestfs-java-1.44.0-9.module_el8.7.0+3346+68867adb.alma.s390x.rpm</filename>
          <sum type="sha256">a855e37efd46e68a984aa83e4884ffb83a6513d9089f174b8725ee2aacbf69c3</sum>
        </package>
        <package name="perl-Sys-Virt" version="8.0.0" release="1.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="perl-Sys-Virt-8.0.0-1.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>perl-Sys-Virt-8.0.0-1.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">a8b115eb9ca2707d1d7f800ac1b7730dcc6718168ff355f065464e6778ef5929</sum>
        </package>
        <package name="libguestfs-winsupport" version="8.6" release="1.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libguestfs-winsupport-8.6-1.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libguestfs-winsupport-8.6-1.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">ada90637fb4d452634f920a52954199c36cc89ea2a264657c470fd9bacc9b92d</sum>
        </package>
        <package name="nbdkit-ssh-plugin" version="1.24.0" release="4.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="nbdkit-1.24.0-4.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdkit-ssh-plugin-1.24.0-4.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">b5209c1c0276bc9961996e40b4a2424b53cfeba8e68328dc6fc573d358f146da</sum>
        </package>
        <package name="nbdkit-server" version="1.24.0" release="4.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="nbdkit-1.24.0-4.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdkit-server-1.24.0-4.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">b54088cdcbc6784998b7aed65d4dfbee91bf92e6ced639b0a8d17e185bb104eb</sum>
        </package>
        <package name="libiscsi-utils" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-utils-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">b6eb101dc2787a7d79b4fe51913319933f5927d1816ea03592d2be849ce21faf</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-daemon-driver-storage-core-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">b735495f8a3666bad75ec235f685e398835c4845190e5751dafb25696819a71b</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">bb17cfc1a8f09fc33f9aff0304edb35d7ef849c51073bc8a88bfacfa2b1bf96f</sum>
        </package>
        <package name="libvirt-docs" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-docs-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">bbf42d1cb0f5a4e0603b1efcbc65df75a51ebbfaad81d987504c3ccf75f93e51</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-daemon-config-nwfilter-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">bcf3e874d843099d8965587931933b66eeea3f3139c9f916ae097c653a1db3ef</sum>
        </package>
        <package name="nbdkit-basic-filters" version="1.24.0" release="4.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="nbdkit-1.24.0-4.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdkit-basic-filters-1.24.0-4.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">bda6a0c1ec7602a872fd69fa5422b45e0879171c788e31bb3fc0065d4604a3a5</sum>
        </package>
        <package name="nbdkit" version="1.24.0" release="4.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="nbdkit-1.24.0-4.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdkit-1.24.0-4.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">c190c1e39dfd54e9aa35f3e99c45e07fe131f8a2d4b1a25ba0675096a1ee929d</sum>
        </package>
        <package name="libvirt-dbus" version="1.3.0" release="2.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libvirt-dbus-1.3.0-2.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libvirt-dbus-1.3.0-2.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">c20042be5784c1f4323e5590891be2a0e33244acff6b45149f36a2eef834064b</sum>
        </package>
        <package name="perl-Sys-Guestfs" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>perl-Sys-Guestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.s390x.rpm</filename>
          <sum type="sha256">c2e4445b22865e4ca9e46deb4cb750e6968b1998299ca99873f38cbea5c4a369</sum>
        </package>
        <package name="nbdkit-example-plugins" version="1.24.0" release="4.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="nbdkit-1.24.0-4.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdkit-example-plugins-1.24.0-4.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">caf39e8d58c097e178d496cf7bc73e86eee587c75862c0c5b7bab09a230e0624</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="6.2.0" release="21.module_el8.7.0+3387+571b583b.2" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-21.module_el8.7.0+3387+571b583b.2.src.rpm">
          <filename>qemu-kvm-block-ssh-6.2.0-21.module_el8.7.0+3387+571b583b.2.s390x.rpm</filename>
          <sum type="sha256">cb3ff8d07a2646ce7ef86004c8cbd742c75bc9e171a6b1e942b227d2642621a4</sum>
        </package>
        <package name="libguestfs-gfs2" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>libguestfs-gfs2-1.44.0-9.module_el8.7.0+3346+68867adb.alma.s390x.rpm</filename>
          <sum type="sha256">ce4710ea1603f5a186d16a7de0bfd83848861e56043c64a8a827343432a77273</sum>
        </package>
        <package name="swtpm-libs" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-libs-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">d077f2d1f54aa47907a883e12d46f0632e33ad5141bd16a25759a580f851b91c</sum>
        </package>
        <package name="libguestfs-bash-completion" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>libguestfs-bash-completion-1.44.0-9.module_el8.7.0+3346+68867adb.alma.noarch.rpm</filename>
          <sum type="sha256">d16a4bd9c30be31a977a0285f4b7ad94f54ca9ac683760637586ca42c90244dc</sum>
        </package>
        <package name="libiscsi-devel" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-devel-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">d45a7d8438477f375ed86276eea276fd3bb0965844cb8733a09691fc68d730db</sum>
        </package>
        <package name="swtpm-devel" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-devel-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">d69840154560e2ca3f4ea1315bfcca103b2260692f2c3d5fa1a76dbed7ddfbe1</sum>
        </package>
        <package name="libguestfs" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.s390x.rpm</filename>
          <sum type="sha256">d9d6b970fd8c75bb5882f611bc06d245522ffd868b07a5bc21a80655d67f2a9c</sum>
        </package>
        <package name="qemu-kvm-docs" version="6.2.0" release="21.module_el8.7.0+3387+571b583b.2" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-21.module_el8.7.0+3387+571b583b.2.src.rpm">
          <filename>qemu-kvm-docs-6.2.0-21.module_el8.7.0+3387+571b583b.2.s390x.rpm</filename>
          <sum type="sha256">dbc9e9d1a9d3b151eda6d757a7fee8cb3e2e30e555c64003926f1dae0a7143b5</sum>
        </package>
        <package name="libvirt-devel" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-devel-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">dddebe062704a2c7a8a9b3afb1f9f4d01201367c44f8330a4ea10e3cd7f4673f</sum>
        </package>
        <package name="qemu-kvm-common" version="6.2.0" release="21.module_el8.7.0+3387+571b583b.2" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-21.module_el8.7.0+3387+571b583b.2.src.rpm">
          <filename>qemu-kvm-common-6.2.0-21.module_el8.7.0+3387+571b583b.2.s390x.rpm</filename>
          <sum type="sha256">dfb3d67455227ef49eb759d821f18ba636b56a18ecd499a5d1e3c89abaa90c29</sum>
        </package>
        <package name="supermin" version="5.2.1" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="supermin-5.2.1-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>supermin-5.2.1-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">e15b529769bbaa1d035eb7e4d4f58f4757e58772523d45cb07cc7533eeef0057</sum>
        </package>
        <package name="libvirt" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">e1650916a013fe95397197ff9bdd201dbbfd137068d52f0da9322241602f097a</sum>
        </package>
        <package name="python3-libvirt" version="8.0.0" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="libvirt-python-8.0.0-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>python3-libvirt-8.0.0-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">e36c5a8c03f3393622b5dd5badefcd4a05ee01b8de17de28812017ddfda63954</sum>
        </package>
        <package name="python3-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>python3-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">ec11102e66953715d97704c820c0effcd80944fdd525efca9645f70b1cfa2fa9</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="6.2.0" release="21.module_el8.7.0+3387+571b583b.2" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-21.module_el8.7.0+3387+571b583b.2.src.rpm">
          <filename>qemu-kvm-block-rbd-6.2.0-21.module_el8.7.0+3387+571b583b.2.s390x.rpm</filename>
          <sum type="sha256">ed5a2c8b8dc0d71483119f55adfceb2ba09771e6cce683592b4a26ae05abbdf0</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">ef610e9dbb4c4535e4fb487cb98c47db94c82cb8debd9dce3ae3f2146b89de7d</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-daemon-driver-secret-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">f141e18f2c72a4929c43ae7bb662bb9a7fce0d5a4c59eba9ed3c74a683664c71</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="8.0.0" release="10.1.module_el8.7.0+3387+571b583b" epoch="0" arch="s390x" src="libvirt-8.0.0-10.1.module_el8.7.0+3387+571b583b.src.rpm">
          <filename>libvirt-daemon-driver-interface-8.0.0-10.1.module_el8.7.0+3387+571b583b.s390x.rpm</filename>
          <sum type="sha256">f329702a39e8d4608fa4e3aee3dd3485a6172a51fe3e2ccdbd32e19a6314a609</sum>
        </package>
        <package name="qemu-img" version="6.2.0" release="21.module_el8.7.0+3387+571b583b.2" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-21.module_el8.7.0+3387+571b583b.2.src.rpm">
          <filename>qemu-img-6.2.0-21.module_el8.7.0+3387+571b583b.2.s390x.rpm</filename>
          <sum type="sha256">f7361a8abf172ce2a1603c30bbb71f75f3fd7a157286825dab13d98390bcd03d</sum>
        </package>
        <package name="perl-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>perl-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">fcc1bade9f3d715b09d2679d6efc9fd94b2faa9e912dcae68dbc372613f90965</sum>
        </package>
        <package name="qemu-kvm" version="6.2.0" release="21.module_el8.7.0+3387+571b583b.2" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-21.module_el8.7.0+3387+571b583b.2.src.rpm">
          <filename>qemu-kvm-6.2.0-21.module_el8.7.0+3387+571b583b.2.s390x.rpm</filename>
          <sum type="sha256">fecada8e6e1e3311b696dd18956348d9e6e97803b11a15bcad666f6b3c155343</sum>
        </package>
        <package name="nbdkit-tar-plugin" version="1.24.0" release="4.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="nbdkit-1.24.0-4.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdkit-tar-plugin-1.24.0-4.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">fff6d37fb9113980ee9c54fdd270361609f0d4020a58b37b868fb57c4372f1f4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0110</id>
    <title>Moderate: sqlite security update</title>
    <issued date="2023-01-12 00:00:00"/>
    <updated date="2023-01-16 11:22:54"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>sqlite security update</summary>
    <description>SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server.

Security Fix(es):

* sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API (CVE-2022-35737)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0110" id="RHSA-2023:0110" type="rhsa" title="RHSA-2023:0110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-35737" id="CVE-2022-35737" type="cve" title="CVE-2022-35737"/>
      <reference href="https://bugzilla.redhat.com/2110291" id="2110291" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0110.html" id="ALSA-2023:0110" type="self" title="ALSA-2023:0110"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="lemon" version="3.26.0" release="17.el8_7" epoch="0" arch="s390x" src="sqlite-3.26.0-17.el8_7.src.rpm">
          <filename>lemon-3.26.0-17.el8_7.s390x.rpm</filename>
          <sum type="sha256">0c8b5c75818c65b45282879b82562ddb7e5f5882af3b719d048deccd73bc7b80</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0113</id>
    <title>Moderate: postgresql:10 security update</title>
    <issued date="2023-01-12 00:00:00"/>
    <updated date="2023-01-16 11:57:43"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql:10 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: Extension scripts replace objects not belonging to the extension. (CVE-2022-2625)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0113" id="RHSA-2023:0113" type="rhsa" title="RHSA-2023:0113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2625" id="CVE-2022-2625" type="cve" title="CVE-2022-2625"/>
      <reference href="https://bugzilla.redhat.com/2113825" id="2113825" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0113.html" id="ALSA-2023:0113" type="self" title="ALSA-2023:0113"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <module name="postgresql" stream="10" version="8070020230112095837" context="9edba152" arch="s390x"/>
        <package name="postgresql-plperl" version="10.23" release="1.module_el8.7.0+3379+54d21c26" epoch="0" arch="s390x" src="postgresql-10.23-1.module_el8.7.0+3379+54d21c26.src.rpm">
          <filename>postgresql-plperl-10.23-1.module_el8.7.0+3379+54d21c26.s390x.rpm</filename>
          <sum type="sha256">0267d0d633bf54ae481398e53c5195c9dbc70fd41ce5f05a08387c0d9fc61b86</sum>
        </package>
        <package name="postgresql-upgrade" version="10.23" release="1.module_el8.7.0+3379+54d21c26" epoch="0" arch="s390x" src="postgresql-10.23-1.module_el8.7.0+3379+54d21c26.src.rpm">
          <filename>postgresql-upgrade-10.23-1.module_el8.7.0+3379+54d21c26.s390x.rpm</filename>
          <sum type="sha256">315b414d75d126fd64a1af3b84319e3fe8a828cf7383fc10d61c5e529b16706a</sum>
        </package>
        <package name="postgresql-contrib" version="10.23" release="1.module_el8.7.0+3379+54d21c26" epoch="0" arch="s390x" src="postgresql-10.23-1.module_el8.7.0+3379+54d21c26.src.rpm">
          <filename>postgresql-contrib-10.23-1.module_el8.7.0+3379+54d21c26.s390x.rpm</filename>
          <sum type="sha256">3739c8013559d150ffcb1e9566484e94062761df52edabd2bd463f8d2e8bc1e3</sum>
        </package>
        <package name="postgresql-docs" version="10.23" release="1.module_el8.7.0+3379+54d21c26" epoch="0" arch="s390x" src="postgresql-10.23-1.module_el8.7.0+3379+54d21c26.src.rpm">
          <filename>postgresql-docs-10.23-1.module_el8.7.0+3379+54d21c26.s390x.rpm</filename>
          <sum type="sha256">43071684f1a1dab40530380d0e0aed75caee7182098d1d9c40a989c083d8b8b0</sum>
        </package>
        <package name="postgresql-server-devel" version="10.23" release="1.module_el8.7.0+3379+54d21c26" epoch="0" arch="s390x" src="postgresql-10.23-1.module_el8.7.0+3379+54d21c26.src.rpm">
          <filename>postgresql-server-devel-10.23-1.module_el8.7.0+3379+54d21c26.s390x.rpm</filename>
          <sum type="sha256">51ca98dbd34fa24b35eeec1a15ddd8407231d5e4108aa9f10a8da86ef319f60b</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="10.23" release="1.module_el8.7.0+3379+54d21c26" epoch="0" arch="s390x" src="postgresql-10.23-1.module_el8.7.0+3379+54d21c26.src.rpm">
          <filename>postgresql-upgrade-devel-10.23-1.module_el8.7.0+3379+54d21c26.s390x.rpm</filename>
          <sum type="sha256">76e71b5725b60bc01b96ce7cb6339706e5988c9b3e7639973d411c7659b98148</sum>
        </package>
        <package name="postgresql-server" version="10.23" release="1.module_el8.7.0+3379+54d21c26" epoch="0" arch="s390x" src="postgresql-10.23-1.module_el8.7.0+3379+54d21c26.src.rpm">
          <filename>postgresql-server-10.23-1.module_el8.7.0+3379+54d21c26.s390x.rpm</filename>
          <sum type="sha256">79c7aa0ed92dfc9a4bfe153732433eff95636ea36b884cc71f160ee5ee365431</sum>
        </package>
        <package name="postgresql-plpython3" version="10.23" release="1.module_el8.7.0+3379+54d21c26" epoch="0" arch="s390x" src="postgresql-10.23-1.module_el8.7.0+3379+54d21c26.src.rpm">
          <filename>postgresql-plpython3-10.23-1.module_el8.7.0+3379+54d21c26.s390x.rpm</filename>
          <sum type="sha256">7b5d6c60ffbda531568661d353df9517e474a4d6867a54d26af70d416df13448</sum>
        </package>
        <package name="postgresql-pltcl" version="10.23" release="1.module_el8.7.0+3379+54d21c26" epoch="0" arch="s390x" src="postgresql-10.23-1.module_el8.7.0+3379+54d21c26.src.rpm">
          <filename>postgresql-pltcl-10.23-1.module_el8.7.0+3379+54d21c26.s390x.rpm</filename>
          <sum type="sha256">9063d0b77f2eee654335321731c02493fd7c9e8eaadd6b5cdc3a25d800204334</sum>
        </package>
        <package name="postgresql-test" version="10.23" release="1.module_el8.7.0+3379+54d21c26" epoch="0" arch="s390x" src="postgresql-10.23-1.module_el8.7.0+3379+54d21c26.src.rpm">
          <filename>postgresql-test-10.23-1.module_el8.7.0+3379+54d21c26.s390x.rpm</filename>
          <sum type="sha256">968df8cc340a50fe2ba0a89da9f5eedc504b7c68d7d7723ea2a8d0b91d61ae67</sum>
        </package>
        <package name="postgresql" version="10.23" release="1.module_el8.7.0+3379+54d21c26" epoch="0" arch="s390x" src="postgresql-10.23-1.module_el8.7.0+3379+54d21c26.src.rpm">
          <filename>postgresql-10.23-1.module_el8.7.0+3379+54d21c26.s390x.rpm</filename>
          <sum type="sha256">a999fe162dbbc1baf7ee58228eecdc25532f7d6b6322493725c26c2191ab3f29</sum>
        </package>
        <package name="postgresql-static" version="10.23" release="1.module_el8.7.0+3379+54d21c26" epoch="0" arch="s390x" src="postgresql-10.23-1.module_el8.7.0+3379+54d21c26.src.rpm">
          <filename>postgresql-static-10.23-1.module_el8.7.0+3379+54d21c26.s390x.rpm</filename>
          <sum type="sha256">aba6614402f71d7bc4b7c3336b3f7de7cb9f79724f2d1f4908f0e8bdd73917c5</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="10.23" release="1.module_el8.7.0+3379+54d21c26" epoch="0" arch="s390x" src="postgresql-10.23-1.module_el8.7.0+3379+54d21c26.src.rpm">
          <filename>postgresql-test-rpm-macros-10.23-1.module_el8.7.0+3379+54d21c26.s390x.rpm</filename>
          <sum type="sha256">b845ddc43306cf56239dcc1a9f8c8a8f5b5686255eaf8696eec79af191bbbbfe</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0116</id>
    <title>Moderate: libtasn1 security update</title>
    <issued date="2023-01-12 00:00:00"/>
    <updated date="2023-01-16 11:46:41"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtasn1 security update</summary>
    <description>A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

* libtasn1: Out-of-bound access in ETYPE_OK (CVE-2021-46848)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0116" id="RHSA-2023:0116" type="rhsa" title="RHSA-2023:0116"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46848" id="CVE-2021-46848" type="cve" title="CVE-2021-46848"/>
      <reference href="https://bugzilla.redhat.com/2140058" id="2140058" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0116.html" id="ALSA-2023:0116" type="self" title="ALSA-2023:0116"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="libtasn1-tools" version="4.13" release="4.el8_7" epoch="0" arch="s390x" src="libtasn1-4.13-4.el8_7.src.rpm">
          <filename>libtasn1-tools-4.13-4.el8_7.s390x.rpm</filename>
          <sum type="sha256">212d2d511f2136d8901c7a48222436c971824b09898e2f141b68ec9aea3ed321</sum>
        </package>
        <package name="libtasn1-devel" version="4.13" release="4.el8_7" epoch="0" arch="s390x" src="libtasn1-4.13-4.el8_7.src.rpm">
          <filename>libtasn1-devel-4.13-4.el8_7.s390x.rpm</filename>
          <sum type="sha256">58c3825c2ebf96ab2ec6606dde3fdee8f2110a6cc31a936b9393564ac89f1fcf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0171</id>
    <title>Important: dpdk security update</title>
    <issued date="2023-01-16 00:00:00"/>
    <updated date="2023-01-16 12:28:06"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dpdk security update</summary>
    <description>The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space.

Security Fix(es):

* dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs (CVE-2022-2132)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0171" id="RHSA-2023:0171" type="rhsa" title="RHSA-2023:0171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2132" id="CVE-2022-2132" type="cve" title="CVE-2022-2132"/>
      <reference href="https://bugzilla.redhat.com/2099475" id="2099475" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0171.html" id="ALSA-2023:0171" type="self" title="ALSA-2023:0171"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="dpdk-doc" version="21.11" release="2.el8_7" epoch="0" arch="noarch" src="dpdk-21.11-2.el8_7.src.rpm">
          <filename>dpdk-doc-21.11-2.el8_7.noarch.rpm</filename>
          <sum type="sha256">22cbc768b9973ba7dafc9cf886044d9aa5bd438605161b4b60abb372b6e6e017</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0173</id>
    <title>Moderate: libxml2 security update</title>
    <issued date="2023-01-16 00:00:00"/>
    <updated date="2023-01-16 12:33:15"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

* libxml2: integer overflows with XML_PARSE_HUGE (CVE-2022-40303)
* libxml2: dict corruption caused by entity reference cycles (CVE-2022-40304)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0173" id="RHSA-2023:0173" type="rhsa" title="RHSA-2023:0173"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40303" id="CVE-2022-40303" type="cve" title="CVE-2022-40303"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40304" id="CVE-2022-40304" type="cve" title="CVE-2022-40304"/>
      <reference href="https://bugzilla.redhat.com/2136266" id="2136266" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2136288" id="2136288" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0173.html" id="ALSA-2023:0173" type="self" title="ALSA-2023:0173"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="libxml2-devel" version="2.9.7" release="15.el8_7.1" epoch="0" arch="s390x" src="libxml2-2.9.7-15.el8_7.1.src.rpm">
          <filename>libxml2-devel-2.9.7-15.el8_7.1.s390x.rpm</filename>
          <sum type="sha256">aeeff1f757486864e8284b38cc700d3ad57d6a3277d5eff4241f842afbab9fab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0192</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2023-01-18 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)
* OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* In FIPS mode, the use of a SQLite database provided by NSS was assumed, which was opened in read-only mode and with no PIN expected. This prevented the use of other databases or setting a PIN on the NSS database.  This update allows more control over database use using two new properties - fips.nssdb.path and fips.nssdb.pin - which can be configured permanently in the java.security file or temporarily via command-line arguments to the Java virtual machine (RHBZ#2147473)
* Prepare for the next quarterly OpenJDK upstream release (2023-01, 17.0.6) [almalinux-8] (BZ#2153010)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0192" id="RHSA-2023:0192" type="rhsa" title="RHSA-2023:0192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21835" id="CVE-2023-21835" type="cve" title="CVE-2023-21835"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21843" id="CVE-2023-21843" type="cve" title="CVE-2023-21843"/>
      <reference href="https://bugzilla.redhat.com/2160421" id="2160421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160475" id="2160475" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0192.html" id="ALSA-2023:0192" type="self" title="ALSA-2023:0192"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.6.0.10-3.el8_7.s390x.rpm</filename>
          <sum type="sha256">165ed52ce5800c20928434ae08cdf605f8e73cf0c55d5bdb2bbf9d1183195bfe</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.6.0.10-3.el8_7.s390x.rpm</filename>
          <sum type="sha256">327d9fe92ac684ce5d82aa99405f443d001b5dfc347386161bb8c578083bb01d</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-headless-17.0.6.0.10-3.el8_7.s390x.rpm</filename>
          <sum type="sha256">3e028b6344b6f37fd5436d01c6e00c0fc6d62fc6a5f8a3f7e990ea93e7332d14</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-17.0.6.0.10-3.el8_7.s390x.rpm</filename>
          <sum type="sha256">6fac5ff287751cd5b234ac3fc2fa0a48a598b5ffa79b6541b312afffa4af2901</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.6.0.10-3.el8_7.s390x.rpm</filename>
          <sum type="sha256">70f80013fbe6d9f99ac5883483ca49f7000e6adb698bc4c5a97c09ccf7121de2</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-devel-17.0.6.0.10-3.el8_7.s390x.rpm</filename>
          <sum type="sha256">8565398f2e2b371d0f4246b13d0528765bbf17a38a3640d697fbdbaaeb8b0334</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.6.0.10-3.el8_7.s390x.rpm</filename>
          <sum type="sha256">b5c71b2fa668a1a9b26fbc4590d1982d21aa32876b2eec3e480db836e1d76abe</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-src-17.0.6.0.10-3.el8_7.s390x.rpm</filename>
          <sum type="sha256">c675ff4df3b0010b387d37d9c7e6c64bb05dc30b99d416f2b3cdb015a4b81d81</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-demo-17.0.6.0.10-3.el8_7.s390x.rpm</filename>
          <sum type="sha256">f0f01c74cffec0726309bee6606952244fbb0879b42c6bb9de0db7aec892f793</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0200</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2023-01-18 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)
* OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2023-01, 11.0.18) [almalinux-8] (BZ#2157797)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0200" id="RHSA-2023:0200" type="rhsa" title="RHSA-2023:0200"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21835" id="CVE-2023-21835" type="cve" title="CVE-2023-21835"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21843" id="CVE-2023-21843" type="cve" title="CVE-2023-21843"/>
      <reference href="https://bugzilla.redhat.com/2160421" id="2160421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160475" id="2160475" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0200.html" id="ALSA-2023:0200" type="self" title="ALSA-2023:0200"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="java-11-openjdk-src" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-src-11.0.18.0.10-2.el8_7.s390x.rpm</filename>
          <sum type="sha256">1d3b08c4211a0f3bdd00321a01bedcbacc87e5fb3236dedf5d04213723215b68</sum>
        </package>
        <package name="java-11-openjdk-jmods" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-jmods-11.0.18.0.10-2.el8_7.s390x.rpm</filename>
          <sum type="sha256">1fdc7bef89ccc81a4857271cf34d46cc3ece0034d97408507bbb373142715c4d</sum>
        </package>
        <package name="java-11-openjdk-demo" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-demo-11.0.18.0.10-2.el8_7.s390x.rpm</filename>
          <sum type="sha256">3774dba2a472e0152dcf9ba83cc9722939cadc33f17c350876c86c2417f0a551</sum>
        </package>
        <package name="java-11-openjdk" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-11.0.18.0.10-2.el8_7.s390x.rpm</filename>
          <sum type="sha256">533a2c18123bf6171e103edc36ac8d0048f7a746be688bd68b396bc546cea0b2</sum>
        </package>
        <package name="java-11-openjdk-headless" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-headless-11.0.18.0.10-2.el8_7.s390x.rpm</filename>
          <sum type="sha256">67a912fe77b2cd6283551e3bdca9075d1bd51f9fb41bd3697b58838751aa7980</sum>
        </package>
        <package name="java-11-openjdk-javadoc" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-javadoc-11.0.18.0.10-2.el8_7.s390x.rpm</filename>
          <sum type="sha256">7707a6eea8e116a76b650600776ba2130898d8053ef2e9c664b3d3aa3f2e78c2</sum>
        </package>
        <package name="java-11-openjdk-javadoc-zip" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-javadoc-zip-11.0.18.0.10-2.el8_7.s390x.rpm</filename>
          <sum type="sha256">bc9e603eb8321372ba66c12b2585dd49aec8558ef699595575dfd9c22f2baaee</sum>
        </package>
        <package name="java-11-openjdk-devel" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-devel-11.0.18.0.10-2.el8_7.s390x.rpm</filename>
          <sum type="sha256">d2288c13947a1cb76643a2b0e5597da43fb3d9b243d4d40ebfd0dee5245d8b61</sum>
        </package>
        <package name="java-11-openjdk-static-libs" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-static-libs-11.0.18.0.10-2.el8_7.s390x.rpm</filename>
          <sum type="sha256">d935632c74b27e5da34dade0d77d37c22abe965c29624ef2ddfe8945ad891d28</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0208</id>
    <title>Moderate: java-1.8.0-openjdk security and bug fix update</title>
    <issued date="2023-01-26 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security and bug fix update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper restrictions in CORBA deserialization (Serialization, 8285021) (CVE-2023-21830)
* OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Leak File Descriptors Because of ResolverLocalFilesystem#engineResolveURI() (BZ#2139705)
* Prepare for the next quarterly OpenJDK upstream release (2023-01, 8u362) [almalinux-8] (BZ#2159910)
* solr broken due to access denied ("java.io.FilePermission" "/etc/pki/java/cacerts" "read") [almalinux-8, openjdk-8] (BZ#2163595)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0208" id="RHSA-2023:0208" type="rhsa" title="RHSA-2023:0208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21830" id="CVE-2023-21830" type="cve" title="CVE-2023-21830"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21843" id="CVE-2023-21843" type="cve" title="CVE-2023-21843"/>
      <reference href="https://bugzilla.redhat.com/2160475" id="2160475" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160490" id="2160490" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0208.html" id="ALSA-2023:0208" type="self" title="ALSA-2023:0208"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="java-1.8.0-openjdk" version="1.8.0.362.b09" release="2.el8_7" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.362.b09-2.el8_7.s390x.rpm</filename>
          <sum type="sha256">0b05b1ec0fd62b02bc7cfb46e9b8ad1d32931cf513fdfbc8602c1df7880e9a13</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.362.b09" release="2.el8_7" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.362.b09-2.el8_7.s390x.rpm</filename>
          <sum type="sha256">1aaefb78fec101ce6915644e6833cc9eb06440acede9d0506639bff964f2bd29</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.362.b09" release="2.el8_7" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.362.b09-2.el8_7.noarch.rpm</filename>
          <sum type="sha256">60c9718f106eea36d181fdcc93fa19c275f30b997a67f60cd479659929688239</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.362.b09" release="2.el8_7" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.362.b09-2.el8_7.s390x.rpm</filename>
          <sum type="sha256">64572fbad597e511bf761d2e90bbd0034ea56a5c2a78fd4d0739ae0984a4814a</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.362.b09" release="2.el8_7" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.362.b09-2.el8_7.s390x.rpm</filename>
          <sum type="sha256">c3a3d4e6e05ddca08a11e34622423de11b0fa837b85ce6ac8d88881a9c1e3a2a</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.362.b09" release="2.el8_7" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.362.b09-2.el8_7.s390x.rpm</filename>
          <sum type="sha256">c54379dbf2d26f7e91eccd90ac8982d225e8bb7a68e9182bbe64d748c56904b5</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility" version="1.8.0.362.b09" release="2.el8_7" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-1.8.0.362.b09-2.el8_7.s390x.rpm</filename>
          <sum type="sha256">cca4c973a7caaa35108f76a3dc66f6963f10f5a289dfa5ce5d9f39c8a43ef25a</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.362.b09" release="2.el8_7" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.362.b09-2.el8_7.noarch.rpm</filename>
          <sum type="sha256">e2d8bf41a1487c6ed689a5a5ea01723582f6f97eab7abaa7ddb842fc093fedba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0288</id>
    <title>Important: firefox security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 07:35:30"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.7.0 ESR.

Security Fix(es):

* Mozilla: libusrsctp library out of date (CVE-2022-46871)
* Mozilla: Arbitrary file read from GTK drag and drop on Linux (CVE-2023-23598)
* Mozilla: Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7 (CVE-2023-23605)
* Mozilla: Malicious command could be hidden in devtools output (CVE-2023-23599)
* Mozilla: URL being dragged from cross-origin iframe into same tab triggers navigation (CVE-2023-23601)
* Mozilla: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers (CVE-2023-23602)
* Mozilla: Fullscreen notification bypass (CVE-2022-46877)
* Mozilla: Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content Security Policy via format directive (CVE-2023-23603)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0288" id="RHSA-2023:0288" type="rhsa" title="RHSA-2023:0288"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46871" id="CVE-2022-46871" type="cve" title="CVE-2022-46871"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46877" id="CVE-2022-46877" type="cve" title="CVE-2022-46877"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23598" id="CVE-2023-23598" type="cve" title="CVE-2023-23598"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23599" id="CVE-2023-23599" type="cve" title="CVE-2023-23599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23601" id="CVE-2023-23601" type="cve" title="CVE-2023-23601"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23602" id="CVE-2023-23602" type="cve" title="CVE-2023-23602"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23603" id="CVE-2023-23603" type="cve" title="CVE-2023-23603"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23605" id="CVE-2023-23605" type="cve" title="CVE-2023-23605"/>
      <reference href="https://bugzilla.redhat.com/2162336" id="2162336" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162338" id="2162338" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162339" id="2162339" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162340" id="2162340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162341" id="2162341" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162342" id="2162342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162343" id="2162343" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162344" id="2162344" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0288.html" id="ALSA-2023:0288" type="self" title="ALSA-2023:0288"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="firefox" version="102.7.0" release="1.el8_7.alma" epoch="0" arch="s390x" src="firefox-102.7.0-1.el8_7.alma.src.rpm">
          <filename>firefox-102.7.0-1.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">ea9296eabe139c59962803cf63259cf2daa3615a8c295c9ceab9c4c33559f7a0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0379</id>
    <title>Important: libXpm security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 13:29:31"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libXpm security update</summary>
    <description>X.Org X11 libXpm runtime library.

Security Fix(es):

* libXpm: compression commands depend on $PATH (CVE-2022-4883)
* libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617)
* libXpm: Infinite loop on unclosed comments (CVE-2022-46285)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0379" id="RHSA-2023:0379" type="rhsa" title="RHSA-2023:0379"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-44617" id="CVE-2022-44617" type="cve" title="CVE-2022-44617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46285" id="CVE-2022-46285" type="cve" title="CVE-2022-46285"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4883" id="CVE-2022-4883" type="cve" title="CVE-2022-4883"/>
      <reference href="https://bugzilla.redhat.com/2160092" id="2160092" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160193" id="2160193" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160213" id="2160213" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0379.html" id="ALSA-2023:0379" type="self" title="ALSA-2023:0379"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="libXpm-devel" version="3.5.12" release="9.el8_7" epoch="0" arch="s390x" src="libXpm-3.5.12-9.el8_7.src.rpm">
          <filename>libXpm-devel-3.5.12-9.el8_7.s390x.rpm</filename>
          <sum type="sha256">af8773b75abf055e7f87e404eb87a2686458722f77068a20cbfa26133830f623</sum>
        </package>
        <package name="libXpm" version="3.5.12" release="9.el8_7" epoch="0" arch="s390x" src="libXpm-3.5.12-9.el8_7.src.rpm">
          <filename>libXpm-3.5.12-9.el8_7.s390x.rpm</filename>
          <sum type="sha256">f3be09544337336e9f29580a6bd759d63580d15cca329a32dfdf03f6ef36ab9a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0446</id>
    <title>Moderate: go-toolset:rhel8 security and bug fix update</title>
    <issued date="2023-01-25 00:00:00"/>
    <updated date="2023-01-27 06:22:00"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>go-toolset:rhel8 security and bug fix update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. 

Security Fix(es):

* golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879)
* golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)
* golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Internal linking fails on ppc64le (BZ#2144545)
* crypto testcases fail on golang on s390x [rhel-8] (BZ#2149313)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0446" id="RHSA-2023:0446" type="rhsa" title="RHSA-2023:0446"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2879" id="CVE-2022-2879" type="cve" title="CVE-2022-2879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2880" id="CVE-2022-2880" type="cve" title="CVE-2022-2880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41715" id="CVE-2022-41715" type="cve" title="CVE-2022-41715"/>
      <reference href="https://bugzilla.redhat.com/2132867" id="2132867" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2132868" id="2132868" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2132872" id="2132872" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0446.html" id="ALSA-2023:0446" type="self" title="ALSA-2023:0446"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <module name="go-toolset" stream="rhel8" version="8070020230125092346" context="b754926a" arch="s390x"/>
        <package name="golang" version="1.18.9" release="1.module_el8.7.0+3397+4350156d" epoch="0" arch="s390x" src="golang-1.18.9-1.module_el8.7.0+3397+4350156d.src.rpm">
          <filename>golang-1.18.9-1.module_el8.7.0+3397+4350156d.s390x.rpm</filename>
          <sum type="sha256">24957c8f5d6dc5914cdd984279cf8c139cf87354d7432614f7f65f94a4daf5b3</sum>
        </package>
        <package name="golang-src" version="1.18.9" release="1.module_el8.7.0+3397+4350156d" epoch="0" arch="noarch" src="golang-1.18.9-1.module_el8.7.0+3397+4350156d.src.rpm">
          <filename>golang-src-1.18.9-1.module_el8.7.0+3397+4350156d.noarch.rpm</filename>
          <sum type="sha256">2e3d81d9f31629d414d58d12305f13d5701be5e9eca7af8d4e91da2eb23efd68</sum>
        </package>
        <package name="golang-docs" version="1.18.9" release="1.module_el8.7.0+3397+4350156d" epoch="0" arch="noarch" src="golang-1.18.9-1.module_el8.7.0+3397+4350156d.src.rpm">
          <filename>golang-docs-1.18.9-1.module_el8.7.0+3397+4350156d.noarch.rpm</filename>
          <sum type="sha256">4347fe823ae24e7937a66f28ddcc829e2bbf30524969fdf819642b94150219c7</sum>
        </package>
        <package name="golang-tests" version="1.18.9" release="1.module_el8.7.0+3397+4350156d" epoch="0" arch="noarch" src="golang-1.18.9-1.module_el8.7.0+3397+4350156d.src.rpm">
          <filename>golang-tests-1.18.9-1.module_el8.7.0+3397+4350156d.noarch.rpm</filename>
          <sum type="sha256">5e2bdb95ee2d2c07e7a07022373e09f3236b83f48f2afaae8133c6ede64d22ad</sum>
        </package>
        <package name="golang-misc" version="1.18.9" release="1.module_el8.7.0+3397+4350156d" epoch="0" arch="noarch" src="golang-1.18.9-1.module_el8.7.0+3397+4350156d.src.rpm">
          <filename>golang-misc-1.18.9-1.module_el8.7.0+3397+4350156d.noarch.rpm</filename>
          <sum type="sha256">a7d84b54dbba0d092f3c3eb260c163de42a90a4f7e844658328635722e212645</sum>
        </package>
        <package name="golang-bin" version="1.18.9" release="1.module_el8.7.0+3397+4350156d" epoch="0" arch="s390x" src="golang-1.18.9-1.module_el8.7.0+3397+4350156d.src.rpm">
          <filename>golang-bin-1.18.9-1.module_el8.7.0+3397+4350156d.s390x.rpm</filename>
          <sum type="sha256">ac7ff5cc968ef3468fdec26b57162b3e7fd89ce2296d1a2ab6fd72100bbca8c3</sum>
        </package>
        <package name="go-toolset" version="1.18.9" release="1.module_el8.7.0+3397+4350156d" epoch="0" arch="s390x" src="go-toolset-1.18.9-1.module_el8.7.0+3397+4350156d.src.rpm">
          <filename>go-toolset-1.18.9-1.module_el8.7.0+3397+4350156d.s390x.rpm</filename>
          <sum type="sha256">c443e54a0ecf83a0cdf657c4b6ff8a46e1e76e280a5224a42dcf03b51340f18c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0463</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-01-25 00:00:00"/>
    <updated date="2023-01-27 06:16:13"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.7.1.

Security Fix(es):

* Mozilla: libusrsctp library out of date (CVE-2022-46871)
* Mozilla: Arbitrary file read from GTK drag and drop on Linux (CVE-2023-23598)
* Mozilla: Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7 (CVE-2023-23605)
* Mozilla: Malicious command could be hidden in devtools output (CVE-2023-23599)
* Mozilla: URL being dragged from cross-origin iframe into same tab triggers navigation (CVE-2023-23601)
* Mozilla: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers (CVE-2023-23602)
* Mozilla: Fullscreen notification bypass (CVE-2022-46877)
* Mozilla: Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content Security Policy via format directive (CVE-2023-23603)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0463" id="RHSA-2023:0463" type="rhsa" title="RHSA-2023:0463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46871" id="CVE-2022-46871" type="cve" title="CVE-2022-46871"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46877" id="CVE-2022-46877" type="cve" title="CVE-2022-46877"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23598" id="CVE-2023-23598" type="cve" title="CVE-2023-23598"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23599" id="CVE-2023-23599" type="cve" title="CVE-2023-23599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23601" id="CVE-2023-23601" type="cve" title="CVE-2023-23601"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23602" id="CVE-2023-23602" type="cve" title="CVE-2023-23602"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23603" id="CVE-2023-23603" type="cve" title="CVE-2023-23603"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23605" id="CVE-2023-23605" type="cve" title="CVE-2023-23605"/>
      <reference href="https://bugzilla.redhat.com/2162336" id="2162336" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162338" id="2162338" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162339" id="2162339" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162340" id="2162340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162341" id="2162341" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162342" id="2162342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162343" id="2162343" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162344" id="2162344" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0463.html" id="ALSA-2023:0463" type="self" title="ALSA-2023:0463"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="thunderbird" version="102.7.1" release="1.el8_7.alma" epoch="0" arch="s390x" src="thunderbird-102.7.1-1.el8_7.alma.src.rpm">
          <filename>thunderbird-102.7.1-1.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">1301169d0b8493795320fecd481ee8e4b47a9533109fdfdf034130df8e375d45</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0606</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-02-06 00:00:00"/>
    <updated date="2023-02-07 19:47:11"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.7.1.

Security Fix(es):

* Mozilla: Revocation status of S/Mime signature certificates was not checked (CVE-2023-0430)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0606" id="RHSA-2023:0606" type="rhsa" title="RHSA-2023:0606"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0430" id="CVE-2023-0430" type="cve" title="CVE-2023-0430"/>
      <reference href="https://bugzilla.redhat.com/2166591" id="2166591" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0606.html" id="ALSA-2023:0606" type="self" title="ALSA-2023:0606"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="thunderbird" version="102.7.1" release="2.el8_7.alma" epoch="0" arch="s390x" src="thunderbird-102.7.1-2.el8_7.alma.src.rpm">
          <filename>thunderbird-102.7.1-2.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">627ed4d85a10faf3979259d5ce54c04ba16f603fb4fae5d12d50cc6ca1949671</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0610</id>
    <title>Important: git security update</title>
    <issued date="2023-02-06 00:00:00"/>
    <updated date="2023-02-07 20:41:04"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git security update</summary>
    <description>Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.

Security Fix(es):

* git: gitattributes parsing integer overflow (CVE-2022-23521)
* git: Heap overflow in `git archive`, `git log --format` leading to RCE (CVE-2022-41903)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0610" id="RHSA-2023:0610" type="rhsa" title="RHSA-2023:0610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-23521" id="CVE-2022-23521" type="cve" title="CVE-2022-23521"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41903" id="CVE-2022-41903" type="cve" title="CVE-2022-41903"/>
      <reference href="https://bugzilla.redhat.com/2162055" id="2162055" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162056" id="2162056" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0610.html" id="ALSA-2023:0610" type="self" title="ALSA-2023:0610"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="git-email" version="2.31.1" release="3.el8_7" epoch="0" arch="noarch" src="git-2.31.1-3.el8_7.src.rpm">
          <filename>git-email-2.31.1-3.el8_7.noarch.rpm</filename>
          <sum type="sha256">14f9de4f5dacb6ed1174a24ff1102315c4caba87f0bfd9ff2e2cdd876569d6e2</sum>
        </package>
        <package name="perl-Git-SVN" version="2.31.1" release="3.el8_7" epoch="0" arch="noarch" src="git-2.31.1-3.el8_7.src.rpm">
          <filename>perl-Git-SVN-2.31.1-3.el8_7.noarch.rpm</filename>
          <sum type="sha256">4cf7fc6988501c4d496d6679f6149279a746e1ef748aa36756367f102eab8f05</sum>
        </package>
        <package name="git-core-doc" version="2.31.1" release="3.el8_7" epoch="0" arch="noarch" src="git-2.31.1-3.el8_7.src.rpm">
          <filename>git-core-doc-2.31.1-3.el8_7.noarch.rpm</filename>
          <sum type="sha256">6730415652dc4c3352bff2ae2f1fbb2840fb5afbd6d47cbb6162d192cc9a74e9</sum>
        </package>
        <package name="git-instaweb" version="2.31.1" release="3.el8_7" epoch="0" arch="noarch" src="git-2.31.1-3.el8_7.src.rpm">
          <filename>git-instaweb-2.31.1-3.el8_7.noarch.rpm</filename>
          <sum type="sha256">746176783d16b76b380ceb4307860ffc0506ce0ef7e402d8b329ead172d2468a</sum>
        </package>
        <package name="gitk" version="2.31.1" release="3.el8_7" epoch="0" arch="noarch" src="git-2.31.1-3.el8_7.src.rpm">
          <filename>gitk-2.31.1-3.el8_7.noarch.rpm</filename>
          <sum type="sha256">74c17e266e90832ca15c2f75a21800d3ba512027e9d9245b8d0f3bf0aa508f5c</sum>
        </package>
        <package name="git-credential-libsecret" version="2.31.1" release="3.el8_7" epoch="0" arch="s390x" src="git-2.31.1-3.el8_7.src.rpm">
          <filename>git-credential-libsecret-2.31.1-3.el8_7.s390x.rpm</filename>
          <sum type="sha256">7d5fc92e0a13d74662e8920865db70f09478c0c6a83e8d530ff3cf27fb815dca</sum>
        </package>
        <package name="git-daemon" version="2.31.1" release="3.el8_7" epoch="0" arch="s390x" src="git-2.31.1-3.el8_7.src.rpm">
          <filename>git-daemon-2.31.1-3.el8_7.s390x.rpm</filename>
          <sum type="sha256">892983507181042fbcf88be1690513d3f4ffb9b0512fa9740ce1024e7c7729b2</sum>
        </package>
        <package name="git-all" version="2.31.1" release="3.el8_7" epoch="0" arch="noarch" src="git-2.31.1-3.el8_7.src.rpm">
          <filename>git-all-2.31.1-3.el8_7.noarch.rpm</filename>
          <sum type="sha256">8eb22ce750561562bbd95a8b64f8f9c04e15972a5d2563894f457c524dde8688</sum>
        </package>
        <package name="git-svn" version="2.31.1" release="3.el8_7" epoch="0" arch="noarch" src="git-2.31.1-3.el8_7.src.rpm">
          <filename>git-svn-2.31.1-3.el8_7.noarch.rpm</filename>
          <sum type="sha256">a7b0ba97dceddef3e049e955da698190367bc0adf3ea8c44a5914d0641ba24f6</sum>
        </package>
        <package name="gitweb" version="2.31.1" release="3.el8_7" epoch="0" arch="noarch" src="git-2.31.1-3.el8_7.src.rpm">
          <filename>gitweb-2.31.1-3.el8_7.noarch.rpm</filename>
          <sum type="sha256">be1e3cc0e68ec12c3acbcc98bb867b46f769c07591a162222f18dfccc5d329e5</sum>
        </package>
        <package name="git-gui" version="2.31.1" release="3.el8_7" epoch="0" arch="noarch" src="git-2.31.1-3.el8_7.src.rpm">
          <filename>git-gui-2.31.1-3.el8_7.noarch.rpm</filename>
          <sum type="sha256">d9c1bc5f5cd618ced18ab4f8f4adede56850424aa7880d1302318a1c8a34ae19</sum>
        </package>
        <package name="git-core" version="2.31.1" release="3.el8_7" epoch="0" arch="s390x" src="git-2.31.1-3.el8_7.src.rpm">
          <filename>git-core-2.31.1-3.el8_7.s390x.rpm</filename>
          <sum type="sha256">dc1e20801444278809bd2626aea3a216da5572e29c990856e26551776a5a8e58</sum>
        </package>
        <package name="git" version="2.31.1" release="3.el8_7" epoch="0" arch="s390x" src="git-2.31.1-3.el8_7.src.rpm">
          <filename>git-2.31.1-3.el8_7.s390x.rpm</filename>
          <sum type="sha256">e721117d3ddeaeb9345c95689c896708927a59d447c5b0d17a8c499e3b70bd97</sum>
        </package>
        <package name="git-subtree" version="2.31.1" release="3.el8_7" epoch="0" arch="s390x" src="git-2.31.1-3.el8_7.src.rpm">
          <filename>git-subtree-2.31.1-3.el8_7.s390x.rpm</filename>
          <sum type="sha256">edbadf426f1fee2ee84ebf423a0dbcd0cc8e8dcc72e8a71464e6ad712d216c7f</sum>
        </package>
        <package name="perl-Git" version="2.31.1" release="3.el8_7" epoch="0" arch="noarch" src="git-2.31.1-3.el8_7.src.rpm">
          <filename>perl-Git-2.31.1-3.el8_7.noarch.rpm</filename>
          <sum type="sha256">f1f0996819d49cf41959d3aaff0febf6c8114cb747a344b11c28830b4638e163</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0662</id>
    <title>Important: tigervnc security update</title>
    <issued date="2023-02-08 00:00:00"/>
    <updated date="2023-02-09 21:01:26"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

Security Fix(es):

* xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (CVE-2023-0494)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0662" id="RHSA-2023:0662" type="rhsa" title="RHSA-2023:0662"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0494" id="CVE-2023-0494" type="cve" title="CVE-2023-0494"/>
      <reference href="https://bugzilla.redhat.com/2165995" id="2165995" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0662.html" id="ALSA-2023:0662" type="self" title="ALSA-2023:0662"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="tigervnc-selinux" version="1.12.0" release="9.el8_7.1" epoch="0" arch="noarch" src="tigervnc-1.12.0-9.el8_7.1.src.rpm">
          <filename>tigervnc-selinux-1.12.0-9.el8_7.1.noarch.rpm</filename>
          <sum type="sha256">1141eea188a0b728ee987d15cc44ffc79234cc559f50979387afcc2022dfdcd0</sum>
        </package>
        <package name="tigervnc" version="1.12.0" release="9.el8_7.1" epoch="0" arch="s390x" src="tigervnc-1.12.0-9.el8_7.1.src.rpm">
          <filename>tigervnc-1.12.0-9.el8_7.1.s390x.rpm</filename>
          <sum type="sha256">1e0121ef518b2acadbbfc826da6dd726b2f355e79fce50495605ca9758708196</sum>
        </package>
        <package name="tigervnc-server" version="1.12.0" release="9.el8_7.1" epoch="0" arch="s390x" src="tigervnc-1.12.0-9.el8_7.1.src.rpm">
          <filename>tigervnc-server-1.12.0-9.el8_7.1.s390x.rpm</filename>
          <sum type="sha256">441928eea02e7a38093e6b369275ee4a77c5b38c960539e5842de5543a9a0f81</sum>
        </package>
        <package name="tigervnc-server-minimal" version="1.12.0" release="9.el8_7.1" epoch="0" arch="s390x" src="tigervnc-1.12.0-9.el8_7.1.src.rpm">
          <filename>tigervnc-server-minimal-1.12.0-9.el8_7.1.s390x.rpm</filename>
          <sum type="sha256">4647b7d72e7d90606d6943850fe2beacb31066e5d10e106d385e54292625a7f0</sum>
        </package>
        <package name="tigervnc-server-module" version="1.12.0" release="9.el8_7.1" epoch="0" arch="s390x" src="tigervnc-1.12.0-9.el8_7.1.src.rpm">
          <filename>tigervnc-server-module-1.12.0-9.el8_7.1.s390x.rpm</filename>
          <sum type="sha256">486222e50ddc31620630a39c9e1720de9438a925884ad212f602f27fa6e0e227</sum>
        </package>
        <package name="tigervnc-icons" version="1.12.0" release="9.el8_7.1" epoch="0" arch="noarch" src="tigervnc-1.12.0-9.el8_7.1.src.rpm">
          <filename>tigervnc-icons-1.12.0-9.el8_7.1.noarch.rpm</filename>
          <sum type="sha256">7133d41e9d109e221a30ef9654a2fad731c21df05cf1abe58c58be1abcec2e75</sum>
        </package>
        <package name="tigervnc-license" version="1.12.0" release="9.el8_7.1" epoch="0" arch="noarch" src="tigervnc-1.12.0-9.el8_7.1.src.rpm">
          <filename>tigervnc-license-1.12.0-9.el8_7.1.noarch.rpm</filename>
          <sum type="sha256">b8c69ae100a13391fae03819a76e4f8edb0625a8fd2bd6d9793ee7f92598fcc6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0808</id>
    <title>Important: firefox security update</title>
    <issued date="2023-02-20 00:00:00"/>
    <updated date="2023-02-21 17:34:13"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.8.0 ESR.

Security Fix(es):

* Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767)
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0808" id="RHSA-2023:0808" type="rhsa" title="RHSA-2023:0808"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0767" id="CVE-2023-0767" type="cve" title="CVE-2023-0767"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25728" id="CVE-2023-25728" type="cve" title="CVE-2023-25728"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25729" id="CVE-2023-25729" type="cve" title="CVE-2023-25729"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25730" id="CVE-2023-25730" type="cve" title="CVE-2023-25730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25732" id="CVE-2023-25732" type="cve" title="CVE-2023-25732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25735" id="CVE-2023-25735" type="cve" title="CVE-2023-25735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25737" id="CVE-2023-25737" type="cve" title="CVE-2023-25737"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25739" id="CVE-2023-25739" type="cve" title="CVE-2023-25739"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25742" id="CVE-2023-25742" type="cve" title="CVE-2023-25742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25743" id="CVE-2023-25743" type="cve" title="CVE-2023-25743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25744" id="CVE-2023-25744" type="cve" title="CVE-2023-25744"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25746" id="CVE-2023-25746" type="cve" title="CVE-2023-25746"/>
      <reference href="https://bugzilla.redhat.com/2170374" id="2170374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170375" id="2170375" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170376" id="2170376" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170377" id="2170377" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170378" id="2170378" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170379" id="2170379" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170381" id="2170381" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170382" id="2170382" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170383" id="2170383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170390" id="2170390" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170391" id="2170391" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170402" id="2170402" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0808.html" id="ALSA-2023:0808" type="self" title="ALSA-2023:0808"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="firefox" version="102.8.0" release="2.el8_7.alma" epoch="0" arch="s390x" src="firefox-102.8.0-2.el8_7.alma.src.rpm">
          <filename>firefox-102.8.0-2.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">a3ffab8e2d236af1b6169b3bfcb8064bde95b6f95ec926c338e82e40fa95f8ad</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0821</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-02-20 00:00:00"/>
    <updated date="2023-02-21 17:44:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.8.0.

Security Fix(es):

* Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767)
* Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728)
* Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735)
* Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737)
* Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739)
* Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743)
* Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744)
* Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746)
* Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729)
* Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732)
* Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616)
* Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0821" id="RHSA-2023:0821" type="rhsa" title="RHSA-2023:0821"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0616" id="CVE-2023-0616" type="cve" title="CVE-2023-0616"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0767" id="CVE-2023-0767" type="cve" title="CVE-2023-0767"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25728" id="CVE-2023-25728" type="cve" title="CVE-2023-25728"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25729" id="CVE-2023-25729" type="cve" title="CVE-2023-25729"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25730" id="CVE-2023-25730" type="cve" title="CVE-2023-25730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25732" id="CVE-2023-25732" type="cve" title="CVE-2023-25732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25735" id="CVE-2023-25735" type="cve" title="CVE-2023-25735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25737" id="CVE-2023-25737" type="cve" title="CVE-2023-25737"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25739" id="CVE-2023-25739" type="cve" title="CVE-2023-25739"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25742" id="CVE-2023-25742" type="cve" title="CVE-2023-25742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25743" id="CVE-2023-25743" type="cve" title="CVE-2023-25743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25744" id="CVE-2023-25744" type="cve" title="CVE-2023-25744"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25746" id="CVE-2023-25746" type="cve" title="CVE-2023-25746"/>
      <reference href="https://bugzilla.redhat.com/2170374" id="2170374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170375" id="2170375" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170376" id="2170376" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170377" id="2170377" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170378" id="2170378" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170379" id="2170379" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170381" id="2170381" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170382" id="2170382" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170383" id="2170383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170390" id="2170390" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170391" id="2170391" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170402" id="2170402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2171397" id="2171397" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0821.html" id="ALSA-2023:0821" type="self" title="ALSA-2023:0821"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="thunderbird" version="102.8.0" release="2.el8_7.alma" epoch="0" arch="s390x" src="thunderbird-102.8.0-2.el8_7.alma.src.rpm">
          <filename>thunderbird-102.8.0-2.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">379ec6127ec60d787e04e9e66146ee6a8145da5cc83fe859eb57f3a7ea7c125f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2023:0833</id>
    <title>Moderate: python3 security update</title>
    <issued date="2023-02-21 00:00:00"/>
    <updated date="2023-02-21 23:58:21"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS (CVE-2020-10735)
* python: open redirection vulnerability in lib/http/server.py may lead to information disclosure (CVE-2021-28861)
* Python: CPU denial of service via inefficient IDNA decoder (CVE-2022-45061)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0833" id="RHSA-2023:0833" type="rhsa" title="RHSA-2023:0833"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-10735" id="CVE-2020-10735" type="cve" title="CVE-2020-10735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-28861" id="CVE-2021-28861" type="cve" title="CVE-2021-28861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45061" id="CVE-2022-45061" type="cve" title="CVE-2022-45061"/>
      <reference href="https://bugzilla.redhat.com/1834423" id="1834423" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120642" id="2120642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2144072" id="2144072" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0833.html" id="ALSA-2023:0833" type="self" title="ALSA-2023:0833"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="python3-tkinter" version="3.6.8" release="48.el8_7.1.alma" epoch="0" arch="s390x" src="python3-3.6.8-48.el8_7.1.alma.src.rpm">
          <filename>python3-tkinter-3.6.8-48.el8_7.1.alma.s390x.rpm</filename>
          <sum type="sha256">31152ca6f5a2ac623e4151e68ec952304a05d410729fb7277e4d321a8fd703f9</sum>
        </package>
        <package name="platform-python-debug" version="3.6.8" release="48.el8_7.1.alma" epoch="0" arch="s390x" src="python3-3.6.8-48.el8_7.1.alma.src.rpm">
          <filename>platform-python-debug-3.6.8-48.el8_7.1.alma.s390x.rpm</filename>
          <sum type="sha256">6d898f8b0308d0aaaab844a525de7ccd24965d5e624bce64123eb8219fef2da5</sum>
        </package>
        <package name="platform-python-devel" version="3.6.8" release="48.el8_7.1.alma" epoch="0" arch="s390x" src="python3-3.6.8-48.el8_7.1.alma.src.rpm">
          <filename>platform-python-devel-3.6.8-48.el8_7.1.alma.s390x.rpm</filename>
          <sum type="sha256">9181b3743e2738fe7c0aa9e08f24fed94e27fd38722ec37856fdafb91703eb2d</sum>
        </package>
        <package name="python3-idle" version="3.6.8" release="48.el8_7.1.alma" epoch="0" arch="s390x" src="python3-3.6.8-48.el8_7.1.alma.src.rpm">
          <filename>python3-idle-3.6.8-48.el8_7.1.alma.s390x.rpm</filename>
          <sum type="sha256">ef8913faa2f8be8ad56c9271a93edc4d0a70964820ef0f7bed2491eb6ca2a4da</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0838</id>
    <title>Important: samba security update</title>
    <issued date="2023-02-21 00:00:00"/>
    <updated date="2023-02-21 18:23:01"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>samba security update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided (CVE-2022-38023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0838" id="RHSA-2023:0838" type="rhsa" title="RHSA-2023:0838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38023" id="CVE-2022-38023" type="cve" title="CVE-2022-38023"/>
      <reference href="https://bugzilla.redhat.com/2154362" id="2154362" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0838.html" id="ALSA-2023:0838" type="self" title="ALSA-2023:0838"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="samba-vfs-iouring" version="4.16.4" release="4.el8_7" epoch="0" arch="s390x" src="samba-4.16.4-4.el8_7.src.rpm">
          <filename>samba-vfs-iouring-4.16.4-4.el8_7.s390x.rpm</filename>
          <sum type="sha256">49f4a814a160022ea81d4eaad6a78bbd6fff5348da9f4852a363de33cba04494</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0848</id>
    <title>Moderate: php:8.0 security update</title>
    <issued date="2023-02-21 00:00:00"/>
    <updated date="2023-02-21 18:44:45"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>php:8.0 security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

The following packages have been upgraded to a later upstream version: php (8.0). (BZ#2161666)

Security Fix(es):

* XKCP: buffer overflow in the SHA-3 reference implementation (CVE-2022-37454)
* php: standard insecure cookie could be treated as a `__Host-` or `__Secure-` cookie by PHP applications (CVE-2022-31629)
* php: OOB read due to insufficient input validation in imageloadfont() (CVE-2022-31630)
* php: Due to an integer overflow PDO::quote() may return unquoted string (CVE-2022-31631)
* php: phar wrapper can occur dos when using quine gzip file (CVE-2022-31628)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0848" id="RHSA-2023:0848" type="rhsa" title="RHSA-2023:0848"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31628" id="CVE-2022-31628" type="cve" title="CVE-2022-31628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31629" id="CVE-2022-31629" type="cve" title="CVE-2022-31629"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31630" id="CVE-2022-31630" type="cve" title="CVE-2022-31630"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31631" id="CVE-2022-31631" type="cve" title="CVE-2022-31631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-37454" id="CVE-2022-37454" type="cve" title="CVE-2022-37454"/>
      <reference href="https://bugzilla.redhat.com/2133687" id="2133687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133688" id="2133688" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2139280" id="2139280" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140200" id="2140200" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2158791" id="2158791" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0848.html" id="ALSA-2023:0848" type="self" title="ALSA-2023:0848"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <module name="php" stream="8.0" version="8060020220701053234" context="4c984ee0" arch="s390x"/>
        <package name="php-ffi" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-ffi-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">00591c19f60ce8028393c1ef5a7e49bb38855e306a2830e74262e144c2960be8</sum>
        </package>
        <package name="php-snmp" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-snmp-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">080ed18c2046e9ea815c6110e099515041efc6f2189d3c62bb177a4d8ee54b66</sum>
        </package>
        <package name="php" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">0fd3dc1b7adc01a66f42765c74897ef319c64ae722716ba78d9ce7f086807405</sum>
        </package>
        <package name="php-pecl-rrd" version="2.0.3" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="php-pecl-rrd-2.0.3-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>php-pecl-rrd-2.0.3-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">1815b836403954c7082e11cd6249dc3342bd651cc381b3f165c199c6a22b203d</sum>
        </package>
        <package name="php-process" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-process-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">2981a9997abeb8845ceb854410cd2b9bd8f8fce338b74e24d7db11098a7d19a8</sum>
        </package>
        <package name="php-gmp" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-gmp-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">338a067be633298ea7426fffff6ed8cc8f12f002c1e06511f7979c217895efdb</sum>
        </package>
        <package name="php-cli" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-cli-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">4636fea269df2cb959634755285ba947e364a389b069eda9cdaf51a817bf0895</sum>
        </package>
        <package name="php-pdo" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-pdo-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">466743202935c0b09c9b1550c46cf600e714b74d7fd2aa81b87d76e3a9eed265</sum>
        </package>
        <package name="php-gd" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-gd-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">46ae0a9f3a78f14c97cd5eb23026e5742250ac3b2707540464460e752136de62</sum>
        </package>
        <package name="php-dba" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-dba-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">575e5430b173d2508808249921eb160cda88fd88eb1ab3f41e8f4fc72d7fdf34</sum>
        </package>
        <package name="php-ldap" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-ldap-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">57716d6366da27d155e0ea3cad33e5a7de778308f37e9d51e426c3bfb04681a5</sum>
        </package>
        <package name="libzip" version="1.7.3" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="libzip-1.7.3-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>libzip-1.7.3-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">5962ee62531b91b8d089dda94343f02f6278557e387f3aa076843e7d6ebcec89</sum>
        </package>
        <package name="php-intl" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-intl-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">61aedd4fd9f9961ccdb5dacbdae62c5a80f836ba6c7434c22c4e5b6f362c5922</sum>
        </package>
        <package name="php-pecl-apcu" version="5.1.20" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.20-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>php-pecl-apcu-5.1.20-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">6a2a352400dc0dfaf36d2e796cf5419699675bcd79fb8833e2b9886e765eb0ca</sum>
        </package>
        <package name="php-xml" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-xml-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">7a5e4563c4025a2bc8d6cda3e8c51adc82ba7b4179f39701a46118515fcfc62d</sum>
        </package>
        <package name="libzip-tools" version="1.7.3" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="libzip-1.7.3-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>libzip-tools-1.7.3-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">82f44435fd17b8150202e9da2ccd129a9337445a3e95f12d0faef344bf26b60d</sum>
        </package>
        <package name="php-soap" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-soap-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">8cd8105d50d4f2185fa9f6de1428c42cdc0577e94caf3375e9465d229ff7655f</sum>
        </package>
        <package name="php-odbc" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-odbc-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">960e59a3d8fb2a92d273fd9991512782fc22b0948f6ce2f7d2f350daadc13b06</sum>
        </package>
        <package name="php-mysqlnd" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-mysqlnd-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">a211a8b94c1873ab42084f3dbdb731de33cd71960a5707b7f767488215faaa85</sum>
        </package>
        <package name="php-embedded" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-embedded-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">a7dbe2e27d015a396d170b87dcc06cf3a773d2d56becbe6981795d76b5d68463</sum>
        </package>
        <package name="php-pgsql" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-pgsql-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">a9312881a520cbd6684d35173a031e7399264bb428fa7d47c4300c305289b44d</sum>
        </package>
        <package name="php-dbg" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-dbg-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">b5a44954aaf2f8cf0c08c2d242d6f46660b2df2d753f57ff130d0e52b3b45573</sum>
        </package>
        <package name="php-mbstring" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-mbstring-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">b6d74ea613fb6a5bb0517fa4a41654cd554ddf08c8279e781ff57717ddd85d8b</sum>
        </package>
        <package name="php-pecl-zip" version="1.19.2" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="php-pecl-zip-1.19.2-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>php-pecl-zip-1.19.2-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">ba120b545a1f35a3c47c106a002c8f5b85137e17a1b438c5222818ac9ecd89a9</sum>
        </package>
        <package name="php-common" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-common-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">bc83c4065907915441ea221b77619a71cf6a7299d218e89dd0b878a62564741c</sum>
        </package>
        <package name="php-devel" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-devel-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">c8fc6a934cdd5a38c4480095ff76f6de30d31d37ae842593fb66143bc4a9e94f</sum>
        </package>
        <package name="php-pecl-apcu-devel" version="5.1.20" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.20-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>php-pecl-apcu-devel-5.1.20-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">d8b1ca7ae8a8163bf0c24aedde00491313cb3724e4dc44a314ad369de4b944c0</sum>
        </package>
        <package name="php-pecl-xdebug3" version="3.1.2" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="php-pecl-xdebug3-3.1.2-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>php-pecl-xdebug3-3.1.2-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">df908d724c4ed5f547dfd7ba483e35309af5e2089a72a24f2c05ba1ddc9529e8</sum>
        </package>
        <package name="libzip-devel" version="1.7.3" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="libzip-1.7.3-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>libzip-devel-1.7.3-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">e47efaf25e1c9dcaad2fd645d6bf07cc6e4c97e78b3e08594aeb21eff49e3be9</sum>
        </package>
        <package name="php-enchant" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-enchant-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">e53cfd4007476373438a2a21d907b6d81b86b0bc72792ae16feb078c7ca5d267</sum>
        </package>
        <package name="php-bcmath" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-bcmath-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">e5d3a5fd10c26ae89b10295fb400e9ca08f3a5a333ab27c92e70058f18e5c27d</sum>
        </package>
        <package name="php-opcache" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-opcache-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">f1a3a000f013d5e08ddf42b9d3947fc4db817d0e67deadd32840bad6e8c135f8</sum>
        </package>
        <package name="php-fpm" version="8.0.27" release="1.module_el8.7.0+3401+dfb61c00" epoch="0" arch="s390x" src="php-8.0.27-1.module_el8.7.0+3401+dfb61c00.src.rpm">
          <filename>php-fpm-8.0.27-1.module_el8.7.0+3401+dfb61c00.s390x.rpm</filename>
          <sum type="sha256">f9155805d6aab52c1e4b9f6ca0637bd5bf4818825b0e82b7877116e3ba0ae000</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0852</id>
    <title>Moderate: httpd:2.4 security and bug fix update</title>
    <issued date="2023-02-21 00:00:00"/>
    <updated date="2023-02-21 18:53:08"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>httpd:2.4 security and bug fix update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: mod_dav: out-of-bounds read/write of zero byte (CVE-2006-20001)
* httpd: mod_proxy_ajp: Possible request smuggling (CVE-2022-36760)
* httpd: mod_proxy: HTTP response splitting (CVE-2022-37436)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* httpd-init fails to create localhost.crt, localhost.key due to "sscg" default now creates a /dhparams.pem and is not idempotent if the file /dhparams.pem already exists. (BZ#2165967)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0852" id="RHSA-2023:0852" type="rhsa" title="RHSA-2023:0852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2006-20001" id="CVE-2006-20001" type="cve" title="CVE-2006-20001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36760" id="CVE-2022-36760" type="cve" title="CVE-2022-36760"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-37436" id="CVE-2022-37436" type="cve" title="CVE-2022-37436"/>
      <reference href="https://bugzilla.redhat.com/2161773" id="2161773" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2161774" id="2161774" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2161777" id="2161777" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0852.html" id="ALSA-2023:0852" type="self" title="ALSA-2023:0852"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <module name="httpd" stream="2.4" version="8070020230221100510" context="9edba152" arch="s390x"/>
        <package name="mod_ldap" version="2.4.37" release="51.module_el8.7.0+3405+9516b832.1" epoch="0" arch="s390x" src="httpd-2.4.37-51.module_el8.7.0+3405+9516b832.1.src.rpm">
          <filename>mod_ldap-2.4.37-51.module_el8.7.0+3405+9516b832.1.s390x.rpm</filename>
          <sum type="sha256">16d740c02fe442ec86cf325417396a1c9c442fed795190d2b1e21249bfdaab4d</sum>
        </package>
        <package name="httpd-filesystem" version="2.4.37" release="51.module_el8.7.0+3405+9516b832.1" epoch="0" arch="noarch" src="httpd-2.4.37-51.module_el8.7.0+3405+9516b832.1.src.rpm">
          <filename>httpd-filesystem-2.4.37-51.module_el8.7.0+3405+9516b832.1.noarch.rpm</filename>
          <sum type="sha256">292cc1471cc014dcd1ebe5e01ef07b8f9ae2b030acb444cf9fb9ac58f3343eb1</sum>
        </package>
        <package name="mod_proxy_html" version="2.4.37" release="51.module_el8.7.0+3405+9516b832.1" epoch="1" arch="s390x" src="httpd-2.4.37-51.module_el8.7.0+3405+9516b832.1.src.rpm">
          <filename>mod_proxy_html-2.4.37-51.module_el8.7.0+3405+9516b832.1.s390x.rpm</filename>
          <sum type="sha256">6456c6857b95a9271032f32f347af7acc83be0a80aad50e2ca1a11c62e08a0c6</sum>
        </package>
        <package name="httpd-tools" version="2.4.37" release="51.module_el8.7.0+3405+9516b832.1" epoch="0" arch="s390x" src="httpd-2.4.37-51.module_el8.7.0+3405+9516b832.1.src.rpm">
          <filename>httpd-tools-2.4.37-51.module_el8.7.0+3405+9516b832.1.s390x.rpm</filename>
          <sum type="sha256">70967e6b394c03ac6bb828aa34a0979b37bb658818ae188378b1b04ed4227c1b</sum>
        </package>
        <package name="httpd" version="2.4.37" release="51.module_el8.7.0+3405+9516b832.1" epoch="0" arch="s390x" src="httpd-2.4.37-51.module_el8.7.0+3405+9516b832.1.src.rpm">
          <filename>httpd-2.4.37-51.module_el8.7.0+3405+9516b832.1.s390x.rpm</filename>
          <sum type="sha256">749272ba532faf0d2c7d5641caffef4c0e7a17f770f6c6b62ba49699df2b14fe</sum>
        </package>
        <package name="httpd-devel" version="2.4.37" release="51.module_el8.7.0+3405+9516b832.1" epoch="0" arch="s390x" src="httpd-2.4.37-51.module_el8.7.0+3405+9516b832.1.src.rpm">
          <filename>httpd-devel-2.4.37-51.module_el8.7.0+3405+9516b832.1.s390x.rpm</filename>
          <sum type="sha256">963b01b5af79588e77dd3f1281330c93186bb893a4cd14b2fad95edd1edd62e3</sum>
        </package>
        <package name="mod_ssl" version="2.4.37" release="51.module_el8.7.0+3405+9516b832.1" epoch="1" arch="s390x" src="httpd-2.4.37-51.module_el8.7.0+3405+9516b832.1.src.rpm">
          <filename>mod_ssl-2.4.37-51.module_el8.7.0+3405+9516b832.1.s390x.rpm</filename>
          <sum type="sha256">bc986ae4e7e0eb65e3bcd7e039c564346c722c8e89bf3b5364bb4ee197352771</sum>
        </package>
        <package name="mod_md" version="2.0.8" release="8.module_el8.6.0+3031+fb177b09" epoch="1" arch="s390x" src="mod_md-2.0.8-8.module_el8.6.0+3031+fb177b09.src.rpm">
          <filename>mod_md-2.0.8-8.module_el8.6.0+3031+fb177b09.s390x.rpm</filename>
          <sum type="sha256">e47754aea99df8718074dd3d1df288b448b0af9d0ba4f0f8c6a3b5c8a164a1a7</sum>
        </package>
        <package name="mod_http2" version="1.15.7" release="5.module_el8.6.0+3031+fb177b09" epoch="0" arch="s390x" src="mod_http2-1.15.7-5.module_el8.6.0+3031+fb177b09.src.rpm">
          <filename>mod_http2-1.15.7-5.module_el8.6.0+3031+fb177b09.s390x.rpm</filename>
          <sum type="sha256">e8187fd68cc4d43ebb70e094da2d353e580a7da3f03882c5c03f6dce81d7fac5</sum>
        </package>
        <package name="httpd-manual" version="2.4.37" release="51.module_el8.7.0+3405+9516b832.1" epoch="0" arch="noarch" src="httpd-2.4.37-51.module_el8.7.0+3405+9516b832.1.src.rpm">
          <filename>httpd-manual-2.4.37-51.module_el8.7.0+3405+9516b832.1.noarch.rpm</filename>
          <sum type="sha256">efad349eb490e612a2d5aa9c30b468f116f2ffb16a0cb0e4641e89637d24ff84</sum>
        </package>
        <package name="mod_session" version="2.4.37" release="51.module_el8.7.0+3405+9516b832.1" epoch="0" arch="s390x" src="httpd-2.4.37-51.module_el8.7.0+3405+9516b832.1.src.rpm">
          <filename>mod_session-2.4.37-51.module_el8.7.0+3405+9516b832.1.s390x.rpm</filename>
          <sum type="sha256">fb346e52059412a68a9713409401da708571931999a36effe759291cb0e60df5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0902</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2023-02-22 00:00:00"/>
    <updated date="2023-02-23 06:01:36"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK
platform.

Security Fix(es):

* webkitgtk: processing maliciously crafted web content may be exploited for arbitrary code execution (CVE-2023-23529)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0902" id="RHSA-2023:0902" type="rhsa" title="RHSA-2023:0902"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23529" id="CVE-2023-23529" type="cve" title="CVE-2023-23529"/>
      <reference href="https://bugzilla.redhat.com/2169934" id="2169934" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0902.html" id="ALSA-2023:0902" type="self" title="ALSA-2023:0902"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="webkit2gtk3" version="2.36.7" release="1.el8_7.2" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el8_7.2.src.rpm">
          <filename>webkit2gtk3-2.36.7-1.el8_7.2.s390x.rpm</filename>
          <sum type="sha256">134a36bdbd0d9fd99a937968ff4be71bfe65543fcdd8e892fedb736de2a56d2d</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.36.7" release="1.el8_7.2" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el8_7.2.src.rpm">
          <filename>webkit2gtk3-jsc-2.36.7-1.el8_7.2.s390x.rpm</filename>
          <sum type="sha256">7577239de39b1c975aef9660975793857ec440c74dc4850cb39ff9a91c55c21d</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.36.7" release="1.el8_7.2" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el8_7.2.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.36.7-1.el8_7.2.s390x.rpm</filename>
          <sum type="sha256">8afdea9e024a14a2404be334f9b8d5850b65bc0dc614b8583e137f929cc8dcaf</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.36.7" release="1.el8_7.2" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el8_7.2.src.rpm">
          <filename>webkit2gtk3-devel-2.36.7-1.el8_7.2.s390x.rpm</filename>
          <sum type="sha256">d1b4aab511de528917b84960281206b1034dc0975f68f7c8c9d5bf0da1b67809</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1252</id>
    <title>Important: nss security update</title>
    <issued date="2023-03-15 00:00:00"/>
    <updated date="2023-03-16 07:22:54"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nss security update</summary>
    <description>Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.

Security Fix(es):

* nss: Arbitrary memory write via PKCS 12 (CVE-2023-0767)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1252" id="RHSA-2023:1252" type="rhsa" title="RHSA-2023:1252"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0767" id="CVE-2023-0767" type="cve" title="CVE-2023-0767"/>
      <reference href="https://bugzilla.redhat.com/2170377" id="2170377" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1252.html" id="ALSA-2023:1252" type="self" title="ALSA-2023:1252"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="nss-tools" version="3.79.0" release="11.el8_7" epoch="0" arch="s390x" src="nss-3.79.0-11.el8_7.src.rpm">
          <filename>nss-tools-3.79.0-11.el8_7.s390x.rpm</filename>
          <sum type="sha256">018d6b0f50173edbc94e7ae758a5e2c220567fb471a748f067545ac2c7dff508</sum>
        </package>
        <package name="nss-util-devel" version="3.79.0" release="11.el8_7" epoch="0" arch="s390x" src="nss-3.79.0-11.el8_7.src.rpm">
          <filename>nss-util-devel-3.79.0-11.el8_7.s390x.rpm</filename>
          <sum type="sha256">0b183ca12b3b95bb4ae67fd665f8ca602b71dab415b35537e4cc933446e1c4ba</sum>
        </package>
        <package name="nss-sysinit" version="3.79.0" release="11.el8_7" epoch="0" arch="s390x" src="nss-3.79.0-11.el8_7.src.rpm">
          <filename>nss-sysinit-3.79.0-11.el8_7.s390x.rpm</filename>
          <sum type="sha256">0f3f21aea35bacd40912066fe813110495b5a140bf5e2bbff1fe6fab6a60cab4</sum>
        </package>
        <package name="nss-softokn-devel" version="3.79.0" release="11.el8_7" epoch="0" arch="s390x" src="nss-3.79.0-11.el8_7.src.rpm">
          <filename>nss-softokn-devel-3.79.0-11.el8_7.s390x.rpm</filename>
          <sum type="sha256">44559433f6cf9a22bd88c8a0baf970021d82bc97a3182685b4da387fc17cad2e</sum>
        </package>
        <package name="nss-util" version="3.79.0" release="11.el8_7" epoch="0" arch="s390x" src="nss-3.79.0-11.el8_7.src.rpm">
          <filename>nss-util-3.79.0-11.el8_7.s390x.rpm</filename>
          <sum type="sha256">66787cb6a8b2bf66058235f591aa71fbc24273a5fa13157c63abe9cf04a339f4</sum>
        </package>
        <package name="nss-devel" version="3.79.0" release="11.el8_7" epoch="0" arch="s390x" src="nss-3.79.0-11.el8_7.src.rpm">
          <filename>nss-devel-3.79.0-11.el8_7.s390x.rpm</filename>
          <sum type="sha256">7f3839319c3936d3d67ba5d4696019b4aa69fa91844780fc9d6a32050bd5bfac</sum>
        </package>
        <package name="nss-softokn" version="3.79.0" release="11.el8_7" epoch="0" arch="s390x" src="nss-3.79.0-11.el8_7.src.rpm">
          <filename>nss-softokn-3.79.0-11.el8_7.s390x.rpm</filename>
          <sum type="sha256">846c0bed8dc9e341bb2368b54992adc8a200569a14c6206923d71f7ac502e960</sum>
        </package>
        <package name="nss-softokn-freebl-devel" version="3.79.0" release="11.el8_7" epoch="0" arch="s390x" src="nss-3.79.0-11.el8_7.src.rpm">
          <filename>nss-softokn-freebl-devel-3.79.0-11.el8_7.s390x.rpm</filename>
          <sum type="sha256">a10fb946702ac54497c6a418bdfa04fd45fd1bf23626595ef01c80b8f4994223</sum>
        </package>
        <package name="nss" version="3.79.0" release="11.el8_7" epoch="0" arch="s390x" src="nss-3.79.0-11.el8_7.src.rpm">
          <filename>nss-3.79.0-11.el8_7.s390x.rpm</filename>
          <sum type="sha256">a53b595dcbb4a07d7ee1dacf3f687fedd46b14b75fa5d0cb4209df4cf11752de</sum>
        </package>
        <package name="nss-softokn-freebl" version="3.79.0" release="11.el8_7" epoch="0" arch="s390x" src="nss-3.79.0-11.el8_7.src.rpm">
          <filename>nss-softokn-freebl-3.79.0-11.el8_7.s390x.rpm</filename>
          <sum type="sha256">c20ecc30eb7f4b2114bc703186608eb4066c0e27487ef98d67214b80c9674fb6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1336</id>
    <title>Important: firefox security update</title>
    <issued date="2023-03-20 00:00:00"/>
    <updated date="2023-03-20 21:01:33"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.9.0 ESR.

Security Fix(es):

* Mozilla: Incorrect code generation during JIT compilation (CVE-2023-25751)
* Mozilla: Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9 (CVE-2023-28176)
* Mozilla: Potential out-of-bounds when accessing throttled streams (CVE-2023-25752)
* Mozilla: Invalid downcast in Worklets (CVE-2023-28162)
* Mozilla: URL being dragged from a removed cross-origin iframe into the same tab triggered navigation (CVE-2023-28164)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1336" id="RHSA-2023:1336" type="rhsa" title="RHSA-2023:1336"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25751" id="CVE-2023-25751" type="cve" title="CVE-2023-25751"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25752" id="CVE-2023-25752" type="cve" title="CVE-2023-25752"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28162" id="CVE-2023-28162" type="cve" title="CVE-2023-28162"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28164" id="CVE-2023-28164" type="cve" title="CVE-2023-28164"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28176" id="CVE-2023-28176" type="cve" title="CVE-2023-28176"/>
      <reference href="https://bugzilla.redhat.com/2178458" id="2178458" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178460" id="2178460" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178466" id="2178466" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178470" id="2178470" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178472" id="2178472" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1336.html" id="ALSA-2023:1336" type="self" title="ALSA-2023:1336"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="firefox" version="102.9.0" release="3.el8_7.alma" epoch="0" arch="s390x" src="firefox-102.9.0-3.el8_7.alma.src.rpm">
          <filename>firefox-102.9.0-3.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">52bafe41b5efff7763f186452c607745a413d5b7bb5b6ad02e0ba2e6cac8825d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1403</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-03-22 00:00:00"/>
    <updated date="2023-03-23 17:21:47"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.9.0.

Security Fix(es):

* Mozilla: Incorrect code generation during JIT compilation (CVE-2023-25751)
* Mozilla: Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9 (CVE-2023-28176)
* Mozilla: Potential out-of-bounds when accessing throttled streams (CVE-2023-25752)
* Mozilla: Invalid downcast in Worklets (CVE-2023-28162)
* Mozilla: URL being dragged from a removed cross-origin iframe into the same tab triggered navigation (CVE-2023-28164)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1403" id="RHSA-2023:1403" type="rhsa" title="RHSA-2023:1403"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25751" id="CVE-2023-25751" type="cve" title="CVE-2023-25751"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25752" id="CVE-2023-25752" type="cve" title="CVE-2023-25752"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28162" id="CVE-2023-28162" type="cve" title="CVE-2023-28162"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28164" id="CVE-2023-28164" type="cve" title="CVE-2023-28164"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28176" id="CVE-2023-28176" type="cve" title="CVE-2023-28176"/>
      <reference href="https://bugzilla.redhat.com/2178458" id="2178458" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178460" id="2178460" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178466" id="2178466" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178470" id="2178470" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178472" id="2178472" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1403.html" id="ALSA-2023:1403" type="self" title="ALSA-2023:1403"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="thunderbird" version="102.9.0" release="1.el8_7.alma" epoch="0" arch="s390x" src="thunderbird-102.9.0-1.el8_7.alma.src.rpm">
          <filename>thunderbird-102.9.0-1.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">c7cd1324b9a7ce56757530196d16d3a960ffa6f8e3b9955adbb8ae60b33c63f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1551</id>
    <title>Important: tigervnc security update</title>
    <issued date="2023-04-04 00:00:00"/>
    <updated date="2023-04-20 11:47:05"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

Security Fix(es):

* xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability (CVE-2023-1393)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1551" id="RHSA-2023:1551" type="rhsa" title="RHSA-2023:1551"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1393" id="CVE-2023-1393" type="cve" title="CVE-2023-1393"/>
      <reference href="https://bugzilla.redhat.com/2180288" id="2180288" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1551.html" id="ALSA-2023:1551" type="self" title="ALSA-2023:1551"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="tigervnc" version="1.12.0" release="9.el8_7.3" epoch="0" arch="s390x" src="tigervnc-1.12.0-9.el8_7.3.src.rpm">
          <filename>tigervnc-1.12.0-9.el8_7.3.s390x.rpm</filename>
          <sum type="sha256">0d79cf634aa5a8897fc181ccede59e93cf591c1f81ac8f0fa34f366826707f0a</sum>
        </package>
        <package name="tigervnc-icons" version="1.12.0" release="9.el8_7.3" epoch="0" arch="noarch" src="tigervnc-1.12.0-9.el8_7.3.src.rpm">
          <filename>tigervnc-icons-1.12.0-9.el8_7.3.noarch.rpm</filename>
          <sum type="sha256">22861af8c25d14f7fb950e1b909cd11a13b08efb05a86d43268d4c64e40a51bb</sum>
        </package>
        <package name="tigervnc-license" version="1.12.0" release="9.el8_7.3" epoch="0" arch="noarch" src="tigervnc-1.12.0-9.el8_7.3.src.rpm">
          <filename>tigervnc-license-1.12.0-9.el8_7.3.noarch.rpm</filename>
          <sum type="sha256">3540d335716cf7a40c5902604db8e7bf21a1ebf68bf160ff34b1c473f00107b1</sum>
        </package>
        <package name="tigervnc-selinux" version="1.12.0" release="9.el8_7.3" epoch="0" arch="noarch" src="tigervnc-1.12.0-9.el8_7.3.src.rpm">
          <filename>tigervnc-selinux-1.12.0-9.el8_7.3.noarch.rpm</filename>
          <sum type="sha256">86d04f89ad65ad2e31a3742d075b56176d9960ac80407248278fe54eca8f79b6</sum>
        </package>
        <package name="tigervnc-server" version="1.12.0" release="9.el8_7.3" epoch="0" arch="s390x" src="tigervnc-1.12.0-9.el8_7.3.src.rpm">
          <filename>tigervnc-server-1.12.0-9.el8_7.3.s390x.rpm</filename>
          <sum type="sha256">958ab7b6d1f9c48fd2eb6c65cf4bd5d6a6eb9e432ee3d83c83ff34c2bc42a191</sum>
        </package>
        <package name="tigervnc-server-module" version="1.12.0" release="9.el8_7.3" epoch="0" arch="s390x" src="tigervnc-1.12.0-9.el8_7.3.src.rpm">
          <filename>tigervnc-server-module-1.12.0-9.el8_7.3.s390x.rpm</filename>
          <sum type="sha256">ad3ab60527cb02d3f86e80f9e772f44c91f7b3213d38567ae5f46f5c95af477d</sum>
        </package>
        <package name="tigervnc-server-minimal" version="1.12.0" release="9.el8_7.3" epoch="0" arch="s390x" src="tigervnc-1.12.0-9.el8_7.3.src.rpm">
          <filename>tigervnc-server-minimal-1.12.0-9.el8_7.3.s390x.rpm</filename>
          <sum type="sha256">f98df0fb29cbd4bec158d1d17e0f5f53721861c069dcb61faf5b712fa4a8725f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1569</id>
    <title>Moderate: gnutls security and bug fix update</title>
    <issued date="2023-04-04 00:00:00"/>
    <updated date="2023-04-05 12:14:32"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls security and bug fix update</summary>
    <description>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

* gnutls: timing side-channel in the TLS RSA key exchange code (CVE-2023-0361)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* trap invalid opcode ip:7feef81809fe sp:7fee997419c0 error:0 in libgnutls.so.30.28.2[7feef8040000+1dd000] (BZ#2131152)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1569" id="RHSA-2023:1569" type="rhsa" title="RHSA-2023:1569"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0361" id="CVE-2023-0361" type="cve" title="CVE-2023-0361"/>
      <reference href="https://bugzilla.redhat.com/2162596" id="2162596" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1569.html" id="ALSA-2023:1569" type="self" title="ALSA-2023:1569"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="gnutls-dane" version="3.6.16" release="6.el8_7" epoch="0" arch="s390x" src="gnutls-3.6.16-6.el8_7.src.rpm">
          <filename>gnutls-dane-3.6.16-6.el8_7.s390x.rpm</filename>
          <sum type="sha256">5fbf83b8bcbe11d0f1895e950c23ea2db2a7d7ac4063677408a32608ff51138d</sum>
        </package>
        <package name="gnutls-utils" version="3.6.16" release="6.el8_7" epoch="0" arch="s390x" src="gnutls-3.6.16-6.el8_7.src.rpm">
          <filename>gnutls-utils-3.6.16-6.el8_7.s390x.rpm</filename>
          <sum type="sha256">691bdf63725bef50a4d078e33ab72a22cfc5fe44f1654d116089175285b5997a</sum>
        </package>
        <package name="gnutls-devel" version="3.6.16" release="6.el8_7" epoch="0" arch="s390x" src="gnutls-3.6.16-6.el8_7.src.rpm">
          <filename>gnutls-devel-3.6.16-6.el8_7.s390x.rpm</filename>
          <sum type="sha256">b91886dc3da98974e11f11554624215ef70758547965ede23edef8e76ab39d4f</sum>
        </package>
        <package name="gnutls-c++" version="3.6.16" release="6.el8_7" epoch="0" arch="s390x" src="gnutls-3.6.16-6.el8_7.src.rpm">
          <filename>gnutls-c++-3.6.16-6.el8_7.s390x.rpm</filename>
          <sum type="sha256">f47e5805372bfa0569333dcc48497c5e49b00717c134dd358883808a1aabe565</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1576</id>
    <title>Moderate: postgresql:13 security update</title>
    <issued date="2023-04-04 00:00:00"/>
    <updated date="2023-04-05 11:54:18"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql:13 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: Extension scripts replace objects not belonging to the extension. (CVE-2022-2625)
* postgresql: Client memory disclosure when connecting with Kerberos to modified server (CVE-2022-41862)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1576" id="RHSA-2023:1576" type="rhsa" title="RHSA-2023:1576"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2625" id="CVE-2022-2625" type="cve" title="CVE-2022-2625"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41862" id="CVE-2022-41862" type="cve" title="CVE-2022-41862"/>
      <reference href="https://bugzilla.redhat.com/2113825" id="2113825" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165722" id="2165722" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1576.html" id="ALSA-2023:1576" type="self" title="ALSA-2023:1576"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <module name="postgresql" stream="13" version="8060020220601105339" context="9edba152" arch="s390x"/>
        <package name="postgresql-docs" version="13.10" release="1.module_el8.7.0+3498+cb1ef3c6" epoch="0" arch="s390x" src="postgresql-13.10-1.module_el8.7.0+3498+cb1ef3c6.src.rpm">
          <filename>postgresql-docs-13.10-1.module_el8.7.0+3498+cb1ef3c6.s390x.rpm</filename>
          <sum type="sha256">0829524a3af726dc566a86f12ea12b901016b206b1ec3306277bd9d18f2bf8e3</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.10" release="1.module_el8.7.0+3498+cb1ef3c6" epoch="0" arch="s390x" src="postgresql-13.10-1.module_el8.7.0+3498+cb1ef3c6.src.rpm">
          <filename>postgresql-upgrade-devel-13.10-1.module_el8.7.0+3498+cb1ef3c6.s390x.rpm</filename>
          <sum type="sha256">1d821d044101440fa1fc5e83f6c22ed0c8d245dc07fcba9e2ca22b2541f69902</sum>
        </package>
        <package name="postgresql-static" version="13.10" release="1.module_el8.7.0+3498+cb1ef3c6" epoch="0" arch="s390x" src="postgresql-13.10-1.module_el8.7.0+3498+cb1ef3c6.src.rpm">
          <filename>postgresql-static-13.10-1.module_el8.7.0+3498+cb1ef3c6.s390x.rpm</filename>
          <sum type="sha256">1e85e50f5ddfb99347a2f8224bd2adb2b797240db3a790d55175c8904effe931</sum>
        </package>
        <package name="postgresql-plperl" version="13.10" release="1.module_el8.7.0+3498+cb1ef3c6" epoch="0" arch="s390x" src="postgresql-13.10-1.module_el8.7.0+3498+cb1ef3c6.src.rpm">
          <filename>postgresql-plperl-13.10-1.module_el8.7.0+3498+cb1ef3c6.s390x.rpm</filename>
          <sum type="sha256">1fe9aba632a2b7cf0dae840bddb71b088cbcea1bf8739fc0a55bf6be7b24fa04</sum>
        </package>
        <package name="postgresql-plpython3" version="13.10" release="1.module_el8.7.0+3498+cb1ef3c6" epoch="0" arch="s390x" src="postgresql-13.10-1.module_el8.7.0+3498+cb1ef3c6.src.rpm">
          <filename>postgresql-plpython3-13.10-1.module_el8.7.0+3498+cb1ef3c6.s390x.rpm</filename>
          <sum type="sha256">352a54868afc8cdf9112b1df4720992ab08a6503d3897166bfd667440b4e932c</sum>
        </package>
        <package name="postgresql-server" version="13.10" release="1.module_el8.7.0+3498+cb1ef3c6" epoch="0" arch="s390x" src="postgresql-13.10-1.module_el8.7.0+3498+cb1ef3c6.src.rpm">
          <filename>postgresql-server-13.10-1.module_el8.7.0+3498+cb1ef3c6.s390x.rpm</filename>
          <sum type="sha256">5b213a67d350046b8527589d2a830299568e0374c90cbddc2b22730f17a4c5fd</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="13.10" release="1.module_el8.7.0+3498+cb1ef3c6" epoch="0" arch="noarch" src="postgresql-13.10-1.module_el8.7.0+3498+cb1ef3c6.src.rpm">
          <filename>postgresql-test-rpm-macros-13.10-1.module_el8.7.0+3498+cb1ef3c6.noarch.rpm</filename>
          <sum type="sha256">67fada6a4733ae7a7d3a75841ebf27df6e2874d630df4ba9b9e065960dd013f8</sum>
        </package>
        <package name="postgresql-test" version="13.10" release="1.module_el8.7.0+3498+cb1ef3c6" epoch="0" arch="s390x" src="postgresql-13.10-1.module_el8.7.0+3498+cb1ef3c6.src.rpm">
          <filename>postgresql-test-13.10-1.module_el8.7.0+3498+cb1ef3c6.s390x.rpm</filename>
          <sum type="sha256">6ae86365c9c2c3cb2c9149f8ac08d894d90f232d52d4e2433748ea729529348f</sum>
        </package>
        <package name="postgresql-upgrade" version="13.10" release="1.module_el8.7.0+3498+cb1ef3c6" epoch="0" arch="s390x" src="postgresql-13.10-1.module_el8.7.0+3498+cb1ef3c6.src.rpm">
          <filename>postgresql-upgrade-13.10-1.module_el8.7.0+3498+cb1ef3c6.s390x.rpm</filename>
          <sum type="sha256">921d9feda5ebbd8410a1dd34ae0634e9dccbe88bee5523a4e1786c175c69f5e0</sum>
        </package>
        <package name="pgaudit" version="1.5.0" release="1.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="pgaudit-1.5.0-1.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>pgaudit-1.5.0-1.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">a29cba50326b3c78b1cff9ad076eff7837022e71f02d7ec9e918aed69a9c3f35</sum>
        </package>
        <package name="postgres-decoderbufs" version="0.10.0" release="2.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">b11226898b888f8213eefe941cece0f636a08ccce2ceaa8bee2a38e6058ed4f3</sum>
        </package>
        <package name="pg_repack" version="1.4.6" release="3.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="pg_repack-1.4.6-3.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>pg_repack-1.4.6-3.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">c1b386540b304a4de3ff8d840ec35dc9d67ecd1827aa06cd695f06060e8d2ea7</sum>
        </package>
        <package name="postgresql-contrib" version="13.10" release="1.module_el8.7.0+3498+cb1ef3c6" epoch="0" arch="s390x" src="postgresql-13.10-1.module_el8.7.0+3498+cb1ef3c6.src.rpm">
          <filename>postgresql-contrib-13.10-1.module_el8.7.0+3498+cb1ef3c6.s390x.rpm</filename>
          <sum type="sha256">eaa9755f35f8135a374f78f52a2375215f477edc4e4343aa76f581040d253a36</sum>
        </package>
        <package name="postgresql-pltcl" version="13.10" release="1.module_el8.7.0+3498+cb1ef3c6" epoch="0" arch="s390x" src="postgresql-13.10-1.module_el8.7.0+3498+cb1ef3c6.src.rpm">
          <filename>postgresql-pltcl-13.10-1.module_el8.7.0+3498+cb1ef3c6.s390x.rpm</filename>
          <sum type="sha256">ef64163b1aa4eb59313796f96b2177be71f4db8b6ad26a074a8c51c70122753d</sum>
        </package>
        <package name="postgresql" version="13.10" release="1.module_el8.7.0+3498+cb1ef3c6" epoch="0" arch="s390x" src="postgresql-13.10-1.module_el8.7.0+3498+cb1ef3c6.src.rpm">
          <filename>postgresql-13.10-1.module_el8.7.0+3498+cb1ef3c6.s390x.rpm</filename>
          <sum type="sha256">efccef537f13a61f7f374fe802a40e66c5a9a40152e74418bc5fd8acf37ddc7e</sum>
        </package>
        <package name="postgresql-server-devel" version="13.10" release="1.module_el8.7.0+3498+cb1ef3c6" epoch="0" arch="s390x" src="postgresql-13.10-1.module_el8.7.0+3498+cb1ef3c6.src.rpm">
          <filename>postgresql-server-devel-13.10-1.module_el8.7.0+3498+cb1ef3c6.s390x.rpm</filename>
          <sum type="sha256">fb73005fd8b4b28c580f77845d81a0709f65814f1f2d501bca7ecd90fdd8dfdb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1582</id>
    <title>Moderate: nodejs:16 security, bug fix, and enhancement update</title>
    <issued date="2023-04-04 00:00:00"/>
    <updated date="2023-04-20 12:04:52"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs:16 security, bug fix, and enhancement update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

The following packages have been upgraded to a later upstream version: nodejs (16.19.1).

Security Fix(es):

* glob-parent: Regular Expression Denial of Service (CVE-2021-35065)
* c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)
* http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881)
* Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918)
* Node.js: OpenSSL error handling issues in nodejs crypto library (CVE-2023-23919)
* Node.js: Fetch API did not protect against CRLF injection in host headers (CVE-2023-23936)
* Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920)
* Node.js: Regular Expression Denial of Service in Headers fetch API (CVE-2023-24807)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1582" id="RHSA-2023:1582" type="rhsa" title="RHSA-2023:1582"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35065" id="CVE-2021-35065" type="cve" title="CVE-2021-35065"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25881" id="CVE-2022-25881" type="cve" title="CVE-2022-25881"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4904" id="CVE-2022-4904" type="cve" title="CVE-2022-4904"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23918" id="CVE-2023-23918" type="cve" title="CVE-2023-23918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23919" id="CVE-2023-23919" type="cve" title="CVE-2023-23919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23920" id="CVE-2023-23920" type="cve" title="CVE-2023-23920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23936" id="CVE-2023-23936" type="cve" title="CVE-2023-23936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24807" id="CVE-2023-24807" type="cve" title="CVE-2023-24807"/>
      <reference href="https://bugzilla.redhat.com/2156324" id="2156324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165824" id="2165824" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2168631" id="2168631" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2171935" id="2171935" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2172170" id="2172170" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2172190" id="2172190" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2172204" id="2172204" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2172217" id="2172217" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1582.html" id="ALSA-2023:1582" type="self" title="ALSA-2023:1582"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <module name="nodejs" stream="16" version="8070020230404101121" context="9edba152" arch="s390x"/>
        <package name="nodejs" version="16.19.1" release="1.module_el8.7.0+3496+a59a3324" epoch="1" arch="s390x" src="nodejs-16.19.1-1.module_el8.7.0+3496+a59a3324.src.rpm">
          <filename>nodejs-16.19.1-1.module_el8.7.0+3496+a59a3324.s390x.rpm</filename>
          <sum type="sha256">17b3af1afdd98f6e9e3bc857b6c8f8dccb1da23b4e2c7e8f369bfb5bc44c8baa</sum>
        </package>
        <package name="nodejs-docs" version="16.19.1" release="1.module_el8.7.0+3496+a59a3324" epoch="1" arch="noarch" src="nodejs-16.19.1-1.module_el8.7.0+3496+a59a3324.src.rpm">
          <filename>nodejs-docs-16.19.1-1.module_el8.7.0+3496+a59a3324.noarch.rpm</filename>
          <sum type="sha256">4b5f8e7ace28d3cb2195c2f9057b2dd755ced3691fd016859a7f854ba36623e1</sum>
        </package>
        <package name="nodejs-devel" version="16.19.1" release="1.module_el8.7.0+3496+a59a3324" epoch="1" arch="s390x" src="nodejs-16.19.1-1.module_el8.7.0+3496+a59a3324.src.rpm">
          <filename>nodejs-devel-16.19.1-1.module_el8.7.0+3496+a59a3324.s390x.rpm</filename>
          <sum type="sha256">6dee87315c7552d657dc8efdc38e4b4eef10a2847f304872afbe50e338bd5848</sum>
        </package>
        <package name="nodejs-full-i18n" version="16.19.1" release="1.module_el8.7.0+3496+a59a3324" epoch="1" arch="s390x" src="nodejs-16.19.1-1.module_el8.7.0+3496+a59a3324.src.rpm">
          <filename>nodejs-full-i18n-16.19.1-1.module_el8.7.0+3496+a59a3324.s390x.rpm</filename>
          <sum type="sha256">860a1aa113812f14c351239d68b01a9beceb4624cf96ce381ca9420b65fd49ad</sum>
        </package>
        <package name="npm" version="8.19.3" release="1.16.19.1.1.module_el8.7.0+3496+a59a3324" epoch="1" arch="s390x" src="nodejs-16.19.1-1.module_el8.7.0+3496+a59a3324.src.rpm">
          <filename>npm-8.19.3-1.16.19.1.1.module_el8.7.0+3496+a59a3324.s390x.rpm</filename>
          <sum type="sha256">8cdb12bb6b27ec223713e8376da708cc9097edcd4ee731d91482675691718fc3</sum>
        </package>
        <package name="nodejs-nodemon" version="2.0.20" release="3.module_el8.7.0+3496+a59a3324" epoch="0" arch="noarch" src="nodejs-nodemon-2.0.20-3.module_el8.7.0+3496+a59a3324.src.rpm">
          <filename>nodejs-nodemon-2.0.20-3.module_el8.7.0+3496+a59a3324.noarch.rpm</filename>
          <sum type="sha256">d194817ee4134ff362909fe9642c8da5fd4f3a0a92f3ba1dd03ca4225195d2be</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1583</id>
    <title>Moderate: nodejs:18 security, bug fix, and enhancement update</title>
    <issued date="2023-04-04 00:00:00"/>
    <updated date="2023-04-20 12:25:58"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs:18 security, bug fix, and enhancement update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

The following packages have been upgraded to a later upstream version: nodejs (18.14.2).

Security Fix(es):

* glob-parent: Regular Expression Denial of Service (CVE-2021-35065)
* http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881)
* Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918)
* Node.js: Fetch API did not protect against CRLF injection in host headers (CVE-2023-23936)
* Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920)
* Node.js: Regular Expression Denial of Service in Headers fetch API (CVE-2023-24807)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1583" id="RHSA-2023:1583" type="rhsa" title="RHSA-2023:1583"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35065" id="CVE-2021-35065" type="cve" title="CVE-2021-35065"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25881" id="CVE-2022-25881" type="cve" title="CVE-2022-25881"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23918" id="CVE-2023-23918" type="cve" title="CVE-2023-23918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23920" id="CVE-2023-23920" type="cve" title="CVE-2023-23920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23936" id="CVE-2023-23936" type="cve" title="CVE-2023-23936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24807" id="CVE-2023-24807" type="cve" title="CVE-2023-24807"/>
      <reference href="https://bugzilla.redhat.com/2156324" id="2156324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165824" id="2165824" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2171935" id="2171935" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2172190" id="2172190" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2172204" id="2172204" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2172217" id="2172217" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1583.html" id="ALSA-2023:1583" type="self" title="ALSA-2023:1583"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <module name="nodejs" stream="18" version="8070020230404101124" context="9edba152" arch="s390x"/>
        <package name="npm" version="9.5.0" release="1.18.14.2.2.module_el8.7.0+3497+c65299e7" epoch="1" arch="s390x" src="nodejs-18.14.2-2.module_el8.7.0+3497+c65299e7.src.rpm">
          <filename>npm-9.5.0-1.18.14.2.2.module_el8.7.0+3497+c65299e7.s390x.rpm</filename>
          <sum type="sha256">2956059667a602bd0f19da7e6a1d8d1013dc297fb760e2260e6aa44922c1af3c</sum>
        </package>
        <package name="nodejs-docs" version="18.14.2" release="2.module_el8.7.0+3497+c65299e7" epoch="1" arch="noarch" src="nodejs-18.14.2-2.module_el8.7.0+3497+c65299e7.src.rpm">
          <filename>nodejs-docs-18.14.2-2.module_el8.7.0+3497+c65299e7.noarch.rpm</filename>
          <sum type="sha256">4e2275f111ab94ff1f2ccdf758432fbe8b2a6b24e8a7d22c3d07cd5da0c2a840</sum>
        </package>
        <package name="nodejs-nodemon" version="2.0.20" release="2.module_el8.7.0+3497+c65299e7" epoch="0" arch="noarch" src="nodejs-nodemon-2.0.20-2.module_el8.7.0+3497+c65299e7.src.rpm">
          <filename>nodejs-nodemon-2.0.20-2.module_el8.7.0+3497+c65299e7.noarch.rpm</filename>
          <sum type="sha256">6a006142ce68f7873cf6dce117dc365b8e11b415604dc6046d933d7857378af1</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el8.7.0+3343+ea2b7901" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.noarch.rpm</filename>
          <sum type="sha256">9430d44c78a3cfbe1ae3d39b8531f651606661943959bc0c3de87b2f91ea6f67</sum>
        </package>
        <package name="nodejs-devel" version="18.14.2" release="2.module_el8.7.0+3497+c65299e7" epoch="1" arch="s390x" src="nodejs-18.14.2-2.module_el8.7.0+3497+c65299e7.src.rpm">
          <filename>nodejs-devel-18.14.2-2.module_el8.7.0+3497+c65299e7.s390x.rpm</filename>
          <sum type="sha256">c4a9b0c3135316ba73bc70e2d47c4639f8692dc6742d080aad7b5e7b854c0748</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el8.7.0+3343+ea2b7901" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el8.7.0+3343+ea2b7901.noarch.rpm</filename>
          <sum type="sha256">dca36d100028686323583aeddaa86efff902ff7fe29cb97d4356c309e3e899d9</sum>
        </package>
        <package name="nodejs-full-i18n" version="18.14.2" release="2.module_el8.7.0+3497+c65299e7" epoch="1" arch="s390x" src="nodejs-18.14.2-2.module_el8.7.0+3497+c65299e7.src.rpm">
          <filename>nodejs-full-i18n-18.14.2-2.module_el8.7.0+3497+c65299e7.s390x.rpm</filename>
          <sum type="sha256">eb525bd577d27a01721702066c41ab29451e92949aa07613909316133a72a6b8</sum>
        </package>
        <package name="nodejs" version="18.14.2" release="2.module_el8.7.0+3497+c65299e7" epoch="1" arch="s390x" src="nodejs-18.14.2-2.module_el8.7.0+3497+c65299e7.src.rpm">
          <filename>nodejs-18.14.2-2.module_el8.7.0+3497+c65299e7.s390x.rpm</filename>
          <sum type="sha256">f1e1f72d446accd08458eac857ea123b199534837f3664ffc95dcd172c6022e7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1673</id>
    <title>Important: httpd:2.4 security update</title>
    <issued date="2023-04-06 00:00:00"/>
    <updated date="2023-04-20 12:45:45"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>httpd:2.4 security update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: HTTP request splitting with mod_rewrite and mod_proxy (CVE-2023-25690)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1673" id="RHSA-2023:1673" type="rhsa" title="RHSA-2023:1673"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25690" id="CVE-2023-25690" type="cve" title="CVE-2023-25690"/>
      <reference href="https://bugzilla.redhat.com/2176209" id="2176209" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1673.html" id="ALSA-2023:1673" type="self" title="ALSA-2023:1673"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <module name="httpd" stream="2.4" version="8070020230406163518" context="9edba152" arch="s390x"/>
        <package name="mod_proxy_html" version="2.4.37" release="51.module_el8.7.0+3515+9e4fe0d6.5" epoch="1" arch="s390x" src="httpd-2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5.src.rpm">
          <filename>mod_proxy_html-2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5.s390x.rpm</filename>
          <sum type="sha256">18893811ffcff5398519c2c0a8a73646fc8a3082b78ccf0499dc60dd193fcaa7</sum>
        </package>
        <package name="httpd-devel" version="2.4.37" release="51.module_el8.7.0+3515+9e4fe0d6.5" epoch="0" arch="s390x" src="httpd-2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5.src.rpm">
          <filename>httpd-devel-2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5.s390x.rpm</filename>
          <sum type="sha256">29d11b0493f24ea7a7c906f71170ab7a01023347a192641c9203e3c1fe121d4d</sum>
        </package>
        <package name="httpd-tools" version="2.4.37" release="51.module_el8.7.0+3515+9e4fe0d6.5" epoch="0" arch="s390x" src="httpd-2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5.src.rpm">
          <filename>httpd-tools-2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5.s390x.rpm</filename>
          <sum type="sha256">3fdde25a057989b78f87341bd4716255845ecd650f2558d47f4970ba1757bad1</sum>
        </package>
        <package name="mod_ldap" version="2.4.37" release="51.module_el8.7.0+3515+9e4fe0d6.5" epoch="0" arch="s390x" src="httpd-2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5.src.rpm">
          <filename>mod_ldap-2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5.s390x.rpm</filename>
          <sum type="sha256">6afab839ee70d8f7be6554527d7dddd3e0c29a5272d479c679e3e2bd761c856c</sum>
        </package>
        <package name="mod_http2" version="1.15.7" release="5.module_el8.7.0+3515+9e4fe0d6.4" epoch="0" arch="s390x" src="mod_http2-1.15.7-5.module_el8.7.0+3515+9e4fe0d6.4.src.rpm">
          <filename>mod_http2-1.15.7-5.module_el8.7.0+3515+9e4fe0d6.4.s390x.rpm</filename>
          <sum type="sha256">6cfd158fa98a10ba75f12d3ec11ddf7587f0176f278ba198351e9b8f96b6818f</sum>
        </package>
        <package name="httpd-manual" version="2.4.37" release="51.module_el8.7.0+3515+9e4fe0d6.5" epoch="0" arch="noarch" src="httpd-2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5.src.rpm">
          <filename>httpd-manual-2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5.noarch.rpm</filename>
          <sum type="sha256">c2eaf8441ad18eb46456183651153683b7a7ec46d5e51e2e3a074dd729429df3</sum>
        </package>
        <package name="mod_session" version="2.4.37" release="51.module_el8.7.0+3515+9e4fe0d6.5" epoch="0" arch="s390x" src="httpd-2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5.src.rpm">
          <filename>mod_session-2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5.s390x.rpm</filename>
          <sum type="sha256">c3af942a3fb9ae088e9cc00ba603cceca1b21e75b7f2e35d61f0c078108a8163</sum>
        </package>
        <package name="httpd-filesystem" version="2.4.37" release="51.module_el8.7.0+3515+9e4fe0d6.5" epoch="0" arch="noarch" src="httpd-2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5.src.rpm">
          <filename>httpd-filesystem-2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5.noarch.rpm</filename>
          <sum type="sha256">df791fef726f775efac4dfd381d0d75d5d6a0cf45a721c6646470479be00eda6</sum>
        </package>
        <package name="httpd" version="2.4.37" release="51.module_el8.7.0+3515+9e4fe0d6.5" epoch="0" arch="s390x" src="httpd-2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5.src.rpm">
          <filename>httpd-2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5.s390x.rpm</filename>
          <sum type="sha256">e2c5922668dc26cb9e4e22314f4ebd636ac7cb90cea3fe5cf5bcfb3d8768b9f5</sum>
        </package>
        <package name="mod_md" version="2.0.8" release="8.module_el8.6.0+3031+fb177b09" epoch="1" arch="s390x" src="mod_md-2.0.8-8.module_el8.6.0+3031+fb177b09.src.rpm">
          <filename>mod_md-2.0.8-8.module_el8.6.0+3031+fb177b09.s390x.rpm</filename>
          <sum type="sha256">e47754aea99df8718074dd3d1df288b448b0af9d0ba4f0f8c6a3b5c8a164a1a7</sum>
        </package>
        <package name="mod_ssl" version="2.4.37" release="51.module_el8.7.0+3515+9e4fe0d6.5" epoch="1" arch="s390x" src="httpd-2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5.src.rpm">
          <filename>mod_ssl-2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5.s390x.rpm</filename>
          <sum type="sha256">fbf83ea102708a817db1573b49691f0b54149cff1bcb0815e08c7321b9d05818</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1743</id>
    <title>Important: nodejs:14 security, bug fix, and enhancement update</title>
    <issued date="2023-04-12 00:00:00"/>
    <updated date="2023-04-20 13:00:14"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:14 security, bug fix, and enhancement update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

The following packages have been upgraded to a later upstream version: nodejs (14.21.3).

Security Fix(es):

* decode-uri-component: improper input validation resulting in DoS (CVE-2022-38900)
* glob-parent: Regular Expression Denial of Service (CVE-2021-35065)
* nodejs-minimatch: ReDoS via the braceExpand function (CVE-2022-3517)
* c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)
* http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881)
* Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918)
* Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1743" id="RHSA-2023:1743" type="rhsa" title="RHSA-2023:1743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35065" id="CVE-2021-35065" type="cve" title="CVE-2021-35065"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25881" id="CVE-2022-25881" type="cve" title="CVE-2022-25881"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3517" id="CVE-2022-3517" type="cve" title="CVE-2022-3517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38900" id="CVE-2022-38900" type="cve" title="CVE-2022-38900"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4904" id="CVE-2022-4904" type="cve" title="CVE-2022-4904"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23918" id="CVE-2023-23918" type="cve" title="CVE-2023-23918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23920" id="CVE-2023-23920" type="cve" title="CVE-2023-23920"/>
      <reference href="https://bugzilla.redhat.com/2134609" id="2134609" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2156324" id="2156324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165824" id="2165824" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2168631" id="2168631" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170644" id="2170644" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2171935" id="2171935" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2172217" id="2172217" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1743.html" id="ALSA-2023:1743" type="self" title="ALSA-2023:1743"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <module name="nodejs" stream="14" version="8070020230412152356" context="9edba152" arch="s390x"/>
        <package name="npm" version="6.14.18" release="1.14.21.3.1.module_el8.7.0+3551+53700ee8" epoch="1" arch="s390x" src="nodejs-14.21.3-1.module_el8.7.0+3551+53700ee8.src.rpm">
          <filename>npm-6.14.18-1.14.21.3.1.module_el8.7.0+3551+53700ee8.s390x.rpm</filename>
          <sum type="sha256">46ab8b24e4b459d6f34962c42b03a683bff821bb04e40ec9199c3db6d9b65d63</sum>
        </package>
        <package name="nodejs" version="14.21.3" release="1.module_el8.7.0+3551+53700ee8" epoch="1" arch="s390x" src="nodejs-14.21.3-1.module_el8.7.0+3551+53700ee8.src.rpm">
          <filename>nodejs-14.21.3-1.module_el8.7.0+3551+53700ee8.s390x.rpm</filename>
          <sum type="sha256">5f9a3cf3d8600ef5f71db9b5745189d0ce0a9832dcac65aa72dbdc3ab3692a03</sum>
        </package>
        <package name="nodejs-nodemon" version="2.0.20" release="3.module_el8.7.0+3551+53700ee8" epoch="0" arch="noarch" src="nodejs-nodemon-2.0.20-3.module_el8.7.0+3551+53700ee8.src.rpm">
          <filename>nodejs-nodemon-2.0.20-3.module_el8.7.0+3551+53700ee8.noarch.rpm</filename>
          <sum type="sha256">856719cbce987e7bb337c2c3ea49b2e78fab3f6706787162f18625a4357576fe</sum>
        </package>
        <package name="nodejs-docs" version="14.21.3" release="1.module_el8.7.0+3551+53700ee8" epoch="1" arch="noarch" src="nodejs-14.21.3-1.module_el8.7.0+3551+53700ee8.src.rpm">
          <filename>nodejs-docs-14.21.3-1.module_el8.7.0+3551+53700ee8.noarch.rpm</filename>
          <sum type="sha256">9fe56dbb0aeebfef640feee493a80af2cea2f7011fa3bbb12d4eb72a92682da7</sum>
        </package>
        <package name="nodejs-devel" version="14.21.3" release="1.module_el8.7.0+3551+53700ee8" epoch="1" arch="s390x" src="nodejs-14.21.3-1.module_el8.7.0+3551+53700ee8.src.rpm">
          <filename>nodejs-devel-14.21.3-1.module_el8.7.0+3551+53700ee8.s390x.rpm</filename>
          <sum type="sha256">b4f5d7e1a89ce660d07e868bc2425c0de9741d4e2429c85c8de69e79e8ddd4d3</sum>
        </package>
        <package name="nodejs-full-i18n" version="14.21.3" release="1.module_el8.7.0+3551+53700ee8" epoch="1" arch="s390x" src="nodejs-14.21.3-1.module_el8.7.0+3551+53700ee8.src.rpm">
          <filename>nodejs-full-i18n-14.21.3-1.module_el8.7.0+3551+53700ee8.s390x.rpm</filename>
          <sum type="sha256">ff0ce7f82660e02ea8796d66c94d216a9211037281befad8cf56b8d3be249048</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1787</id>
    <title>Important: firefox security update</title>
    <issued date="2023-04-14 00:00:00"/>
    <updated date="2023-04-20 13:11:54"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.10.0 ESR.

Security Fix(es):

* MFSA-TMP-2023-0001 Mozilla: Double-free in libwebp (BZ#2186102)
* Mozilla: Fullscreen notification obscured (CVE-2023-29533)
* Mozilla: Potential Memory Corruption following Garbage Collector compaction (CVE-2023-29535)
* Mozilla: Invalid free from JavaScript code (CVE-2023-29536)
* Mozilla: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10 (CVE-2023-29550)
* Mozilla: Memory Corruption in Safe Browsing Code (CVE-2023-1945)
* Mozilla: Content-Disposition filename truncation leads to Reflected File Download (CVE-2023-29539)
* Mozilla: Files with malicious extensions could have been downloaded unsafely on Linux (CVE-2023-29541)
* Mozilla: Incorrect optimization result on ARM64 (CVE-2023-29548)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1787" id="RHSA-2023:1787" type="rhsa" title="RHSA-2023:1787"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1945" id="CVE-2023-1945" type="cve" title="CVE-2023-1945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29533" id="CVE-2023-29533" type="cve" title="CVE-2023-29533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29535" id="CVE-2023-29535" type="cve" title="CVE-2023-29535"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29536" id="CVE-2023-29536" type="cve" title="CVE-2023-29536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29539" id="CVE-2023-29539" type="cve" title="CVE-2023-29539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29541" id="CVE-2023-29541" type="cve" title="CVE-2023-29541"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29548" id="CVE-2023-29548" type="cve" title="CVE-2023-29548"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29550" id="CVE-2023-29550" type="cve" title="CVE-2023-29550"/>
      <reference href="https://bugzilla.redhat.com/2186101" id="2186101" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186103" id="2186103" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186104" id="2186104" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186105" id="2186105" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186106" id="2186106" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186109" id="2186109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186110" id="2186110" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186111" id="2186111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1787.html" id="ALSA-2023:1787" type="self" title="ALSA-2023:1787"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="firefox" version="102.10.0" release="1.el8_7.alma" epoch="0" arch="s390x" src="firefox-102.10.0-1.el8_7.alma.src.rpm">
          <filename>firefox-102.10.0-1.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">7860786c25b333c928745cc4d0c95a4e5d9751d1134c26b2baa2e53e8a34836a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1802</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-04-17 00:00:00"/>
    <updated date="2023-04-20 13:27:45"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.10.0.

Security Fix(es):

* Thunderbird: Revocation status of S/Mime recipient certificates was not checked (CVE-2023-0547)
* Mozilla: Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack (CVE-2023-28427)
* Mozilla: Fullscreen notification obscured (CVE-2023-29533)
* Mozilla: Potential Memory Corruption following Garbage Collector compaction (CVE-2023-29535)
* Mozilla: Invalid free from JavaScript code (CVE-2023-29536)
* Mozilla: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10 (CVE-2023-29550)
* Mozilla: Memory Corruption in Safe Browsing Code (CVE-2023-1945)
* Thunderbird: Hang when processing certain OpenPGP messages (CVE-2023-29479)
* Mozilla: Content-Disposition filename truncation leads to Reflected File Download (CVE-2023-29539)
* Mozilla: Files with malicious extensions could have been downloaded unsafely on Linux (CVE-2023-29541)
* Mozilla: Incorrect optimization result on ARM64 (CVE-2023-29548)
* MFSA-TMP-2023-0001 Mozilla: Double-free in libwebp (BZ#2186102)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1802" id="RHSA-2023:1802" type="rhsa" title="RHSA-2023:1802"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0547" id="CVE-2023-0547" type="cve" title="CVE-2023-0547"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1945" id="CVE-2023-1945" type="cve" title="CVE-2023-1945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28427" id="CVE-2023-28427" type="cve" title="CVE-2023-28427"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29479" id="CVE-2023-29479" type="cve" title="CVE-2023-29479"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29533" id="CVE-2023-29533" type="cve" title="CVE-2023-29533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29535" id="CVE-2023-29535" type="cve" title="CVE-2023-29535"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29536" id="CVE-2023-29536" type="cve" title="CVE-2023-29536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29539" id="CVE-2023-29539" type="cve" title="CVE-2023-29539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29541" id="CVE-2023-29541" type="cve" title="CVE-2023-29541"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29548" id="CVE-2023-29548" type="cve" title="CVE-2023-29548"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29550" id="CVE-2023-29550" type="cve" title="CVE-2023-29550"/>
      <reference href="https://bugzilla.redhat.com/2183278" id="2183278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186101" id="2186101" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186103" id="2186103" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186104" id="2186104" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186105" id="2186105" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186106" id="2186106" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186109" id="2186109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186110" id="2186110" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186111" id="2186111" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186734" id="2186734" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2186735" id="2186735" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1802.html" id="ALSA-2023:1802" type="self" title="ALSA-2023:1802"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="thunderbird" version="102.10.0" release="2.el8_7.alma" epoch="0" arch="s390x" src="thunderbird-102.10.0-2.el8_7.alma.src.rpm">
          <filename>thunderbird-102.10.0-2.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">35010ca2304b60cf4c3fdfcf32bf57cb42f702dc3032afcfd39f4ca8111c05b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1895</id>
    <title>Important: java-11-openjdk security update</title>
    <issued date="2023-04-20 00:00:00"/>
    <updated date="2023-04-23 06:33:57"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-11-openjdk security update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)
* OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)
* OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)
* OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)
* OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)
* OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)
* OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1895" id="RHSA-2023:1895" type="rhsa" title="RHSA-2023:1895"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21930" id="CVE-2023-21930" type="cve" title="CVE-2023-21930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21937" id="CVE-2023-21937" type="cve" title="CVE-2023-21937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21938" id="CVE-2023-21938" type="cve" title="CVE-2023-21938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21939" id="CVE-2023-21939" type="cve" title="CVE-2023-21939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21954" id="CVE-2023-21954" type="cve" title="CVE-2023-21954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21967" id="CVE-2023-21967" type="cve" title="CVE-2023-21967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21968" id="CVE-2023-21968" type="cve" title="CVE-2023-21968"/>
      <reference href="https://bugzilla.redhat.com/2187435" id="2187435" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187441" id="2187441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187704" id="2187704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187724" id="2187724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187758" id="2187758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187790" id="2187790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187802" id="2187802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1895.html" id="ALSA-2023:1895" type="self" title="ALSA-2023:1895"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="java-11-openjdk-javadoc-zip" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-javadoc-zip-11.0.19.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">0956967e4228b6fdfb2d50ef535c3632cb14467d7fc833ea55ebd3d715eceb54</sum>
        </package>
        <package name="java-11-openjdk-devel" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-devel-11.0.19.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">15a7134e81d90472985a8e4774e582ef58a9b948603bbed821f5683ae2b702e2</sum>
        </package>
        <package name="java-11-openjdk-javadoc" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-javadoc-11.0.19.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">3aa98cb33a078c0dbbbf23e96238cb59aee2cf8a1ae131ef37adb112d60a43fa</sum>
        </package>
        <package name="java-11-openjdk-headless" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-headless-11.0.19.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">3ceec1a5eb03bbd95cb1c83acc975770fcdd259160c4d44005242673fe8c59cc</sum>
        </package>
        <package name="java-11-openjdk-demo" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-demo-11.0.19.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">3faeb511ac2f28b611544514ee26612ba33b7358c89bf55c9b77aea5829b7bf0</sum>
        </package>
        <package name="java-11-openjdk-src" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-src-11.0.19.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">435ed4dde3d7c792c1fa3eedca6f574507db091c84d6ed5331e64efcdb3a3b79</sum>
        </package>
        <package name="java-11-openjdk" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-11.0.19.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">85ef464cb73bac4c7a8ea7ab110925685da72bf54038ea72413966411949cc99</sum>
        </package>
        <package name="java-11-openjdk-static-libs" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-static-libs-11.0.19.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">d74af467617ec83884b45cf66f138dc32efaef3aed3cdcd5091c7bd8bdea477f</sum>
        </package>
        <package name="java-11-openjdk-jmods" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-jmods-11.0.19.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">ea6cf6190009c0033cfb4995284c21e071592d889399c009e2e6b25005ec1737</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1898</id>
    <title>Important: java-17-openjdk security and bug fix update</title>
    <issued date="2023-04-20 00:00:00"/>
    <updated date="2023-04-23 06:46:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)
* OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)
* OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)
* OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)
* OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)
* OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)
* OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* In FIPS mode, the list of cryptographic services and algorithms available is limited to those that are FIPS compliant. It was found that this filtering was too strict and was also excluding service attributes. These attributes are now made available in FIPS mode, as they are in non-FIPS mode. (RHBZ#2186835)
* Previously, the XML signature provider was unable to operate in FIPS mode. Following recent enhancements to FIPS mode support, the XML signature provider can now be supported. It is now enabled in FIPS mode. (RHBZ#2186827)
* The PKCS#11 provider used by FIPS mode can be supported by different PKCS#11 tokens. It was found that some PKCS#11 tokens may not be initialised fully before use, leading to an exception being thrown by the provider. With this release, this exception is now expected and handled by the FIPS support code. (RHBZ#2186831)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1898" id="RHSA-2023:1898" type="rhsa" title="RHSA-2023:1898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21930" id="CVE-2023-21930" type="cve" title="CVE-2023-21930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21937" id="CVE-2023-21937" type="cve" title="CVE-2023-21937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21938" id="CVE-2023-21938" type="cve" title="CVE-2023-21938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21939" id="CVE-2023-21939" type="cve" title="CVE-2023-21939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21954" id="CVE-2023-21954" type="cve" title="CVE-2023-21954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21967" id="CVE-2023-21967" type="cve" title="CVE-2023-21967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21968" id="CVE-2023-21968" type="cve" title="CVE-2023-21968"/>
      <reference href="https://bugzilla.redhat.com/2187435" id="2187435" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187441" id="2187441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187704" id="2187704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187724" id="2187724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187758" id="2187758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187790" id="2187790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187802" id="2187802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1898.html" id="ALSA-2023:1898" type="self" title="ALSA-2023:1898"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="java-17-openjdk-jmods" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.7.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">02fd2b9de97419a106bb9dd015a7d2d2c9acd9b96143ba80d4745775c225111f</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-src-17.0.7.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">23fc57af6e6ed829a9e7c35c1bdfd2c83297c0acf5ca2d070fc95fc30baf7d6b</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-17.0.7.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">4348c768d78ca5a67e88cc90b96ecd03ba784732245667c169de869b1b848bf2</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.7.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">5a5677525c228f45cf4b0a753d7d15514f70403717db4bed911c1fb7b6d07885</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-headless-17.0.7.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">756e2a8b5693ed5bb61028b4da4bfa27c5816f7425ac8d53e92451a5f64bc01a</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-demo-17.0.7.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">9fdaeb08e9347af662a984d49d10ae21bd6651bc8175ed96052db968a9b6fc1b</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-devel-17.0.7.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">a127af6af0a2034c6c09893b28e2f6fbca7457c2457349ef038494c1a2d1467e</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.7.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">b8201bb459ef2cd49bd76f0c4b6bc01c9ba1ae233e92872a93ba488fb5cfaa7e</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.7.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">f4b0f19f02cfa70bd16324f46e446a66f69e79d70560f6546487ba087165d7d6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1908</id>
    <title>Important: java-1.8.0-openjdk security update</title>
    <issued date="2023-04-25 00:00:00"/>
    <updated date="2023-05-02 23:08:11"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)
* OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)
* OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)
* OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)
* OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)
* OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)
* OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1908" id="RHSA-2023:1908" type="rhsa" title="RHSA-2023:1908"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21930" id="CVE-2023-21930" type="cve" title="CVE-2023-21930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21937" id="CVE-2023-21937" type="cve" title="CVE-2023-21937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21938" id="CVE-2023-21938" type="cve" title="CVE-2023-21938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21939" id="CVE-2023-21939" type="cve" title="CVE-2023-21939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21954" id="CVE-2023-21954" type="cve" title="CVE-2023-21954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21967" id="CVE-2023-21967" type="cve" title="CVE-2023-21967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21968" id="CVE-2023-21968" type="cve" title="CVE-2023-21968"/>
      <reference href="https://bugzilla.redhat.com/2187435" id="2187435" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187441" id="2187441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187704" id="2187704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187724" id="2187724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187758" id="2187758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187790" id="2187790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187802" id="2187802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1908.html" id="ALSA-2023:1908" type="self" title="ALSA-2023:1908"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.372.b07" release="1.el8_7" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.372.b07-1.el8_7.noarch.rpm</filename>
          <sum type="sha256">06d502dde0edd661196c57b86ea914cbda3f2dd4875d00f2b2d5cfd9ca35cc85</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.372.b07" release="1.el8_7" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.372.b07-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">0c8a69b97ee7dbfb3b280c51897fcd6ec0c4a8a6cdf6fefab58dc97743d3feda</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.372.b07" release="1.el8_7" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.372.b07-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">28b9f2f1248f6a8adcd9a102542eb1b70567acbcdba1e3785add352d9b713f9c</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.372.b07" release="1.el8_7" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.372.b07-1.el8_7.noarch.rpm</filename>
          <sum type="sha256">4c02027890c9bbb1b68a14886fc7a5ef910dea728eb7a78753a8f839085d7642</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.372.b07" release="1.el8_7" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.372.b07-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">5c96796479f18d3f2fe2b771dd64c888bcabcb916a43ac42f836e0d9662fc270</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.372.b07" release="1.el8_7" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.372.b07-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">6fa64b12f275d9a9213068a8898c052eb14f28adff1636820496439a0c5631b5</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility" version="1.8.0.372.b07" release="1.el8_7" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-1.8.0.372.b07-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">9042d6f8a3e143c256449dbe916d6822531dfd6adddd6208d69453668c2dda09</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.372.b07" release="1.el8_7" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.372.b07-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">a81717c657058e7b090fc986d51cb7d3afc7eb104e8d182b5369a80fb759a06a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1919</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2023-04-20 00:00:00"/>
    <updated date="2023-04-21 08:37:18"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* WebKitGTK: use-after-free leads to arbitrary code execution (CVE-2023-28205)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1919" id="RHSA-2023:1919" type="rhsa" title="RHSA-2023:1919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28205" id="CVE-2023-28205" type="cve" title="CVE-2023-28205"/>
      <reference href="https://bugzilla.redhat.com/2185724" id="2185724" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1919.html" id="ALSA-2023:1919" type="self" title="ALSA-2023:1919"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="webkit2gtk3" version="2.36.7" release="1.el8_7.3" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el8_7.3.src.rpm">
          <filename>webkit2gtk3-2.36.7-1.el8_7.3.s390x.rpm</filename>
          <sum type="sha256">10a7a49c72281d3a1b82e2b209689aa1275a71b969e2c62503f683c32ca0e79e</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.36.7" release="1.el8_7.3" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el8_7.3.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.36.7-1.el8_7.3.s390x.rpm</filename>
          <sum type="sha256">1ace6bd6b3c2b4a22cd50571286153608bf2dc10399cdec439526659f6bf1606</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.36.7" release="1.el8_7.3" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el8_7.3.src.rpm">
          <filename>webkit2gtk3-jsc-2.36.7-1.el8_7.3.s390x.rpm</filename>
          <sum type="sha256">53f6f131d53ba522dce2a7b47154e39c2c9ce076101c1268e4e172f85ce7c04d</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.36.7" release="1.el8_7.3" epoch="0" arch="s390x" src="webkit2gtk3-2.36.7-1.el8_7.3.src.rpm">
          <filename>webkit2gtk3-devel-2.36.7-1.el8_7.3.s390x.rpm</filename>
          <sum type="sha256">b2891e77076c5940fc9d5f51845a21966388c5cff8a55e41ad96f5c53d0b633e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1930</id>
    <title>Important: emacs security update</title>
    <issued date="2023-04-24 00:00:00"/>
    <updated date="2023-04-24 16:08:28"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>emacs security update</summary>
    <description>GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

* emacs: command injection vulnerability in org-mode (CVE-2023-28617)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1930" id="RHSA-2023:1930" type="rhsa" title="RHSA-2023:1930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28617" id="CVE-2023-28617" type="cve" title="CVE-2023-28617"/>
      <reference href="https://bugzilla.redhat.com/2180544" id="2180544" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1930.html" id="ALSA-2023:1930" type="self" title="ALSA-2023:1930"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="emacs-lucid" version="26.1" release="7.el8_7.1" epoch="1" arch="s390x" src="emacs-26.1-7.el8_7.1.src.rpm">
          <filename>emacs-lucid-26.1-7.el8_7.1.s390x.rpm</filename>
          <sum type="sha256">5c8eae8f1d1d63fb92bbeb9a7ba10a7b6c813b7f4df965c9166d26e6ae421533</sum>
        </package>
        <package name="emacs-nox" version="26.1" release="7.el8_7.1" epoch="1" arch="s390x" src="emacs-26.1-7.el8_7.1.src.rpm">
          <filename>emacs-nox-26.1-7.el8_7.1.s390x.rpm</filename>
          <sum type="sha256">9f6cfbae2848ed7746079ce70da932e3dfbcea288bf7f4271fc957044c28d219</sum>
        </package>
        <package name="emacs-common" version="26.1" release="7.el8_7.1" epoch="1" arch="s390x" src="emacs-26.1-7.el8_7.1.src.rpm">
          <filename>emacs-common-26.1-7.el8_7.1.s390x.rpm</filename>
          <sum type="sha256">c8e65cf7bf2c8da5af97bfc36609aef939df1e6e8a6fe57904edd366ad5a6d8a</sum>
        </package>
        <package name="emacs" version="26.1" release="7.el8_7.1" epoch="1" arch="s390x" src="emacs-26.1-7.el8_7.1.src.rpm">
          <filename>emacs-26.1-7.el8_7.1.s390x.rpm</filename>
          <sum type="sha256">ee476af6df5193b5cbf016a2cb2d375d22c3d0a32356ab3540c10d8b8f7d73ee</sum>
        </package>
        <package name="emacs-terminal" version="26.1" release="7.el8_7.1" epoch="1" arch="noarch" src="emacs-26.1-7.el8_7.1.src.rpm">
          <filename>emacs-terminal-26.1-7.el8_7.1.noarch.rpm</filename>
          <sum type="sha256">fc8b0a8236d9b7cdf6182b128f4c8a697092372b83b5bc623460769fa8f50b62</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2076</id>
    <title>Important: libwebp security update</title>
    <issued date="2023-05-02 00:00:00"/>
    <updated date="2023-05-03 06:21:44"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libwebp security update</summary>
    <description>The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently.

Security Fix(es):

* Mozilla: libwebp: Double-free in libwebp (CVE-2023-1999)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2076" id="RHSA-2023:2076" type="rhsa" title="RHSA-2023:2076"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1999" id="CVE-2023-1999" type="cve" title="CVE-2023-1999"/>
      <reference href="https://bugzilla.redhat.com/2186102" id="2186102" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2076.html" id="ALSA-2023:2076" type="self" title="ALSA-2023:2076"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="libwebp-devel" version="1.0.0" release="8.el8_7" epoch="0" arch="s390x" src="libwebp-1.0.0-8.el8_7.src.rpm">
          <filename>libwebp-devel-1.0.0-8.el8_7.s390x.rpm</filename>
          <sum type="sha256">2d74139588799de3854971e376bb595cbe0250147e6b1b0aed1f6e54967b60b4</sum>
        </package>
        <package name="libwebp" version="1.0.0" release="8.el8_7" epoch="0" arch="s390x" src="libwebp-1.0.0-8.el8_7.src.rpm">
          <filename>libwebp-1.0.0-8.el8_7.s390x.rpm</filename>
          <sum type="sha256">a23566d5c5e6d29f3b9d5dcfeb03d6b7e46eee81109a7d5b35179780bdd50241</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2122</id>
    <title>Important: libreswan security update</title>
    <issued date="2023-05-04 00:00:00"/>
    <updated date="2023-05-05 10:41:09"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libreswan security update</summary>
    <description>Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).

Security Fix(es):

* libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan (CVE-2023-30570)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2122" id="RHSA-2023:2122" type="rhsa" title="RHSA-2023:2122"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30570" id="CVE-2023-30570" type="cve" title="CVE-2023-30570"/>
      <reference href="https://bugzilla.redhat.com/2187165" id="2187165" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2122.html" id="ALSA-2023:2122" type="self" title="ALSA-2023:2122"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_7_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_7_default</name>
        <package name="libreswan" version="4.5" release="1.el8_7.1" epoch="0" arch="s390x" src="libreswan-4.5-1.el8_7.1.src.rpm">
          <filename>libreswan-4.5-1.el8_7.1.s390x.rpm</filename>
          <sum type="sha256">8b7b6586bd2f0c65b7f0ce631d428b8671e261e93516bc78ae71f6d5a6ab63a6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2757</id>
    <title>Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-22 07:58:31"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>virt:rhel and virt-devel:rhel security, bug fix, and enhancement update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* ntfs-3g: heap-based buffer overflow in ntfsck (CVE-2021-46790)
* QEMU: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion (CVE-2022-3165)
* ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value (CVE-2022-30784)
* ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate (CVE-2022-30786)
* ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc (CVE-2022-30788)
* ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array (CVE-2022-30789)
* tpm2: TCG TPM2.0 implementations vulnerable to memory corruption (CVE-2023-1018)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2757" id="RHSA-2023:2757" type="rhsa" title="RHSA-2023:2757"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46790" id="CVE-2021-46790" type="cve" title="CVE-2021-46790"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30784" id="CVE-2022-30784" type="cve" title="CVE-2022-30784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30786" id="CVE-2022-30786" type="cve" title="CVE-2022-30786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30788" id="CVE-2022-30788" type="cve" title="CVE-2022-30788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30789" id="CVE-2022-30789" type="cve" title="CVE-2022-30789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3165" id="CVE-2022-3165" type="cve" title="CVE-2022-3165"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1018" id="CVE-2023-1018" type="cve" title="CVE-2023-1018"/>
      <reference href="https://bugzilla.redhat.com/2093314" id="2093314" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2093326" id="2093326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2093340" id="2093340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2093348" id="2093348" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2093358" id="2093358" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2129739" id="2129739" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2149420" id="2149420" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2757.html" id="ALSA-2023:2757" type="self" title="ALSA-2023:2757"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="virt" stream="rhel" version="8060020220803091505" context="9edba152" arch="s390x"/>
        <package name="qemu-kvm-core" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-kvm-core-6.2.0-32.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">017a32815b00e165e97ca277bc7b9110f1be709a3806862bcb724dae7379940a</sum>
        </package>
        <package name="libvirt-lock-sanlock" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-lock-sanlock-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">02d5b90416b3502f17a2ffc05b5cff0ace4f497bdd069a7286e3fa9da0c1d42e</sum>
        </package>
        <package name="qemu-img" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-img-6.2.0-32.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">0449556cc912049466d306f06015dc54afe6ff865951de931f66e8ee51a4646c</sum>
        </package>
        <package name="nbdkit-basic-plugins" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-basic-plugins-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">04adc669a1655a4f4dcadbdd520afd5f6f5dc82b44738fcabde3a280f36fb90f</sum>
        </package>
        <package name="python3-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>python3-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">05372f9ad377c74c0d221dacf23c7510171afbb751c03585fd3c09513d7e1bde</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">060c7305787681e2ab35e709c2b1e79c56051cc23e6775b5d7966a093250c637</sum>
        </package>
        <package name="qemu-guest-agent" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-guest-agent-6.2.0-32.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">0851dbcd681f94ada4074a65f41522306862f8afa0e5863c4eb5b6d16ab705b5</sum>
        </package>
        <package name="libnbd-devel" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libnbd-devel-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">0c1f0ee145a6b54bb1a2b502a47bc75e63b75d7e6b2e8c60a6c053988fc3b6ab</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">1122faad8fc1d2563fcb0229bc5cca0e802f231bcf439558999dbf75d99a313a</sum>
        </package>
        <package name="libguestfs-tools" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-tools-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">116835a3e003417d7186479fbf47960a09588a3ace207d4f34da6a19ab8c07de</sum>
        </package>
        <package name="netcf-devel" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-devel-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1888edc09e8d44539c2c7b84b7a8df91477b8a725fe93436ac4d71106e177d48</sum>
        </package>
        <package name="libguestfs-javadoc" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-javadoc-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">18b9d6c98999a3b289a865504944fb3dc9b2994eff5461933549add50c6faa5b</sum>
        </package>
        <package name="nbdkit" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">1a6f5649d6acd35dd28d2d99042056bc8308fe0910ce6322bf27b0ec71bbee4f</sum>
        </package>
        <package name="hivex-devel" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>hivex-devel-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1aa145aa6a3f900531fc1c8f1c161197f37539d113d47c14efd9c66def20940a</sum>
        </package>
        <package name="nbdfuse" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdfuse-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1d3157c38399bbfb00c7e7762135285383554b08b780fcf5eb390ce2f5845d23</sum>
        </package>
        <package name="qemu-kvm-common" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-kvm-common-6.2.0-32.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">2169d71be913a36de32d2760b854c0a63ac3625e48e1033ecbb6e0601a9f7e85</sum>
        </package>
        <package name="libnbd" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">2220e7631c2178fe00b6e20d56043e2efc51bec8ccbe9c14dabccdb05ec81abf</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-daemon-driver-qemu-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">234a7bad1822278a7b4acdf7047d833740c2838126c2cdd64f8a20c8833e0fda</sum>
        </package>
        <package name="nbdkit-python-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-python-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">23c394ecc23e544232d78956b610b1403324cb6a46a3d46adc0fd256f19a1e4b</sum>
        </package>
        <package name="nbdkit-tar-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tar-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">2521bcc64ce8e24df611cf9194277fd5f7856f3df3f72be3276748b10d23beb3</sum>
        </package>
        <package name="nbdkit-bash-completion" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="noarch" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-bash-completion-1.24.0-5.module_el8.8.0+3485+7cffc4a3.noarch.rpm</filename>
          <sum type="sha256">254dfbf64036ae05d930d81be90202718fba7b341f0457de4a29ecfca3aea646</sum>
        </package>
        <package name="nbdkit-xz-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-xz-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">263ad615e21aaba0dce020cf1ad8b569c3860640d8074e9f74035ff925c409d0</sum>
        </package>
        <package name="nbdkit-gzip-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-gzip-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">27675a3171d769e7f9ea9b7fa63303b3e51f8221a68feaee1f16aeb7d658dccb</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">36b79d31a105e1df10fd73925ceff6fcd6ab4c4a92a95c6ad781941f872d025b</sum>
        </package>
        <package name="lua-guestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>lua-guestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">36d15a85e154608cf2bc661120c8a573356cb3e0e1dc77a94387aa3c8bce90ef</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-kvm-block-ssh-6.2.0-32.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">3fb0642bc1f49d65f8225c7f4de12c8c7f0d3df3ad218d1a3f21e0ccb515b731</sum>
        </package>
        <package name="libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">40e3ffa7c3e67b0fe9a110dbe8bf267fa9906f358a3bd81135b33a624e6429ba</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">432f01d893d1da9202af63b2a20115a1b6252661937cbeb6b0fccd040f198a3b</sum>
        </package>
        <package name="ruby-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ruby-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">4428b40d29de3a3eda15340b2cbacebe838ba363b3897a1a91f904b9f2b4f8b9</sum>
        </package>
        <package name="qemu-kvm" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">443b75cb180f7bf02c2d32d90f315453759c021d0a2e140489bf01d413aaef58</sum>
        </package>
        <package name="nbdkit-basic-filters" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-basic-filters-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">494ad345b2b9b009436ba9a8c8c6bb245e8617e921dae51ab6d9281e95999f31</sum>
        </package>
        <package name="nbdkit-curl-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-curl-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">4fd1a6bbe855d7c4068fcf080b4b0b15b367ef7f635ac869b7bddb1698dafa01</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-daemon-driver-nodedev-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">535eff4456bd4cdc7f5b4a14f83ef13f9c8a74d3fd56f631192ceb7b332e8ad7</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-daemon-driver-secret-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">536303a2c98f1618c51d2e7ba4e11e2764903bd3d513691ecc2ace463b1c1cea</sum>
        </package>
        <package name="libguestfs-bash-completion" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-bash-completion-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">5a67ce33e944ee07d6ea976afa13f8c832ce4be22f124591ace620dfe08b5178</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-daemon-driver-storage-logical-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">5df95571162ac995b167481f0e90280d7c19c9e98e48d93ebcf52a563b794398</sum>
        </package>
        <package name="libguestfs-gobject-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gobject-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">5e05d955e58bc16ccb3e4097f338dd34af18225ef9bcd2b420d794a9efdd269b</sum>
        </package>
        <package name="python3-libnbd" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>python3-libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">5e93f1875db0f5a6e64e8d785a745072133d63b53e30cf6a7984ebd2e8119320</sum>
        </package>
        <package name="nbdkit-tmpdisk-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tmpdisk-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">6f4728c5aa7cc03d70b241d6947aff1fe49546aac4cc62bd01a59c1b1b73ba35</sum>
        </package>
        <package name="libguestfs-java-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-java-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">6fc6fe19b2e83d70d5f240d776ccc00a181870a485d39667fccb62ec0b851f02</sum>
        </package>
        <package name="nbdkit-server" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-server-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">706c1dd5780f1e48f883702f6c86a985bd057078fcd41326947b283625a77e05</sum>
        </package>
        <package name="perl-Sys-Guestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>perl-Sys-Guestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">77c035cdcf2f7e819dcb6d76b9ba12ae63a6f07d615a9a435b7ec2dc8ca93330</sum>
        </package>
        <package name="qemu-kvm-docs" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-kvm-docs-6.2.0-32.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">7aab9e8d26cebad789508f0423aaa59328c29b4da0918b7b5ebae3caf34ff2cb</sum>
        </package>
        <package name="libguestfs-winsupport" version="8.8" release="1.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="libguestfs-winsupport-8.8-1.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>libguestfs-winsupport-8.8-1.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">7c02f43b3a4ebfc353505f79de1a3240bdbfece3ed82cfe88dcb73b7ed182f83</sum>
        </package>
        <package name="libvirt-devel" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-devel-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">7c8409a757b07e82dd2b4d7f257d84fc9cf517628ddae34ab34f0fab41370fb4</sum>
        </package>
        <package name="libguestfs-gfs2" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gfs2-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">7ee36ba216591f26a055c687e5e75e054585c69c86b085d8966cb419ddeb3362</sum>
        </package>
        <package name="libguestfs-gobject" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gobject-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">8292ca96b97184b2ca5475901b46b09f715adbe99d1a5983c9ad4a0d2b3d72bb</sum>
        </package>
        <package name="netcf-libs" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-libs-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">843b61e4019e8cec44d5f5823d3c8c0b803997791aecef6ff1023224147cd6f8</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-daemon-config-nwfilter-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">84fee1ea4177bc230b17b4c5dda8e7f72c2e3ef439803e53d091603b51f61045</sum>
        </package>
        <package name="nbdkit-linuxdisk-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-linuxdisk-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">8673003aa4610f82cbe152021387ac3c6c59d730a79b446aad432030e20f5eff</sum>
        </package>
        <package name="swtpm-tools" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-tools-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">87ce1c2ecc368965a92cf71a29a7cb1331508c7c86394cfaa7e4e87d20897d7b</sum>
        </package>
        <package name="nbdkit-tar-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tar-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">87ec102223607b5d8760ee3d8998a48b3fbce6a1abe6d8056782c1d9f94513ad</sum>
        </package>
        <package name="libtpms-devel" version="0.9.1" release="2.20211126git1ff6fe1f43.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libtpms-0.9.1-2.20211126git1ff6fe1f43.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libtpms-devel-0.9.1-2.20211126git1ff6fe1f43.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">89ae90d7efafa672b560568e0ef0ef902b42401a37036f7d862fc59cc1ebd301</sum>
        </package>
        <package name="supermin-devel" version="5.2.1" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="supermin-5.2.1-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>supermin-devel-5.2.1-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">8a47307269cf95719225e1e27dcd1cebdf6a0481948e4a044db972af12de9ce3</sum>
        </package>
        <package name="libvirt-daemon" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-daemon-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">8ac19553e0e2e91cec24255db292a6b6ebd1f2b994ec66d90c8c000c9e0433bd</sum>
        </package>
        <package name="libguestfs-man-pages-uk" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-man-pages-uk-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">8cd1a80b657a0373e6dcf0b6699e7574c9874db489201985b16bc1d1d78cc55b</sum>
        </package>
        <package name="swtpm-tools-pkcs11" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-tools-pkcs11-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">8e7eeb060f1253ff8a48085d0b452c2ba2c1837e286fd23d91426f255d72398a</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-daemon-config-network-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">8ea63ee1e37cac2350155b83f8df903c98132c4bb4f895a7ae662f0b154a19b9</sum>
        </package>
        <package name="libguestfs-rescue" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-rescue-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">92093c28f6226504668df61e0bc2c5d1e7d8bf505a8bf762cdd5d2e7a50bb52f</sum>
        </package>
        <package name="netcf" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">9268b4ab854af88a5e511f78b47cf3c4acd66d76f7ea901452f6efd3f9c8bc7c</sum>
        </package>
        <package name="libvirt-client" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-client-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">9281516f1c89adc944e8b76e199283230c2b2ede8235b4fbb111764220a16a07</sum>
        </package>
        <package name="libguestfs-man-pages-ja" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-man-pages-ja-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">968dd115e865d941a07d1728940d84bdfef4f26d43d39aa225f4f4a5a821c89d</sum>
        </package>
        <package name="libguestfs-rsync" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-rsync-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">9cc94d5cec35a9f048fa74c69a8b7d6a0ec48c14074297bb564b91f4cdc4c54f</sum>
        </package>
        <package name="hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">9d259d5ff0ee30b3a2a8e5f897675750f74741ed06d50d3623cf469d1d0f01d8</sum>
        </package>
        <package name="libtpms" version="0.9.1" release="2.20211126git1ff6fe1f43.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libtpms-0.9.1-2.20211126git1ff6fe1f43.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libtpms-0.9.1-2.20211126git1ff6fe1f43.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">a09f59fa0d5d5412a339fd34cb171540a9333ff099311e0a0ee9f9f601a80997</sum>
        </package>
        <package name="libiscsi" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">a1c871e87ebd136bfd498f13824563fd7428fcaf66bcffb341cfbb8370c2a18d</sum>
        </package>
        <package name="swtpm" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">a7fbed17619ce4d6d7d43a459be652ec92882b41903ac386ebfd9815806bc622</sum>
        </package>
        <package name="perl-Sys-Virt" version="8.0.0" release="1.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="perl-Sys-Virt-8.0.0-1.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>perl-Sys-Virt-8.0.0-1.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">a8b115eb9ca2707d1d7f800ac1b7730dcc6718168ff355f065464e6778ef5929</sum>
        </package>
        <package name="nbdkit-nbd-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-nbd-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">a9427bee7f157a63f2acd2357032ce829e0561b24193d204072502adad4aa52e</sum>
        </package>
        <package name="nbdkit-example-plugins" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-example-plugins-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">b10c0d094e84d5c035dae70b4db36c311eb7ff9cbee00c8443848f049a600ae4</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-gluster" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-daemon-driver-storage-gluster-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">b13d13850927f6ff4aefbf94a775d3838366df470a4bff9b838a01a44a907cd3</sum>
        </package>
        <package name="libvirt-docs" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-docs-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">b35512a066a950b9b31e08f3d083a685bba9ee1c4c1e59ea35c31cad1458debd</sum>
        </package>
        <package name="libguestfs-appliance" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-appliance-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">b5add06502e5bda5f39f712640e2ab0e8cf539b7a90370c6c1fd963bb73bc7d7</sum>
        </package>
        <package name="libiscsi-utils" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-utils-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">b6eb101dc2787a7d79b4fe51913319933f5927d1816ea03592d2be849ce21faf</sum>
        </package>
        <package name="ruby-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ruby-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">b8696f7658b7872cb5f4e9fe2319e00ec6b668fe0e9adea787890cb9500e0223</sum>
        </package>
        <package name="nbdkit-ssh-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-ssh-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">b9b590364d69f18da851dea269d4774ff711f44e3ace9b3304e87fe25f26aaa5</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-daemon-driver-nwfilter-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">be11e945aa2111c0b4f7dc99b7cc4d7c241e4c16b4ce7566d1a643cbe2cd15be</sum>
        </package>
        <package name="virt-dib" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>virt-dib-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">bf4b5929cf910fb7e4671e32c9ac2ce2f456e8b1e577cb0f4f33a0df8d316c27</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-daemon-driver-storage-disk-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">bfb45d88220da006889cdef0085f3541c928f84a33ae687115e48f0f96fa9a6c</sum>
        </package>
        <package name="libguestfs-java" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-java-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">bfc05f2dc57991bad44654221ea88f653c916e80637290b69c96e3e0f5aa55a8</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-daemon-driver-storage-core-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">c12855bf4238000727d6ebd70e711dbd5078bd2ac7d4fb636bc10e4e7fd72d09</sum>
        </package>
        <package name="libvirt-dbus" version="1.3.0" release="2.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libvirt-dbus-1.3.0-2.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libvirt-dbus-1.3.0-2.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">c20042be5784c1f4323e5590891be2a0e33244acff6b45149f36a2eef834064b</sum>
        </package>
        <package name="libvirt" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">c3e1907f18d9384bbc02b48138be8405caf9d4729cef1ea741563689076b05a8</sum>
        </package>
        <package name="libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">c685dcd2fb41a700a866919788441d7c80c9a10b9757ea843e7a56c67a5d4be2</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-kvm-block-iscsi-6.2.0-32.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">c79fd5bac932536f50be35e1d434580600873386c51389d85edb999c12cb502f</sum>
        </package>
        <package name="swtpm-libs" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-libs-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">d077f2d1f54aa47907a883e12d46f0632e33ad5141bd16a25759a580f851b91c</sum>
        </package>
        <package name="libvirt-nss" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-nss-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">d167a691ce260953f7cc065ebea412f925618cb56d84a7e34806eae10683652a</sum>
        </package>
        <package name="libiscsi-devel" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-devel-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">d45a7d8438477f375ed86276eea276fd3bb0965844cb8733a09691fc68d730db</sum>
        </package>
        <package name="nbdkit-devel" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-devel-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">d5bc58eda3110ad1589ab9d239e347e155bf59eaee69e0bea028f67d9e0ea216</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-daemon-driver-storage-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">d632076df7f65c43a8e3fe763f5884ff39227f18805dd7082f27d6321f0750a2</sum>
        </package>
        <package name="swtpm-devel" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-devel-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">d69840154560e2ca3f4ea1315bfcca103b2260692f2c3d5fa1a76dbed7ddfbe1</sum>
        </package>
        <package name="libvirt-libs" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-libs-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">de0e5ae1e4cd8f1e066c9008d2151882df58cef9fdc5b629cc5e2d1af1ae655b</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-daemon-driver-interface-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">e0fa0fb10c2323fa9550ee8f57a9a2e272bc2a4b7f1045ec93cb1d383649b1c1</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-daemon-driver-network-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">e131a7936cd52d8cce3eaf77787d96d92c4d3b2cd3555791a8bfb86a9dbcfc58</sum>
        </package>
        <package name="supermin" version="5.2.1" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="supermin-5.2.1-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>supermin-5.2.1-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">e15b529769bbaa1d035eb7e4d4f58f4757e58772523d45cb07cc7533eeef0057</sum>
        </package>
        <package name="python3-libvirt" version="8.0.0" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="libvirt-python-8.0.0-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>python3-libvirt-8.0.0-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">e36c5a8c03f3393622b5dd5badefcd4a05ee01b8de17de28812017ddfda63954</sum>
        </package>
        <package name="python3-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>python3-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">ec11102e66953715d97704c820c0effcd80944fdd525efca9645f70b1cfa2fa9</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-kvm-block-rbd-6.2.0-32.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">ecdfb86ce7c7ef3025ea558877e485be05745ecb4ea0fd663b410bc2db0c1a79</sum>
        </package>
        <package name="libguestfs-inspect-icons" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-inspect-icons-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">ece57f7c833d85599725786783875d496fd9d38644cdc96ce23e4d73c6d5e4c9</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-daemon-kvm-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">ee0d6cebb54193514f236d5f622d9ea54b585a5b08ced47bd3ec182cd4dd8282</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-kvm-block-curl-6.2.0-32.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">ef4561716d1e51ec049785ce2c876b8765682bc799898d97ad82c461b995a3d6</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">f10b6f771d100ec3d505173effd0ad1f4931dc0a4ab21f5b030f3437b5095a4f</sum>
        </package>
        <package name="nbdkit-gzip-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-gzip-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">f3befb065571d5207296b7d7f2db60348cb935ec26b3fcf7a5db2f66dbec7dc5</sum>
        </package>
        <package name="libvirt-wireshark" version="8.0.0" release="19.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libvirt-8.0.0-19.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libvirt-wireshark-8.0.0-19.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">f4616b878296e5ffe121d2840dbcfc9a7b1dae26b7e2448dd2185ecaf3a32a98</sum>
        </package>
        <package name="libguestfs-xfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-xfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">fa8ce4ce15f9b8d5753db18aa569fdbb4c636e16d88c6bb83fc588c594c1ee90</sum>
        </package>
        <package name="perl-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>perl-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">fcc1bade9f3d715b09d2679d6efc9fd94b2faa9e912dcae68dbc372613f90965</sum>
        </package>
        <package name="libguestfs-tools-c" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-tools-c-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">fce060540b90878b0d21bfa525965ac06b8622b0a7cf824c54761c92b79f0764</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2758</id>
    <title>Moderate: container-tools:rhel8 security, bug fix, and enhancement update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-22 10:20:38"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>container-tools:rhel8 security, bug fix, and enhancement update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)
* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)
* golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)
* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)
* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)
* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)
* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)
* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)
* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)
* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)
* golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)
* podman: symlink exchange attack in podman export volume (CVE-2023-0778)
* golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)
* golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2758" id="RHSA-2023:2758" type="rhsa" title="RHSA-2023:2758"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1705" id="CVE-2022-1705" type="cve" title="CVE-2022-1705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1962" id="CVE-2022-1962" type="cve" title="CVE-2022-1962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27664" id="CVE-2022-27664" type="cve" title="CVE-2022-27664"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28131" id="CVE-2022-28131" type="cve" title="CVE-2022-28131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30629" id="CVE-2022-30629" type="cve" title="CVE-2022-30629"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30630" id="CVE-2022-30630" type="cve" title="CVE-2022-30630"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30631" id="CVE-2022-30631" type="cve" title="CVE-2022-30631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30632" id="CVE-2022-30632" type="cve" title="CVE-2022-30632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30633" id="CVE-2022-30633" type="cve" title="CVE-2022-30633"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30635" id="CVE-2022-30635" type="cve" title="CVE-2022-30635"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32148" id="CVE-2022-32148" type="cve" title="CVE-2022-32148"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32189" id="CVE-2022-32189" type="cve" title="CVE-2022-32189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41717" id="CVE-2022-41717" type="cve" title="CVE-2022-41717"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0778" id="CVE-2023-0778" type="cve" title="CVE-2023-0778"/>
      <reference href="https://bugzilla.redhat.com/2092793" id="2092793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107342" id="2107342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107371" id="2107371" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107374" id="2107374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107376" id="2107376" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107383" id="2107383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107386" id="2107386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107388" id="2107388" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107390" id="2107390" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107392" id="2107392" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2113814" id="2113814" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2124669" id="2124669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2161274" id="2161274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2168256" id="2168256" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2758.html" id="ALSA-2023:2758" type="self" title="ALSA-2023:2758"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="container-tools" stream="rhel8" version="8080020230403134031" context="20125149" arch="s390x"/>
        <package name="skopeo-tests" version="1.11.2" release="0.2.module_el8.8.0+3470+252b1910" epoch="2" arch="s390x" src="skopeo-1.11.2-0.2.module_el8.8.0+3470+252b1910.src.rpm">
          <filename>skopeo-tests-1.11.2-0.2.module_el8.8.0+3470+252b1910.s390x.rpm</filename>
          <sum type="sha256">0050dc91a3b2644332037d2a274e121ae8d706330710f763319a193262462cc1</sum>
        </package>
        <package name="cockpit-podman" version="63.1" release="1.module_el8.8.0+3557+7ba9cc13" epoch="0" arch="noarch" src="cockpit-podman-63.1-1.module_el8.8.0+3557+7ba9cc13.src.rpm">
          <filename>cockpit-podman-63.1-1.module_el8.8.0+3557+7ba9cc13.noarch.rpm</filename>
          <sum type="sha256">04f3506d60c39fe784fe3224010b4e4e657b43e34784dca6c3439374bcb65d19</sum>
        </package>
        <package name="podman-docker" version="4.4.1" release="8.module_el8.8.0+3568+e8578284" epoch="3" arch="noarch" src="podman-4.4.1-8.module_el8.8.0+3568+e8578284.src.rpm">
          <filename>podman-docker-4.4.1-8.module_el8.8.0+3568+e8578284.noarch.rpm</filename>
          <sum type="sha256">0938236a7534efb5dad1305bf8e689cd9284beab9cd5bff6b0a6a9d467b20ba8</sum>
        </package>
        <package name="podman" version="4.4.1" release="8.module_el8.8.0+3568+e8578284" epoch="3" arch="s390x" src="podman-4.4.1-8.module_el8.8.0+3568+e8578284.src.rpm">
          <filename>podman-4.4.1-8.module_el8.8.0+3568+e8578284.s390x.rpm</filename>
          <sum type="sha256">13aa161c9ef0999891f3eb877f355db58c0f51d6b91a6533c2c08ff41a9123fb</sum>
        </package>
        <package name="containers-common" version="1" release="63.module_el8.8.0+3568+e8578284" epoch="2" arch="s390x" src="containers-common-1-63.module_el8.8.0+3568+e8578284.src.rpm">
          <filename>containers-common-1-63.module_el8.8.0+3568+e8578284.s390x.rpm</filename>
          <sum type="sha256">16394f6c546b6f053a9d6f8aad2421b827d21b9531539bfa42f4ea086e7287ba</sum>
        </package>
        <package name="aardvark-dns" version="1.5.0" release="2.module_el8.8.0+3470+252b1910" epoch="2" arch="s390x" src="aardvark-dns-1.5.0-2.module_el8.8.0+3470+252b1910.src.rpm">
          <filename>aardvark-dns-1.5.0-2.module_el8.8.0+3470+252b1910.s390x.rpm</filename>
          <sum type="sha256">39f716638b80d819cc3ba07df0eaeb38321617b8dee910da6566abb75a03972f</sum>
        </package>
        <package name="criu-libs" version="3.15" release="3.module_el8.7.0+3407+95aa0ca9" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.7.0+3407+95aa0ca9.src.rpm">
          <filename>criu-libs-3.15-3.module_el8.7.0+3407+95aa0ca9.s390x.rpm</filename>
          <sum type="sha256">46a7f577f55a6e9a2da9d31ef02030ce687a7664516772ee9aca3d805ba91a90</sum>
        </package>
        <package name="netavark" version="1.5.0" release="4.module_el8.8.0+3470+252b1910" epoch="2" arch="s390x" src="netavark-1.5.0-4.module_el8.8.0+3470+252b1910.src.rpm">
          <filename>netavark-1.5.0-4.module_el8.8.0+3470+252b1910.s390x.rpm</filename>
          <sum type="sha256">4fca1992a7df754c2b94da6a0fb39dd04c84cc065286e83e5a177e581b28333c</sum>
        </package>
        <package name="toolbox" version="0.0.99.3" release="7.module_el8.8.0+3470+252b1910" epoch="0" arch="s390x" src="toolbox-0.0.99.3-7.module_el8.8.0+3470+252b1910.src.rpm">
          <filename>toolbox-0.0.99.3-7.module_el8.8.0+3470+252b1910.s390x.rpm</filename>
          <sum type="sha256">58a3ae8c1a06d955c1bbf9b9d720cf8205b91e4c3bb7002170c8aa8566f89b36</sum>
        </package>
        <package name="podman-remote" version="4.4.1" release="8.module_el8.8.0+3568+e8578284" epoch="3" arch="s390x" src="podman-4.4.1-8.module_el8.8.0+3568+e8578284.src.rpm">
          <filename>podman-remote-4.4.1-8.module_el8.8.0+3568+e8578284.s390x.rpm</filename>
          <sum type="sha256">5ddb88d93cf443ac6e0b45620c50e77c957d88c228b351909b4702ac58cabc32</sum>
        </package>
        <package name="containernetworking-plugins" version="1.2.0" release="1.module_el8.8.0+3470+252b1910" epoch="1" arch="s390x" src="containernetworking-plugins-1.2.0-1.module_el8.8.0+3470+252b1910.src.rpm">
          <filename>containernetworking-plugins-1.2.0-1.module_el8.8.0+3470+252b1910.s390x.rpm</filename>
          <sum type="sha256">6072f8182c09b5e4774045628ac2b7cf29d624aa1032ba5e2929c1ded470c5af</sum>
        </package>
        <package name="skopeo" version="1.11.2" release="0.2.module_el8.8.0+3470+252b1910" epoch="2" arch="s390x" src="skopeo-1.11.2-0.2.module_el8.8.0+3470+252b1910.src.rpm">
          <filename>skopeo-1.11.2-0.2.module_el8.8.0+3470+252b1910.s390x.rpm</filename>
          <sum type="sha256">619f6c0afc651ced649b3d0b01dfcf9dbe61f8f96d9ee05f63d477e386cb3a38</sum>
        </package>
        <package name="slirp4netns" version="1.2.0" release="2.module_el8.7.0+3407+95aa0ca9" epoch="0" arch="s390x" src="slirp4netns-1.2.0-2.module_el8.7.0+3407+95aa0ca9.src.rpm">
          <filename>slirp4netns-1.2.0-2.module_el8.7.0+3407+95aa0ca9.s390x.rpm</filename>
          <sum type="sha256">6a58ef15a9b5bf7f11b137f1a71d5609114dfded4631e22dcafeffccfc0da741</sum>
        </package>
        <package name="podman-catatonit" version="4.4.1" release="8.module_el8.8.0+3568+e8578284" epoch="3" arch="s390x" src="podman-4.4.1-8.module_el8.8.0+3568+e8578284.src.rpm">
          <filename>podman-catatonit-4.4.1-8.module_el8.8.0+3568+e8578284.s390x.rpm</filename>
          <sum type="sha256">7ea22ee912791c6a8320629befe28859f6ffcef96d3bb047cbeacf509825de35</sum>
        </package>
        <package name="podman-gvproxy" version="4.4.1" release="8.module_el8.8.0+3568+e8578284" epoch="3" arch="s390x" src="podman-4.4.1-8.module_el8.8.0+3568+e8578284.src.rpm">
          <filename>podman-gvproxy-4.4.1-8.module_el8.8.0+3568+e8578284.s390x.rpm</filename>
          <sum type="sha256">898b7b5d7090fcda20bb8e42fc878191c5b0c8e221949f5ba9635b823fb921b5</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.8" release="1.module_el8.8.0+3470+252b1910" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.8-1.module_el8.8.0+3470+252b1910.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.8-1.module_el8.8.0+3470+252b1910.s390x.rpm</filename>
          <sum type="sha256">8c39aeaea365e714720f4f29ae4cfbc4a35cd0cef6f1d3ebd38564ab97e00665</sum>
        </package>
        <package name="crit" version="3.15" release="3.module_el8.7.0+3407+95aa0ca9" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.7.0+3407+95aa0ca9.src.rpm">
          <filename>crit-3.15-3.module_el8.7.0+3407+95aa0ca9.s390x.rpm</filename>
          <sum type="sha256">8d693fabb52e50d93dc0d9a39aa7fb39a096557a7c3c7d2b81ed9da97a3aa687</sum>
        </package>
        <package name="python3-podman" version="4.4.1" release="1.module_el8.8.0+3470+252b1910" epoch="0" arch="noarch" src="python-podman-4.4.1-1.module_el8.8.0+3470+252b1910.src.rpm">
          <filename>python3-podman-4.4.1-1.module_el8.8.0+3470+252b1910.noarch.rpm</filename>
          <sum type="sha256">923bef28da47c023276171c1c78be6057d669127e01097f1126ffe5b2829969f</sum>
        </package>
        <package name="podman-plugins" version="4.4.1" release="8.module_el8.8.0+3568+e8578284" epoch="3" arch="s390x" src="podman-4.4.1-8.module_el8.8.0+3568+e8578284.src.rpm">
          <filename>podman-plugins-4.4.1-8.module_el8.8.0+3568+e8578284.s390x.rpm</filename>
          <sum type="sha256">931e0a0bf8e98e77cb1e32c729551e82f8489c5ea242d10da5daf85099daec4e</sum>
        </package>
        <package name="buildah-tests" version="1.29.1" release="1.module_el8.8.0+3470+252b1910" epoch="1" arch="s390x" src="buildah-1.29.1-1.module_el8.8.0+3470+252b1910.src.rpm">
          <filename>buildah-tests-1.29.1-1.module_el8.8.0+3470+252b1910.s390x.rpm</filename>
          <sum type="sha256">9cf368d4cd48b78fc2f3bd7d55450349ad8e977fe61f737a45a1ad0a0628b0c6</sum>
        </package>
        <package name="crun" version="1.8.1" release="2.module_el8.8.0+3568+e8578284" epoch="0" arch="s390x" src="crun-1.8.1-2.module_el8.8.0+3568+e8578284.src.rpm">
          <filename>crun-1.8.1-2.module_el8.8.0+3568+e8578284.s390x.rpm</filename>
          <sum type="sha256">a00b99bb02143d1e5651cbaa854794bf3901c605dfa74f8721c3c916f0b3830d</sum>
        </package>
        <package name="criu-devel" version="3.15" release="3.module_el8.7.0+3407+95aa0ca9" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.7.0+3407+95aa0ca9.src.rpm">
          <filename>criu-devel-3.15-3.module_el8.7.0+3407+95aa0ca9.s390x.rpm</filename>
          <sum type="sha256">ab919af780bfdb79571a0f29bfe39aa9e76b34f49d63b6529f15def1ce4e9d93</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.3" release="7.module_el8.8.0+3470+252b1910" epoch="0" arch="s390x" src="toolbox-0.0.99.3-7.module_el8.8.0+3470+252b1910.src.rpm">
          <filename>toolbox-tests-0.0.99.3-7.module_el8.8.0+3470+252b1910.s390x.rpm</filename>
          <sum type="sha256">ae1b4e510d762813693b9ee655ce404c6d95dab270dffd71c1043a43efe2822b</sum>
        </package>
        <package name="container-selinux" version="2.205.0" release="2.module_el8.8.0+3557+7ba9cc13" epoch="2" arch="noarch" src="container-selinux-2.205.0-2.module_el8.8.0+3557+7ba9cc13.src.rpm">
          <filename>container-selinux-2.205.0-2.module_el8.8.0+3557+7ba9cc13.noarch.rpm</filename>
          <sum type="sha256">c447eaecac78144cfe5bf93ce350e8879f952b957dd31af281e093a88a262b73</sum>
        </package>
        <package name="python3-criu" version="3.15" release="3.module_el8.7.0+3407+95aa0ca9" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.7.0+3407+95aa0ca9.src.rpm">
          <filename>python3-criu-3.15-3.module_el8.7.0+3407+95aa0ca9.s390x.rpm</filename>
          <sum type="sha256">caf0c9cad2a7ce540719cef8131f61df93e037a1abaef0248183a670e9bf50fa</sum>
        </package>
        <package name="buildah" version="1.29.1" release="1.module_el8.8.0+3470+252b1910" epoch="1" arch="s390x" src="buildah-1.29.1-1.module_el8.8.0+3470+252b1910.src.rpm">
          <filename>buildah-1.29.1-1.module_el8.8.0+3470+252b1910.s390x.rpm</filename>
          <sum type="sha256">db57ca56eef21145914508e3e13f0b1fc8a08875862ed4d8503979a319fb06d6</sum>
        </package>
        <package name="runc" version="1.1.4" release="1.module_el8.7.0+3407+95aa0ca9" epoch="1" arch="s390x" src="runc-1.1.4-1.module_el8.7.0+3407+95aa0ca9.src.rpm">
          <filename>runc-1.1.4-1.module_el8.7.0+3407+95aa0ca9.s390x.rpm</filename>
          <sum type="sha256">dc85b3033cf3b7b62a32d5312f80d164ac2b043c861ad9895558e9563cd14ff6</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="1.module_el8.7.0+3407+95aa0ca9" epoch="0" arch="s390x" src="libslirp-4.4.0-1.module_el8.7.0+3407+95aa0ca9.src.rpm">
          <filename>libslirp-4.4.0-1.module_el8.7.0+3407+95aa0ca9.s390x.rpm</filename>
          <sum type="sha256">e3cf6bbda53346ef0244a58972b3a341818eb28b2d8ebf604953aed23ff228a0</sum>
        </package>
        <package name="udica" version="0.2.6" release="20.module_el8.8.0+3470+252b1910" epoch="0" arch="noarch" src="udica-0.2.6-20.module_el8.8.0+3470+252b1910.src.rpm">
          <filename>udica-0.2.6-20.module_el8.8.0+3470+252b1910.noarch.rpm</filename>
          <sum type="sha256">e84412b7f41f88b263a640828830f87be433a9f1e483057a53ec184019c94d22</sum>
        </package>
        <package name="conmon" version="2.1.6" release="1.module_el8.8.0+3470+252b1910" epoch="3" arch="s390x" src="conmon-2.1.6-1.module_el8.8.0+3470+252b1910.src.rpm">
          <filename>conmon-2.1.6-1.module_el8.8.0+3470+252b1910.s390x.rpm</filename>
          <sum type="sha256">ec72a36cc622b8f79f8c54fabc04631d4dd4d0b71b38533d4625096d11152795</sum>
        </package>
        <package name="fuse-overlayfs" version="1.10" release="1.module_el8.8.0+3470+252b1910" epoch="0" arch="s390x" src="fuse-overlayfs-1.10-1.module_el8.8.0+3470+252b1910.src.rpm">
          <filename>fuse-overlayfs-1.10-1.module_el8.8.0+3470+252b1910.s390x.rpm</filename>
          <sum type="sha256">eeb1c60730f7dd6e0ac2d288bda0b6973056d3896a2229c1c3c872a1d5ace024</sum>
        </package>
        <package name="criu" version="3.15" release="3.module_el8.7.0+3407+95aa0ca9" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.7.0+3407+95aa0ca9.src.rpm">
          <filename>criu-3.15-3.module_el8.7.0+3407+95aa0ca9.s390x.rpm</filename>
          <sum type="sha256">f4d794e8544cab3266b44e64daacabcbb9999da62623e4b15e2b328f63c7ffb5</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="1.module_el8.7.0+3407+95aa0ca9" epoch="0" arch="s390x" src="libslirp-4.4.0-1.module_el8.7.0+3407+95aa0ca9.src.rpm">
          <filename>libslirp-devel-4.4.0-1.module_el8.7.0+3407+95aa0ca9.s390x.rpm</filename>
          <sum type="sha256">fc314bbef4e4807252caff16892c2d3fe260b828899c933719c618b9dfb07443</sum>
        </package>
        <package name="podman-tests" version="4.4.1" release="8.module_el8.8.0+3568+e8578284" epoch="3" arch="s390x" src="podman-4.4.1-8.module_el8.8.0+3568+e8578284.src.rpm">
          <filename>podman-tests-4.4.1-8.module_el8.8.0+3568+e8578284.s390x.rpm</filename>
          <sum type="sha256">ff001ed4b267ef80ef795aedaa8935b334950f596bbf0395e496c267400023d7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2763</id>
    <title>Moderate: python38:3.8 and python38-devel:3.8 security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:08:38"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python38:3.8 and python38-devel:3.8 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. 

The following packages have been upgraded to a later upstream version: python38 (3.8.16).

Security Fix(es):

* python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS (CVE-2020-10735)
* python: open redirection vulnerability in lib/http/server.py may lead to information disclosure (CVE-2021-28861)
* python: CPU denial of service via inefficient IDNA decoder (CVE-2022-45061)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2763" id="RHSA-2023:2763" type="rhsa" title="RHSA-2023:2763"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-10735" id="CVE-2020-10735" type="cve" title="CVE-2020-10735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-28861" id="CVE-2021-28861" type="cve" title="CVE-2021-28861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45061" id="CVE-2022-45061" type="cve" title="CVE-2022-45061"/>
      <reference href="https://bugzilla.redhat.com/1834423" id="1834423" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120642" id="2120642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2144072" id="2144072" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2763.html" id="ALSA-2023:2763" type="self" title="ALSA-2023:2763"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="python38" stream="3.8" version="8080020230403153839" context="a51370e3" arch="s390x"/>
        <package name="python38-devel" version="3.8.16" release="1.module_el8.8.0+3482+d5d93a3e" epoch="0" arch="s390x" src="python38-3.8.16-1.module_el8.8.0+3482+d5d93a3e.src.rpm">
          <filename>python38-devel-3.8.16-1.module_el8.8.0+3482+d5d93a3e.s390x.rpm</filename>
          <sum type="sha256">0abe71abe55b41ae3d282a469ca5983656d6b5846deabc3d6dd21cee08b9c822</sum>
        </package>
        <package name="python38-test" version="3.8.16" release="1.module_el8.8.0+3482+d5d93a3e" epoch="0" arch="s390x" src="python38-3.8.16-1.module_el8.8.0+3482+d5d93a3e.src.rpm">
          <filename>python38-test-3.8.16-1.module_el8.8.0+3482+d5d93a3e.s390x.rpm</filename>
          <sum type="sha256">102d4b05726abd59f3e04ba71fc2304fcd0002f75dcf806cab5103f433159ede</sum>
        </package>
        <package name="python38-idle" version="3.8.16" release="1.module_el8.8.0+3482+d5d93a3e" epoch="0" arch="s390x" src="python38-3.8.16-1.module_el8.8.0+3482+d5d93a3e.src.rpm">
          <filename>python38-idle-3.8.16-1.module_el8.8.0+3482+d5d93a3e.s390x.rpm</filename>
          <sum type="sha256">1b8a1e663fa79b1a128e1be46982d24b85b684a2f02ac90ee7c709c05795229d</sum>
        </package>
        <package name="python38-scipy" version="1.3.1" release="4.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="scipy-1.3.1-4.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-scipy-1.3.1-4.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">1d6d7820b635f332143f691d85f916c40ed3d8fcbd3466346803caf5611b569f</sum>
        </package>
        <package name="python38-psycopg2" version="2.8.4" release="4.module_el8.7.0+3344+99a6a656" epoch="0" arch="s390x" src="python-psycopg2-2.8.4-4.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-psycopg2-2.8.4-4.module_el8.7.0+3344+99a6a656.s390x.rpm</filename>
          <sum type="sha256">30db40e718410952d3168ec995a3a3e6a88afa5543f3b1f2d2ee69ebfbacb49d</sum>
        </package>
        <package name="python38-jinja2" version="2.11.3" release="1.module_el8.7.0+3344+99a6a656" epoch="0" arch="noarch" src="python-jinja2-2.11.3-1.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-jinja2-2.11.3-1.module_el8.7.0+3344+99a6a656.noarch.rpm</filename>
          <sum type="sha256">65f05e5ed7e1f7c21b8cdb919d8ad743417c596227acb6b504d8495f6af8db4f</sum>
        </package>
        <package name="python38-pyyaml" version="5.4.1" release="1.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="PyYAML-5.4.1-1.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-pyyaml-5.4.1-1.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">70a32bae16b374e4ec238a9fd23d4a57f36df2786a18231fe0b431925278fc98</sum>
        </package>
        <package name="python38-pip" version="19.3.1" release="6.module_el8.7.0+3344+99a6a656" epoch="0" arch="noarch" src="python3x-pip-19.3.1-6.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-pip-19.3.1-6.module_el8.7.0+3344+99a6a656.noarch.rpm</filename>
          <sum type="sha256">74ddf13a354d40775b394ae0e723b1d794d70c8c4f0ab1b48ba2f3d299c259b2</sum>
        </package>
        <package name="python38-psutil" version="5.6.4" release="4.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="python-psutil-5.6.4-4.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-psutil-5.6.4-4.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">7a32568dcb13525ef3a54999d5d6022761e68246dbc5327a8c52e8cea96ac30f</sum>
        </package>
        <package name="python38" version="3.8.16" release="1.module_el8.8.0+3482+d5d93a3e" epoch="0" arch="s390x" src="python38-3.8.16-1.module_el8.8.0+3482+d5d93a3e.src.rpm">
          <filename>python38-3.8.16-1.module_el8.8.0+3482+d5d93a3e.s390x.rpm</filename>
          <sum type="sha256">acb7030d08b3ac6ca040feb3620126600870278bd135f0288d9dd5f80f0ec398</sum>
        </package>
        <package name="python38-cffi" version="1.13.2" release="3.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="python-cffi-1.13.2-3.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-cffi-1.13.2-3.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">b34229e6288a56b9976d01b3f297bc8b4fedf6c1a14716687dc4632a24d5369a</sum>
        </package>
        <package name="python38-libs" version="3.8.16" release="1.module_el8.8.0+3482+d5d93a3e" epoch="0" arch="s390x" src="python38-3.8.16-1.module_el8.8.0+3482+d5d93a3e.src.rpm">
          <filename>python38-libs-3.8.16-1.module_el8.8.0+3482+d5d93a3e.s390x.rpm</filename>
          <sum type="sha256">b7854e60e5f6a5148875d5240dfbc39e5ad7d8462f4e43156e24acca7fc413f6</sum>
        </package>
        <package name="python38-psycopg2-doc" version="2.8.4" release="4.module_el8.7.0+3344+99a6a656" epoch="0" arch="s390x" src="python-psycopg2-2.8.4-4.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-psycopg2-doc-2.8.4-4.module_el8.7.0+3344+99a6a656.s390x.rpm</filename>
          <sum type="sha256">baf86e5160816eb2e8f2bf04d47041e6b3e44b64e3f596897a65d41ad3a6dbc4</sum>
        </package>
        <package name="python38-tkinter" version="3.8.16" release="1.module_el8.8.0+3482+d5d93a3e" epoch="0" arch="s390x" src="python38-3.8.16-1.module_el8.8.0+3482+d5d93a3e.src.rpm">
          <filename>python38-tkinter-3.8.16-1.module_el8.8.0+3482+d5d93a3e.s390x.rpm</filename>
          <sum type="sha256">bc76c113b4b4268ef47ec90f20747566d1a4bcd2ec7d1dfa67765aa34da81c0d</sum>
        </package>
        <package name="python38-cryptography" version="2.8" release="3.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="python-cryptography-2.8-3.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-cryptography-2.8-3.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">c11ed086ba644d0143cd534d4990e790f907a66482da70752528a45f14289f10</sum>
        </package>
        <package name="python38-psycopg2-tests" version="2.8.4" release="4.module_el8.7.0+3344+99a6a656" epoch="0" arch="s390x" src="python-psycopg2-2.8.4-4.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-psycopg2-tests-2.8.4-4.module_el8.7.0+3344+99a6a656.s390x.rpm</filename>
          <sum type="sha256">c1e089d3030080f30316251830f59bc6fcd22b63ea830a68e88121af77b3ad41</sum>
        </package>
        <package name="python38-numpy" version="1.17.3" release="6.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="numpy-1.17.3-6.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-numpy-1.17.3-6.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">c809f45c93a9ef3caf2163524cafd253b08685c2854354b09933b4cbf88d4c97</sum>
        </package>
        <package name="python38-Cython" version="0.29.14" release="4.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="Cython-0.29.14-4.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-Cython-0.29.14-4.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">c8e257796e097667f73bdfb94f0b28a681d5cdf71fdc1b96f1a39d0159912c44</sum>
        </package>
        <package name="python38-markupsafe" version="1.1.1" release="6.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="python-markupsafe-1.1.1-6.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-markupsafe-1.1.1-6.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">dde3e871e78ef455929f983e9dc8bd23504f64efac25ca963276ea0f06947c46</sum>
        </package>
        <package name="python38-mod_wsgi" version="4.6.8" release="4.module_el8.7.0+3344+99a6a656" epoch="0" arch="s390x" src="mod_wsgi-4.6.8-4.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-mod_wsgi-4.6.8-4.module_el8.7.0+3344+99a6a656.s390x.rpm</filename>
          <sum type="sha256">e76b00dc2331143d0185c2ad8c30e0cd4542d83984ac1bfab9a71f180d8b22f0</sum>
        </package>
        <package name="python38-debug" version="3.8.16" release="1.module_el8.8.0+3482+d5d93a3e" epoch="0" arch="s390x" src="python38-3.8.16-1.module_el8.8.0+3482+d5d93a3e.src.rpm">
          <filename>python38-debug-3.8.16-1.module_el8.8.0+3482+d5d93a3e.s390x.rpm</filename>
          <sum type="sha256">edb014f1ee97ae2b8a9e6068cbd31218543b7afff22d9e16c489ece69b57f5c7</sum>
        </package>
        <package name="python38-rpm-macros" version="3.8.16" release="1.module_el8.8.0+3482+d5d93a3e" epoch="0" arch="noarch" src="python38-3.8.16-1.module_el8.8.0+3482+d5d93a3e.src.rpm">
          <filename>python38-rpm-macros-3.8.16-1.module_el8.8.0+3482+d5d93a3e.noarch.rpm</filename>
          <sum type="sha256">f3a1597ad598a48cb101c11666b5da7266018aa2d20f93a0a785480441143101</sum>
        </package>
        <package name="python38-lxml" version="4.4.1" release="7.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="python-lxml-4.4.1-7.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-lxml-4.4.1-7.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">f5fb51b73bf02fc264e24d5940eadc2644c978ae7ce30f8ee844b11f6e4cd4df</sum>
        </package>
        <package name="python38-pip-wheel" version="19.3.1" release="6.module_el8.7.0+3344+99a6a656" epoch="0" arch="noarch" src="python3x-pip-19.3.1-6.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-pip-wheel-19.3.1-6.module_el8.7.0+3344+99a6a656.noarch.rpm</filename>
          <sum type="sha256">f79a89f3b2d4d0230e89c14c66807a9f5e579d503056a5a3a7069f20574e22d1</sum>
        </package>
        <package name="python38-numpy-f2py" version="1.17.3" release="6.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="numpy-1.17.3-6.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-numpy-f2py-1.17.3-6.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">fe62b9c13128772672df4a275edbcaa6238bbb16edb3e67f12fb85b82a39c4c9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2764</id>
    <title>Moderate: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:06:07"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

The following packages have been upgraded to a later upstream version: python39 (3.9.16).

Security Fix(es):

* python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS (CVE-2020-10735)
* python: open redirection vulnerability in lib/http/server.py may lead to information disclosure (CVE-2021-28861)
* python: CPU denial of service via inefficient IDNA decoder (CVE-2022-45061)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2764" id="RHSA-2023:2764" type="rhsa" title="RHSA-2023:2764"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-10735" id="CVE-2020-10735" type="cve" title="CVE-2020-10735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-28861" id="CVE-2021-28861" type="cve" title="CVE-2021-28861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45061" id="CVE-2022-45061" type="cve" title="CVE-2022-45061"/>
      <reference href="https://bugzilla.redhat.com/1834423" id="1834423" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120642" id="2120642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2144072" id="2144072" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2764.html" id="ALSA-2023:2764" type="self" title="ALSA-2023:2764"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="python39" stream="3.9" version="8080020230403153935" context="0a5380d9" arch="s390x"/>
        <package name="python39-devel" version="3.9.16" release="1.module_el8.8.0+3483+a028a3dd" epoch="0" arch="s390x" src="python39-3.9.16-1.module_el8.8.0+3483+a028a3dd.src.rpm">
          <filename>python39-devel-3.9.16-1.module_el8.8.0+3483+a028a3dd.s390x.rpm</filename>
          <sum type="sha256">2017503b11c659ae8557ea726c00ade93f9a73bf99f38099edd11d4aa41af707</sum>
        </package>
        <package name="python39-idle" version="3.9.16" release="1.module_el8.8.0+3483+a028a3dd" epoch="0" arch="s390x" src="python39-3.9.16-1.module_el8.8.0+3483+a028a3dd.src.rpm">
          <filename>python39-idle-3.9.16-1.module_el8.8.0+3483+a028a3dd.s390x.rpm</filename>
          <sum type="sha256">26d67420e62dae721d67b045a7aae3110dbce96723bf2ede3e8dcff79a1b0641</sum>
        </package>
        <package name="python39-scipy" version="1.5.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="scipy-1.5.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-scipy-1.5.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">29c1816d1b128f5b3a9f8863106cc1a21a9e75b10be7a14561be4ebb36951957</sum>
        </package>
        <package name="python39-cryptography" version="3.3.1" release="2.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-cryptography-3.3.1-2.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-cryptography-3.3.1-2.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">56a1136df87128c9c969dff35385bd263b36300d3c30efa3c5110f2cec64c371</sum>
        </package>
        <package name="python39-numpy-f2py" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-f2py-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">56f4a39fc3b7cacfec741e84c3c59e67da9e3b2f122f09e59cac8a8020a4ba7c</sum>
        </package>
        <package name="python39-rpm-macros" version="3.9.16" release="1.module_el8.8.0+3483+a028a3dd" epoch="0" arch="noarch" src="python39-3.9.16-1.module_el8.8.0+3483+a028a3dd.src.rpm">
          <filename>python39-rpm-macros-3.9.16-1.module_el8.8.0+3483+a028a3dd.noarch.rpm</filename>
          <sum type="sha256">7ff87618ec12babc8362bfc87a27cb7d9b0aac6eff8836556144a6b49778449b</sum>
        </package>
        <package name="python39" version="3.9.16" release="1.module_el8.8.0+3483+a028a3dd" epoch="0" arch="s390x" src="python39-3.9.16-1.module_el8.8.0+3483+a028a3dd.src.rpm">
          <filename>python39-3.9.16-1.module_el8.8.0+3483+a028a3dd.s390x.rpm</filename>
          <sum type="sha256">830aabefbba1b5d800e42944ba6d906f69bc23d20832a57ec38958aa823f322d</sum>
        </package>
        <package name="python39-test" version="3.9.16" release="1.module_el8.8.0+3483+a028a3dd" epoch="0" arch="s390x" src="python39-3.9.16-1.module_el8.8.0+3483+a028a3dd.src.rpm">
          <filename>python39-test-3.9.16-1.module_el8.8.0+3483+a028a3dd.s390x.rpm</filename>
          <sum type="sha256">8766d7cceafc3d735651143d7c7599941c16dc7c95d942520a202b8b0a9bc5f7</sum>
        </package>
        <package name="python39-psutil" version="5.8.0" release="4.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9300840b5b4e742063f5617bc74cc2b05b4f3d5bdcd113ee5b3a9745baf3d0dc</sum>
        </package>
        <package name="python39-numpy" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9ffe33f6e51a25e79b88e45fa5cdca37a3b77d0868fe40e156f615224308810c</sum>
        </package>
        <package name="python39-psycopg2-tests" version="2.8.6" release="2.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-psycopg2-tests-2.8.6-2.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">aea9e9377b4ce6484c9cab9cc63b725b12a55d4895321eaa422328a4b79bb21b</sum>
        </package>
        <package name="python39-libs" version="3.9.16" release="1.module_el8.8.0+3483+a028a3dd" epoch="0" arch="s390x" src="python39-3.9.16-1.module_el8.8.0+3483+a028a3dd.src.rpm">
          <filename>python39-libs-3.9.16-1.module_el8.8.0+3483+a028a3dd.s390x.rpm</filename>
          <sum type="sha256">b448be475923c2b4767f0f99b10e1cc300c1806d38d621f9b7ab0ebac4bd3e80</sum>
        </package>
        <package name="python39-psycopg2" version="2.8.6" release="2.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">b7c35659538650d156ec7273186c4f59fa5fecab60c4ccfd3a93bbe67c0af914</sum>
        </package>
        <package name="python39-psycopg2-doc" version="2.8.6" release="2.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-psycopg2-doc-2.8.6-2.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">b973731de198689b345b74939539b99cd20047bf9b09cd68ab7b166eae5773fe</sum>
        </package>
        <package name="python39-lxml" version="4.6.5" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">dc2ce0990738ea69e2b3641de1886825066554244cf58815971db30e321b56b2</sum>
        </package>
        <package name="python39-mod_wsgi" version="4.7.1" release="5.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="mod_wsgi-4.7.1-5.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-mod_wsgi-4.7.1-5.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">e45288562bc7c28ad66653998a34bc52fe2539e305ea984f6ebebac9a1c49030</sum>
        </package>
        <package name="python39-tkinter" version="3.9.16" release="1.module_el8.8.0+3483+a028a3dd" epoch="0" arch="s390x" src="python39-3.9.16-1.module_el8.8.0+3483+a028a3dd.src.rpm">
          <filename>python39-tkinter-3.9.16-1.module_el8.8.0+3483+a028a3dd.s390x.rpm</filename>
          <sum type="sha256">e4d3a7b091208002987e2d75ab995566e562055a6913e224c501334460def024</sum>
        </package>
        <package name="python39-cffi" version="1.14.3" release="2.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">ec3acbe8ceecf82559556caacd8c41e2b40e69348f2e6893f0b7598aa36371fd</sum>
        </package>
        <package name="python39-pyyaml" version="5.4.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="PyYAML-5.4.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pyyaml-5.4.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">faa90d54ace8329c64942f01e18434bce14edf19cc3a534ae07de7bc301cd27f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2771</id>
    <title>Moderate: unbound security and bug fix update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>unbound security and bug fix update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. 

Security Fix(es):

* unbound: NRDelegation attack leads to uncontrolled resource consumption (Non-Responsive Delegation Attack) (CVE-2022-3204)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2771" id="RHSA-2023:2771" type="rhsa" title="RHSA-2023:2771"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3204" id="CVE-2022-3204" type="cve" title="CVE-2022-3204"/>
      <reference href="https://bugzilla.redhat.com/2128947" id="2128947" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2771.html" id="ALSA-2023:2771" type="self" title="ALSA-2023:2771"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="unbound" version="1.16.2" release="5.el8" epoch="0" arch="s390x" src="unbound-1.16.2-5.el8.src.rpm">
          <filename>unbound-1.16.2-5.el8.s390x.rpm</filename>
          <sum type="sha256">3689980badc0f75da59469ac3cd767c489eaa42f4225336769a32fe056dbc884</sum>
        </package>
        <package name="python3-unbound" version="1.16.2" release="5.el8" epoch="0" arch="s390x" src="unbound-1.16.2-5.el8.src.rpm">
          <filename>python3-unbound-1.16.2-5.el8.s390x.rpm</filename>
          <sum type="sha256">a83f9415a7b0283a10a5e659f6149cba5112108a282b43cd09d5fb90f463d4a8</sum>
        </package>
        <package name="unbound-libs" version="1.16.2" release="5.el8" epoch="0" arch="s390x" src="unbound-1.16.2-5.el8.src.rpm">
          <filename>unbound-libs-1.16.2-5.el8.s390x.rpm</filename>
          <sum type="sha256">e5a10b0d761c3927dbeea10c2aeab5426039d2108c2931ddc6ec091e24728f98</sum>
        </package>
        <package name="unbound-devel" version="1.16.2" release="5.el8" epoch="0" arch="s390x" src="unbound-1.16.2-5.el8.src.rpm">
          <filename>unbound-devel-1.16.2-5.el8.s390x.rpm</filename>
          <sum type="sha256">e8a18ea7fdff28bda87d5f2c0b2cc17ebb068b6b9c29a330841f3ad67cf38381</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2780</id>
    <title>Moderate: Image Builder security, bug fix, and enhancement update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-20 19:14:40"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>Image Builder security, bug fix, and enhancement update</summary>
    <description>Image Builder is a service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood.

Security Fix(es):

* golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879)
* golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)
* golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)
* golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)
* golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2780" id="RHSA-2023:2780" type="rhsa" title="RHSA-2023:2780"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27664" id="CVE-2022-27664" type="cve" title="CVE-2022-27664"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2879" id="CVE-2022-2879" type="cve" title="CVE-2022-2879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2880" id="CVE-2022-2880" type="cve" title="CVE-2022-2880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41715" id="CVE-2022-41715" type="cve" title="CVE-2022-41715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41717" id="CVE-2022-41717" type="cve" title="CVE-2022-41717"/>
      <reference href="https://bugzilla.redhat.com/2124669" id="2124669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2132867" id="2132867" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2132868" id="2132868" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2132872" id="2132872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2161274" id="2161274" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2780.html" id="ALSA-2023:2780" type="self" title="ALSA-2023:2780"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="osbuild-composer-worker" version="75" release="1.el8.alma" epoch="0" arch="s390x" src="osbuild-composer-75-1.el8.alma.src.rpm">
          <filename>osbuild-composer-worker-75-1.el8.alma.s390x.rpm</filename>
          <sum type="sha256">1c34d2fe5393b53bd5af0060aa6d4551d5ace1e99c3347855d08fab6dd2a662b</sum>
        </package>
        <package name="osbuild-composer-core" version="75" release="1.el8.alma" epoch="0" arch="s390x" src="osbuild-composer-75-1.el8.alma.src.rpm">
          <filename>osbuild-composer-core-75-1.el8.alma.s390x.rpm</filename>
          <sum type="sha256">3e23e4d0d6c67bb3b0b48ce7c1470e677bf733d1261c6c79e394df5ca7de6930</sum>
        </package>
        <package name="osbuild-composer-dnf-json" version="75" release="1.el8.alma" epoch="0" arch="s390x" src="osbuild-composer-75-1.el8.alma.src.rpm">
          <filename>osbuild-composer-dnf-json-75-1.el8.alma.s390x.rpm</filename>
          <sum type="sha256">5b986121dd70d5eea857f61c8481ff92e52abf786880a1cac523d9c7aaf49270</sum>
        </package>
        <package name="osbuild-composer" version="75" release="1.el8.alma" epoch="0" arch="s390x" src="osbuild-composer-75-1.el8.alma.src.rpm">
          <filename>osbuild-composer-75-1.el8.alma.s390x.rpm</filename>
          <sum type="sha256">bfc65ed36f8a138237684a6525d677bf69b82ffcb6e2a36b176aaec8e490680b</sum>
        </package>
        <package name="weldr-client" version="35.9" release="2.el8" epoch="0" arch="s390x" src="weldr-client-35.9-2.el8.src.rpm">
          <filename>weldr-client-35.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">e4e579d32966eca702c03071f59f87f2ce697d26a4ce527f0e4fdc60d13253d8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2784</id>
    <title>Moderate: grafana security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 21:59:58"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB. 

Security Fix(es):

* golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)
* golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)
* grafana: using email as a username can block other users from signing in (CVE-2022-39229)
* golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2784" id="RHSA-2023:2784" type="rhsa" title="RHSA-2023:2784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27664" id="CVE-2022-27664" type="cve" title="CVE-2022-27664"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2880" id="CVE-2022-2880" type="cve" title="CVE-2022-2880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39229" id="CVE-2022-39229" type="cve" title="CVE-2022-39229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41715" id="CVE-2022-41715" type="cve" title="CVE-2022-41715"/>
      <reference href="https://bugzilla.redhat.com/2124669" id="2124669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2131149" id="2131149" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2132868" id="2132868" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2132872" id="2132872" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2784.html" id="ALSA-2023:2784" type="self" title="ALSA-2023:2784"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="grafana" version="7.5.15" release="4.el8" epoch="0" arch="s390x" src="grafana-7.5.15-4.el8.src.rpm">
          <filename>grafana-7.5.15-4.el8.s390x.rpm</filename>
          <sum type="sha256">e8151cd3199d241ef2f1d4be520baa86cbc6edd9d778f6ec810ccbf3277c19ed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2785</id>
    <title>Moderate: grafana-pcp security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 21:59:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grafana-pcp security update</summary>
    <description>The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.

Security Fix(es):

* golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2785" id="RHSA-2023:2785" type="rhsa" title="RHSA-2023:2785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27664" id="CVE-2022-27664" type="cve" title="CVE-2022-27664"/>
      <reference href="https://bugzilla.redhat.com/2124669" id="2124669" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2785.html" id="ALSA-2023:2785" type="self" title="ALSA-2023:2785"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="grafana-pcp" version="3.2.0" release="3.el8" epoch="0" arch="s390x" src="grafana-pcp-3.2.0-3.el8.src.rpm">
          <filename>grafana-pcp-3.2.0-3.el8.s390x.rpm</filename>
          <sum type="sha256">b2465fb25d9b760365c055832128ece7044e67d8f6c261328e9a8f92d209424e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2786</id>
    <title>Moderate: wayland security, bug fix, and enhancement update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:01:30"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>wayland security, bug fix, and enhancement update</summary>
    <description>Wayland is a protocol for a compositor to talk to its clients, as well as a C library implementation of that protocol. The compositor can be a standalone display server running on Linux kernel modesetting and evdev input devices, an X application, or a wayland client itself. The clients can be traditional applications, X servers (rootless or fullscreen) or other display servers.

The following packages have been upgraded to a later upstream version: wayland (1.21.0). (BZ#2137625)

Security Fix(es):

* wayland: libwayland-server wl_shm reference-count overflow (CVE-2021-3782)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2786" id="RHSA-2023:2786" type="rhsa" title="RHSA-2023:2786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3782" id="CVE-2021-3782" type="cve" title="CVE-2021-3782"/>
      <reference href="https://bugzilla.redhat.com/2002627" id="2002627" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2786.html" id="ALSA-2023:2786" type="self" title="ALSA-2023:2786"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="libwayland-cursor" version="1.21.0" release="1.el8" epoch="0" arch="s390x" src="wayland-1.21.0-1.el8.src.rpm">
          <filename>libwayland-cursor-1.21.0-1.el8.s390x.rpm</filename>
          <sum type="sha256">0e9a93ada6ee8ba01cf137e63a58bf06c3d35dd8cc989200d5200c3a0379777f</sum>
        </package>
        <package name="wayland-devel" version="1.21.0" release="1.el8" epoch="0" arch="s390x" src="wayland-1.21.0-1.el8.src.rpm">
          <filename>wayland-devel-1.21.0-1.el8.s390x.rpm</filename>
          <sum type="sha256">7893175898e2a281f18e8214f70fd3861b60c83647f21d461e8987b40b455f1e</sum>
        </package>
        <package name="libwayland-server" version="1.21.0" release="1.el8" epoch="0" arch="s390x" src="wayland-1.21.0-1.el8.src.rpm">
          <filename>libwayland-server-1.21.0-1.el8.s390x.rpm</filename>
          <sum type="sha256">88a622281b7a00f1d38c7261f0b424bd915310a08a13e2117aadb0936c452c26</sum>
        </package>
        <package name="libwayland-client" version="1.21.0" release="1.el8" epoch="0" arch="s390x" src="wayland-1.21.0-1.el8.src.rpm">
          <filename>libwayland-client-1.21.0-1.el8.s390x.rpm</filename>
          <sum type="sha256">a23c0546a704427f92ebe3c575f54d26d1c8655aba6040edf5348b58d1e49121</sum>
        </package>
        <package name="libwayland-egl" version="1.21.0" release="1.el8" epoch="0" arch="s390x" src="wayland-1.21.0-1.el8.src.rpm">
          <filename>libwayland-egl-1.21.0-1.el8.s390x.rpm</filename>
          <sum type="sha256">cfd315e1158569438fa4b1094fb45701ac3d0630185d2cb09ef8264b2c895629</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2792</id>
    <title>Moderate: bind9.16 security and bug fix update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:09:47"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bind9.16 security and bug fix update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: processing large delegations may severely degrade resolver performance (CVE-2022-2795)
* bind: flooding with UPDATE requests may lead to DoS (CVE-2022-3094)
* bind: sending specific queries to the resolver may cause a DoS (CVE-2022-3736)
* bind: sending specific queries to the resolver may cause a DoS (CVE-2022-3924)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2792" id="RHSA-2023:2792" type="rhsa" title="RHSA-2023:2792"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2795" id="CVE-2022-2795" type="cve" title="CVE-2022-2795"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3094" id="CVE-2022-3094" type="cve" title="CVE-2022-3094"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3736" id="CVE-2022-3736" type="cve" title="CVE-2022-3736"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3924" id="CVE-2022-3924" type="cve" title="CVE-2022-3924"/>
      <reference href="https://bugzilla.redhat.com/2128584" id="2128584" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164032" id="2164032" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164038" id="2164038" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164039" id="2164039" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2792.html" id="ALSA-2023:2792" type="self" title="ALSA-2023:2792"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="python3-bind9.16" version="9.16.23" release="0.14.el8" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.14.el8.src.rpm">
          <filename>python3-bind9.16-9.16.23-0.14.el8.noarch.rpm</filename>
          <sum type="sha256">352d36dd038ee5e0652a61c839b11cebcca8a1a426a18882259e2af389887bba</sum>
        </package>
        <package name="bind9.16-chroot" version="9.16.23" release="0.14.el8" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.14.el8.src.rpm">
          <filename>bind9.16-chroot-9.16.23-0.14.el8.s390x.rpm</filename>
          <sum type="sha256">36bf65d7592d019b8f8e226207740c9288ca20ed22507ebf8ef0c3537db2da49</sum>
        </package>
        <package name="bind9.16-utils" version="9.16.23" release="0.14.el8" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.14.el8.src.rpm">
          <filename>bind9.16-utils-9.16.23-0.14.el8.s390x.rpm</filename>
          <sum type="sha256">6609cbd8c8732257d68f938145785a4f3907a3e3c2df7363c0a71a42cbf05ac8</sum>
        </package>
        <package name="bind9.16-dnssec-utils" version="9.16.23" release="0.14.el8" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.14.el8.src.rpm">
          <filename>bind9.16-dnssec-utils-9.16.23-0.14.el8.s390x.rpm</filename>
          <sum type="sha256">7ad1fa48042df4dcf7c5821b83ed6fbccbdcc9a5dfa390c91fcea7fb036853d0</sum>
        </package>
        <package name="bind9.16-license" version="9.16.23" release="0.14.el8" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.14.el8.src.rpm">
          <filename>bind9.16-license-9.16.23-0.14.el8.noarch.rpm</filename>
          <sum type="sha256">c3d4a5235a9b6f4489c8ae0abd12ed901bad7f86662f4576521e459acdc076c4</sum>
        </package>
        <package name="bind9.16" version="9.16.23" release="0.14.el8" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.14.el8.src.rpm">
          <filename>bind9.16-9.16.23-0.14.el8.s390x.rpm</filename>
          <sum type="sha256">de4036c71b81db025898878547c95f4a6aa9dab518c82cc3eb42bd80ac02d9f2</sum>
        </package>
        <package name="bind9.16-libs" version="9.16.23" release="0.14.el8" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.14.el8.src.rpm">
          <filename>bind9.16-libs-9.16.23-0.14.el8.s390x.rpm</filename>
          <sum type="sha256">de76452ef934cfecd334a12b28329ac180f27bb9e53753724e06b63952071240</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2800</id>
    <title>Moderate: sysstat security and bug fix update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:00"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>sysstat security and bug fix update</summary>
    <description>The sysstat packages provide the sar and iostat commands. These commands enable system monitoring of disk, network, and other I/O activity.

Security Fix(es):

* sysstat: arithmetic overflow in allocate_structures() on 32 bit systems (CVE-2022-39377)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2800" id="RHSA-2023:2800" type="rhsa" title="RHSA-2023:2800"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39377" id="CVE-2022-39377" type="cve" title="CVE-2022-39377"/>
      <reference href="https://bugzilla.redhat.com/2141207" id="2141207" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2800.html" id="ALSA-2023:2800" type="self" title="ALSA-2023:2800"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="sysstat" version="11.7.3" release="9.el8" epoch="0" arch="s390x" src="sysstat-11.7.3-9.el8.src.rpm">
          <filename>sysstat-11.7.3-9.el8.s390x.rpm</filename>
          <sum type="sha256">f030bf6c8ce5fa4f8750055fa875a0014d23996ded4ee31d0e9bbf6b3174045e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2801</id>
    <title>Moderate: frr security and bug fix update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:05:41"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>frr security and bug fix update</summary>
    <description>FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. 

Security Fix(es):

* frr: out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service (CVE-2022-37032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2801" id="RHSA-2023:2801" type="rhsa" title="RHSA-2023:2801"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-37032" id="CVE-2022-37032" type="cve" title="CVE-2022-37032"/>
      <reference href="https://bugzilla.redhat.com/2128713" id="2128713" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2801.html" id="ALSA-2023:2801" type="self" title="ALSA-2023:2801"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="frr-selinux" version="7.5.1" release="7.el8" epoch="0" arch="noarch" src="frr-7.5.1-7.el8.src.rpm">
          <filename>frr-selinux-7.5.1-7.el8.noarch.rpm</filename>
          <sum type="sha256">a77da8799c5fa9246cf57e3b26a8451251d710f6384459c376fad863846c5709</sum>
        </package>
        <package name="frr" version="7.5.1" release="7.el8" epoch="0" arch="s390x" src="frr-7.5.1-7.el8.src.rpm">
          <filename>frr-7.5.1-7.el8.s390x.rpm</filename>
          <sum type="sha256">e0a72fad220d9b563396256e3f1479969eb648a7dedb291b57698668c1bae113</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2802</id>
    <title>Moderate: container-tools:4.0 security and bug fix update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:12:36"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>container-tools:4.0 security and bug fix update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)
* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)
* golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)
* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)
* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)
* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)
* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)
* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)
* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)
* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)
* golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)
* podman: symlink exchange attack in podman export volume (CVE-2023-0778)
* podman: possible information disclosure and modification (CVE-2022-2989)
* golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2802" id="RHSA-2023:2802" type="rhsa" title="RHSA-2023:2802"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1705" id="CVE-2022-1705" type="cve" title="CVE-2022-1705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1962" id="CVE-2022-1962" type="cve" title="CVE-2022-1962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27664" id="CVE-2022-27664" type="cve" title="CVE-2022-27664"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28131" id="CVE-2022-28131" type="cve" title="CVE-2022-28131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2989" id="CVE-2022-2989" type="cve" title="CVE-2022-2989"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30630" id="CVE-2022-30630" type="cve" title="CVE-2022-30630"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30631" id="CVE-2022-30631" type="cve" title="CVE-2022-30631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30632" id="CVE-2022-30632" type="cve" title="CVE-2022-30632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30633" id="CVE-2022-30633" type="cve" title="CVE-2022-30633"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30635" id="CVE-2022-30635" type="cve" title="CVE-2022-30635"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32148" id="CVE-2022-32148" type="cve" title="CVE-2022-32148"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32189" id="CVE-2022-32189" type="cve" title="CVE-2022-32189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41717" id="CVE-2022-41717" type="cve" title="CVE-2022-41717"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0778" id="CVE-2023-0778" type="cve" title="CVE-2023-0778"/>
      <reference href="https://bugzilla.redhat.com/2107342" id="2107342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107371" id="2107371" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107374" id="2107374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107376" id="2107376" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107383" id="2107383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107386" id="2107386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107388" id="2107388" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107390" id="2107390" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107392" id="2107392" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2113814" id="2113814" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2121445" id="2121445" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2124669" id="2124669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2161274" id="2161274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2168256" id="2168256" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2802.html" id="ALSA-2023:2802" type="self" title="ALSA-2023:2802"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="container-tools" stream="4.0" version="8080020230403133906" context="20125149" arch="s390x"/>
        <package name="containers-common" version="1" release="37.module_el8.8.0+3468+16b86c82" epoch="2" arch="s390x" src="containers-common-1-37.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>containers-common-1-37.module_el8.8.0+3468+16b86c82.s390x.rpm</filename>
          <sum type="sha256">00cba0d12cb0cce695dca0ad464ab7c684cb6cf15593583d85020541f68df710</sum>
        </package>
        <package name="podman-remote" version="4.0.2" release="20.module_el8.8.0+3468+16b86c82" epoch="2" arch="s390x" src="podman-4.0.2-20.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>podman-remote-4.0.2-20.module_el8.8.0+3468+16b86c82.s390x.rpm</filename>
          <sum type="sha256">0e70e19def3e63aad726bf01ac3affea2a8cce0af9ad6bbbcef25beeab8071c7</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.5" release="2.module_el8.8.0+3468+16b86c82" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.5-2.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.5-2.module_el8.8.0+3468+16b86c82.s390x.rpm</filename>
          <sum type="sha256">1e162c539720ce081534f6fb7d539a7332ff986a28465e81ca5532262dc0b96e</sum>
        </package>
        <package name="toolbox" version="0.0.99.3" release="7.module_el8.8.0+3468+16b86c82" epoch="0" arch="s390x" src="toolbox-0.0.99.3-7.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>toolbox-0.0.99.3-7.module_el8.8.0+3468+16b86c82.s390x.rpm</filename>
          <sum type="sha256">20f2ddff9818a3e2f0ffabd55e363de3c78edd0665d10031c0d5a0d3a44ad095</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="1.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="libslirp-4.4.0-1.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>libslirp-devel-4.4.0-1.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">23a930ac511e216078f3ebd78a7940a7f4a6b6d16fe2d3c7f7c04c5dd9050b3b</sum>
        </package>
        <package name="fuse-overlayfs" version="1.9" release="1.module_el8.7.0+3344+5bcd850f" epoch="0" arch="s390x" src="fuse-overlayfs-1.9-1.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>fuse-overlayfs-1.9-1.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">2b7258ad1b1c59dcb5a615337a043ce7e32977606f7ffa243a903122b2237a99</sum>
        </package>
        <package name="buildah" version="1.24.6" release="5.module_el8.8.0+3468+16b86c82" epoch="1" arch="s390x" src="buildah-1.24.6-5.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>buildah-1.24.6-5.module_el8.8.0+3468+16b86c82.s390x.rpm</filename>
          <sum type="sha256">39eecc23b46a699e23a8b9df1bda25dc32a4f1a9b890b29a2fcec7763a0dcb0c</sum>
        </package>
        <package name="podman-catatonit" version="4.0.2" release="20.module_el8.8.0+3468+16b86c82" epoch="2" arch="s390x" src="podman-4.0.2-20.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>podman-catatonit-4.0.2-20.module_el8.8.0+3468+16b86c82.s390x.rpm</filename>
          <sum type="sha256">3af0573d8a6aa40112b8d7ca8836bf7faf3c0c78b697f97677c8785c37b67029</sum>
        </package>
        <package name="criu-devel" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>criu-devel-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">3b5df64c4e5adb160d2985d7477aa84f2df350f8b8651dee3d1a73cb22e4ff2b</sum>
        </package>
        <package name="aardvark-dns" version="1.0.1" release="37.module_el8.8.0+3468+16b86c82" epoch="2" arch="s390x" src="containers-common-1-37.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>aardvark-dns-1.0.1-37.module_el8.8.0+3468+16b86c82.s390x.rpm</filename>
          <sum type="sha256">3c530dee132c51e316c284026c240df663fcb01f21fe344ea1b855a07bef4cf5</sum>
        </package>
        <package name="crun" version="1.6" release="1.module_el8.8.0+3468+16b86c82" epoch="0" arch="s390x" src="crun-1.6-1.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>crun-1.6-1.module_el8.8.0+3468+16b86c82.s390x.rpm</filename>
          <sum type="sha256">3fc15aec7bd3299591b56c6a33a3721f7d81e53afbe19c0c8477fa6cde9a8311</sum>
        </package>
        <package name="skopeo-tests" version="1.6.2" release="6.module_el8.8.0+3468+16b86c82" epoch="2" arch="s390x" src="skopeo-1.6.2-6.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>skopeo-tests-1.6.2-6.module_el8.8.0+3468+16b86c82.s390x.rpm</filename>
          <sum type="sha256">48807c2fb860206c7ae709f1236626804b5ebee1180a0e10395f3822657276a4</sum>
        </package>
        <package name="cockpit-podman" version="46" release="1.module_el8.7.0+3344+5bcd850f" epoch="0" arch="noarch" src="cockpit-podman-46-1.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>cockpit-podman-46-1.module_el8.7.0+3344+5bcd850f.noarch.rpm</filename>
          <sum type="sha256">4befd0793ef210df16649c866d5c1c4e69991cc174ecf348a5fbe591aa93b387</sum>
        </package>
        <package name="conmon" version="2.1.4" release="1.module_el8.7.0+3344+5bcd850f" epoch="2" arch="s390x" src="conmon-2.1.4-1.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>conmon-2.1.4-1.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">51183592198a872cf2496d2f3767c18ab10b2989849be5b32a9a479ca11bfd82</sum>
        </package>
        <package name="container-selinux" version="2.199.0" release="1.module_el8.8.0+3468+16b86c82" epoch="2" arch="noarch" src="container-selinux-2.199.0-1.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>container-selinux-2.199.0-1.module_el8.8.0+3468+16b86c82.noarch.rpm</filename>
          <sum type="sha256">61d408024a1024049c95c24d3d7c05dbbd85d2347def295861d4694a9c790bf9</sum>
        </package>
        <package name="crit" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>crit-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">63e66b7937f70ee985aabe920c4d8c1e590159f72b4b79a311e986f58bc147e1</sum>
        </package>
        <package name="podman-docker" version="4.0.2" release="20.module_el8.8.0+3468+16b86c82" epoch="2" arch="noarch" src="podman-4.0.2-20.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>podman-docker-4.0.2-20.module_el8.8.0+3468+16b86c82.noarch.rpm</filename>
          <sum type="sha256">658ed0593afc4b0585e23fe26846016b8167bf9d7370765076af90e1d5a49479</sum>
        </package>
        <package name="python3-criu" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>python3-criu-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">6b152daf504ff66ecb343dfbca61a7adb1ddceb7d77ba0af696194d2d2d0db43</sum>
        </package>
        <package name="podman" version="4.0.2" release="20.module_el8.8.0+3468+16b86c82" epoch="2" arch="s390x" src="podman-4.0.2-20.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>podman-4.0.2-20.module_el8.8.0+3468+16b86c82.s390x.rpm</filename>
          <sum type="sha256">7837a6c0837645a3d3b393403c1ca7307b813b82e8fff61089b3c00320db1658</sum>
        </package>
        <package name="slirp4netns" version="1.1.8" release="2.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="slirp4netns-1.1.8-2.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>slirp4netns-1.1.8-2.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">7987f96d013c18fd2fe55b235405e2b835e357d84d6d08b6674a9e58ae3a5dd8</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.3" release="7.module_el8.8.0+3468+16b86c82" epoch="0" arch="s390x" src="toolbox-0.0.99.3-7.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>toolbox-tests-0.0.99.3-7.module_el8.8.0+3468+16b86c82.s390x.rpm</filename>
          <sum type="sha256">7a1f997454239a360d5150e50a01503831f74bd1105bed16ec96721a66694862</sum>
        </package>
        <package name="podman-tests" version="4.0.2" release="20.module_el8.8.0+3468+16b86c82" epoch="2" arch="s390x" src="podman-4.0.2-20.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>podman-tests-4.0.2-20.module_el8.8.0+3468+16b86c82.s390x.rpm</filename>
          <sum type="sha256">97a6c7470f0e0026f6ff236085397f2ee63f2c8bbf6af4bfbf87cf832800c4e3</sum>
        </package>
        <package name="netavark" version="1.0.1" release="37.module_el8.8.0+3468+16b86c82" epoch="2" arch="s390x" src="containers-common-1-37.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>netavark-1.0.1-37.module_el8.8.0+3468+16b86c82.s390x.rpm</filename>
          <sum type="sha256">a86d560a006b426ef2c53c756084788bd8ee2e973c458a25a18a258f6b82af61</sum>
        </package>
        <package name="runc" version="1.1.4" release="1.module_el8.7.0+3344+5bcd850f" epoch="1" arch="s390x" src="runc-1.1.4-1.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>runc-1.1.4-1.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">b39b6784c0f6545544fae8c302a083f4f48d85d3d53e9b991e115f1db722c141</sum>
        </package>
        <package name="containernetworking-plugins" version="1.1.1" release="2.module_el8.7.0+3344+5bcd850f" epoch="1" arch="s390x" src="containernetworking-plugins-1.1.1-2.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>containernetworking-plugins-1.1.1-2.module_el8.7.0+3344+5bcd850f.s390x.rpm</filename>
          <sum type="sha256">be9664e888fba07628f1924dcc8ce71b5546e04b9940d377932496ff080687e8</sum>
        </package>
        <package name="criu" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>criu-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">c08a42b3160aaaca1d8eb6f81df59b8ea0a45448fd676479d2cae70b46600d46</sum>
        </package>
        <package name="skopeo" version="1.6.2" release="6.module_el8.8.0+3468+16b86c82" epoch="2" arch="s390x" src="skopeo-1.6.2-6.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>skopeo-1.6.2-6.module_el8.8.0+3468+16b86c82.s390x.rpm</filename>
          <sum type="sha256">d9a114526cc79b07c77bc4b752779fb21d3189a48d3bd9fd33f366da41594cce</sum>
        </package>
        <package name="criu-libs" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>criu-libs-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">e4c16247d9bcf785747fb00cd48e60e73f98ce6fcb5202032c264dfb343a7bce</sum>
        </package>
        <package name="podman-gvproxy" version="4.0.2" release="20.module_el8.8.0+3468+16b86c82" epoch="2" arch="s390x" src="podman-4.0.2-20.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>podman-gvproxy-4.0.2-20.module_el8.8.0+3468+16b86c82.s390x.rpm</filename>
          <sum type="sha256">ec53368d514d16b76da23c7636829d260691086d36b3234c7f46b7ec42144bf9</sum>
        </package>
        <package name="podman-plugins" version="4.0.2" release="20.module_el8.8.0+3468+16b86c82" epoch="2" arch="s390x" src="podman-4.0.2-20.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>podman-plugins-4.0.2-20.module_el8.8.0+3468+16b86c82.s390x.rpm</filename>
          <sum type="sha256">ed251c88eae1e7d0257102f7792c78a2b4ec2f7e50676ba5e5e1b3ea913fbdae</sum>
        </package>
        <package name="buildah-tests" version="1.24.6" release="5.module_el8.8.0+3468+16b86c82" epoch="1" arch="s390x" src="buildah-1.24.6-5.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>buildah-tests-1.24.6-5.module_el8.8.0+3468+16b86c82.s390x.rpm</filename>
          <sum type="sha256">eeba7ccefc053e3c5d6cd0a281331af0547d63010145d1c268cefe4d57cfd4a6</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="1.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="libslirp-4.4.0-1.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>libslirp-4.4.0-1.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">f2c8aa7fab8501dbdf33f68a74cb5600af266839424a6d637732ac248a58edc7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2805</id>
    <title>Moderate: xorg-x11-server-Xwayland security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-20 19:22:38"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

* xorg-x11-server: buffer overflow in _GetCountedString() in xkb/xkb.c (CVE-2022-3550)
* xorg-x11-server: XkbGetKbdByName use-after-free (CVE-2022-4283)
* xorg-x11-server: XTestSwapFakeInput stack overflow (CVE-2022-46340)
* xorg-x11-server: XIPassiveUngrab out-of-bounds access (CVE-2022-46341)
* xorg-x11-server: XvdiSelectVideoNotify use-after-free (CVE-2022-46342)
* xorg-x11-server: ScreenSaverSetAttributes use-after-free (CVE-2022-46343)
* xorg-x11-server: XIChangeProperty out-of-bounds access (CVE-2022-46344)
* xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (CVE-2023-0494)
* xorg-x11-server: memory leak in ProcXkbGetKbdByName() in xkb/xkb.c (CVE-2022-3551)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2805" id="RHSA-2023:2805" type="rhsa" title="RHSA-2023:2805"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3550" id="CVE-2022-3550" type="cve" title="CVE-2022-3550"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3551" id="CVE-2022-3551" type="cve" title="CVE-2022-3551"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4283" id="CVE-2022-4283" type="cve" title="CVE-2022-4283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46340" id="CVE-2022-46340" type="cve" title="CVE-2022-46340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46341" id="CVE-2022-46341" type="cve" title="CVE-2022-46341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46342" id="CVE-2022-46342" type="cve" title="CVE-2022-46342"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46343" id="CVE-2022-46343" type="cve" title="CVE-2022-46343"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46344" id="CVE-2022-46344" type="cve" title="CVE-2022-46344"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0494" id="CVE-2023-0494" type="cve" title="CVE-2023-0494"/>
      <reference href="https://bugzilla.redhat.com/2140698" id="2140698" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140701" id="2140701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151755" id="2151755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151756" id="2151756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151757" id="2151757" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151758" id="2151758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151760" id="2151760" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151761" id="2151761" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165995" id="2165995" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2805.html" id="ALSA-2023:2805" type="self" title="ALSA-2023:2805"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="xorg-x11-server-Xwayland" version="21.1.3" release="10.el8" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-21.1.3-10.el8.src.rpm">
          <filename>xorg-x11-server-Xwayland-21.1.3-10.el8.s390x.rpm</filename>
          <sum type="sha256">0e072faba68b0d51ab99a1393875dcd2a6d67913729451b8ef9be5ee62ad9584</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2806</id>
    <title>Moderate: xorg-x11-server security and bug fix update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:01:51"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security and bug fix update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: buffer overflow in _GetCountedString() in xkb/xkb.c (CVE-2022-3550)
* xorg-x11-server: XkbGetKbdByName use-after-free (CVE-2022-4283)
* xorg-x11-server: XTestSwapFakeInput stack overflow (CVE-2022-46340)
* xorg-x11-server: XIPassiveUngrab out-of-bounds access (CVE-2022-46341)
* xorg-x11-server: XvdiSelectVideoNotify use-after-free (CVE-2022-46342)
* xorg-x11-server: ScreenSaverSetAttributes use-after-free (CVE-2022-46343)
* xorg-x11-server: XIChangeProperty out-of-bounds access (CVE-2022-46344)
* xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (CVE-2023-0494)
* xorg-x11-server: memory leak in ProcXkbGetKbdByName() in xkb/xkb.c (CVE-2022-3551)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2806" id="RHSA-2023:2806" type="rhsa" title="RHSA-2023:2806"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3550" id="CVE-2022-3550" type="cve" title="CVE-2022-3550"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3551" id="CVE-2022-3551" type="cve" title="CVE-2022-3551"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4283" id="CVE-2022-4283" type="cve" title="CVE-2022-4283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46340" id="CVE-2022-46340" type="cve" title="CVE-2022-46340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46341" id="CVE-2022-46341" type="cve" title="CVE-2022-46341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46342" id="CVE-2022-46342" type="cve" title="CVE-2022-46342"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46343" id="CVE-2022-46343" type="cve" title="CVE-2022-46343"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46344" id="CVE-2022-46344" type="cve" title="CVE-2022-46344"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0494" id="CVE-2023-0494" type="cve" title="CVE-2023-0494"/>
      <reference href="https://bugzilla.redhat.com/2140698" id="2140698" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140701" id="2140701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151755" id="2151755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151756" id="2151756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151757" id="2151757" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151758" id="2151758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151760" id="2151760" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151761" id="2151761" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165995" id="2165995" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2806.html" id="ALSA-2023:2806" type="self" title="ALSA-2023:2806"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="xorg-x11-server-Xephyr" version="1.20.11" release="15.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-15.el8.src.rpm">
          <filename>xorg-x11-server-Xephyr-1.20.11-15.el8.s390x.rpm</filename>
          <sum type="sha256">03ff82109cd25daf0a5cc655e48bc11bc9e16ce6e8bb016e4d5614119e60dfb3</sum>
        </package>
        <package name="xorg-x11-server-Xnest" version="1.20.11" release="15.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-15.el8.src.rpm">
          <filename>xorg-x11-server-Xnest-1.20.11-15.el8.s390x.rpm</filename>
          <sum type="sha256">44180e1198ebce36a790dc3d02f99e5ed3877a0f799711bcf848d9cb0fb609ca</sum>
        </package>
        <package name="xorg-x11-server-Xdmx" version="1.20.11" release="15.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-15.el8.src.rpm">
          <filename>xorg-x11-server-Xdmx-1.20.11-15.el8.s390x.rpm</filename>
          <sum type="sha256">64d1b76747607de857e30c4a2aa4cd054c229a95c94aaafc4847b72a8a88dccf</sum>
        </package>
        <package name="xorg-x11-server-Xvfb" version="1.20.11" release="15.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-15.el8.src.rpm">
          <filename>xorg-x11-server-Xvfb-1.20.11-15.el8.s390x.rpm</filename>
          <sum type="sha256">a9697af83a15eef8e3c44d0fdfa11add653a5f69e0164a47b689c9de1e444d1f</sum>
        </package>
        <package name="xorg-x11-server-common" version="1.20.11" release="15.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-15.el8.src.rpm">
          <filename>xorg-x11-server-common-1.20.11-15.el8.s390x.rpm</filename>
          <sum type="sha256">c21f4173916480d138ed587dfac2026686236e59a58d679a3b155fa6319e133d</sum>
        </package>
        <package name="xorg-x11-server-Xorg" version="1.20.11" release="15.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-15.el8.src.rpm">
          <filename>xorg-x11-server-Xorg-1.20.11-15.el8.s390x.rpm</filename>
          <sum type="sha256">d8d8ef522c1973287a47b26bb40a17c38a83af7b884a2635a39109e9e8b4de50</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2810</id>
    <title>Moderate: poppler security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

* poppler: integer overflow in JBIG2 decoder using malformed files (CVE-2022-38784)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2810" id="RHSA-2023:2810" type="rhsa" title="RHSA-2023:2810"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38784" id="CVE-2022-38784" type="cve" title="CVE-2022-38784"/>
      <reference href="https://bugzilla.redhat.com/2124527" id="2124527" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2810.html" id="ALSA-2023:2810" type="self" title="ALSA-2023:2810"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="poppler-utils" version="20.11.0" release="6.el8" epoch="0" arch="s390x" src="poppler-20.11.0-6.el8.src.rpm">
          <filename>poppler-utils-20.11.0-6.el8.s390x.rpm</filename>
          <sum type="sha256">09de8bc0e3c542afcfa4992547aa3c80b3dea9ceeeb56c5e84fdf6635dc6314f</sum>
        </package>
        <package name="poppler-glib" version="20.11.0" release="6.el8" epoch="0" arch="s390x" src="poppler-20.11.0-6.el8.src.rpm">
          <filename>poppler-glib-20.11.0-6.el8.s390x.rpm</filename>
          <sum type="sha256">0e6e4f75795c2c2d0da84782b471f98b07a8eb2329b0e08da1c2caaf44e981c9</sum>
        </package>
        <package name="poppler" version="20.11.0" release="6.el8" epoch="0" arch="s390x" src="poppler-20.11.0-6.el8.src.rpm">
          <filename>poppler-20.11.0-6.el8.s390x.rpm</filename>
          <sum type="sha256">197340c8c73cfdae9edc1698c807eb0f40090af4f8a5dabb8bf8f866a9d4ca74</sum>
        </package>
        <package name="poppler-qt5" version="20.11.0" release="6.el8" epoch="0" arch="s390x" src="poppler-20.11.0-6.el8.src.rpm">
          <filename>poppler-qt5-20.11.0-6.el8.s390x.rpm</filename>
          <sum type="sha256">db765207ff2bb58227b7e9a622f2387768229a4b30e666184e562c0b93f4af31</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2830</id>
    <title>Moderate: tigervnc security and bug fix update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:12:04"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>tigervnc security and bug fix update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

Security Fix(es):

* xorg-x11-server: XkbGetKbdByName use-after-free (CVE-2022-4283)
* xorg-x11-server: XTestSwapFakeInput stack overflow (CVE-2022-46340)
* xorg-x11-server: XIPassiveUngrab out-of-bounds access (CVE-2022-46341)
* xorg-x11-server: XvdiSelectVideoNotify use-after-free (CVE-2022-46342)
* xorg-x11-server: ScreenSaverSetAttributes use-after-free (CVE-2022-46343)
* xorg-x11-server: XIChangeProperty out-of-bounds access (CVE-2022-46344)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2830" id="RHSA-2023:2830" type="rhsa" title="RHSA-2023:2830"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4283" id="CVE-2022-4283" type="cve" title="CVE-2022-4283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46340" id="CVE-2022-46340" type="cve" title="CVE-2022-46340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46341" id="CVE-2022-46341" type="cve" title="CVE-2022-46341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46342" id="CVE-2022-46342" type="cve" title="CVE-2022-46342"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46343" id="CVE-2022-46343" type="cve" title="CVE-2022-46343"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46344" id="CVE-2022-46344" type="cve" title="CVE-2022-46344"/>
      <reference href="https://bugzilla.redhat.com/2151755" id="2151755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151756" id="2151756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151757" id="2151757" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151758" id="2151758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151760" id="2151760" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151761" id="2151761" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2830.html" id="ALSA-2023:2830" type="self" title="ALSA-2023:2830"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="tigervnc-server" version="1.12.0" release="15.el8_8" epoch="0" arch="s390x" src="tigervnc-1.12.0-15.el8_8.src.rpm">
          <filename>tigervnc-server-1.12.0-15.el8_8.s390x.rpm</filename>
          <sum type="sha256">0dce657d14e83051505b0976ec42540bd0b5de8287eac1305e27972419d617b8</sum>
        </package>
        <package name="tigervnc-server-module" version="1.12.0" release="15.el8_8" epoch="0" arch="s390x" src="tigervnc-1.12.0-15.el8_8.src.rpm">
          <filename>tigervnc-server-module-1.12.0-15.el8_8.s390x.rpm</filename>
          <sum type="sha256">4a5ad828a1d357868e9bdfcd39479c3c585251f12c713f1e6df06c05ed9ac0eb</sum>
        </package>
        <package name="tigervnc-selinux" version="1.12.0" release="15.el8_8" epoch="0" arch="noarch" src="tigervnc-1.12.0-15.el8_8.src.rpm">
          <filename>tigervnc-selinux-1.12.0-15.el8_8.noarch.rpm</filename>
          <sum type="sha256">aa3122e1a2fa65bd6e5d829d4172c41da997b7328836a637ac226fb46991b1b7</sum>
        </package>
        <package name="tigervnc" version="1.12.0" release="15.el8_8" epoch="0" arch="s390x" src="tigervnc-1.12.0-15.el8_8.src.rpm">
          <filename>tigervnc-1.12.0-15.el8_8.s390x.rpm</filename>
          <sum type="sha256">b51ef44eb4fd07c286dc42eb37c447698619310e336bd3851deb0592f616f0dd</sum>
        </package>
        <package name="tigervnc-icons" version="1.12.0" release="15.el8_8" epoch="0" arch="noarch" src="tigervnc-1.12.0-15.el8_8.src.rpm">
          <filename>tigervnc-icons-1.12.0-15.el8_8.noarch.rpm</filename>
          <sum type="sha256">ba11bb2a682f93ffd34b0ff8f63d0105286630bc5759789bd88f3dd049746852</sum>
        </package>
        <package name="tigervnc-license" version="1.12.0" release="15.el8_8" epoch="0" arch="noarch" src="tigervnc-1.12.0-15.el8_8.src.rpm">
          <filename>tigervnc-license-1.12.0-15.el8_8.noarch.rpm</filename>
          <sum type="sha256">e7da2965e266ccae24554e7d87d4f8307f9b7db4be5c3cb381b72a8a48325b78</sum>
        </package>
        <package name="tigervnc-server-minimal" version="1.12.0" release="15.el8_8" epoch="0" arch="s390x" src="tigervnc-1.12.0-15.el8_8.src.rpm">
          <filename>tigervnc-server-minimal-1.12.0-15.el8_8.s390x.rpm</filename>
          <sum type="sha256">eaeb2bb5830f61d79cf1a2fb11b16c28d10a9a7bb1cf58f396d19dc4af928564</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2834</id>
    <title>Important: webkit2gtk3 security and bug fix update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:01:00"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security and bug fix update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42826)
* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23517)
* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23518)
* webkitgtk: buffer overflow issue was addressed with improved memory handling (CVE-2022-32886)
* webkitgtk: out-of-bounds write issue was addressed with improved bounds checking (CVE-2022-32888)
* webkitgtk: correctness issue in the JIT was addressed with improved checks (CVE-2022-32923)
* webkitgtk: issue was addressed with improved UI handling (CVE-2022-42799)
* webkitgtk: type confusion issue leading to arbitrary code execution (CVE-2022-42823)
* webkitgtk: sensitive information disclosure issue (CVE-2022-42824)
* webkitgtk: memory disclosure issue was addressed with improved memory handling (CVE-2022-42852)
* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-42863)
* webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42867)
* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46691)
* webkitgtk: Same Origin Policy bypass issue (CVE-2022-46692)
* webkitgtk: logic issue leading to user information disclosure (CVE-2022-46698)
* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46699)
* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46700)
* webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild() (CVE-2023-25358)
* webkitgtk: heap-use-after-free in WebCore::RenderLayer::renderer() (CVE-2023-25360)
* webkitgtk: heap-use-after-free in WebCore::RenderLayer::setNextSibling() (CVE-2023-25361)
* webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps() (CVE-2023-25362)
* webkitgtk: heap-use-after-free in WebCore::RenderLayer::updateDescendantDependentFlags() (CVE-2023-25363)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2834" id="RHSA-2023:2834" type="rhsa" title="RHSA-2023:2834"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32886" id="CVE-2022-32886" type="cve" title="CVE-2022-32886"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32888" id="CVE-2022-32888" type="cve" title="CVE-2022-32888"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32923" id="CVE-2022-32923" type="cve" title="CVE-2022-32923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42799" id="CVE-2022-42799" type="cve" title="CVE-2022-42799"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42823" id="CVE-2022-42823" type="cve" title="CVE-2022-42823"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42824" id="CVE-2022-42824" type="cve" title="CVE-2022-42824"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42826" id="CVE-2022-42826" type="cve" title="CVE-2022-42826"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42852" id="CVE-2022-42852" type="cve" title="CVE-2022-42852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42863" id="CVE-2022-42863" type="cve" title="CVE-2022-42863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42867" id="CVE-2022-42867" type="cve" title="CVE-2022-42867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46691" id="CVE-2022-46691" type="cve" title="CVE-2022-46691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46692" id="CVE-2022-46692" type="cve" title="CVE-2022-46692"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46698" id="CVE-2022-46698" type="cve" title="CVE-2022-46698"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46699" id="CVE-2022-46699" type="cve" title="CVE-2022-46699"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46700" id="CVE-2022-46700" type="cve" title="CVE-2022-46700"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23517" id="CVE-2023-23517" type="cve" title="CVE-2023-23517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23518" id="CVE-2023-23518" type="cve" title="CVE-2023-23518"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25358" id="CVE-2023-25358" type="cve" title="CVE-2023-25358"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25360" id="CVE-2023-25360" type="cve" title="CVE-2023-25360"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25361" id="CVE-2023-25361" type="cve" title="CVE-2023-25361"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25362" id="CVE-2023-25362" type="cve" title="CVE-2023-25362"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25363" id="CVE-2023-25363" type="cve" title="CVE-2023-25363"/>
      <reference href="https://bugzilla.redhat.com/2128643" id="2128643" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140501" id="2140501" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140502" id="2140502" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140503" id="2140503" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140504" id="2140504" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140505" id="2140505" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2156986" id="2156986" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2156987" id="2156987" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2156989" id="2156989" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2156990" id="2156990" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2156991" id="2156991" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2156992" id="2156992" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2156993" id="2156993" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2156994" id="2156994" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2167715" id="2167715" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2167716" id="2167716" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2167717" id="2167717" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2175099" id="2175099" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2175101" id="2175101" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2175103" id="2175103" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2175105" id="2175105" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2175107" id="2175107" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2834.html" id="ALSA-2023:2834" type="self" title="ALSA-2023:2834"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="webkit2gtk3-devel" version="2.38.5" release="1.el8" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el8.src.rpm">
          <filename>webkit2gtk3-devel-2.38.5-1.el8.s390x.rpm</filename>
          <sum type="sha256">10382884cdf3a3e90ae8067b23da5c09efac732a5d0c354ebb345e05d46b0387</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.38.5" release="1.el8" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el8.src.rpm">
          <filename>webkit2gtk3-jsc-2.38.5-1.el8.s390x.rpm</filename>
          <sum type="sha256">7fed8f029e2d7daddacfa2ee30826dfff2690a0a327b5ce75d5d42f6bcbd369a</sum>
        </package>
        <package name="webkit2gtk3" version="2.38.5" release="1.el8" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el8.src.rpm">
          <filename>webkit2gtk3-2.38.5-1.el8.s390x.rpm</filename>
          <sum type="sha256">f0451f487bd6789391b6cf970acdace17a3814c87fc68ba3fca2130c33ca9d56</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.38.5" release="1.el8" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el8.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.38.5-1.el8.s390x.rpm</filename>
          <sum type="sha256">f15472e8ee50eb03b6c9d9cff16ad61bc8231a1ce52dd10bf0bcd84eafac5094</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2851</id>
    <title>Moderate: freerdp security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:01:00"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

* freerdp: clients using `/parallel` command line switch might read uninitialized data (CVE-2022-39282)
* freerdp: clients using the `/video` command line switch might read uninitialized data (CVE-2022-39283)
* freerdp: out of bounds read in zgfx decoder (CVE-2022-39316)
* freerdp: undefined behaviour in zgfx decoder (CVE-2022-39317)
* freerdp: division by zero in urbdrc channel (CVE-2022-39318)
* freerdp: missing length validation in urbdrc channel (CVE-2022-39319)
* freerdp: heap buffer overflow in urbdrc channel (CVE-2022-39320)
* freerdp: missing path sanitation with `drive` channel (CVE-2022-39347)
* freerdp: missing input length validation in `drive` channel (CVE-2022-41877)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2851" id="RHSA-2023:2851" type="rhsa" title="RHSA-2023:2851"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39282" id="CVE-2022-39282" type="cve" title="CVE-2022-39282"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39283" id="CVE-2022-39283" type="cve" title="CVE-2022-39283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39316" id="CVE-2022-39316" type="cve" title="CVE-2022-39316"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39317" id="CVE-2022-39317" type="cve" title="CVE-2022-39317"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39318" id="CVE-2022-39318" type="cve" title="CVE-2022-39318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39319" id="CVE-2022-39319" type="cve" title="CVE-2022-39319"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39320" id="CVE-2022-39320" type="cve" title="CVE-2022-39320"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39347" id="CVE-2022-39347" type="cve" title="CVE-2022-39347"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41877" id="CVE-2022-41877" type="cve" title="CVE-2022-41877"/>
      <reference href="https://bugzilla.redhat.com/2134713" id="2134713" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134717" id="2134717" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143642" id="2143642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143643" id="2143643" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143644" id="2143644" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143645" id="2143645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143646" id="2143646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143647" id="2143647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143648" id="2143648" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2851.html" id="ALSA-2023:2851" type="self" title="ALSA-2023:2851"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="freerdp-libs" version="2.2.0" release="10.el8" epoch="2" arch="s390x" src="freerdp-2.2.0-10.el8.src.rpm">
          <filename>freerdp-libs-2.2.0-10.el8.s390x.rpm</filename>
          <sum type="sha256">41d8887c2da2a76130b396eb0b9d490e2b86645dddfc3ce485fa38ccad3633d4</sum>
        </package>
        <package name="libwinpr-devel" version="2.2.0" release="10.el8" epoch="2" arch="s390x" src="freerdp-2.2.0-10.el8.src.rpm">
          <filename>libwinpr-devel-2.2.0-10.el8.s390x.rpm</filename>
          <sum type="sha256">5dde30bea0437330012e613d9a321eafcb524248a731edd20a6b8460e41eb087</sum>
        </package>
        <package name="freerdp" version="2.2.0" release="10.el8" epoch="2" arch="s390x" src="freerdp-2.2.0-10.el8.src.rpm">
          <filename>freerdp-2.2.0-10.el8.s390x.rpm</filename>
          <sum type="sha256">7b5b7cd5fa5d6c64ffc5e6991456b02e61521ff10574c4c1cfb01e9e65e9b4f8</sum>
        </package>
        <package name="libwinpr" version="2.2.0" release="10.el8" epoch="2" arch="s390x" src="freerdp-2.2.0-10.el8.src.rpm">
          <filename>libwinpr-2.2.0-10.el8.s390x.rpm</filename>
          <sum type="sha256">962c281b600f481a160c51361e9fd54ecb8c5f38c4d8ce56cac98f7b15908f80</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2859</id>
    <title>Moderate: git security and bug fix update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:19:51"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>git security and bug fix update</summary>
    <description>Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.

Security Fix(es):

* git: On multi-user machines Git users might find themselves unexpectedly in a Git worktree (CVE-2022-24765)
* git: Bypass of safe.directory protections (CVE-2022-29187)
* git: exposure of sensitive information to a malicious actor (CVE-2022-39253)
* git: git shell function that splits command arguments can lead to arbitrary heap writes. (CVE-2022-39260)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2859" id="RHSA-2023:2859" type="rhsa" title="RHSA-2023:2859"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24765" id="CVE-2022-24765" type="cve" title="CVE-2022-24765"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29187" id="CVE-2022-29187" type="cve" title="CVE-2022-29187"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39253" id="CVE-2022-39253" type="cve" title="CVE-2022-39253"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39260" id="CVE-2022-39260" type="cve" title="CVE-2022-39260"/>
      <reference href="https://bugzilla.redhat.com/2073414" id="2073414" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107439" id="2107439" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2137422" id="2137422" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2137423" id="2137423" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2859.html" id="ALSA-2023:2859" type="self" title="ALSA-2023:2859"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="git-all" version="2.39.1" release="1.el8" epoch="0" arch="noarch" src="git-2.39.1-1.el8.src.rpm">
          <filename>git-all-2.39.1-1.el8.noarch.rpm</filename>
          <sum type="sha256">0566d844b70187e67b84ed07d08378a5637759a9c34839f0848a3422cac23f6f</sum>
        </package>
        <package name="git-credential-libsecret" version="2.39.1" release="1.el8" epoch="0" arch="s390x" src="git-2.39.1-1.el8.src.rpm">
          <filename>git-credential-libsecret-2.39.1-1.el8.s390x.rpm</filename>
          <sum type="sha256">3b6dbb5c18941c690dc3fad7b660d8dda0c0a2ae2eb30cb12e23d5caf99541b5</sum>
        </package>
        <package name="git" version="2.39.1" release="1.el8" epoch="0" arch="s390x" src="git-2.39.1-1.el8.src.rpm">
          <filename>git-2.39.1-1.el8.s390x.rpm</filename>
          <sum type="sha256">5bea0fbec7b1d1f99abfa8e865af40fed625eb20ef693fc11213553a4651f5d2</sum>
        </package>
        <package name="git-gui" version="2.39.1" release="1.el8" epoch="0" arch="noarch" src="git-2.39.1-1.el8.src.rpm">
          <filename>git-gui-2.39.1-1.el8.noarch.rpm</filename>
          <sum type="sha256">69c8e0b8e4c26db67c90c3884fbfc39e290198b6511cf642b00427dbd9e72e84</sum>
        </package>
        <package name="perl-Git-SVN" version="2.39.1" release="1.el8" epoch="0" arch="noarch" src="git-2.39.1-1.el8.src.rpm">
          <filename>perl-Git-SVN-2.39.1-1.el8.noarch.rpm</filename>
          <sum type="sha256">6b3177aa4fca6b13cb78855a4d958ff6df911100c2421689e7fc602e5fc2c821</sum>
        </package>
        <package name="git-svn" version="2.39.1" release="1.el8" epoch="0" arch="noarch" src="git-2.39.1-1.el8.src.rpm">
          <filename>git-svn-2.39.1-1.el8.noarch.rpm</filename>
          <sum type="sha256">76dd50cf343aaf3b52c26c5da4e1176b46976c6b506458d88cf13f386191a293</sum>
        </package>
        <package name="gitk" version="2.39.1" release="1.el8" epoch="0" arch="noarch" src="git-2.39.1-1.el8.src.rpm">
          <filename>gitk-2.39.1-1.el8.noarch.rpm</filename>
          <sum type="sha256">772fdaec4cc20b1a4c71fbeacb932182b2294c60a21dda9657675f38c3c7a3cd</sum>
        </package>
        <package name="git-core" version="2.39.1" release="1.el8" epoch="0" arch="s390x" src="git-2.39.1-1.el8.src.rpm">
          <filename>git-core-2.39.1-1.el8.s390x.rpm</filename>
          <sum type="sha256">8e111595ca7efd0fcf24cab52552d625ebb38a20f4958ba50f44c1876cb9d520</sum>
        </package>
        <package name="git-daemon" version="2.39.1" release="1.el8" epoch="0" arch="s390x" src="git-2.39.1-1.el8.src.rpm">
          <filename>git-daemon-2.39.1-1.el8.s390x.rpm</filename>
          <sum type="sha256">9cef5c79bedcfe9fb837d9993728d7f0d7f5c90f3f61aba4d57b2ba582b9226b</sum>
        </package>
        <package name="perl-Git" version="2.39.1" release="1.el8" epoch="0" arch="noarch" src="git-2.39.1-1.el8.src.rpm">
          <filename>perl-Git-2.39.1-1.el8.noarch.rpm</filename>
          <sum type="sha256">a85464031c331bccff03880eb1d19c0bcad79b56dc6ede2cd32efd5f15ac727f</sum>
        </package>
        <package name="git-email" version="2.39.1" release="1.el8" epoch="0" arch="noarch" src="git-2.39.1-1.el8.src.rpm">
          <filename>git-email-2.39.1-1.el8.noarch.rpm</filename>
          <sum type="sha256">b169344fd503a8a9ca084959b273c8046e7a36cd74362c183da8373371913a9a</sum>
        </package>
        <package name="git-instaweb" version="2.39.1" release="1.el8" epoch="0" arch="noarch" src="git-2.39.1-1.el8.src.rpm">
          <filename>git-instaweb-2.39.1-1.el8.noarch.rpm</filename>
          <sum type="sha256">b874ac4248abcbb071d5b7ad45a6c7851b8d9eaa9523564ecc3a589a3e7b2f1d</sum>
        </package>
        <package name="git-subtree" version="2.39.1" release="1.el8" epoch="0" arch="s390x" src="git-2.39.1-1.el8.src.rpm">
          <filename>git-subtree-2.39.1-1.el8.s390x.rpm</filename>
          <sum type="sha256">e761720f1567f3c354becc3fcc565ae47dd7040387881a4db0795920e8d73e0f</sum>
        </package>
        <package name="git-core-doc" version="2.39.1" release="1.el8" epoch="0" arch="noarch" src="git-2.39.1-1.el8.src.rpm">
          <filename>git-core-doc-2.39.1-1.el8.noarch.rpm</filename>
          <sum type="sha256">ea61ed98b2b091f0e817b66c4ad1e1a9a4a0389dc9a5872cb41ce1b9fd7b20ed</sum>
        </package>
        <package name="gitweb" version="2.39.1" release="1.el8" epoch="0" arch="noarch" src="git-2.39.1-1.el8.src.rpm">
          <filename>gitweb-2.39.1-1.el8.noarch.rpm</filename>
          <sum type="sha256">eeecd9c121a954a4b53a963e8212d6e60b24370905af1f7bfe149301af1210ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2860</id>
    <title>Moderate: python27:2.7 security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:06:34"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python27:2.7 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL.

Security Fix(es):

* Python: CPU denial of service via inefficient IDNA decoder (CVE-2022-45061)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2860" id="RHSA-2023:2860" type="rhsa" title="RHSA-2023:2860"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45061" id="CVE-2022-45061" type="cve" title="CVE-2022-45061"/>
      <reference href="https://bugzilla.redhat.com/2144072" id="2144072" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2860.html" id="ALSA-2023:2860" type="self" title="ALSA-2023:2860"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="python27" stream="2.7" version="8060020220421123549" context="182f7c73" arch="s390x"/>
        <package name="python2-devel" version="2.7.18" release="12.module_el8.8.0+3480+108b5990.alma" epoch="0" arch="s390x" src="python2-2.7.18-12.module_el8.8.0+3480+108b5990.alma.src.rpm">
          <filename>python2-devel-2.7.18-12.module_el8.8.0+3480+108b5990.alma.s390x.rpm</filename>
          <sum type="sha256">0005a10fd1b0800c59aa860f3e28f3af205e0ad9a36d439e9c036e697ba0a5af</sum>
        </package>
        <package name="python2-libs" version="2.7.18" release="12.module_el8.8.0+3480+108b5990.alma" epoch="0" arch="s390x" src="python2-2.7.18-12.module_el8.8.0+3480+108b5990.alma.src.rpm">
          <filename>python2-libs-2.7.18-12.module_el8.8.0+3480+108b5990.alma.s390x.rpm</filename>
          <sum type="sha256">04a826855c7b493ad5988fd563baa73f4f8d3164dd438944fc680aed07e2dc9d</sum>
        </package>
        <package name="python2-Cython" version="0.28.1" release="7.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="Cython-0.28.1-7.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-Cython-0.28.1-7.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">33e5c6fee3819774cc5605ac9884d333321fd0e18a2e6ad15bd4cc626854bf92</sum>
        </package>
        <package name="python2-lxml" version="4.2.3" release="6.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-lxml-4.2.3-6.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-lxml-4.2.3-6.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">34d05166229eef26e630797e84fd32f0aa76104895186ba2de4852d1931449c2</sum>
        </package>
        <package name="python2-tkinter" version="2.7.18" release="12.module_el8.8.0+3480+108b5990.alma" epoch="0" arch="s390x" src="python2-2.7.18-12.module_el8.8.0+3480+108b5990.alma.src.rpm">
          <filename>python2-tkinter-2.7.18-12.module_el8.8.0+3480+108b5990.alma.s390x.rpm</filename>
          <sum type="sha256">38dca7792ed0526354adae5a8262472f6a9a40f3250fea5c3ddee92ee424d385</sum>
        </package>
        <package name="python2" version="2.7.18" release="12.module_el8.8.0+3480+108b5990.alma" epoch="0" arch="s390x" src="python2-2.7.18-12.module_el8.8.0+3480+108b5990.alma.src.rpm">
          <filename>python2-2.7.18-12.module_el8.8.0+3480+108b5990.alma.s390x.rpm</filename>
          <sum type="sha256">3e07320e88b8f31ac9d280a691218170036d6d100412b20d573e9ea033b30ca5</sum>
        </package>
        <package name="python2-markupsafe" version="0.23" release="19.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-markupsafe-0.23-19.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-markupsafe-0.23-19.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">4df63f354ef866a6834b7ae6bbf00de4e90db40a23c0175d0a8e091f46c3831b</sum>
        </package>
        <package name="python2-numpy-f2py" version="1.14.2" release="16.module_el8.6.0+3162+01a09e5a" epoch="1" arch="s390x" src="numpy-1.14.2-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-numpy-f2py-1.14.2-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">5122909fad88771bdc7f253154548be55681207a76858df98d83aee4c019fb99</sum>
        </package>
        <package name="python-psycopg2-doc" version="2.7.5" release="7.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-7.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python-psycopg2-doc-2.7.5-7.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">5244c8d18dfd502b39b8ef31626e36d7fad138955a3e659b6a0aa1f41c37e45b</sum>
        </package>
        <package name="python2-psycopg2-tests" version="2.7.5" release="7.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-7.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-psycopg2-tests-2.7.5-7.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">5531ddd2cf70dd5de39bd273d89c0cbb56da7a0b546589c5cd1a4f68d21546d2</sum>
        </package>
        <package name="python2-test" version="2.7.18" release="12.module_el8.8.0+3480+108b5990.alma" epoch="0" arch="s390x" src="python2-2.7.18-12.module_el8.8.0+3480+108b5990.alma.src.rpm">
          <filename>python2-test-2.7.18-12.module_el8.8.0+3480+108b5990.alma.s390x.rpm</filename>
          <sum type="sha256">5ebf0becfe1c08caa7e9b3646da6bf12f606216b247d97322d54a962d6f30140</sum>
        </package>
        <package name="python2-tools" version="2.7.18" release="12.module_el8.8.0+3480+108b5990.alma" epoch="0" arch="s390x" src="python2-2.7.18-12.module_el8.8.0+3480+108b5990.alma.src.rpm">
          <filename>python2-tools-2.7.18-12.module_el8.8.0+3480+108b5990.alma.s390x.rpm</filename>
          <sum type="sha256">5f03dfb1567f4add0a21a7707f634f33778db921caf8414479e18db3953c88ae</sum>
        </package>
        <package name="python2-debug" version="2.7.18" release="12.module_el8.8.0+3480+108b5990.alma" epoch="0" arch="s390x" src="python2-2.7.18-12.module_el8.8.0+3480+108b5990.alma.src.rpm">
          <filename>python2-debug-2.7.18-12.module_el8.8.0+3480+108b5990.alma.s390x.rpm</filename>
          <sum type="sha256">60dc5e6ddae3752688f8eb9d63d7571d7838969c2e01bacd7730ad8fedfd4af9</sum>
        </package>
        <package name="python2-pymongo" version="3.7.0" release="1.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">6b7bcb16061d074203f3da5d62159766e919e5fc57ef7c9df634c2d56dbe44e1</sum>
        </package>
        <package name="python2-scipy" version="1.0.0" release="21.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="scipy-1.0.0-21.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-scipy-1.0.0-21.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">81de1440a78869d680e428d1a0bca31199b203067f1d24c27c6676507af7c68f</sum>
        </package>
        <package name="python2-psycopg2-debug" version="2.7.5" release="7.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-7.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-psycopg2-debug-2.7.5-7.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">83fda0ce9cab16410651f67b969d7a8bd6bdeeb57844f48416c137e5a2490135</sum>
        </package>
        <package name="python2-numpy" version="1.14.2" release="16.module_el8.6.0+3162+01a09e5a" epoch="1" arch="s390x" src="numpy-1.14.2-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-numpy-1.14.2-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">852f2d82ccc6de54efa8bf6c6dcf9ede79257d3aa5144c12fc290d43e20b4ab1</sum>
        </package>
        <package name="python2-sqlalchemy" version="1.3.2" release="2.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-sqlalchemy-1.3.2-2.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-sqlalchemy-1.3.2-2.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">854347b4f4c344b9ee4f49435eb2f75b9be1a134ed76388c16d4affae402f809</sum>
        </package>
        <package name="python2-backports" version="1.0" release="16.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-backports-1.0-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-backports-1.0-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">8ce54e96fff1eff1c45e38503fc221bb6e8866180e9e558fe581fa8cc4059796</sum>
        </package>
        <package name="python2-pymongo-gridfs" version="3.7.0" release="1.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-pymongo-gridfs-3.7.0-1.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">b28d3022855edc1cc4a549f1d3ce67a23d2da958f852bbf7821b325e67895d64</sum>
        </package>
        <package name="python2-bson" version="3.7.0" release="1.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-bson-3.7.0-1.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">de74cd7b4f4870f2bac803f8a8aeca7062cc342d4bf9533f9939bf03f306ebfb</sum>
        </package>
        <package name="python2-psycopg2" version="2.7.5" release="7.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-7.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-psycopg2-2.7.5-7.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">dfef98c52b1b501aac8ea1b769a1db7cca4665eb671e41f824cd894346493e6b</sum>
        </package>
        <package name="python2-coverage" version="4.5.1" release="4.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-coverage-4.5.1-4.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-coverage-4.5.1-4.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">e24b9859ffcdb0d4bd5c3bc2ad9395b0aa55175b96fd08d2a7ae4b026d2ee0ed</sum>
        </package>
        <package name="python2-pyyaml" version="3.12" release="16.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="PyYAML-3.12-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-pyyaml-3.12-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">fd83c9d2f395a877fc6cc657333bc13305e5d5ebe62c39ec0e2040e8e36542e7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2863</id>
    <title>Moderate: ctags security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:03"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ctags security update</summary>
    <description>Ctags is a C programming language indexing and cross-reference tool.

Security Fix(es):

* ctags: arbitrary command execution via a tag file with a crafted filename (CVE-2022-4515)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2863" id="RHSA-2023:2863" type="rhsa" title="RHSA-2023:2863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4515" id="CVE-2022-4515" type="cve" title="CVE-2022-4515"/>
      <reference href="https://bugzilla.redhat.com/2153519" id="2153519" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2863.html" id="ALSA-2023:2863" type="self" title="ALSA-2023:2863"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="ctags" version="5.8" release="23.el8" epoch="0" arch="s390x" src="ctags-5.8-23.el8.src.rpm">
          <filename>ctags-5.8-23.el8.s390x.rpm</filename>
          <sum type="sha256">526ba7bc9e23a012d513647149b43afce1ccb899c98594bc24197ded30b6ef4c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2866</id>
    <title>Moderate: git-lfs security and bug fix update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:03"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>git-lfs security and bug fix update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.

Security Fix(es):

* golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)
* golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)
* golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2866" id="RHSA-2023:2866" type="rhsa" title="RHSA-2023:2866"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2880" id="CVE-2022-2880" type="cve" title="CVE-2022-2880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41715" id="CVE-2022-41715" type="cve" title="CVE-2022-41715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41717" id="CVE-2022-41717" type="cve" title="CVE-2022-41717"/>
      <reference href="https://bugzilla.redhat.com/2132868" id="2132868" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2132872" id="2132872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2161274" id="2161274" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2866.html" id="ALSA-2023:2866" type="self" title="ALSA-2023:2866"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="git-lfs" version="3.2.0" release="2.el8" epoch="0" arch="s390x" src="git-lfs-3.2.0-2.el8.src.rpm">
          <filename>git-lfs-3.2.0-2.el8.s390x.rpm</filename>
          <sum type="sha256">97cdb66170eff8ef887a9ff71d2b3fd70a1e522969aab01c7a588a8469881d11</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2867</id>
    <title>Moderate: postgresql-jdbc security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:09:09"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql-jdbc security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database.

Security Fix(es):

* postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions (CVE-2022-41946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2867" id="RHSA-2023:2867" type="rhsa" title="RHSA-2023:2867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41946" id="CVE-2022-41946" type="cve" title="CVE-2022-41946"/>
      <reference href="https://bugzilla.redhat.com/2153399" id="2153399" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2867.html" id="ALSA-2023:2867" type="self" title="ALSA-2023:2867"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="postgresql-jdbc" version="42.2.14" release="2.el8" epoch="0" arch="noarch" src="postgresql-jdbc-42.2.14-2.el8.src.rpm">
          <filename>postgresql-jdbc-42.2.14-2.el8.noarch.rpm</filename>
          <sum type="sha256">5eabcca11f902a157461a9bb173f659ff86a8c48f07e738de92c1eb41af0bc96</sum>
        </package>
        <package name="postgresql-jdbc-javadoc" version="42.2.14" release="2.el8" epoch="0" arch="noarch" src="postgresql-jdbc-42.2.14-2.el8.src.rpm">
          <filename>postgresql-jdbc-javadoc-42.2.14-2.el8.noarch.rpm</filename>
          <sum type="sha256">620a1e6ee7d63133d2f6233f866f1acd3d86a17e8060fc19edf3b9a02f910641</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2870</id>
    <title>Moderate: freeradius:3.0 security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:03:49"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freeradius:3.0 security update</summary>
    <description>FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network.

Security Fix(es):

* freeradius: Information leakage in EAP-PWD (CVE-2022-41859)
* freeradius: Crash on unknown option in EAP-SIM (CVE-2022-41860)
* freeradius: Crash on invalid abinary data (CVE-2022-41861)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2870" id="RHSA-2023:2870" type="rhsa" title="RHSA-2023:2870"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41859" id="CVE-2022-41859" type="cve" title="CVE-2022-41859"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41860" id="CVE-2022-41860" type="cve" title="CVE-2022-41860"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41861" id="CVE-2022-41861" type="cve" title="CVE-2022-41861"/>
      <reference href="https://bugzilla.redhat.com/2078483" id="2078483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2078485" id="2078485" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2078487" id="2078487" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2870.html" id="ALSA-2023:2870" type="self" title="ALSA-2023:2870"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="freeradius" stream="3.0" version="8080020230403133937" context="fbe42456" arch="s390x"/>
        <package name="freeradius-unixODBC" version="3.0.20" release="14.module_el8.8.0+3469+c05aea40" epoch="0" arch="s390x" src="freeradius-3.0.20-14.module_el8.8.0+3469+c05aea40.src.rpm">
          <filename>freeradius-unixODBC-3.0.20-14.module_el8.8.0+3469+c05aea40.s390x.rpm</filename>
          <sum type="sha256">2acc6aa448c7d39d0eb22894aa177ff5580c37696be6530fd88097857ab32e4d</sum>
        </package>
        <package name="freeradius-perl" version="3.0.20" release="14.module_el8.8.0+3469+c05aea40" epoch="0" arch="s390x" src="freeradius-3.0.20-14.module_el8.8.0+3469+c05aea40.src.rpm">
          <filename>freeradius-perl-3.0.20-14.module_el8.8.0+3469+c05aea40.s390x.rpm</filename>
          <sum type="sha256">362d415eb24195b90f152b49aeb2bd49fd9453cf8aaa40bad8ce43773a345e0e</sum>
        </package>
        <package name="freeradius-utils" version="3.0.20" release="14.module_el8.8.0+3469+c05aea40" epoch="0" arch="s390x" src="freeradius-3.0.20-14.module_el8.8.0+3469+c05aea40.src.rpm">
          <filename>freeradius-utils-3.0.20-14.module_el8.8.0+3469+c05aea40.s390x.rpm</filename>
          <sum type="sha256">3ed2ef1784dd15d57a140698091ec7e313177b31a6c3c78320bf4de1b20080b1</sum>
        </package>
        <package name="freeradius" version="3.0.20" release="14.module_el8.8.0+3469+c05aea40" epoch="0" arch="s390x" src="freeradius-3.0.20-14.module_el8.8.0+3469+c05aea40.src.rpm">
          <filename>freeradius-3.0.20-14.module_el8.8.0+3469+c05aea40.s390x.rpm</filename>
          <sum type="sha256">46e68c6a1a44e5eaef282697e10c60aec2280b92e996263b0d3389762aa29452</sum>
        </package>
        <package name="freeradius-doc" version="3.0.20" release="14.module_el8.8.0+3469+c05aea40" epoch="0" arch="s390x" src="freeradius-3.0.20-14.module_el8.8.0+3469+c05aea40.src.rpm">
          <filename>freeradius-doc-3.0.20-14.module_el8.8.0+3469+c05aea40.s390x.rpm</filename>
          <sum type="sha256">4711dcadc7eb3d522690f051ebeca809325ad2607498f2bc204218f237f6ac01</sum>
        </package>
        <package name="freeradius-mysql" version="3.0.20" release="14.module_el8.8.0+3469+c05aea40" epoch="0" arch="s390x" src="freeradius-3.0.20-14.module_el8.8.0+3469+c05aea40.src.rpm">
          <filename>freeradius-mysql-3.0.20-14.module_el8.8.0+3469+c05aea40.s390x.rpm</filename>
          <sum type="sha256">4eec54fe329f10a2f63648bd39c1edf57dc6eee310c70ceebd379fcd7d52d4d9</sum>
        </package>
        <package name="freeradius-devel" version="3.0.20" release="14.module_el8.8.0+3469+c05aea40" epoch="0" arch="s390x" src="freeradius-3.0.20-14.module_el8.8.0+3469+c05aea40.src.rpm">
          <filename>freeradius-devel-3.0.20-14.module_el8.8.0+3469+c05aea40.s390x.rpm</filename>
          <sum type="sha256">53eeeb3af41c927a375e41526dc653701c43dc9401a96f40f5af554444e62078</sum>
        </package>
        <package name="freeradius-rest" version="3.0.20" release="14.module_el8.8.0+3469+c05aea40" epoch="0" arch="s390x" src="freeradius-3.0.20-14.module_el8.8.0+3469+c05aea40.src.rpm">
          <filename>freeradius-rest-3.0.20-14.module_el8.8.0+3469+c05aea40.s390x.rpm</filename>
          <sum type="sha256">6a806ca57c0de533a973b0326c73f6f1343c93b457cde3c7a07bb2f3bb8c00f8</sum>
        </package>
        <package name="freeradius-krb5" version="3.0.20" release="14.module_el8.8.0+3469+c05aea40" epoch="0" arch="s390x" src="freeradius-3.0.20-14.module_el8.8.0+3469+c05aea40.src.rpm">
          <filename>freeradius-krb5-3.0.20-14.module_el8.8.0+3469+c05aea40.s390x.rpm</filename>
          <sum type="sha256">843638043f6fd424386b49c0f60c812b6f2dd27117876be67161f03664bce441</sum>
        </package>
        <package name="python3-freeradius" version="3.0.20" release="14.module_el8.8.0+3469+c05aea40" epoch="0" arch="s390x" src="freeradius-3.0.20-14.module_el8.8.0+3469+c05aea40.src.rpm">
          <filename>python3-freeradius-3.0.20-14.module_el8.8.0+3469+c05aea40.s390x.rpm</filename>
          <sum type="sha256">be2e151f5ad1b884e99b21d97f96c624953242b3ffc5af6b52d04795a80a0dc2</sum>
        </package>
        <package name="freeradius-ldap" version="3.0.20" release="14.module_el8.8.0+3469+c05aea40" epoch="0" arch="s390x" src="freeradius-3.0.20-14.module_el8.8.0+3469+c05aea40.src.rpm">
          <filename>freeradius-ldap-3.0.20-14.module_el8.8.0+3469+c05aea40.s390x.rpm</filename>
          <sum type="sha256">cd612b79de96371d3f90b3baecc3c5ac7656b7d3a7a7831144582b3b0c324db2</sum>
        </package>
        <package name="freeradius-postgresql" version="3.0.20" release="14.module_el8.8.0+3469+c05aea40" epoch="0" arch="s390x" src="freeradius-3.0.20-14.module_el8.8.0+3469+c05aea40.src.rpm">
          <filename>freeradius-postgresql-3.0.20-14.module_el8.8.0+3469+c05aea40.s390x.rpm</filename>
          <sum type="sha256">de20f3a899b82be638eb07fff70e5c9710805faefff9d057449f9aa3361bb0bd</sum>
        </package>
        <package name="freeradius-sqlite" version="3.0.20" release="14.module_el8.8.0+3469+c05aea40" epoch="0" arch="s390x" src="freeradius-3.0.20-14.module_el8.8.0+3469+c05aea40.src.rpm">
          <filename>freeradius-sqlite-3.0.20-14.module_el8.8.0+3469+c05aea40.s390x.rpm</filename>
          <sum type="sha256">e41d2cbf589def2ba9b26c771143f88e0db764ef17f81f0b7783c0999b4a4937</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2873</id>
    <title>Moderate: gcc-toolset-12-binutils security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:42"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gcc-toolset-12-binutils security update</summary>
    <description>The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities.

Security Fix(es):

* binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault (CVE-2022-4285)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2873" id="RHSA-2023:2873" type="rhsa" title="RHSA-2023:2873"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4285" id="CVE-2022-4285" type="cve" title="CVE-2022-4285"/>
      <reference href="https://bugzilla.redhat.com/2150768" id="2150768" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2873.html" id="ALSA-2023:2873" type="self" title="ALSA-2023:2873"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="gcc-toolset-12-binutils-devel" version="2.38" release="17.el8" epoch="0" arch="s390x" src="gcc-toolset-12-binutils-2.38-17.el8.src.rpm">
          <filename>gcc-toolset-12-binutils-devel-2.38-17.el8.s390x.rpm</filename>
          <sum type="sha256">12f3c14f31e465accbbbb9660df5bafb4c53c0c24ec2e4df1d92ac590c5121af</sum>
        </package>
        <package name="gcc-toolset-12-binutils-gold" version="2.38" release="17.el8" epoch="0" arch="s390x" src="gcc-toolset-12-binutils-2.38-17.el8.src.rpm">
          <filename>gcc-toolset-12-binutils-gold-2.38-17.el8.s390x.rpm</filename>
          <sum type="sha256">770c258eee8af0dc77efe8b01f12241d3ace3cfb07f1f4d2bfbb6df22c3d18d2</sum>
        </package>
        <package name="gcc-toolset-12-binutils" version="2.38" release="17.el8" epoch="0" arch="s390x" src="gcc-toolset-12-binutils-2.38-17.el8.src.rpm">
          <filename>gcc-toolset-12-binutils-2.38-17.el8.s390x.rpm</filename>
          <sum type="sha256">84afd2ce5034c24481c70b3082c49adc4f9b877ac7b2110c4d6a2dcb92fea1b6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2883</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:22"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (CVE-2022-3627)
* libtiff: integer overflow in function TIFFReadRGBATileExt of the file (CVE-2022-3970)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2883" id="RHSA-2023:2883" type="rhsa" title="RHSA-2023:2883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3627" id="CVE-2022-3627" type="cve" title="CVE-2022-3627"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3970" id="CVE-2022-3970" type="cve" title="CVE-2022-3970"/>
      <reference href="https://bugzilla.redhat.com/2142742" id="2142742" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2148918" id="2148918" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2883.html" id="ALSA-2023:2883" type="self" title="ALSA-2023:2883"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="libtiff-devel" version="4.0.9" release="27.el8" epoch="0" arch="s390x" src="libtiff-4.0.9-27.el8.src.rpm">
          <filename>libtiff-devel-4.0.9-27.el8.s390x.rpm</filename>
          <sum type="sha256">5dd2ee74b7befb5cffe2ab3d1e2b0faa96b06e32bdd6b46859e99cbd2ca02eed</sum>
        </package>
        <package name="libtiff" version="4.0.9" release="27.el8" epoch="0" arch="s390x" src="libtiff-4.0.9-27.el8.src.rpm">
          <filename>libtiff-4.0.9-27.el8.s390x.rpm</filename>
          <sum type="sha256">d558e49e408330831f3775f364d1875b7a5ddc5566d2a827725615fcc4c60dcd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2893</id>
    <title>Moderate: python-mako security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:05:32"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-mako security update</summary>
    <description>Mako is a template library written in Python. It provides a familiar, non-XML syntax which compiles into Python modules for maximum performance.

Security Fix(es):

* mako: REDoS in Lexer class (CVE-2022-40023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2893" id="RHSA-2023:2893" type="rhsa" title="RHSA-2023:2893"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40023" id="CVE-2022-40023" type="cve" title="CVE-2022-40023"/>
      <reference href="https://bugzilla.redhat.com/2128977" id="2128977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2893.html" id="ALSA-2023:2893" type="self" title="ALSA-2023:2893"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="python3-mako" version="1.0.6" release="14.el8" epoch="0" arch="noarch" src="python-mako-1.0.6-14.el8.src.rpm">
          <filename>python3-mako-1.0.6-14.el8.noarch.rpm</filename>
          <sum type="sha256">b99a8cba2c4a73bbb4ef740382614002779ead4d3a5dbb90b48ba7847b7e1a9c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2898</id>
    <title>Moderate: libtar security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:05"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtar security update</summary>
    <description>The libtar packages contain a C library for manipulating tar archives. The library supports both the strict POSIX tar format and many of the commonly used GNU extensions.

Security Fix(es):

* libtar: out-of-bounds read in gnu_longlink (CVE-2021-33643)
* libtar: out-of-bounds read in gnu_longname (CVE-2021-33644)
* libtar: memory leak found in th_read() function (CVE-2021-33645)
* libtar: memory leak found in th_read() function (CVE-2021-33646)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2898" id="RHSA-2023:2898" type="rhsa" title="RHSA-2023:2898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33643" id="CVE-2021-33643" type="cve" title="CVE-2021-33643"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33644" id="CVE-2021-33644" type="cve" title="CVE-2021-33644"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33645" id="CVE-2021-33645" type="cve" title="CVE-2021-33645"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33646" id="CVE-2021-33646" type="cve" title="CVE-2021-33646"/>
      <reference href="https://bugzilla.redhat.com/2121289" id="2121289" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2121292" id="2121292" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2121295" id="2121295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2121297" id="2121297" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2898.html" id="ALSA-2023:2898" type="self" title="ALSA-2023:2898"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="libtar" version="1.2.20" release="17.el8" epoch="0" arch="s390x" src="libtar-1.2.20-17.el8.src.rpm">
          <filename>libtar-1.2.20-17.el8.s390x.rpm</filename>
          <sum type="sha256">15397b92adf3c3dab01d9f60b1563ac292905e995c3f44d32e6e3699380660df</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2903</id>
    <title>Moderate: php:7.4 security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:09:01"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>php:7.4 security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

The following packages have been upgraded to a later upstream version: php (7.4.33).

Security Fix(es):

* XKCP: buffer overflow in the SHA-3 reference implementation (CVE-2022-37454)
* php: standard insecure cookie could be treated as a '__Host-' or '__Secure-' cookie by PHP applications (CVE-2022-31629)
* php: OOB read due to insufficient input validation in imageloadfont() (CVE-2022-31630)
* php: PDO::quote() may return unquoted string due to an integer overflow (CVE-2022-31631)
* php: phar: infinite loop when decompressing quine gzip file (CVE-2022-31628)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2903" id="RHSA-2023:2903" type="rhsa" title="RHSA-2023:2903"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31628" id="CVE-2022-31628" type="cve" title="CVE-2022-31628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31629" id="CVE-2022-31629" type="cve" title="CVE-2022-31629"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31630" id="CVE-2022-31630" type="cve" title="CVE-2022-31630"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31631" id="CVE-2022-31631" type="cve" title="CVE-2022-31631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-37454" id="CVE-2022-37454" type="cve" title="CVE-2022-37454"/>
      <reference href="https://bugzilla.redhat.com/2133687" id="2133687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133688" id="2133688" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2139280" id="2139280" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140200" id="2140200" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2158791" id="2158791" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2903.html" id="ALSA-2023:2903" type="self" title="ALSA-2023:2903"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="php" stream="7.4" version="8060020220824162156" context="4c984ee0" arch="s390x"/>
        <package name="php-devel" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-devel-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">03945aa7098b70343978093d2055beb001887a014085a75e9c9f83e68b91b143</sum>
        </package>
        <package name="php-pear" version="1.10.13" release="1.module_el8.6.0+3268+b150a051" epoch="1" arch="noarch" src="php-pear-1.10.13-1.module_el8.6.0+3268+b150a051.src.rpm">
          <filename>php-pear-1.10.13-1.module_el8.6.0+3268+b150a051.noarch.rpm</filename>
          <sum type="sha256">0cce4d216b43c4b38de6e0f49d7e0705d81c35d448903204b93b913865a2007c</sum>
        </package>
        <package name="php-gd" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-gd-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">165acd7faaf728f5708d55230277bfdf8300077cf9ef706e7b0bcc063fbe030c</sum>
        </package>
        <package name="php-pecl-apcu-devel" version="5.1.18" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.18-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pecl-apcu-devel-5.1.18-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">2bd2e6d5e9f3b9a675fe03108c8444fb82eac045a2c0fe6c2d1f24a709c39d33</sum>
        </package>
        <package name="php-intl" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-intl-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">2c06da3dfdbb7e960a8eee0d893e1ff909f4f3db038ef87cf4f4b3ea17d5fd80</sum>
        </package>
        <package name="php-opcache" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-opcache-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">2e8611ec543a087a5a78f64501305f54f5a89f6164bd3ae293a409c45c9b6425</sum>
        </package>
        <package name="php-odbc" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-odbc-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">3e8ee2c17641a0d4e628f8cd3f282cbbff514f938396b4afb0560a86bef8710b</sum>
        </package>
        <package name="php-dbg" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-dbg-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">3f4d276759b8db81f94709639c04f945fb1dd107368fb30287dc8b1b70ebadc9</sum>
        </package>
        <package name="php-embedded" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-embedded-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">4591c9fb3afe99b2731c2650435c259abdaf61ea6f88552570710a623041f931</sum>
        </package>
        <package name="libzip-tools" version="1.6.1" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>libzip-tools-1.6.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">4dcd7aacc8eb606c28a6d4707bf2d928045c38a99d7f40e5818bdfd63931d7c0</sum>
        </package>
        <package name="php-common" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-common-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">53ce23c9c4bd856203b035ecbdcc731cfc523afe4c695ae4240f873fefcdfe78</sum>
        </package>
        <package name="php-process" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-process-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">5bf1e4bedee037642ba0f4ae7ee0082a3f04dcbd866fc8137e1e66a0caab4164</sum>
        </package>
        <package name="php-xml" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-xml-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">5cb20637951ebbbdf9a81c4cc899b1283b67d9ca47cc386bb5f6e55e9de17b86</sum>
        </package>
        <package name="php-pecl-rrd" version="2.0.1" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-pecl-rrd-2.0.1-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pecl-rrd-2.0.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">5e91b3f33f42fdf8f7e58dc4a81af0f2cf8a51cb967a3803f55a275bb7a2b1f1</sum>
        </package>
        <package name="php-pgsql" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-pgsql-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">653d73878dcbcb2d2322a650026851d93a71c1daa096382bc3e5efbb94155eeb</sum>
        </package>
        <package name="php-pecl-apcu" version="5.1.18" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.18-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pecl-apcu-5.1.18-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">6a5268e949f13c64c1e1e2d58b6ca9d81f1215941caa92adcf0b40eb6727bf08</sum>
        </package>
        <package name="php-ldap" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-ldap-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">6c4a0db8370f3c81486edb80fa22e629e1d58c3581ff3f4fc3395a6822acc18d</sum>
        </package>
        <package name="php-soap" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-soap-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">6dfa4703a8c403ecd1ce1201738f16563b515de3109d153ce507c9a0989ea613</sum>
        </package>
        <package name="php-xmlrpc" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-xmlrpc-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">6f99fe1c9af0cd0dc05831f04e75b6df77b425392154cca0e2a3a8a50d16e577</sum>
        </package>
        <package name="php-pecl-zip" version="1.18.2" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-pecl-zip-1.18.2-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pecl-zip-1.18.2-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">801fd66e96d056487f697bb442ce1eba14196571735ca21d7c3e4d5a722c4006</sum>
        </package>
        <package name="php-pecl-xdebug" version="2.9.5" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-pecl-xdebug-2.9.5-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pecl-xdebug-2.9.5-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">864cae889833ed12fd18cf7183adf90631fed1cf2cfe6eb1cbc4e31f2ae6ebee</sum>
        </package>
        <package name="php-fpm" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-fpm-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">9683d70983c136345fb8834d1d5ab164a868d263f17bdbb8913a0abdbe9445d1</sum>
        </package>
        <package name="php-snmp" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-snmp-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">96cc59d2aa51e2b8d8b1d35db9e458d4552ff93025448d80a6cf532ed84c2736</sum>
        </package>
        <package name="php" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">9a37fa8b75a1e239974396a9bdb0bc9be80d1285eb30c5c7ce41dbd663175604</sum>
        </package>
        <package name="libzip" version="1.6.1" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">9a9e43a839757a5b4aea25cc7ffbca0524546f9b9177562674854f7d3c042ed1</sum>
        </package>
        <package name="libzip-devel" version="1.6.1" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>libzip-devel-1.6.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">a3859fbd79933d7d04d80ad2041fa602d3f20b3cefd633660c5dee5365df1f35</sum>
        </package>
        <package name="php-cli" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-cli-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">aa96e607f177d51e2e508eeb6b31b7f83409d9be356eed5fc39cbcf2dcb42db0</sum>
        </package>
        <package name="php-pdo" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-pdo-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">abb36d7de8bb02046e7169699c01ea1508baac4104dd2f690cd91ca93d154f85</sum>
        </package>
        <package name="php-mbstring" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-mbstring-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">b6cbea1dc9854bfab2c65a72b8ef6623cd5244b5260f5386131b0b30c4fa32b1</sum>
        </package>
        <package name="php-bcmath" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-bcmath-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">b8bdef04a4b268dd1d1edc56fa730d17d27d8c5d481aeafc5f1d03e3267a396a</sum>
        </package>
        <package name="php-gmp" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-gmp-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">cbd0757b5fb527bb348fd28d6a7dd58f62d3e4a8348fefd9a9cb4b2c66da7095</sum>
        </package>
        <package name="php-json" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-json-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">d48e10c04aef83fc40845bbbf4ccbfd5a041feb2aeeae333df902a9782fc4865</sum>
        </package>
        <package name="php-ffi" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-ffi-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">d7568b0a7693bc3a894b75b64e6448d1f856faa89d8c785ea3566bfc642485de</sum>
        </package>
        <package name="php-enchant" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-enchant-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">db6d687a4763cfe5865a8afad20121751b834d996fccac0ba3db0185aa47d5b8</sum>
        </package>
        <package name="php-mysqlnd" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-mysqlnd-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">ed401dad0a41b18cadfe5d495e5323847e421cacd84652f136aff3bdc5427a7a</sum>
        </package>
        <package name="php-dba" version="7.4.33" release="1.module_el8.8.0+3477+f828cbb0" epoch="0" arch="s390x" src="php-7.4.33-1.module_el8.8.0+3477+f828cbb0.src.rpm">
          <filename>php-dba-7.4.33-1.module_el8.8.0+3477+f828cbb0.s390x.rpm</filename>
          <sum type="sha256">fa83f86e0b2c8e0d2f8a377b8eb3afc5f71c7566c8f9ba7db0a32ca1091b89a7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2969</id>
    <title>Moderate: net-snmp security and bug fix update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:01:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>net-snmp security and bug fix update</summary>
    <description>The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser.

Security Fix(es):

* net-snmp: NULL Pointer Exception when handling ipDefaultTTL (CVE-2022-44792)
* net-snmp: NULL Pointer Exception when handling pv6IpForwarding (CVE-2022-44793)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2969" id="RHSA-2023:2969" type="rhsa" title="RHSA-2023:2969"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-44792" id="CVE-2022-44792" type="cve" title="CVE-2022-44792"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-44793" id="CVE-2022-44793" type="cve" title="CVE-2022-44793"/>
      <reference href="https://bugzilla.redhat.com/2141897" id="2141897" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2141898" id="2141898" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2969.html" id="ALSA-2023:2969" type="self" title="ALSA-2023:2969"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="net-snmp-utils" version="5.8" release="27.el8" epoch="1" arch="s390x" src="net-snmp-5.8-27.el8.src.rpm">
          <filename>net-snmp-utils-5.8-27.el8.s390x.rpm</filename>
          <sum type="sha256">10a19d3253424e1504fd4eeb53b87c073058168883f4529f7935fec6ac5af9bc</sum>
        </package>
        <package name="net-snmp" version="5.8" release="27.el8" epoch="1" arch="s390x" src="net-snmp-5.8-27.el8.src.rpm">
          <filename>net-snmp-5.8-27.el8.s390x.rpm</filename>
          <sum type="sha256">4e5bb480568c519f52586e43a451b83fb90b4083ad2fb5d92f7015354877474a</sum>
        </package>
        <package name="net-snmp-agent-libs" version="5.8" release="27.el8" epoch="1" arch="s390x" src="net-snmp-5.8-27.el8.src.rpm">
          <filename>net-snmp-agent-libs-5.8-27.el8.s390x.rpm</filename>
          <sum type="sha256">b3ae5a5e94ec4211abb0e5b59f24eeb0af2b0189645e9b199f60a20d508dc29c</sum>
        </package>
        <package name="net-snmp-devel" version="5.8" release="27.el8" epoch="1" arch="s390x" src="net-snmp-5.8-27.el8.src.rpm">
          <filename>net-snmp-devel-5.8-27.el8.s390x.rpm</filename>
          <sum type="sha256">c402d75af8f84a29b2940a9bf1ac713b30c0d512376a380bfaa8fc9478b69cb1</sum>
        </package>
        <package name="net-snmp-perl" version="5.8" release="27.el8" epoch="1" arch="s390x" src="net-snmp-5.8-27.el8.src.rpm">
          <filename>net-snmp-perl-5.8-27.el8.s390x.rpm</filename>
          <sum type="sha256">c493adb3fff37293eaac4df3c09aae4d7d06b2d696c63b4b5e36e9821e55f17b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2987</id>
    <title>Low: samba security, bug fix, and enhancement update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:08"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>samba security, bug fix, and enhancement update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.17.5). (BZ#2132051)

Security Fix(es):

* samba: GnuTLS gnutls_rnd() can fail and give predictable random values (CVE-2022-1615)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2987" id="RHSA-2023:2987" type="rhsa" title="RHSA-2023:2987"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1615" id="CVE-2022-1615" type="cve" title="CVE-2022-1615"/>
      <reference href="https://bugzilla.redhat.com/2122649" id="2122649" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2987.html" id="ALSA-2023:2987" type="self" title="ALSA-2023:2987"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="samba-vfs-iouring" version="4.17.5" release="2.el8" epoch="0" arch="s390x" src="samba-4.17.5-2.el8.src.rpm">
          <filename>samba-vfs-iouring-4.17.5-2.el8.s390x.rpm</filename>
          <sum type="sha256">8c51efc095023138dea08e79a13ccb2bed0bfa299f4e4dce6ff7e597b92d9cda</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3002</id>
    <title>Moderate: bind security and bug fix update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:10:56"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bind security and bug fix update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: processing large delegations may severely degrade resolver performance (CVE-2022-2795)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3002" id="RHSA-2023:3002" type="rhsa" title="RHSA-2023:3002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2795" id="CVE-2022-2795" type="cve" title="CVE-2022-2795"/>
      <reference href="https://bugzilla.redhat.com/2128584" id="2128584" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3002.html" id="ALSA-2023:3002" type="self" title="ALSA-2023:3002"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="bind-pkcs11-devel" version="9.11.36" release="8.el8" epoch="32" arch="s390x" src="bind-9.11.36-8.el8.src.rpm">
          <filename>bind-pkcs11-devel-9.11.36-8.el8.s390x.rpm</filename>
          <sum type="sha256">056c832c564ace2d8155ffb0c4010fe518fe8658ca9e22c35d551f6936033cb9</sum>
        </package>
        <package name="bind-pkcs11-libs" version="9.11.36" release="8.el8" epoch="32" arch="s390x" src="bind-9.11.36-8.el8.src.rpm">
          <filename>bind-pkcs11-libs-9.11.36-8.el8.s390x.rpm</filename>
          <sum type="sha256">05dc91c16ea77380f0f1a0bab01a56e2d9a120da29a28418156504cc1e1fbec4</sum>
        </package>
        <package name="bind-libs" version="9.11.36" release="8.el8" epoch="32" arch="s390x" src="bind-9.11.36-8.el8.src.rpm">
          <filename>bind-libs-9.11.36-8.el8.s390x.rpm</filename>
          <sum type="sha256">2234f9e99cbfff5431b8f01a4743db52cbd8d13f74ff5630b062f186ab47eaf6</sum>
        </package>
        <package name="bind-pkcs11" version="9.11.36" release="8.el8" epoch="32" arch="s390x" src="bind-9.11.36-8.el8.src.rpm">
          <filename>bind-pkcs11-9.11.36-8.el8.s390x.rpm</filename>
          <sum type="sha256">2c4c829613de9387c708c1f7ad38fe8233be678336a87ef61e92d9b53ea2def5</sum>
        </package>
        <package name="bind-sdb" version="9.11.36" release="8.el8" epoch="32" arch="s390x" src="bind-9.11.36-8.el8.src.rpm">
          <filename>bind-sdb-9.11.36-8.el8.s390x.rpm</filename>
          <sum type="sha256">5f42d8ed470fed19dfb386b08fd064bcbafd7e8d4d81ac19435438fe86bb8344</sum>
        </package>
        <package name="bind" version="9.11.36" release="8.el8" epoch="32" arch="s390x" src="bind-9.11.36-8.el8.src.rpm">
          <filename>bind-9.11.36-8.el8.s390x.rpm</filename>
          <sum type="sha256">67a2bdc059ff0f99022278cf169f8b60948b769f54f1affcafad2495f8336f1a</sum>
        </package>
        <package name="bind-libs-lite" version="9.11.36" release="8.el8" epoch="32" arch="s390x" src="bind-9.11.36-8.el8.src.rpm">
          <filename>bind-libs-lite-9.11.36-8.el8.s390x.rpm</filename>
          <sum type="sha256">6cb9dceda375267372c641f5a343e5e5bc429d83f95c2c0d38a0e9a9d4e04a59</sum>
        </package>
        <package name="python3-bind" version="9.11.36" release="8.el8" epoch="32" arch="noarch" src="bind-9.11.36-8.el8.src.rpm">
          <filename>python3-bind-9.11.36-8.el8.noarch.rpm</filename>
          <sum type="sha256">79a6b71e96944a74c60405641b838691be5747cc2b569f0270a5600c17f74cad</sum>
        </package>
        <package name="bind-utils" version="9.11.36" release="8.el8" epoch="32" arch="s390x" src="bind-9.11.36-8.el8.src.rpm">
          <filename>bind-utils-9.11.36-8.el8.s390x.rpm</filename>
          <sum type="sha256">8a0b0103681e52a0bbc6f84ccd67f8869e6c9217f091220665dbfb18868b3418</sum>
        </package>
        <package name="bind-sdb-chroot" version="9.11.36" release="8.el8" epoch="32" arch="s390x" src="bind-9.11.36-8.el8.src.rpm">
          <filename>bind-sdb-chroot-9.11.36-8.el8.s390x.rpm</filename>
          <sum type="sha256">9e052ad7d28fc20fe9a2043deff15cdee3b7eb042cc7d8fbf9ce5da11220b208</sum>
        </package>
        <package name="bind-lite-devel" version="9.11.36" release="8.el8" epoch="32" arch="s390x" src="bind-9.11.36-8.el8.src.rpm">
          <filename>bind-lite-devel-9.11.36-8.el8.s390x.rpm</filename>
          <sum type="sha256">a45141d2b482f982cbabf6b6349fe49cfd3bf775d4694583dee1fef472cea958</sum>
        </package>
        <package name="bind-license" version="9.11.36" release="8.el8" epoch="32" arch="noarch" src="bind-9.11.36-8.el8.src.rpm">
          <filename>bind-license-9.11.36-8.el8.noarch.rpm</filename>
          <sum type="sha256">a976553350ff43e47ffce8f4568d7babab3c0e8ce57b09047102906c9095e4a0</sum>
        </package>
        <package name="bind-pkcs11-utils" version="9.11.36" release="8.el8" epoch="32" arch="s390x" src="bind-9.11.36-8.el8.src.rpm">
          <filename>bind-pkcs11-utils-9.11.36-8.el8.s390x.rpm</filename>
          <sum type="sha256">b33c24a7045c5d29bb93c7924cd79594a8d8c191294b89a2c2956a6dbf17ac1c</sum>
        </package>
        <package name="bind-chroot" version="9.11.36" release="8.el8" epoch="32" arch="s390x" src="bind-9.11.36-8.el8.src.rpm">
          <filename>bind-chroot-9.11.36-8.el8.s390x.rpm</filename>
          <sum type="sha256">e0e3a904d9d9674627bf22c81e9d4015026e2cd313ef62d24232db576198eb1e</sum>
        </package>
        <package name="bind-devel" version="9.11.36" release="8.el8" epoch="32" arch="s390x" src="bind-9.11.36-8.el8.src.rpm">
          <filename>bind-devel-9.11.36-8.el8.s390x.rpm</filename>
          <sum type="sha256">f628dcfb5df8f7f5fbd101b5c8567878adf3529dca366a66742a6d1c8e184f8f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3042</id>
    <title>Moderate: emacs security and bug fix update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:06:36"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>emacs security and bug fix update</summary>
    <description>GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

* emacs: ctags local command execution vulnerability (CVE-2022-45939)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3042" id="RHSA-2023:3042" type="rhsa" title="RHSA-2023:3042"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45939" id="CVE-2022-45939" type="cve" title="CVE-2022-45939"/>
      <reference href="https://bugzilla.redhat.com/2149380" id="2149380" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3042.html" id="ALSA-2023:3042" type="self" title="ALSA-2023:3042"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="emacs" version="26.1" release="9.el8" epoch="1" arch="s390x" src="emacs-26.1-9.el8.src.rpm">
          <filename>emacs-26.1-9.el8.s390x.rpm</filename>
          <sum type="sha256">010c563ff5fb9623b0e71ad49ba0165e547b06cc74eddec20b19024123836af0</sum>
        </package>
        <package name="emacs-lucid" version="26.1" release="9.el8" epoch="1" arch="s390x" src="emacs-26.1-9.el8.src.rpm">
          <filename>emacs-lucid-26.1-9.el8.s390x.rpm</filename>
          <sum type="sha256">22512e483594e5e6968ab9dee9ea0d913085b459818e597ae656a075f9519d34</sum>
        </package>
        <package name="emacs-nox" version="26.1" release="9.el8" epoch="1" arch="s390x" src="emacs-26.1-9.el8.src.rpm">
          <filename>emacs-nox-26.1-9.el8.s390x.rpm</filename>
          <sum type="sha256">b3db2515591fe36b1f179332ad4ca1d219d9f6a35f9ec04fc8e93988761fde86</sum>
        </package>
        <package name="emacs-terminal" version="26.1" release="9.el8" epoch="1" arch="noarch" src="emacs-26.1-9.el8.src.rpm">
          <filename>emacs-terminal-26.1-9.el8.noarch.rpm</filename>
          <sum type="sha256">d298172824a5344c565aea58866e693ad7c97ac7f25b15a27d3955765edd7959</sum>
        </package>
        <package name="emacs-common" version="26.1" release="9.el8" epoch="1" arch="s390x" src="emacs-26.1-9.el8.src.rpm">
          <filename>emacs-common-26.1-9.el8.s390x.rpm</filename>
          <sum type="sha256">dd5aed142ad85f819d8528581c66c05e681489c21c8e2c162847901eb9ec71c9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3083</id>
    <title>Moderate: go-toolset:rhel8 security and bug fix update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:12:26"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>go-toolset:rhel8 security and bug fix update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. 

Security Fix(es):

* golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)
* golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Backport fix for https://github.com/golang/go/issues/56891 (BZ#2167412)
* Update Go to 1.19.6 (BZ#2174430)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3083" id="RHSA-2023:3083" type="rhsa" title="RHSA-2023:3083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41724" id="CVE-2022-41724" type="cve" title="CVE-2022-41724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41725" id="CVE-2022-41725" type="cve" title="CVE-2022-41725"/>
      <reference href="https://bugzilla.redhat.com/2178488" id="2178488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178492" id="2178492" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3083.html" id="ALSA-2023:3083" type="self" title="ALSA-2023:3083"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="go-toolset" stream="rhel8" version="8080020230517074700" context="9edba152" arch="s390x"/>
        <package name="golang-src" version="1.19.6" release="1.module_el8.8.0+3558+75c9cb88" epoch="0" arch="noarch" src="golang-1.19.6-1.module_el8.8.0+3558+75c9cb88.src.rpm">
          <filename>golang-src-1.19.6-1.module_el8.8.0+3558+75c9cb88.noarch.rpm</filename>
          <sum type="sha256">24cee51e47992b2e9fb502f4df1f95be6490c6c048505a51709f3b878beaaa9e</sum>
        </package>
        <package name="golang-bin" version="1.19.6" release="1.module_el8.8.0+3558+75c9cb88" epoch="0" arch="s390x" src="golang-1.19.6-1.module_el8.8.0+3558+75c9cb88.src.rpm">
          <filename>golang-bin-1.19.6-1.module_el8.8.0+3558+75c9cb88.s390x.rpm</filename>
          <sum type="sha256">374d15b99a6fc6675f93ccbd9e0bad4182e25ff1838bf0243291b29d35649b88</sum>
        </package>
        <package name="go-toolset" version="1.19.6" release="1.module_el8.8.0+3558+75c9cb88" epoch="0" arch="s390x" src="go-toolset-1.19.6-1.module_el8.8.0+3558+75c9cb88.src.rpm">
          <filename>go-toolset-1.19.6-1.module_el8.8.0+3558+75c9cb88.s390x.rpm</filename>
          <sum type="sha256">558a72f08df1a02841abae350582582500eff7207429e9a5960c96f36576270d</sum>
        </package>
        <package name="golang-docs" version="1.19.6" release="1.module_el8.8.0+3558+75c9cb88" epoch="0" arch="noarch" src="golang-1.19.6-1.module_el8.8.0+3558+75c9cb88.src.rpm">
          <filename>golang-docs-1.19.6-1.module_el8.8.0+3558+75c9cb88.noarch.rpm</filename>
          <sum type="sha256">59f40f489dfe3c127154bd1c61238d8d408175224eb02df7278d547e042ac03f</sum>
        </package>
        <package name="golang-tests" version="1.19.6" release="1.module_el8.8.0+3558+75c9cb88" epoch="0" arch="noarch" src="golang-1.19.6-1.module_el8.8.0+3558+75c9cb88.src.rpm">
          <filename>golang-tests-1.19.6-1.module_el8.8.0+3558+75c9cb88.noarch.rpm</filename>
          <sum type="sha256">841cfcb960ebc2565396905505cf11ed2ff2ee9925b1270de8e8d03052f6f0b3</sum>
        </package>
        <package name="golang" version="1.19.6" release="1.module_el8.8.0+3558+75c9cb88" epoch="0" arch="s390x" src="golang-1.19.6-1.module_el8.8.0+3558+75c9cb88.src.rpm">
          <filename>golang-1.19.6-1.module_el8.8.0+3558+75c9cb88.s390x.rpm</filename>
          <sum type="sha256">cefe55223608bbc3484423e1bb425af0087791347399707bbcd062081b996f86</sum>
        </package>
        <package name="golang-misc" version="1.19.6" release="1.module_el8.8.0+3558+75c9cb88" epoch="0" arch="noarch" src="golang-1.19.6-1.module_el8.8.0+3558+75c9cb88.src.rpm">
          <filename>golang-misc-1.19.6-1.module_el8.8.0+3558+75c9cb88.noarch.rpm</filename>
          <sum type="sha256">fa568cd851ffe0df132011af4be53dc04211ebef5a4ab5e3865e380a5266f533</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3087</id>
    <title>Important: mysql:8.0 security, bug fix, and enhancement update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-22 09:17:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mysql:8.0 security, bug fix, and enhancement update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.32). (BZ#2177734, BZ#2177735, BZ#2177736)

Security Fix(es):

* mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2023) (CVE-2023-21912)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21594)
* mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2022) (CVE-2022-21599)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21604)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21608)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21611)
* mysql: Server: Connection Handling unspecified vulnerability (CPU Oct 2022) (CVE-2022-21617)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21625)
* mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2022) (CVE-2022-21632)
* mysql: Server: Replication unspecified vulnerability (CPU Oct 2022) (CVE-2022-21633)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21637)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21640)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39400)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39408)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39410)
* mysql: Server: DML unspecified vulnerability (CPU Jan 2023) (CVE-2023-21836)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21863)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21864)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21865)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21867)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21868)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21869)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21870)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21871)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21873)
* mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2023) (CVE-2023-21875)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21876)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21877)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21878)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21879)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21880)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21881)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21883)
* mysql: Server: GIS unspecified vulnerability (CPU Jan 2023) (CVE-2023-21887)
* mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21917)
* mysql: Server: Thread Pooling unspecified vulnerability (CPU Jan 2023) (CVE-2023-21874)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21882)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* AlmaLinux8 AppStream and Devel channels missing mecab-devel rpm (BZ#2180411)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3087" id="RHSA-2023:3087" type="rhsa" title="RHSA-2023:3087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21594" id="CVE-2022-21594" type="cve" title="CVE-2022-21594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21599" id="CVE-2022-21599" type="cve" title="CVE-2022-21599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21604" id="CVE-2022-21604" type="cve" title="CVE-2022-21604"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21608" id="CVE-2022-21608" type="cve" title="CVE-2022-21608"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21611" id="CVE-2022-21611" type="cve" title="CVE-2022-21611"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21617" id="CVE-2022-21617" type="cve" title="CVE-2022-21617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21625" id="CVE-2022-21625" type="cve" title="CVE-2022-21625"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21632" id="CVE-2022-21632" type="cve" title="CVE-2022-21632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21633" id="CVE-2022-21633" type="cve" title="CVE-2022-21633"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21637" id="CVE-2022-21637" type="cve" title="CVE-2022-21637"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21640" id="CVE-2022-21640" type="cve" title="CVE-2022-21640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39400" id="CVE-2022-39400" type="cve" title="CVE-2022-39400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39408" id="CVE-2022-39408" type="cve" title="CVE-2022-39408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39410" id="CVE-2022-39410" type="cve" title="CVE-2022-39410"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21836" id="CVE-2023-21836" type="cve" title="CVE-2023-21836"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21863" id="CVE-2023-21863" type="cve" title="CVE-2023-21863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21864" id="CVE-2023-21864" type="cve" title="CVE-2023-21864"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21865" id="CVE-2023-21865" type="cve" title="CVE-2023-21865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21867" id="CVE-2023-21867" type="cve" title="CVE-2023-21867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21868" id="CVE-2023-21868" type="cve" title="CVE-2023-21868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21869" id="CVE-2023-21869" type="cve" title="CVE-2023-21869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21870" id="CVE-2023-21870" type="cve" title="CVE-2023-21870"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21871" id="CVE-2023-21871" type="cve" title="CVE-2023-21871"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21873" id="CVE-2023-21873" type="cve" title="CVE-2023-21873"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21874" id="CVE-2023-21874" type="cve" title="CVE-2023-21874"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21875" id="CVE-2023-21875" type="cve" title="CVE-2023-21875"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21876" id="CVE-2023-21876" type="cve" title="CVE-2023-21876"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21877" id="CVE-2023-21877" type="cve" title="CVE-2023-21877"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21878" id="CVE-2023-21878" type="cve" title="CVE-2023-21878"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21879" id="CVE-2023-21879" type="cve" title="CVE-2023-21879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21880" id="CVE-2023-21880" type="cve" title="CVE-2023-21880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21881" id="CVE-2023-21881" type="cve" title="CVE-2023-21881"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21882" id="CVE-2023-21882" type="cve" title="CVE-2023-21882"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21883" id="CVE-2023-21883" type="cve" title="CVE-2023-21883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21887" id="CVE-2023-21887" type="cve" title="CVE-2023-21887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21912" id="CVE-2023-21912" type="cve" title="CVE-2023-21912"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21917" id="CVE-2023-21917" type="cve" title="CVE-2023-21917"/>
      <reference href="https://bugzilla.redhat.com/2142861" id="2142861" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142863" id="2142863" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142865" id="2142865" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142868" id="2142868" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142869" id="2142869" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142870" id="2142870" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142871" id="2142871" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142872" id="2142872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142873" id="2142873" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142875" id="2142875" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142877" id="2142877" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142879" id="2142879" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142880" id="2142880" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142881" id="2142881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162268" id="2162268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162270" id="2162270" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162271" id="2162271" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162272" id="2162272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162274" id="2162274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162275" id="2162275" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162276" id="2162276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162277" id="2162277" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162278" id="2162278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162280" id="2162280" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162281" id="2162281" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162282" id="2162282" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162283" id="2162283" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162284" id="2162284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162285" id="2162285" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162286" id="2162286" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162287" id="2162287" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162288" id="2162288" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162289" id="2162289" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162290" id="2162290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162291" id="2162291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188110" id="2188110" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188112" id="2188112" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3087.html" id="ALSA-2023:3087" type="self" title="ALSA-2023:3087"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="mysql" stream="8.0" version="8060020221025181128" context="9edba152" arch="s390x"/>
        <package name="mysql-libs" version="8.0.32" release="1.module_el8.8.0+3567+56a616e4" epoch="0" arch="s390x" src="mysql-8.0.32-1.module_el8.8.0+3567+56a616e4.src.rpm">
          <filename>mysql-libs-8.0.32-1.module_el8.8.0+3567+56a616e4.s390x.rpm</filename>
          <sum type="sha256">024ca8d9d85974a4994b9dbed1b5a1afddc2bba3f3fe814c6ca20c9fa40de281</sum>
        </package>
        <package name="mysql-test" version="8.0.32" release="1.module_el8.8.0+3567+56a616e4" epoch="0" arch="s390x" src="mysql-8.0.32-1.module_el8.8.0+3567+56a616e4.src.rpm">
          <filename>mysql-test-8.0.32-1.module_el8.8.0+3567+56a616e4.s390x.rpm</filename>
          <sum type="sha256">281c9389918e4b5cb462280a3e53dd98541e12b598be9d284bf5c504876942c8</sum>
        </package>
        <package name="mecab-ipadic" version="2.7.0.20070801" release="16.module_el8.6.0+3340+d764b636" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-16.module_el8.6.0+3340+d764b636.src.rpm">
          <filename>mecab-ipadic-2.7.0.20070801-16.module_el8.6.0+3340+d764b636.s390x.rpm</filename>
          <sum type="sha256">2ecc38dc395cc34bd5a62791f2bb828e7a3970a378a406e6c5a92945d1c69856</sum>
        </package>
        <package name="mysql-common" version="8.0.32" release="1.module_el8.8.0+3567+56a616e4" epoch="0" arch="s390x" src="mysql-8.0.32-1.module_el8.8.0+3567+56a616e4.src.rpm">
          <filename>mysql-common-8.0.32-1.module_el8.8.0+3567+56a616e4.s390x.rpm</filename>
          <sum type="sha256">38b0fc57dded58222c8585fd67d80cc05f7e905988a77bf04d108064fc439fd5</sum>
        </package>
        <package name="mysql-errmsg" version="8.0.32" release="1.module_el8.8.0+3567+56a616e4" epoch="0" arch="s390x" src="mysql-8.0.32-1.module_el8.8.0+3567+56a616e4.src.rpm">
          <filename>mysql-errmsg-8.0.32-1.module_el8.8.0+3567+56a616e4.s390x.rpm</filename>
          <sum type="sha256">6e3ea59fb0341005b9994eb6ebb3933b19856c811f5420ffe4375254d58ffee5</sum>
        </package>
        <package name="mecab-ipadic-EUCJP" version="2.7.0.20070801" release="16.module_el8.6.0+3340+d764b636" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-16.module_el8.6.0+3340+d764b636.src.rpm">
          <filename>mecab-ipadic-EUCJP-2.7.0.20070801-16.module_el8.6.0+3340+d764b636.s390x.rpm</filename>
          <sum type="sha256">85ab51ff2897e18fb0fa62f38a21f7f77c1037510fcb24f6fc7f9580966833ff</sum>
        </package>
        <package name="mysql-server" version="8.0.32" release="1.module_el8.8.0+3567+56a616e4" epoch="0" arch="s390x" src="mysql-8.0.32-1.module_el8.8.0+3567+56a616e4.src.rpm">
          <filename>mysql-server-8.0.32-1.module_el8.8.0+3567+56a616e4.s390x.rpm</filename>
          <sum type="sha256">a5cc8febcd90942577b5f53e54d6a9268bbed835ab1119f85d3b7d1baa3fa600</sum>
        </package>
        <package name="mecab" version="0.996" release="2.module_el8.6.0+3340+d764b636" epoch="0" arch="s390x" src="mecab-0.996-2.module_el8.6.0+3340+d764b636.src.rpm">
          <filename>mecab-0.996-2.module_el8.6.0+3340+d764b636.s390x.rpm</filename>
          <sum type="sha256">ac9101824269dda084c450648ac939c4c8fc017d05d6f1a13bf138bda748fa52</sum>
        </package>
        <package name="mysql-devel" version="8.0.32" release="1.module_el8.8.0+3567+56a616e4" epoch="0" arch="s390x" src="mysql-8.0.32-1.module_el8.8.0+3567+56a616e4.src.rpm">
          <filename>mysql-devel-8.0.32-1.module_el8.8.0+3567+56a616e4.s390x.rpm</filename>
          <sum type="sha256">e0486000b4eca69303331e5997a6567cd16e9b6c4ef8b2e87fafebcff3013f9a</sum>
        </package>
        <package name="mysql" version="8.0.32" release="1.module_el8.8.0+3567+56a616e4" epoch="0" arch="s390x" src="mysql-8.0.32-1.module_el8.8.0+3567+56a616e4.src.rpm">
          <filename>mysql-8.0.32-1.module_el8.8.0+3567+56a616e4.s390x.rpm</filename>
          <sum type="sha256">ef0a82e13d78d450ab59ccf78f24e7e6c882e2c58e62fcc20b3aa5d44adff060</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3095</id>
    <title>Moderate: libreswan security and bug fix update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:10"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libreswan security and bug fix update</summary>
    <description>Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).

Security Fix(es):

* libreswan: remote DoS via crafted TS payload with an incorrect selector length (CVE-2023-23009)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* authby=rsasig fails in FIPS policy (BZ#2187647)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3095" id="RHSA-2023:3095" type="rhsa" title="RHSA-2023:3095"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23009" id="CVE-2023-23009" type="cve" title="CVE-2023-23009"/>
      <reference href="https://bugzilla.redhat.com/2173610" id="2173610" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3095.html" id="ALSA-2023:3095" type="self" title="ALSA-2023:3095"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="libreswan" version="4.9" release="2.el8_8.2" epoch="0" arch="s390x" src="libreswan-4.9-2.el8_8.2.src.rpm">
          <filename>libreswan-4.9-2.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">44d4e786e0d376d3b24d2bd50f50b55e873a8acb8b195b66a5d29a7209e827f1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3097</id>
    <title>Moderate: gssntlmssp security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:11"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gssntlmssp security update</summary>
    <description>The gssntlmssp is a GSSAPI NTLM mechanism that allows to perform NTLM authentication in GSSAPI programs.

Security Fix(es):

* gssntlmssp: multiple out-of-bounds read when decoding NTLM fields (CVE-2023-25563)
* gssntlmssp: memory corruption when decoding UTF16 strings (CVE-2023-25564)
* gssntlmssp: incorrect free when decoding target information (CVE-2023-25565)
* gssntlmssp: memory leak when parsing usernames (CVE-2023-25566)
* gssntlmssp: out-of-bounds read when decoding target information (CVE-2023-25567)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3097" id="RHSA-2023:3097" type="rhsa" title="RHSA-2023:3097"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25563" id="CVE-2023-25563" type="cve" title="CVE-2023-25563"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25564" id="CVE-2023-25564" type="cve" title="CVE-2023-25564"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25565" id="CVE-2023-25565" type="cve" title="CVE-2023-25565"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25566" id="CVE-2023-25566" type="cve" title="CVE-2023-25566"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25567" id="CVE-2023-25567" type="cve" title="CVE-2023-25567"/>
      <reference href="https://bugzilla.redhat.com/2172019" id="2172019" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2172020" id="2172020" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2172021" id="2172021" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2172022" id="2172022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2172023" id="2172023" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3097.html" id="ALSA-2023:3097" type="self" title="ALSA-2023:3097"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="gssntlmssp" version="1.2.0" release="1.el8_8" epoch="0" arch="s390x" src="gssntlmssp-1.2.0-1.el8_8.src.rpm">
          <filename>gssntlmssp-1.2.0-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">0ca5301d372ec234886f955dea22eeda07f34be9ede4e3cf9f5a48449b682025</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3104</id>
    <title>Important: emacs security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:06:37"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>emacs security update</summary>
    <description>GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

* emacs: Regression of CVE-2023-28617 fixes in the AlmaLinux (CVE-2023-2491)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3104" id="RHSA-2023:3104" type="rhsa" title="RHSA-2023:3104"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2491" id="CVE-2023-2491" type="cve" title="CVE-2023-2491"/>
      <reference href="https://bugzilla.redhat.com/2192873" id="2192873" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3104.html" id="ALSA-2023:3104" type="self" title="ALSA-2023:3104"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="emacs-nox" version="26.1" release="10.el8_8.2" epoch="1" arch="s390x" src="emacs-26.1-10.el8_8.2.src.rpm">
          <filename>emacs-nox-26.1-10.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">333e1f3100b63dc116038bca066e910236e65225b6577c3559ef3548a26d00a0</sum>
        </package>
        <package name="emacs-common" version="26.1" release="10.el8_8.2" epoch="1" arch="s390x" src="emacs-26.1-10.el8_8.2.src.rpm">
          <filename>emacs-common-26.1-10.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">9c9798f1ff8561cf3a9100533a05cc4b8a3373fb9eba7697fefae9311ddebee9</sum>
        </package>
        <package name="emacs-terminal" version="26.1" release="10.el8_8.2" epoch="1" arch="noarch" src="emacs-26.1-10.el8_8.2.src.rpm">
          <filename>emacs-terminal-26.1-10.el8_8.2.noarch.rpm</filename>
          <sum type="sha256">d9891e4a904f5e9cec43e760aa8c6d24d040383fe26b0886c0620b2953b78620</sum>
        </package>
        <package name="emacs-lucid" version="26.1" release="10.el8_8.2" epoch="1" arch="s390x" src="emacs-26.1-10.el8_8.2.src.rpm">
          <filename>emacs-lucid-26.1-10.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">f34700ec948be1cf41fe0e20214b4ab716e7ea88dff1762e835d75b40537fe0b</sum>
        </package>
        <package name="emacs" version="26.1" release="10.el8_8.2" epoch="1" arch="s390x" src="emacs-26.1-10.el8_8.2.src.rpm">
          <filename>emacs-26.1-10.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">fedd4b0f4683d3838e8936b4af02227c599f4a94e35c76845c68660363187883</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3107</id>
    <title>Important: libreswan security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:12"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libreswan security update</summary>
    <description>Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).

Security Fix(es):

* libreswan: Regression of CVE-2023-30570 fixes in the AlmaLinux (CVE-2023-2295)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3107" id="RHSA-2023:3107" type="rhsa" title="RHSA-2023:3107"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2295" id="CVE-2023-2295" type="cve" title="CVE-2023-2295"/>
      <reference href="https://bugzilla.redhat.com/2189777" id="2189777" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3107.html" id="ALSA-2023:3107" type="self" title="ALSA-2023:3107"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="libreswan" version="4.9" release="3.el8_8" epoch="0" arch="s390x" src="libreswan-4.9-3.el8_8.src.rpm">
          <filename>libreswan-4.9-3.el8_8.s390x.rpm</filename>
          <sum type="sha256">f52dd92560cb99c0412870a0a34b908b3daa3987b3088adaf2344871f2147cbb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3108</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:01:27"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* WebKitGTK: Regression of CVE-2023-28205 fixes in the AlmaLinux (CVE-2023-2203)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3108" id="RHSA-2023:3108" type="rhsa" title="RHSA-2023:3108"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2203" id="CVE-2023-2203" type="cve" title="CVE-2023-2203"/>
      <reference href="https://bugzilla.redhat.com/2188543" id="2188543" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3108.html" id="ALSA-2023:3108" type="self" title="ALSA-2023:3108"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="webkit2gtk3-jsc" version="2.38.5" release="1.el8_8.3" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el8_8.3.src.rpm">
          <filename>webkit2gtk3-jsc-2.38.5-1.el8_8.3.s390x.rpm</filename>
          <sum type="sha256">5b0de4211f824a6d63eff484188014633d12ae02feb33b6c1e976c19575c641b</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.38.5" release="1.el8_8.3" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el8_8.3.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.38.5-1.el8_8.3.s390x.rpm</filename>
          <sum type="sha256">604152c5e1b98d245002d5cc720c5c58ea7e0916d35bc242526981a883f8c687</sum>
        </package>
        <package name="webkit2gtk3" version="2.38.5" release="1.el8_8.3" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el8_8.3.src.rpm">
          <filename>webkit2gtk3-2.38.5-1.el8_8.3.s390x.rpm</filename>
          <sum type="sha256">9088211a6ace866f1456aae2d58b3fce7e415b062a7deb679a5aee1ee93abb3d</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.38.5" release="1.el8_8.3" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el8_8.3.src.rpm">
          <filename>webkit2gtk3-devel-2.38.5-1.el8_8.3.s390x.rpm</filename>
          <sum type="sha256">ba2b0d04a459d677d6b382560d839ca2e889e326a0804a9af11cb30842c3d8e9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3109</id>
    <title>Important: apr-util security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:02:53"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>apr-util security update</summary>
    <description>The Apache Portable Runtime (APR) is a portability library used by the
Apache HTTP Server and other projects. apr-util is a library which provides
additional utility interfaces for APR; including support for XML parsing,
LDAP, database interfaces, URI parsing, and more.

Security Fix(es):

* apr-util: out-of-bounds writes in the apr_base64 (CVE-2022-25147)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3109" id="RHSA-2023:3109" type="rhsa" title="RHSA-2023:3109"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25147" id="CVE-2022-25147" type="cve" title="CVE-2022-25147"/>
      <reference href="https://bugzilla.redhat.com/2169652" id="2169652" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3109.html" id="ALSA-2023:3109" type="self" title="ALSA-2023:3109"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="apr-util-bdb" version="1.6.1" release="6.el8_8.1" epoch="0" arch="s390x" src="apr-util-1.6.1-6.el8_8.1.src.rpm">
          <filename>apr-util-bdb-1.6.1-6.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">00cfbdff65b4affccd633a0056e75ae02f0adfcc126bad469267768538acf3e7</sum>
        </package>
        <package name="apr-util" version="1.6.1" release="6.el8_8.1" epoch="0" arch="s390x" src="apr-util-1.6.1-6.el8_8.1.src.rpm">
          <filename>apr-util-1.6.1-6.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">196a818f65e67403c6eff2ba843c6181f0bddf87d3b640162025436183aaa466</sum>
        </package>
        <package name="apr-util-ldap" version="1.6.1" release="6.el8_8.1" epoch="0" arch="s390x" src="apr-util-1.6.1-6.el8_8.1.src.rpm">
          <filename>apr-util-ldap-1.6.1-6.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">24fdd9e6c8bbb0a730968e25a0ebec86ca2f3bb24d44b2eb234b923688de0dc5</sum>
        </package>
        <package name="apr-util-sqlite" version="1.6.1" release="6.el8_8.1" epoch="0" arch="s390x" src="apr-util-1.6.1-6.el8_8.1.src.rpm">
          <filename>apr-util-sqlite-1.6.1-6.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">3560ffd579bafa95283224f8dbca53171c6b8f645897d06981bf6528bcb4fff3</sum>
        </package>
        <package name="apr-util-odbc" version="1.6.1" release="6.el8_8.1" epoch="0" arch="s390x" src="apr-util-1.6.1-6.el8_8.1.src.rpm">
          <filename>apr-util-odbc-1.6.1-6.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">605cfc5a4bd597a4bd130b907bd20d414e13e932f5787a723ddd13a7548958f7</sum>
        </package>
        <package name="apr-util-pgsql" version="1.6.1" release="6.el8_8.1" epoch="0" arch="s390x" src="apr-util-1.6.1-6.el8_8.1.src.rpm">
          <filename>apr-util-pgsql-1.6.1-6.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">68aa96c9ee32026183c27716c0469a9e855ca4c7bb7543b5de4093ffaae04900</sum>
        </package>
        <package name="apr-util-openssl" version="1.6.1" release="6.el8_8.1" epoch="0" arch="s390x" src="apr-util-1.6.1-6.el8_8.1.src.rpm">
          <filename>apr-util-openssl-1.6.1-6.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">a44fcdb82cd52ea4060034d21a094d35cc4026287a586d865ae408976d845579</sum>
        </package>
        <package name="apr-util-mysql" version="1.6.1" release="6.el8_8.1" epoch="0" arch="s390x" src="apr-util-1.6.1-6.el8_8.1.src.rpm">
          <filename>apr-util-mysql-1.6.1-6.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">c56ee28f34196a2ef51efecf2788577bc73c5306302f7964ea1bfc6d32816d9e</sum>
        </package>
        <package name="apr-util-devel" version="1.6.1" release="6.el8_8.1" epoch="0" arch="s390x" src="apr-util-1.6.1-6.el8_8.1.src.rpm">
          <filename>apr-util-devel-1.6.1-6.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">f5e179582aae4609ad28ae9c0224b6b5ee22d4fd60c2c82c8cf6976e877b7952</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3220</id>
    <title>Important: firefox security update</title>
    <issued date="2023-05-18 00:00:00"/>
    <updated date="2023-05-19 22:00:13"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.11.0 ESR.

Security Fix(es):

* Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205)
* Mozilla: Crash in RLBox Expat driver (CVE-2023-32206)
* Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207)
* Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215)
* Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211)
* Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212)
* Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3220" id="RHSA-2023:3220" type="rhsa" title="RHSA-2023:3220"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32205" id="CVE-2023-32205" type="cve" title="CVE-2023-32205"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32206" id="CVE-2023-32206" type="cve" title="CVE-2023-32206"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32207" id="CVE-2023-32207" type="cve" title="CVE-2023-32207"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32211" id="CVE-2023-32211" type="cve" title="CVE-2023-32211"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32212" id="CVE-2023-32212" type="cve" title="CVE-2023-32212"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32213" id="CVE-2023-32213" type="cve" title="CVE-2023-32213"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32215" id="CVE-2023-32215" type="cve" title="CVE-2023-32215"/>
      <reference href="https://bugzilla.redhat.com/2196736" id="2196736" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196737" id="2196737" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196738" id="2196738" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196740" id="2196740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196741" id="2196741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196742" id="2196742" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196753" id="2196753" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3220.html" id="ALSA-2023:3220" type="self" title="ALSA-2023:3220"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="firefox" version="102.11.0" release="2.el8_7.alma" epoch="0" arch="s390x" src="firefox-102.11.0-2.el8_7.alma.src.rpm">
          <filename>firefox-102.11.0-2.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">f012a54d43464e6ba2d1cb9cbd572acc210fb773c307283cfdb7f808cb04cf49</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3221</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-05-18 00:00:00"/>
    <updated date="2023-05-19 22:00:14"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.11.0.

Security Fix(es):

* Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205)
* Mozilla: Crash in RLBox Expat driver (CVE-2023-32206)
* Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207)
* Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215)
* Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211)
* Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212)
* Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3221" id="RHSA-2023:3221" type="rhsa" title="RHSA-2023:3221"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32205" id="CVE-2023-32205" type="cve" title="CVE-2023-32205"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32206" id="CVE-2023-32206" type="cve" title="CVE-2023-32206"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32207" id="CVE-2023-32207" type="cve" title="CVE-2023-32207"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32211" id="CVE-2023-32211" type="cve" title="CVE-2023-32211"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32212" id="CVE-2023-32212" type="cve" title="CVE-2023-32212"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32213" id="CVE-2023-32213" type="cve" title="CVE-2023-32213"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32215" id="CVE-2023-32215" type="cve" title="CVE-2023-32215"/>
      <reference href="https://bugzilla.redhat.com/2196736" id="2196736" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196737" id="2196737" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196738" id="2196738" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196740" id="2196740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196741" id="2196741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196742" id="2196742" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196753" id="2196753" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3221.html" id="ALSA-2023:3221" type="self" title="ALSA-2023:3221"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="thunderbird" version="102.11.0" release="1.el8_7.alma" epoch="0" arch="s390x" src="thunderbird-102.11.0-1.el8_7.alma.src.rpm">
          <filename>thunderbird-102.11.0-1.el8_7.alma.s390x.rpm</filename>
          <sum type="sha256">8900a2690f764274bed2b44b82c146a04a9ba5e2cb9bd85d5936b2bff4094055</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3246</id>
    <title>Important: git security update</title>
    <issued date="2023-05-22 00:00:00"/>
    <updated date="2023-05-23 09:30:23"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git security update</summary>
    <description>Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.

Security Fix(es):

* git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (CVE-2023-25652)
* git: arbitrary configuration injection when renaming or deleting a section from a configuration file (CVE-2023-29007)
* git: data exfiltration with maliciously crafted repository (CVE-2023-22490)
* git: git apply: a path outside the working tree can be overwritten with crafted input (CVE-2023-23946)
* git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3246" id="RHSA-2023:3246" type="rhsa" title="RHSA-2023:3246"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22490" id="CVE-2023-22490" type="cve" title="CVE-2023-22490"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23946" id="CVE-2023-23946" type="cve" title="CVE-2023-23946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25652" id="CVE-2023-25652" type="cve" title="CVE-2023-25652"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25815" id="CVE-2023-25815" type="cve" title="CVE-2023-25815"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29007" id="CVE-2023-29007" type="cve" title="CVE-2023-29007"/>
      <reference href="https://bugzilla.redhat.com/2168160" id="2168160" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2168161" id="2168161" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188333" id="2188333" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188337" id="2188337" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188338" id="2188338" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3246.html" id="ALSA-2023:3246" type="self" title="ALSA-2023:3246"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="gitk" version="2.39.3" release="1.el8_8" epoch="0" arch="noarch" src="git-2.39.3-1.el8_8.src.rpm">
          <filename>gitk-2.39.3-1.el8_8.noarch.rpm</filename>
          <sum type="sha256">180edef96d1074818e972bb8f4206fea2201869215e0d8376470c52a6c35c48f</sum>
        </package>
        <package name="git-subtree" version="2.39.3" release="1.el8_8" epoch="0" arch="s390x" src="git-2.39.3-1.el8_8.src.rpm">
          <filename>git-subtree-2.39.3-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">34e7a4fe381f50995c315f28c3519a8ad657b54f4744c0652519e32c20db1025</sum>
        </package>
        <package name="git-credential-libsecret" version="2.39.3" release="1.el8_8" epoch="0" arch="s390x" src="git-2.39.3-1.el8_8.src.rpm">
          <filename>git-credential-libsecret-2.39.3-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">37877ed3415c3933b2928cffbf4b3badf494dac70767725e7dfa06b05a25233a</sum>
        </package>
        <package name="git-daemon" version="2.39.3" release="1.el8_8" epoch="0" arch="s390x" src="git-2.39.3-1.el8_8.src.rpm">
          <filename>git-daemon-2.39.3-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">3828574613fd06198215ec1ce1e17560e56a94ea714acb6a7543302e4b537793</sum>
        </package>
        <package name="perl-Git-SVN" version="2.39.3" release="1.el8_8" epoch="0" arch="noarch" src="git-2.39.3-1.el8_8.src.rpm">
          <filename>perl-Git-SVN-2.39.3-1.el8_8.noarch.rpm</filename>
          <sum type="sha256">4066d3303e606c889add98cc0d069ac420666eeb957106cda192992c1d52fe11</sum>
        </package>
        <package name="git-all" version="2.39.3" release="1.el8_8" epoch="0" arch="noarch" src="git-2.39.3-1.el8_8.src.rpm">
          <filename>git-all-2.39.3-1.el8_8.noarch.rpm</filename>
          <sum type="sha256">41f7dbe606a206fb19443ea731f73a82ac039d08f5315e36c0a52a43c1cab2e1</sum>
        </package>
        <package name="git-gui" version="2.39.3" release="1.el8_8" epoch="0" arch="noarch" src="git-2.39.3-1.el8_8.src.rpm">
          <filename>git-gui-2.39.3-1.el8_8.noarch.rpm</filename>
          <sum type="sha256">499936e945a6ca0254faceaf95da532ed71bba81554e963fb41cb8878655152a</sum>
        </package>
        <package name="git-instaweb" version="2.39.3" release="1.el8_8" epoch="0" arch="noarch" src="git-2.39.3-1.el8_8.src.rpm">
          <filename>git-instaweb-2.39.3-1.el8_8.noarch.rpm</filename>
          <sum type="sha256">4af8a7cc25ec4328c3e42447d539b6769c575973cdd1f2286fa9a3c1c7221af5</sum>
        </package>
        <package name="git" version="2.39.3" release="1.el8_8" epoch="0" arch="s390x" src="git-2.39.3-1.el8_8.src.rpm">
          <filename>git-2.39.3-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">5a60f5bcdd93903016b16c77ce2b3af135033bfd6191b5d66c5b90858fc8dae2</sum>
        </package>
        <package name="git-core" version="2.39.3" release="1.el8_8" epoch="0" arch="s390x" src="git-2.39.3-1.el8_8.src.rpm">
          <filename>git-core-2.39.3-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">60fc99721e3e7c5db9cca35ad5ab96b07b8fb9728170ab6a56fbeb035eff7851</sum>
        </package>
        <package name="gitweb" version="2.39.3" release="1.el8_8" epoch="0" arch="noarch" src="git-2.39.3-1.el8_8.src.rpm">
          <filename>gitweb-2.39.3-1.el8_8.noarch.rpm</filename>
          <sum type="sha256">73040e605ce09ede7112de3e8671ed4cb87542d3b9062758c711e6262f70483b</sum>
        </package>
        <package name="git-svn" version="2.39.3" release="1.el8_8" epoch="0" arch="noarch" src="git-2.39.3-1.el8_8.src.rpm">
          <filename>git-svn-2.39.3-1.el8_8.noarch.rpm</filename>
          <sum type="sha256">7f5f31c233c53c0338ec3f9eca352bdaca0cc3f6a024dd343792b86eff008c8c</sum>
        </package>
        <package name="git-core-doc" version="2.39.3" release="1.el8_8" epoch="0" arch="noarch" src="git-2.39.3-1.el8_8.src.rpm">
          <filename>git-core-doc-2.39.3-1.el8_8.noarch.rpm</filename>
          <sum type="sha256">afb6b79a271b4d2315aac0b3671984d453cf603bd429c2dd6397fa5ddbdee6ca</sum>
        </package>
        <package name="perl-Git" version="2.39.3" release="1.el8_8" epoch="0" arch="noarch" src="git-2.39.3-1.el8_8.src.rpm">
          <filename>perl-Git-2.39.3-1.el8_8.noarch.rpm</filename>
          <sum type="sha256">affdca44c0c45a0fd113d674f673549381d5c53767bb25f572f07f274489ece2</sum>
        </package>
        <package name="git-email" version="2.39.3" release="1.el8_8" epoch="0" arch="noarch" src="git-2.39.3-1.el8_8.src.rpm">
          <filename>git-email-2.39.3-1.el8_8.noarch.rpm</filename>
          <sum type="sha256">fc41dc697ca34c2276bb54b9db9235cb3b4d11afa37ea8f9273bc25d1b87cd49</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3319</id>
    <title>Important: go-toolset:rhel8 security update</title>
    <issued date="2023-05-25 00:00:00"/>
    <updated date="2023-05-26 10:00:17"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>go-toolset:rhel8 security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. 

Security Fix(es):

* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3319" id="RHSA-2023:3319" type="rhsa" title="RHSA-2023:3319"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24540" id="CVE-2023-24540" type="cve" title="CVE-2023-24540"/>
      <reference href="https://bugzilla.redhat.com/2196027" id="2196027" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3319.html" id="ALSA-2023:3319" type="self" title="ALSA-2023:3319"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="go-toolset" stream="rhel8" version="8080020230525080455" context="b754926a" arch="s390x"/>
        <package name="golang-bin" version="1.19.9" release="1.module_el8.8.0+3570+5dc5ffc3" epoch="0" arch="s390x" src="golang-1.19.9-1.module_el8.8.0+3570+5dc5ffc3.src.rpm">
          <filename>golang-bin-1.19.9-1.module_el8.8.0+3570+5dc5ffc3.s390x.rpm</filename>
          <sum type="sha256">4a5dfb6fedacc6771caaf8074d8daa638ee576c5cd92b18fd3a6b3aff1dd7551</sum>
        </package>
        <package name="golang-docs" version="1.19.9" release="1.module_el8.8.0+3570+5dc5ffc3" epoch="0" arch="noarch" src="golang-1.19.9-1.module_el8.8.0+3570+5dc5ffc3.src.rpm">
          <filename>golang-docs-1.19.9-1.module_el8.8.0+3570+5dc5ffc3.noarch.rpm</filename>
          <sum type="sha256">4d423a207f65371b67601c099e0f4000033f99ffc2096628cc27dd00add617d4</sum>
        </package>
        <package name="golang-src" version="1.19.9" release="1.module_el8.8.0+3570+5dc5ffc3" epoch="0" arch="noarch" src="golang-1.19.9-1.module_el8.8.0+3570+5dc5ffc3.src.rpm">
          <filename>golang-src-1.19.9-1.module_el8.8.0+3570+5dc5ffc3.noarch.rpm</filename>
          <sum type="sha256">5d611dbb3edcc487a6039aa980f96708968cf595f98fc4f6092bb6631e6535e7</sum>
        </package>
        <package name="go-toolset" version="1.19.9" release="1.module_el8.8.0+3570+5dc5ffc3" epoch="0" arch="s390x" src="go-toolset-1.19.9-1.module_el8.8.0+3570+5dc5ffc3.src.rpm">
          <filename>go-toolset-1.19.9-1.module_el8.8.0+3570+5dc5ffc3.s390x.rpm</filename>
          <sum type="sha256">611b47b1a3a974eea95646a5c9985999690fb6d0475fdffaf29b40d1c22c7682</sum>
        </package>
        <package name="golang-misc" version="1.19.9" release="1.module_el8.8.0+3570+5dc5ffc3" epoch="0" arch="noarch" src="golang-1.19.9-1.module_el8.8.0+3570+5dc5ffc3.src.rpm">
          <filename>golang-misc-1.19.9-1.module_el8.8.0+3570+5dc5ffc3.noarch.rpm</filename>
          <sum type="sha256">92a302b412ba789db1fb31c649875bd93f6481ef02e8147babaabea7730e2aea</sum>
        </package>
        <package name="golang-tests" version="1.19.9" release="1.module_el8.8.0+3570+5dc5ffc3" epoch="0" arch="noarch" src="golang-1.19.9-1.module_el8.8.0+3570+5dc5ffc3.src.rpm">
          <filename>golang-tests-1.19.9-1.module_el8.8.0+3570+5dc5ffc3.noarch.rpm</filename>
          <sum type="sha256">ac1cf32dca58ebbd030469f167d2f1bf5cd7fdc1cc3a66c4ca0311f5aab237e7</sum>
        </package>
        <package name="golang" version="1.19.9" release="1.module_el8.8.0+3570+5dc5ffc3" epoch="0" arch="s390x" src="golang-1.19.9-1.module_el8.8.0+3570+5dc5ffc3.src.rpm">
          <filename>golang-1.19.9-1.module_el8.8.0+3570+5dc5ffc3.s390x.rpm</filename>
          <sum type="sha256">e8beba8254661e99dfdb5c6b7d99f549f64b56c439be5af280ccae888f7b53da</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3425</id>
    <title>Important: cups-filters security update</title>
    <issued date="2023-06-05 00:00:00"/>
    <updated date="2023-06-06 06:02:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>cups-filters security update</summary>
    <description>The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently. 

Security Fix(es):

* cups-filters: remote code execution in cups-filters, beh CUPS backend (CVE-2023-24805)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3425" id="RHSA-2023:3425" type="rhsa" title="RHSA-2023:3425"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24805" id="CVE-2023-24805" type="cve" title="CVE-2023-24805"/>
      <reference href="https://bugzilla.redhat.com/2203051" id="2203051" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3425.html" id="ALSA-2023:3425" type="self" title="ALSA-2023:3425"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="cups-filters-libs" version="1.20.0" release="29.el8_8.2" epoch="0" arch="s390x" src="cups-filters-1.20.0-29.el8_8.2.src.rpm">
          <filename>cups-filters-libs-1.20.0-29.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">a63ee2a8feb165dac9f3fc46eac879c52f39ba7cbc308fcb9c9093ae516d2eba</sum>
        </package>
        <package name="cups-filters" version="1.20.0" release="29.el8_8.2" epoch="0" arch="s390x" src="cups-filters-1.20.0-29.el8_8.2.src.rpm">
          <filename>cups-filters-1.20.0-29.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">b674f6b9bd292860cde1fcde476dcb08c4055019db407e218fc998fd4b2fd437</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3433</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2023-06-05 00:00:00"/>
    <updated date="2023-06-06 06:21:22"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: a use-after-free when processing maliciously crafted web content (CVE-2023-32373)
* webkitgtk: an out-of-bounds read when processing malicious content (CVE-2023-28204)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3433" id="RHSA-2023:3433" type="rhsa" title="RHSA-2023:3433"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28204" id="CVE-2023-28204" type="cve" title="CVE-2023-28204"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32373" id="CVE-2023-32373" type="cve" title="CVE-2023-32373"/>
      <reference href="https://bugzilla.redhat.com/2209208" id="2209208" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209214" id="2209214" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3433.html" id="ALSA-2023:3433" type="self" title="ALSA-2023:3433"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="webkit2gtk3-devel" version="2.38.5" release="1.el8_8.4" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el8_8.4.src.rpm">
          <filename>webkit2gtk3-devel-2.38.5-1.el8_8.4.s390x.rpm</filename>
          <sum type="sha256">379ddfa6d07aea3c9b4a7e012f72be1ac58036feaaeafdddc98665d13f3bd976</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.38.5" release="1.el8_8.4" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el8_8.4.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.38.5-1.el8_8.4.s390x.rpm</filename>
          <sum type="sha256">54b66cbe5f5542888a0e316fb172d48e454ddbe677da7f73d133cbb919e7f370</sum>
        </package>
        <package name="webkit2gtk3" version="2.38.5" release="1.el8_8.4" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el8_8.4.src.rpm">
          <filename>webkit2gtk3-2.38.5-1.el8_8.4.s390x.rpm</filename>
          <sum type="sha256">61511d12f6daa3e7de223a5ca4413af44e23b406d220b7b68bc7d366d73718d1</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.38.5" release="1.el8_8.4" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el8_8.4.src.rpm">
          <filename>webkit2gtk3-jsc-2.38.5-1.el8_8.4.s390x.rpm</filename>
          <sum type="sha256">9b92c11babb422e7b1fec8da7d25fe7869944959e216d3b2d1ba5f620a386b9e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3582</id>
    <title>Important: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-24 08:08:37"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.118 and .NET Runtime 6.0.18.

The following packages have been upgraded to a later upstream version: dotnet6.0 (6.0.118). (BZ#2212378)

Security Fix(es):

* dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)
* dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack (CVE-2023-29337)
* dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap corruption (CVE-2023-33128)
* dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3582" id="RHSA-2023:3582" type="rhsa" title="RHSA-2023:3582"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24936" id="CVE-2023-24936" type="cve" title="CVE-2023-24936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29331" id="CVE-2023-29331" type="cve" title="CVE-2023-29331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29337" id="CVE-2023-29337" type="cve" title="CVE-2023-29337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33128" id="CVE-2023-33128" type="cve" title="CVE-2023-33128"/>
      <reference href="https://bugzilla.redhat.com/2192438" id="2192438" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212617" id="2212617" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212618" id="2212618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213703" id="2213703" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3582.html" id="ALSA-2023:3582" type="self" title="ALSA-2023:3582"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="dotnet-apphost-pack-6.0" version="6.0.18" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.118-1.el8_8.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.18-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">11b6fe2fa9f3817e8b149ae837df0bf68323a147200c2c01cea454f5c9d9f463</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.18" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.118-1.el8_8.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.18-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">16b653f0f9a9c80172f0d21101662e6314f3fc8f486a8a438f5f896d91698a59</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.118" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.118-1.el8_8.src.rpm">
          <filename>dotnet-templates-6.0-6.0.118-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">2433ce23eecbcad9d8690e9b7814ec85d6e66eb97878457c6fb3aabf4ad3aa50</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.18" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.118-1.el8_8.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.18-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">454b4a1afb891a8530acd184b66a335873778a7f1d7bd12bfa00a68e4b2bb5ef</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.18" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.118-1.el8_8.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.18-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">5be9fcb9e0bcba6453e95a1c69f4d4f3a3a708fd4ece8ccf344e14a954252bee</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.18" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.118-1.el8_8.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.18-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">d0ea9a86d9393ee8f512b7a50a650cde7d3cf06ef4c7f0043bf8074c26545cb6</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.18" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.118-1.el8_8.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.18-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">e8873e8c18ed3d9889c2859cc67dde601e312c40051272c7f765318fd6ad0e9c</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.118" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.118-1.el8_8.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.118-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">ec0c59476adf26d7f17698dbb81d89df806cdbdf298e8ccaba15eff332b303de</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3588</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-21 14:34:35"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.12.0.

Security Fix(es):

* Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)
* Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3588" id="RHSA-2023:3588" type="rhsa" title="RHSA-2023:3588"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34414" id="CVE-2023-34414" type="cve" title="CVE-2023-34414"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34416" id="CVE-2023-34416" type="cve" title="CVE-2023-34416"/>
      <reference href="https://bugzilla.redhat.com/2212841" id="2212841" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212842" id="2212842" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3588.html" id="ALSA-2023:3588" type="self" title="ALSA-2023:3588"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="thunderbird" version="102.12.0" release="1.el8_8.alma" epoch="0" arch="s390x" src="thunderbird-102.12.0-1.el8_8.alma.src.rpm">
          <filename>thunderbird-102.12.0-1.el8_8.alma.s390x.rpm</filename>
          <sum type="sha256">31a739b51ed9c10dfd6240d04446df03d5eaffe6b41b91de04e0047e4d5902cc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3590</id>
    <title>Important: firefox security update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-21 14:26:36"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.12.0 ESR.

Security Fix(es):

* Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)
* Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3590" id="RHSA-2023:3590" type="rhsa" title="RHSA-2023:3590"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34414" id="CVE-2023-34414" type="cve" title="CVE-2023-34414"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34416" id="CVE-2023-34416" type="cve" title="CVE-2023-34416"/>
      <reference href="https://bugzilla.redhat.com/2212841" id="2212841" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212842" id="2212842" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3590.html" id="ALSA-2023:3590" type="self" title="ALSA-2023:3590"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="firefox" version="102.12.0" release="1.el8_8.alma" epoch="0" arch="s390x" src="firefox-102.12.0-1.el8_8.alma.src.rpm">
          <filename>firefox-102.12.0-1.el8_8.alma.s390x.rpm</filename>
          <sum type="sha256">9e5069c033c35b7fd6ef49b08b37352da17958aeddca05193adcc7131a451fd4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3591</id>
    <title>Important: python3 security update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-22 16:17:42"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: urllib.parse url blocklisting bypass (CVE-2023-24329)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3591" id="RHSA-2023:3591" type="rhsa" title="RHSA-2023:3591"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24329" id="CVE-2023-24329" type="cve" title="CVE-2023-24329"/>
      <reference href="https://bugzilla.redhat.com/2173917" id="2173917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3591.html" id="ALSA-2023:3591" type="self" title="ALSA-2023:3591"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="python3-tkinter" version="3.6.8" release="51.el8_8.1.alma" epoch="0" arch="s390x" src="python3-3.6.8-51.el8_8.1.alma.src.rpm">
          <filename>python3-tkinter-3.6.8-51.el8_8.1.alma.s390x.rpm</filename>
          <sum type="sha256">1e5b154016739dfed8b72ff1eb46529a59bd70fed9b8993a5caf9d3b961a2590</sum>
        </package>
        <package name="platform-python-debug" version="3.6.8" release="51.el8_8.1.alma" epoch="0" arch="s390x" src="python3-3.6.8-51.el8_8.1.alma.src.rpm">
          <filename>platform-python-debug-3.6.8-51.el8_8.1.alma.s390x.rpm</filename>
          <sum type="sha256">8403abc86d711104f3827c68830a6aa95edce0254a8784707103a00c235a7b38</sum>
        </package>
        <package name="python3-idle" version="3.6.8" release="51.el8_8.1.alma" epoch="0" arch="s390x" src="python3-3.6.8-51.el8_8.1.alma.src.rpm">
          <filename>python3-idle-3.6.8-51.el8_8.1.alma.s390x.rpm</filename>
          <sum type="sha256">c69642a52f48999bfb0067e0eb00a4278bcd3140651d47d341a5941e4a8bdf32</sum>
        </package>
        <package name="platform-python-devel" version="3.6.8" release="51.el8_8.1.alma" epoch="0" arch="s390x" src="python3-3.6.8-51.el8_8.1.alma.src.rpm">
          <filename>platform-python-devel-3.6.8-51.el8_8.1.alma.s390x.rpm</filename>
          <sum type="sha256">f157e98b4f090bb2df29fc5a13e13115ba4d2b1256c7876eebfc04e875a192e6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3593</id>
    <title>Important: .NET 7.0 security, bug fix, and enhancement update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-23 14:06:07"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.107 and .NET Runtime 7.0.7.

The following packages have been upgraded to a later upstream version: dotnet7.0 (7.0.107). (BZ#2211876)

Security Fix(es):

* dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)
* dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack (CVE-2023-29337)
* dotnet: Elevation of privilege - TarFile.ExtractToDirectory ignores extraction directory argument (CVE-2023-32032)
* dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap corruption (CVE-2023-33128)
* dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3593" id="RHSA-2023:3593" type="rhsa" title="RHSA-2023:3593"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24936" id="CVE-2023-24936" type="cve" title="CVE-2023-24936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29331" id="CVE-2023-29331" type="cve" title="CVE-2023-29331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29337" id="CVE-2023-29337" type="cve" title="CVE-2023-29337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32032" id="CVE-2023-32032" type="cve" title="CVE-2023-32032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33128" id="CVE-2023-33128" type="cve" title="CVE-2023-33128"/>
      <reference href="https://bugzilla.redhat.com/2192438" id="2192438" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212615" id="2212615" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212617" id="2212617" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212618" id="2212618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213703" id="2213703" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3593.html" id="ALSA-2023:3593" type="self" title="ALSA-2023:3593"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="netstandard-targeting-pack-2.1" version="7.0.107" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.107-1.el8_8.src.rpm">
          <filename>netstandard-targeting-pack-2.1-7.0.107-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">0d3960ce0015ea3512320ae9c6dff0272c06a5d2952d6e29b04a9ee594928b66</sum>
        </package>
        <package name="aspnetcore-runtime-7.0" version="7.0.7" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.107-1.el8_8.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.7-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">27147e65d7fc376f4d54824022850ff1f3c434770e19d4e4f33bbda5c62880c1</sum>
        </package>
        <package name="dotnet-apphost-pack-7.0" version="7.0.7" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.107-1.el8_8.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.7-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">50df8e29c0e6ba73568e4648146327286e9257dc4081b334df5488d468c97d69</sum>
        </package>
        <package name="dotnet-runtime-7.0" version="7.0.7" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.107-1.el8_8.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.7-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">53ab455694488d6c6e54dfeb1f2938fd6ef4b7bb61a263ea4b93b513207d6cb7</sum>
        </package>
        <package name="dotnet-hostfxr-7.0" version="7.0.7" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.107-1.el8_8.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.7-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">62d01ed32beab64922ecee442ce7568e0f71c98df43e4eee6f63b4e958bc8986</sum>
        </package>
        <package name="dotnet-targeting-pack-7.0" version="7.0.7" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.107-1.el8_8.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.7-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">67f3e49ed268cd064b0668b5dcef0904486252b6cf597b0d4bf9fae9a72b97c8</sum>
        </package>
        <package name="dotnet" version="7.0.107" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.107-1.el8_8.src.rpm">
          <filename>dotnet-7.0.107-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">7bc15b454d9e5157fc79391e16692d1128cd86db0b8882a9f781d3fb0389e866</sum>
        </package>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.7" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.107-1.el8_8.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.7-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">8f9da4cbe8304b15029ca3b3036165eeeb1f46f78ea1b3796d7efa46d4b96e36</sum>
        </package>
        <package name="dotnet-sdk-7.0" version="7.0.107" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.107-1.el8_8.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.107-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">bb8c588a857914386ea5aac48a6eaa3e0fa9229ece2096b61446b4a081d5e2c1</sum>
        </package>
        <package name="dotnet-host" version="7.0.7" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.107-1.el8_8.src.rpm">
          <filename>dotnet-host-7.0.7-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">bcc26fa2d79bce0013d2bdc17cd4ac648bfeaf92060206f35b401385be7ffcd3</sum>
        </package>
        <package name="dotnet-templates-7.0" version="7.0.107" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.107-1.el8_8.src.rpm">
          <filename>dotnet-templates-7.0-7.0.107-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">d91fced5bd8a8bf13babe45ef37a2128873f99fdf0f980dfcc019d18b847a54a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3594</id>
    <title>Important: python3.11 security update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-22 12:05:15"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.

Security Fix(es):

* python: urllib.parse url blocklisting bypass (CVE-2023-24329)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3594" id="RHSA-2023:3594" type="rhsa" title="RHSA-2023:3594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24329" id="CVE-2023-24329" type="cve" title="CVE-2023-24329"/>
      <reference href="https://bugzilla.redhat.com/2173917" id="2173917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3594.html" id="ALSA-2023:3594" type="self" title="ALSA-2023:3594"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="python3.11-devel" version="3.11.2" release="2.el8_8.1" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el8_8.1.src.rpm">
          <filename>python3.11-devel-3.11.2-2.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">025f370e7764688b1c89d65a0eb8cf4c60b094a755df7d9493aecd765aa1ea46</sum>
        </package>
        <package name="python3.11-rpm-macros" version="3.11.2" release="2.el8_8.1" epoch="0" arch="noarch" src="python3.11-3.11.2-2.el8_8.1.src.rpm">
          <filename>python3.11-rpm-macros-3.11.2-2.el8_8.1.noarch.rpm</filename>
          <sum type="sha256">0c63f16f4bf33f298cb7fdcc7b03dfe2cb595a7e5fe8124d9ccf4e2a2f378e6c</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.2" release="2.el8_8.1" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el8_8.1.src.rpm">
          <filename>python3.11-tkinter-3.11.2-2.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">62bc20626c0b47fdfbedcc4d7c331b0ff634917864933aaa497fbdbd72b5ce4f</sum>
        </package>
        <package name="python3.11-libs" version="3.11.2" release="2.el8_8.1" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el8_8.1.src.rpm">
          <filename>python3.11-libs-3.11.2-2.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">a69047075b080d851cb2a6e36d56a5652c8a3f5f12f0d2a5bc27af3fb785520b</sum>
        </package>
        <package name="python3.11" version="3.11.2" release="2.el8_8.1" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el8_8.1.src.rpm">
          <filename>python3.11-3.11.2-2.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">f7b30ade7cc41f1b0d8456af2a6cb2132e534c598bb213c5e6e68b6fb1e438f0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3780</id>
    <title>Important: python27:2.7 security update</title>
    <issued date="2023-06-22 00:00:00"/>
    <updated date="2023-06-30 19:48:27"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python27:2.7 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL.

Security Fix(es):

* python: urllib.parse url blocklisting bypass (CVE-2023-24329)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3780" id="RHSA-2023:3780" type="rhsa" title="RHSA-2023:3780"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24329" id="CVE-2023-24329" type="cve" title="CVE-2023-24329"/>
      <reference href="https://bugzilla.redhat.com/2173917" id="2173917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3780.html" id="ALSA-2023:3780" type="self" title="ALSA-2023:3780"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="python27" stream="2.7" version="8080020230630142840" context="9edba152" arch="s390x"/>
        <package name="python2-virtualenv" version="15.1.0" release="22.module_el8.8.0+3580+eeda85da" epoch="0" arch="noarch" src="python-virtualenv-15.1.0-22.module_el8.8.0+3580+eeda85da.src.rpm">
          <filename>python2-virtualenv-15.1.0-22.module_el8.8.0+3580+eeda85da.noarch.rpm</filename>
          <sum type="sha256">202ff137c90bcd0e5f65f198c2b5ea4b1b493fd3bd4e0db830fedc3e82b0dbfe</sum>
        </package>
        <package name="python2-tools" version="2.7.18" release="13.module_el8.8.0+3580+eeda85da.1.alma" epoch="0" arch="s390x" src="python2-2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma.src.rpm">
          <filename>python2-tools-2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma.s390x.rpm</filename>
          <sum type="sha256">24f20c79b7441724710d0e2a036651f5400a05195b6906296753c6df1f709791</sum>
        </package>
        <package name="python2-test" version="2.7.18" release="13.module_el8.8.0+3580+eeda85da.1.alma" epoch="0" arch="s390x" src="python2-2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma.src.rpm">
          <filename>python2-test-2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma.s390x.rpm</filename>
          <sum type="sha256">263393b32e9ad027d8a9edc27c6ef09826b23ec9697ab5a66ac9297701ce10f3</sum>
        </package>
        <package name="python2-Cython" version="0.28.1" release="7.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="Cython-0.28.1-7.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-Cython-0.28.1-7.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">33e5c6fee3819774cc5605ac9884d333321fd0e18a2e6ad15bd4cc626854bf92</sum>
        </package>
        <package name="python2-lxml" version="4.2.3" release="6.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-lxml-4.2.3-6.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-lxml-4.2.3-6.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">34d05166229eef26e630797e84fd32f0aa76104895186ba2de4852d1931449c2</sum>
        </package>
        <package name="python2-libs" version="2.7.18" release="13.module_el8.8.0+3580+eeda85da.1.alma" epoch="0" arch="s390x" src="python2-2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma.src.rpm">
          <filename>python2-libs-2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma.s390x.rpm</filename>
          <sum type="sha256">4ca2a2336f8113056096be6b0353dc0553709785a653c58db78b5c0a2cfc0755</sum>
        </package>
        <package name="python2-markupsafe" version="0.23" release="19.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-markupsafe-0.23-19.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-markupsafe-0.23-19.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">4df63f354ef866a6834b7ae6bbf00de4e90db40a23c0175d0a8e091f46c3831b</sum>
        </package>
        <package name="python2-numpy-f2py" version="1.14.2" release="16.module_el8.6.0+3162+01a09e5a" epoch="1" arch="s390x" src="numpy-1.14.2-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-numpy-f2py-1.14.2-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">5122909fad88771bdc7f253154548be55681207a76858df98d83aee4c019fb99</sum>
        </package>
        <package name="python-psycopg2-doc" version="2.7.5" release="7.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-7.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python-psycopg2-doc-2.7.5-7.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">5244c8d18dfd502b39b8ef31626e36d7fad138955a3e659b6a0aa1f41c37e45b</sum>
        </package>
        <package name="python2-psycopg2-tests" version="2.7.5" release="7.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-7.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-psycopg2-tests-2.7.5-7.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">5531ddd2cf70dd5de39bd273d89c0cbb56da7a0b546589c5cd1a4f68d21546d2</sum>
        </package>
        <package name="python2-pymongo" version="3.7.0" release="1.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">6b7bcb16061d074203f3da5d62159766e919e5fc57ef7c9df634c2d56dbe44e1</sum>
        </package>
        <package name="python2-scipy" version="1.0.0" release="21.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="scipy-1.0.0-21.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-scipy-1.0.0-21.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">81de1440a78869d680e428d1a0bca31199b203067f1d24c27c6676507af7c68f</sum>
        </package>
        <package name="python2-psycopg2-debug" version="2.7.5" release="7.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-7.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-psycopg2-debug-2.7.5-7.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">83fda0ce9cab16410651f67b969d7a8bd6bdeeb57844f48416c137e5a2490135</sum>
        </package>
        <package name="python2-numpy" version="1.14.2" release="16.module_el8.6.0+3162+01a09e5a" epoch="1" arch="s390x" src="numpy-1.14.2-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-numpy-1.14.2-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">852f2d82ccc6de54efa8bf6c6dcf9ede79257d3aa5144c12fc290d43e20b4ab1</sum>
        </package>
        <package name="python2-sqlalchemy" version="1.3.2" release="2.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-sqlalchemy-1.3.2-2.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-sqlalchemy-1.3.2-2.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">854347b4f4c344b9ee4f49435eb2f75b9be1a134ed76388c16d4affae402f809</sum>
        </package>
        <package name="python2-devel" version="2.7.18" release="13.module_el8.8.0+3580+eeda85da.1.alma" epoch="0" arch="s390x" src="python2-2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma.src.rpm">
          <filename>python2-devel-2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma.s390x.rpm</filename>
          <sum type="sha256">875ea53fc70a0574fbb2c7875c77038758b2ab3553dcaec3a37c111ca3f8abfd</sum>
        </package>
        <package name="python2-backports" version="1.0" release="16.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-backports-1.0-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-backports-1.0-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">8ce54e96fff1eff1c45e38503fc221bb6e8866180e9e558fe581fa8cc4059796</sum>
        </package>
        <package name="python2-tkinter" version="2.7.18" release="13.module_el8.8.0+3580+eeda85da.1.alma" epoch="0" arch="s390x" src="python2-2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma.src.rpm">
          <filename>python2-tkinter-2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma.s390x.rpm</filename>
          <sum type="sha256">93213f35c505de96d10eb789e6bc5758f1c1064321d8219a13d315de5805d730</sum>
        </package>
        <package name="python2-pymongo-gridfs" version="3.7.0" release="1.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-pymongo-gridfs-3.7.0-1.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">b28d3022855edc1cc4a549f1d3ce67a23d2da958f852bbf7821b325e67895d64</sum>
        </package>
        <package name="python2-debug" version="2.7.18" release="13.module_el8.8.0+3580+eeda85da.1.alma" epoch="0" arch="s390x" src="python2-2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma.src.rpm">
          <filename>python2-debug-2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma.s390x.rpm</filename>
          <sum type="sha256">bfa6c2b0844230b2811b098e316f8dd54258f86294b9eb1e3e0d3ecaf9a5b2f0</sum>
        </package>
        <package name="python2-bson" version="3.7.0" release="1.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-bson-3.7.0-1.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">de74cd7b4f4870f2bac803f8a8aeca7062cc342d4bf9533f9939bf03f306ebfb</sum>
        </package>
        <package name="python2-psycopg2" version="2.7.5" release="7.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-7.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-psycopg2-2.7.5-7.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">dfef98c52b1b501aac8ea1b769a1db7cca4665eb671e41f824cd894346493e6b</sum>
        </package>
        <package name="python2-coverage" version="4.5.1" release="4.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-coverage-4.5.1-4.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-coverage-4.5.1-4.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">e24b9859ffcdb0d4bd5c3bc2ad9395b0aa55175b96fd08d2a7ae4b026d2ee0ed</sum>
        </package>
        <package name="python2" version="2.7.18" release="13.module_el8.8.0+3580+eeda85da.1.alma" epoch="0" arch="s390x" src="python2-2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma.src.rpm">
          <filename>python2-2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma.s390x.rpm</filename>
          <sum type="sha256">e9af5b260a8ebad20b8c6c0e241471f07797a20edfeb98fc20788b964bc1ae3f</sum>
        </package>
        <package name="python2-pyyaml" version="3.12" release="16.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="PyYAML-3.12-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-pyyaml-3.12-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">fd83c9d2f395a877fc6cc657333bc13305e5d5ebe62c39ec0e2040e8e36542e7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3781</id>
    <title>Important: python38:3.8 and python38-devel:3.8 security update</title>
    <issued date="2023-06-22 00:00:00"/>
    <updated date="2023-06-30 15:17:04"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python38:3.8 and python38-devel:3.8 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. 

Security Fix(es):

* python: urllib.parse url blocklisting bypass (CVE-2023-24329)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3781" id="RHSA-2023:3781" type="rhsa" title="RHSA-2023:3781"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24329" id="CVE-2023-24329" type="cve" title="CVE-2023-24329"/>
      <reference href="https://bugzilla.redhat.com/2173917" id="2173917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3781.html" id="ALSA-2023:3781" type="self" title="ALSA-2023:3781"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="python38" stream="3.8" version="8080020230630114531" context="a51370e3" arch="s390x"/>
        <package name="python38-scipy" version="1.3.1" release="4.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="scipy-1.3.1-4.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-scipy-1.3.1-4.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">1d6d7820b635f332143f691d85f916c40ed3d8fcbd3466346803caf5611b569f</sum>
        </package>
        <package name="python38-rpm-macros" version="3.8.16" release="1.module_el8.8.0+3576+cd671ecd.1" epoch="0" arch="noarch" src="python38-3.8.16-1.module_el8.8.0+3576+cd671ecd.1.src.rpm">
          <filename>python38-rpm-macros-3.8.16-1.module_el8.8.0+3576+cd671ecd.1.noarch.rpm</filename>
          <sum type="sha256">2433b15320950806c765761850e82176110b0af46d0cda079c6b6a1cd7d342bc</sum>
        </package>
        <package name="python38-debug" version="3.8.16" release="1.module_el8.8.0+3576+cd671ecd.1" epoch="0" arch="s390x" src="python38-3.8.16-1.module_el8.8.0+3576+cd671ecd.1.src.rpm">
          <filename>python38-debug-3.8.16-1.module_el8.8.0+3576+cd671ecd.1.s390x.rpm</filename>
          <sum type="sha256">265217f55bed0b568f14e74ecb9c083158944bd503396268866b88353df15b8d</sum>
        </package>
        <package name="python38-tkinter" version="3.8.16" release="1.module_el8.8.0+3576+cd671ecd.1" epoch="0" arch="s390x" src="python38-3.8.16-1.module_el8.8.0+3576+cd671ecd.1.src.rpm">
          <filename>python38-tkinter-3.8.16-1.module_el8.8.0+3576+cd671ecd.1.s390x.rpm</filename>
          <sum type="sha256">2f38165ede2dc497de2fa7d6deec676d18c10f25a9b691a956dcf3cda47e17af</sum>
        </package>
        <package name="python38-psycopg2" version="2.8.4" release="4.module_el8.7.0+3344+99a6a656" epoch="0" arch="s390x" src="python-psycopg2-2.8.4-4.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-psycopg2-2.8.4-4.module_el8.7.0+3344+99a6a656.s390x.rpm</filename>
          <sum type="sha256">30db40e718410952d3168ec995a3a3e6a88afa5543f3b1f2d2ee69ebfbacb49d</sum>
        </package>
        <package name="python38-libs" version="3.8.16" release="1.module_el8.8.0+3576+cd671ecd.1" epoch="0" arch="s390x" src="python38-3.8.16-1.module_el8.8.0+3576+cd671ecd.1.src.rpm">
          <filename>python38-libs-3.8.16-1.module_el8.8.0+3576+cd671ecd.1.s390x.rpm</filename>
          <sum type="sha256">5415d0b9df1dbe6d13363f8474e12ec9cb2e0ca6ce2658b792a88b8c95513c9f</sum>
        </package>
        <package name="python38" version="3.8.16" release="1.module_el8.8.0+3576+cd671ecd.1" epoch="0" arch="s390x" src="python38-3.8.16-1.module_el8.8.0+3576+cd671ecd.1.src.rpm">
          <filename>python38-3.8.16-1.module_el8.8.0+3576+cd671ecd.1.s390x.rpm</filename>
          <sum type="sha256">5dff3b9c859a4e07652b5b65181aef595c1adae5f5baaf092ac6c22aba56a9d3</sum>
        </package>
        <package name="python38-jinja2" version="2.11.3" release="1.module_el8.7.0+3344+99a6a656" epoch="0" arch="noarch" src="python-jinja2-2.11.3-1.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-jinja2-2.11.3-1.module_el8.7.0+3344+99a6a656.noarch.rpm</filename>
          <sum type="sha256">65f05e5ed7e1f7c21b8cdb919d8ad743417c596227acb6b504d8495f6af8db4f</sum>
        </package>
        <package name="python38-pyyaml" version="5.4.1" release="1.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="PyYAML-5.4.1-1.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-pyyaml-5.4.1-1.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">70a32bae16b374e4ec238a9fd23d4a57f36df2786a18231fe0b431925278fc98</sum>
        </package>
        <package name="python38-pip" version="19.3.1" release="6.module_el8.7.0+3344+99a6a656" epoch="0" arch="noarch" src="python3x-pip-19.3.1-6.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-pip-19.3.1-6.module_el8.7.0+3344+99a6a656.noarch.rpm</filename>
          <sum type="sha256">74ddf13a354d40775b394ae0e723b1d794d70c8c4f0ab1b48ba2f3d299c259b2</sum>
        </package>
        <package name="python38-psutil" version="5.6.4" release="4.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="python-psutil-5.6.4-4.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-psutil-5.6.4-4.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">7a32568dcb13525ef3a54999d5d6022761e68246dbc5327a8c52e8cea96ac30f</sum>
        </package>
        <package name="python38-test" version="3.8.16" release="1.module_el8.8.0+3576+cd671ecd.1" epoch="0" arch="s390x" src="python38-3.8.16-1.module_el8.8.0+3576+cd671ecd.1.src.rpm">
          <filename>python38-test-3.8.16-1.module_el8.8.0+3576+cd671ecd.1.s390x.rpm</filename>
          <sum type="sha256">7aca82ab25bf97c1d550fbcff9fc48e69570b98b3d79f1810d33ee9d9dc3e79b</sum>
        </package>
        <package name="python38-devel" version="3.8.16" release="1.module_el8.8.0+3576+cd671ecd.1" epoch="0" arch="s390x" src="python38-3.8.16-1.module_el8.8.0+3576+cd671ecd.1.src.rpm">
          <filename>python38-devel-3.8.16-1.module_el8.8.0+3576+cd671ecd.1.s390x.rpm</filename>
          <sum type="sha256">a9d1c3e127692be840154113913893ca12cbbb01790a5499737ff7a0f43dd7ae</sum>
        </package>
        <package name="python38-cffi" version="1.13.2" release="3.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="python-cffi-1.13.2-3.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-cffi-1.13.2-3.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">b34229e6288a56b9976d01b3f297bc8b4fedf6c1a14716687dc4632a24d5369a</sum>
        </package>
        <package name="python38-psycopg2-doc" version="2.8.4" release="4.module_el8.7.0+3344+99a6a656" epoch="0" arch="s390x" src="python-psycopg2-2.8.4-4.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-psycopg2-doc-2.8.4-4.module_el8.7.0+3344+99a6a656.s390x.rpm</filename>
          <sum type="sha256">baf86e5160816eb2e8f2bf04d47041e6b3e44b64e3f596897a65d41ad3a6dbc4</sum>
        </package>
        <package name="python38-cryptography" version="2.8" release="3.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="python-cryptography-2.8-3.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-cryptography-2.8-3.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">c11ed086ba644d0143cd534d4990e790f907a66482da70752528a45f14289f10</sum>
        </package>
        <package name="python38-psycopg2-tests" version="2.8.4" release="4.module_el8.7.0+3344+99a6a656" epoch="0" arch="s390x" src="python-psycopg2-2.8.4-4.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-psycopg2-tests-2.8.4-4.module_el8.7.0+3344+99a6a656.s390x.rpm</filename>
          <sum type="sha256">c1e089d3030080f30316251830f59bc6fcd22b63ea830a68e88121af77b3ad41</sum>
        </package>
        <package name="python38-numpy" version="1.17.3" release="6.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="numpy-1.17.3-6.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-numpy-1.17.3-6.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">c809f45c93a9ef3caf2163524cafd253b08685c2854354b09933b4cbf88d4c97</sum>
        </package>
        <package name="python38-Cython" version="0.29.14" release="4.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="Cython-0.29.14-4.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-Cython-0.29.14-4.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">c8e257796e097667f73bdfb94f0b28a681d5cdf71fdc1b96f1a39d0159912c44</sum>
        </package>
        <package name="python38-idle" version="3.8.16" release="1.module_el8.8.0+3576+cd671ecd.1" epoch="0" arch="s390x" src="python38-3.8.16-1.module_el8.8.0+3576+cd671ecd.1.src.rpm">
          <filename>python38-idle-3.8.16-1.module_el8.8.0+3576+cd671ecd.1.s390x.rpm</filename>
          <sum type="sha256">db22d0c52b4ad4593f26dff841afb08a825a08c178f3beae81496f119b3d2101</sum>
        </package>
        <package name="python38-markupsafe" version="1.1.1" release="6.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="python-markupsafe-1.1.1-6.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-markupsafe-1.1.1-6.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">dde3e871e78ef455929f983e9dc8bd23504f64efac25ca963276ea0f06947c46</sum>
        </package>
        <package name="python38-mod_wsgi" version="4.6.8" release="4.module_el8.7.0+3344+99a6a656" epoch="0" arch="s390x" src="mod_wsgi-4.6.8-4.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-mod_wsgi-4.6.8-4.module_el8.7.0+3344+99a6a656.s390x.rpm</filename>
          <sum type="sha256">e76b00dc2331143d0185c2ad8c30e0cd4542d83984ac1bfab9a71f180d8b22f0</sum>
        </package>
        <package name="python38-lxml" version="4.4.1" release="7.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="python-lxml-4.4.1-7.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-lxml-4.4.1-7.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">f5fb51b73bf02fc264e24d5940eadc2644c978ae7ce30f8ee844b11f6e4cd4df</sum>
        </package>
        <package name="python38-pip-wheel" version="19.3.1" release="6.module_el8.7.0+3344+99a6a656" epoch="0" arch="noarch" src="python3x-pip-19.3.1-6.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-pip-wheel-19.3.1-6.module_el8.7.0+3344+99a6a656.noarch.rpm</filename>
          <sum type="sha256">f79a89f3b2d4d0230e89c14c66807a9f5e579d503056a5a3a7069f20574e22d1</sum>
        </package>
        <package name="python38-numpy-f2py" version="1.17.3" release="6.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="numpy-1.17.3-6.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-numpy-f2py-1.17.3-6.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">fe62b9c13128772672df4a275edbcaa6238bbb16edb3e67f12fb85b82a39c4c9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3811</id>
    <title>Important: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2023-06-27 00:00:00"/>
    <updated date="2023-06-30 15:49:37"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: urllib.parse url blocklisting bypass (CVE-2023-24329)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3811" id="RHSA-2023:3811" type="rhsa" title="RHSA-2023:3811"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24329" id="CVE-2023-24329" type="cve" title="CVE-2023-24329"/>
      <reference href="https://bugzilla.redhat.com/2173917" id="2173917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3811.html" id="ALSA-2023:3811" type="self" title="ALSA-2023:3811"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="python39" stream="3.9" version="8080020230630114612" context="0a5380d9" arch="s390x"/>
        <package name="python39-scipy" version="1.5.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="scipy-1.5.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-scipy-1.5.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">29c1816d1b128f5b3a9f8863106cc1a21a9e75b10be7a14561be4ebb36951957</sum>
        </package>
        <package name="python39-cryptography" version="3.3.1" release="2.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-cryptography-3.3.1-2.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-cryptography-3.3.1-2.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">56a1136df87128c9c969dff35385bd263b36300d3c30efa3c5110f2cec64c371</sum>
        </package>
        <package name="python39-numpy-f2py" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-f2py-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">56f4a39fc3b7cacfec741e84c3c59e67da9e3b2f122f09e59cac8a8020a4ba7c</sum>
        </package>
        <package name="python39-devel" version="3.9.16" release="1.module_el8.8.0+3577+f4afbb0e.1" epoch="0" arch="s390x" src="python39-3.9.16-1.module_el8.8.0+3577+f4afbb0e.1.src.rpm">
          <filename>python39-devel-3.9.16-1.module_el8.8.0+3577+f4afbb0e.1.s390x.rpm</filename>
          <sum type="sha256">63b70b994ed000179245e72cd303871f227a9d1d778d642a432679adc141b942</sum>
        </package>
        <package name="python39-tkinter" version="3.9.16" release="1.module_el8.8.0+3577+f4afbb0e.1" epoch="0" arch="s390x" src="python39-3.9.16-1.module_el8.8.0+3577+f4afbb0e.1.src.rpm">
          <filename>python39-tkinter-3.9.16-1.module_el8.8.0+3577+f4afbb0e.1.s390x.rpm</filename>
          <sum type="sha256">6858abcee83850f7f3c5fdfdbcd72ae6e8e2b5b8fe654755c4f660bbcdf567c1</sum>
        </package>
        <package name="python39" version="3.9.16" release="1.module_el8.8.0+3577+f4afbb0e.1" epoch="0" arch="s390x" src="python39-3.9.16-1.module_el8.8.0+3577+f4afbb0e.1.src.rpm">
          <filename>python39-3.9.16-1.module_el8.8.0+3577+f4afbb0e.1.s390x.rpm</filename>
          <sum type="sha256">7fb7562429966b6ee187eaba58318deaec3411aecf4867b8f573dd26f50bbdac</sum>
        </package>
        <package name="python39-idle" version="3.9.16" release="1.module_el8.8.0+3577+f4afbb0e.1" epoch="0" arch="s390x" src="python39-3.9.16-1.module_el8.8.0+3577+f4afbb0e.1.src.rpm">
          <filename>python39-idle-3.9.16-1.module_el8.8.0+3577+f4afbb0e.1.s390x.rpm</filename>
          <sum type="sha256">8f88b0ff52fc2fe1cc61586e93b07c5c48030782d731505a84fcc4bbb7860e06</sum>
        </package>
        <package name="python39-psutil" version="5.8.0" release="4.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9300840b5b4e742063f5617bc74cc2b05b4f3d5bdcd113ee5b3a9745baf3d0dc</sum>
        </package>
        <package name="python39-numpy" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9ffe33f6e51a25e79b88e45fa5cdca37a3b77d0868fe40e156f615224308810c</sum>
        </package>
        <package name="python39-psycopg2-tests" version="2.8.6" release="2.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-psycopg2-tests-2.8.6-2.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">aea9e9377b4ce6484c9cab9cc63b725b12a55d4895321eaa422328a4b79bb21b</sum>
        </package>
        <package name="python39-psycopg2" version="2.8.6" release="2.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">b7c35659538650d156ec7273186c4f59fa5fecab60c4ccfd3a93bbe67c0af914</sum>
        </package>
        <package name="python39-psycopg2-doc" version="2.8.6" release="2.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-psycopg2-doc-2.8.6-2.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">b973731de198689b345b74939539b99cd20047bf9b09cd68ab7b166eae5773fe</sum>
        </package>
        <package name="python39-rpm-macros" version="3.9.16" release="1.module_el8.8.0+3577+f4afbb0e.1" epoch="0" arch="noarch" src="python39-3.9.16-1.module_el8.8.0+3577+f4afbb0e.1.src.rpm">
          <filename>python39-rpm-macros-3.9.16-1.module_el8.8.0+3577+f4afbb0e.1.noarch.rpm</filename>
          <sum type="sha256">bd5030cdb2c7df6729af3528ecc528558190281f0ea1a94df0260cd470c0f6d6</sum>
        </package>
        <package name="python39-libs" version="3.9.16" release="1.module_el8.8.0+3577+f4afbb0e.1" epoch="0" arch="s390x" src="python39-3.9.16-1.module_el8.8.0+3577+f4afbb0e.1.src.rpm">
          <filename>python39-libs-3.9.16-1.module_el8.8.0+3577+f4afbb0e.1.s390x.rpm</filename>
          <sum type="sha256">d7e1b9b19ed47c22731fdaeb9c15fa2dabd4231e18d3e134063177bf64681416</sum>
        </package>
        <package name="python39-lxml" version="4.6.5" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">dc2ce0990738ea69e2b3641de1886825066554244cf58815971db30e321b56b2</sum>
        </package>
        <package name="python39-mod_wsgi" version="4.7.1" release="5.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="mod_wsgi-4.7.1-5.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-mod_wsgi-4.7.1-5.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">e45288562bc7c28ad66653998a34bc52fe2539e305ea984f6ebebac9a1c49030</sum>
        </package>
        <package name="python39-cffi" version="1.14.3" release="2.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">ec3acbe8ceecf82559556caacd8c41e2b40e69348f2e6893f0b7598aa36371fd</sum>
        </package>
        <package name="python39-pyyaml" version="5.4.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="PyYAML-5.4.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pyyaml-5.4.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">faa90d54ace8329c64942f01e18434bce14edf19cc3a534ae07de7bc301cd27f</sum>
        </package>
        <package name="python39-test" version="3.9.16" release="1.module_el8.8.0+3577+f4afbb0e.1" epoch="0" arch="s390x" src="python39-3.9.16-1.module_el8.8.0+3577+f4afbb0e.1.src.rpm">
          <filename>python39-test-3.9.16-1.module_el8.8.0+3577+f4afbb0e.1.s390x.rpm</filename>
          <sum type="sha256">fb52e89ba5d0dceb58254ea7fd89f8bed7344eb866c626593f01db502023bcc2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3821</id>
    <title>Moderate: ruby:2.7 security, bug fix, and enhancement update</title>
    <issued date="2023-06-27 00:00:00"/>
    <updated date="2023-06-30 22:58:36"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby:2.7 security, bug fix, and enhancement update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (2.7). (BZ#2189465)

Security Fix(es):

* ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
* ruby: ReDoS vulnerability in URI (CVE-2023-28755)
* ruby: ReDoS vulnerability in Time (CVE-2023-28756)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3821" id="RHSA-2023:3821" type="rhsa" title="RHSA-2023:3821"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33621" id="CVE-2021-33621" type="cve" title="CVE-2021-33621"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28755" id="CVE-2023-28755" type="cve" title="CVE-2023-28755"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28756" id="CVE-2023-28756" type="cve" title="CVE-2023-28756"/>
      <reference href="https://bugzilla.redhat.com/2149706" id="2149706" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184059" id="2184059" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184061" id="2184061" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3821.html" id="ALSA-2023:3821" type="self" title="ALSA-2023:3821"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="ruby" stream="2.7" version="8080020230630114654" context="9edba152" arch="s390x"/>
        <package name="rubygem-test-unit" version="3.3.4" release="139.module_el8.8.0+3578+2b4b06da" epoch="0" arch="noarch" src="ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.src.rpm">
          <filename>rubygem-test-unit-3.3.4-139.module_el8.8.0+3578+2b4b06da.noarch.rpm</filename>
          <sum type="sha256">018f84be66108d724055eca50b0a495ed162a79f7b87225868bc3a6997f21ddf</sum>
        </package>
        <package name="rubygem-bundler" version="2.2.24" release="139.module_el8.8.0+3578+2b4b06da" epoch="0" arch="noarch" src="ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.src.rpm">
          <filename>rubygem-bundler-2.2.24-139.module_el8.8.0+3578+2b4b06da.noarch.rpm</filename>
          <sum type="sha256">0c647a2492d071ccafc2206ca6ee8ba55111338e2250104460c7a6af7fbd3a3b</sum>
        </package>
        <package name="rubygem-bigdecimal" version="2.0.0" release="139.module_el8.8.0+3578+2b4b06da" epoch="0" arch="s390x" src="ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.src.rpm">
          <filename>rubygem-bigdecimal-2.0.0-139.module_el8.8.0+3578+2b4b06da.s390x.rpm</filename>
          <sum type="sha256">0ffdfed05d24d62a2f64b05eae6c484fb5fea99f739df65b2819e68501e0c53b</sum>
        </package>
        <package name="rubygem-rdoc" version="6.2.1.1" release="139.module_el8.8.0+3578+2b4b06da" epoch="0" arch="noarch" src="ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.src.rpm">
          <filename>rubygem-rdoc-6.2.1.1-139.module_el8.8.0+3578+2b4b06da.noarch.rpm</filename>
          <sum type="sha256">1904f6ec590286e618c40770a504dd405eae8c2f864edefa6f40e75143a4ea30</sum>
        </package>
        <package name="rubygem-power_assert" version="1.1.7" release="139.module_el8.8.0+3578+2b4b06da" epoch="0" arch="noarch" src="ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.src.rpm">
          <filename>rubygem-power_assert-1.1.7-139.module_el8.8.0+3578+2b4b06da.noarch.rpm</filename>
          <sum type="sha256">20a9d5b9d4c357ec0c6b5c10f9621c361dbde319b2170d15fbf57dbe93e1d0a7</sum>
        </package>
        <package name="rubygem-bson" version="4.8.1" release="1.module_el8.6.0+3167+957ef55e" epoch="0" arch="s390x" src="rubygem-bson-4.8.1-1.module_el8.6.0+3167+957ef55e.src.rpm">
          <filename>rubygem-bson-4.8.1-1.module_el8.6.0+3167+957ef55e.s390x.rpm</filename>
          <sum type="sha256">2a1c9bfebe53083619a613d8126b1bb5be2267cb45dbf45e35e4f3d470626d3c</sum>
        </package>
        <package name="rubygem-openssl" version="2.1.4" release="139.module_el8.8.0+3578+2b4b06da" epoch="0" arch="s390x" src="ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.src.rpm">
          <filename>rubygem-openssl-2.1.4-139.module_el8.8.0+3578+2b4b06da.s390x.rpm</filename>
          <sum type="sha256">3907395b2f355032c049391099fbbf93528948cd052536905c04bd41fb547097</sum>
        </package>
        <package name="ruby-libs" version="2.7.8" release="139.module_el8.8.0+3578+2b4b06da" epoch="0" arch="s390x" src="ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.src.rpm">
          <filename>ruby-libs-2.7.8-139.module_el8.8.0+3578+2b4b06da.s390x.rpm</filename>
          <sum type="sha256">41dbaa772a32555d5ab2d3a9a0862a2363dd1a8c6236f2135561235cc9420f52</sum>
        </package>
        <package name="rubygem-net-telnet" version="0.2.0" release="139.module_el8.8.0+3578+2b4b06da" epoch="0" arch="noarch" src="ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.src.rpm">
          <filename>rubygem-net-telnet-0.2.0-139.module_el8.8.0+3578+2b4b06da.noarch.rpm</filename>
          <sum type="sha256">53febed1daa08caea9bbfda4139e8dde14f7ac4dfcdfe843f4b725fa9c87e8d7</sum>
        </package>
        <package name="rubygem-xmlrpc" version="0.3.0" release="139.module_el8.8.0+3578+2b4b06da" epoch="0" arch="noarch" src="ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.src.rpm">
          <filename>rubygem-xmlrpc-0.3.0-139.module_el8.8.0+3578+2b4b06da.noarch.rpm</filename>
          <sum type="sha256">6de3229ca65f02d750e98887ebb2f5d3bed6dd92d6bde453c9d85a7c2af94da0</sum>
        </package>
        <package name="ruby" version="2.7.8" release="139.module_el8.8.0+3578+2b4b06da" epoch="0" arch="s390x" src="ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.src.rpm">
          <filename>ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.s390x.rpm</filename>
          <sum type="sha256">78880c6657090894d15b1e98e4d883c0079f2c81895808506eb154247c809be4</sum>
        </package>
        <package name="rubygem-mysql2" version="0.5.3" release="1.module_el8.6.0+3167+957ef55e" epoch="0" arch="s390x" src="rubygem-mysql2-0.5.3-1.module_el8.6.0+3167+957ef55e.src.rpm">
          <filename>rubygem-mysql2-0.5.3-1.module_el8.6.0+3167+957ef55e.s390x.rpm</filename>
          <sum type="sha256">79063b35e11fc313e8d4c71bd581d7eb8c2cbd54ac5e556b61b9812748965b4e</sum>
        </package>
        <package name="ruby-default-gems" version="2.7.8" release="139.module_el8.8.0+3578+2b4b06da" epoch="0" arch="noarch" src="ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.src.rpm">
          <filename>ruby-default-gems-2.7.8-139.module_el8.8.0+3578+2b4b06da.noarch.rpm</filename>
          <sum type="sha256">791643d179b5d4434683b1fcfe9b0fa7cb69559776fa473cabb6fdb736621dbe</sum>
        </package>
        <package name="ruby-devel" version="2.7.8" release="139.module_el8.8.0+3578+2b4b06da" epoch="0" arch="s390x" src="ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.src.rpm">
          <filename>ruby-devel-2.7.8-139.module_el8.8.0+3578+2b4b06da.s390x.rpm</filename>
          <sum type="sha256">9885deb989a92db618364ad0c26b557cc5b3930f4f04eb381a8ac17692b51546</sum>
        </package>
        <package name="rubygem-rake" version="13.0.1" release="139.module_el8.8.0+3578+2b4b06da" epoch="0" arch="noarch" src="ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.src.rpm">
          <filename>rubygem-rake-13.0.1-139.module_el8.8.0+3578+2b4b06da.noarch.rpm</filename>
          <sum type="sha256">9a50732aa0ad86b34defa73ca13d8e49e1952f3931f7a49e628a52c4dd8ac890</sum>
        </package>
        <package name="rubygem-io-console" version="0.5.6" release="139.module_el8.8.0+3578+2b4b06da" epoch="0" arch="s390x" src="ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.src.rpm">
          <filename>rubygem-io-console-0.5.6-139.module_el8.8.0+3578+2b4b06da.s390x.rpm</filename>
          <sum type="sha256">a5876ebfb294d926984e8dda0db7125b6c4380ffffeaa49136b422c8ef4e27eb</sum>
        </package>
        <package name="ruby-doc" version="2.7.8" release="139.module_el8.8.0+3578+2b4b06da" epoch="0" arch="noarch" src="ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.src.rpm">
          <filename>ruby-doc-2.7.8-139.module_el8.8.0+3578+2b4b06da.noarch.rpm</filename>
          <sum type="sha256">c1d13e614f27277eb7a61a5d839b2899911f6b8d6e432bc369b896f6775f3943</sum>
        </package>
        <package name="rubygems-devel" version="3.1.6" release="139.module_el8.8.0+3578+2b4b06da" epoch="0" arch="noarch" src="ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.src.rpm">
          <filename>rubygems-devel-3.1.6-139.module_el8.8.0+3578+2b4b06da.noarch.rpm</filename>
          <sum type="sha256">c9d9d82ecff8b205ff27e77405bd950377827a0ad9f8e56d40afc2dcf8627149</sum>
        </package>
        <package name="rubygem-json" version="2.3.0" release="139.module_el8.8.0+3578+2b4b06da" epoch="0" arch="s390x" src="ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.src.rpm">
          <filename>rubygem-json-2.3.0-139.module_el8.8.0+3578+2b4b06da.s390x.rpm</filename>
          <sum type="sha256">cc108332d4ef2be816a6d143c65ccaeaa2ad695208b6f75d117196de25a1e417</sum>
        </package>
        <package name="rubygem-psych" version="3.1.0" release="139.module_el8.8.0+3578+2b4b06da" epoch="0" arch="s390x" src="ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.src.rpm">
          <filename>rubygem-psych-3.1.0-139.module_el8.8.0+3578+2b4b06da.s390x.rpm</filename>
          <sum type="sha256">cd080de7ec76de5acf39eceaef842095910865a6f6a596dd0e12dad0caa710e1</sum>
        </package>
        <package name="rubygem-minitest" version="5.13.0" release="139.module_el8.8.0+3578+2b4b06da" epoch="0" arch="noarch" src="ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.src.rpm">
          <filename>rubygem-minitest-5.13.0-139.module_el8.8.0+3578+2b4b06da.noarch.rpm</filename>
          <sum type="sha256">cd8856660bfcecc83732a706aa76262d9b33bf4dfce71345e542fa43d3eb38f1</sum>
        </package>
        <package name="rubygems" version="3.1.6" release="139.module_el8.8.0+3578+2b4b06da" epoch="0" arch="noarch" src="ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.src.rpm">
          <filename>rubygems-3.1.6-139.module_el8.8.0+3578+2b4b06da.noarch.rpm</filename>
          <sum type="sha256">d10189bfba0ef2015446ea652eeb031fcc9f2a792e043a53dfb5352dff791a8a</sum>
        </package>
        <package name="rubygem-pg" version="1.2.3" release="1.module_el8.6.0+3167+957ef55e" epoch="0" arch="s390x" src="rubygem-pg-1.2.3-1.module_el8.6.0+3167+957ef55e.src.rpm">
          <filename>rubygem-pg-1.2.3-1.module_el8.6.0+3167+957ef55e.s390x.rpm</filename>
          <sum type="sha256">de09a395a3b29b1b0c373dff33b129853b989ad2726e1d89ac48a963bcdbaade</sum>
        </package>
        <package name="rubygem-irb" version="1.2.6" release="139.module_el8.8.0+3578+2b4b06da" epoch="0" arch="noarch" src="ruby-2.7.8-139.module_el8.8.0+3578+2b4b06da.src.rpm">
          <filename>rubygem-irb-1.2.6-139.module_el8.8.0+3578+2b4b06da.noarch.rpm</filename>
          <sum type="sha256">f4ded481cda4a33a2cc91b77bc3cf8943f326304310df0caa2cefe4d142e8237</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3822</id>
    <title>Moderate: virt:rhel and virt-devel:rhel security and bug fix update</title>
    <issued date="2023-06-27 00:00:00"/>
    <updated date="2023-07-15 00:08:22"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>virt:rhel and virt-devel:rhel security and bug fix update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* libvirt: Memory leak in virPCIVirtualFunctionList cleanup (CVE-2023-2700)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Logs are spammed with ' Domain id=7 is tainted: custom-ga-command' message (BZ#2180030)
* [qemu] snapshot is failing with error libvirt.libvirtError: internal error: QEMU monitor reply exceeds buffer size (10485760 bytes) (BZ#2181575)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3822" id="RHSA-2023:3822" type="rhsa" title="RHSA-2023:3822"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2700" id="CVE-2023-2700" type="cve" title="CVE-2023-2700"/>
      <reference href="https://bugzilla.redhat.com/2203653" id="2203653" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3822.html" id="ALSA-2023:3822" type="self" title="ALSA-2023:3822"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="virt" stream="rhel" version="8080020230712134837" context="9edba152" arch="s390x"/>
        <package name="qemu-kvm-core" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-kvm-core-6.2.0-32.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">017a32815b00e165e97ca277bc7b9110f1be709a3806862bcb724dae7379940a</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-config-network-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">03cf2f03ee84155fd58e5d5f714dcb2d908ac291387dd2504b5befa8390ffe09</sum>
        </package>
        <package name="qemu-img" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-img-6.2.0-32.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">0449556cc912049466d306f06015dc54afe6ff865951de931f66e8ee51a4646c</sum>
        </package>
        <package name="libvirt-nss" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-nss-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">04682b35fee6f8f3b8e2065655621e33df3b1fc7bd609845bbd75e743c716223</sum>
        </package>
        <package name="nbdkit-basic-plugins" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-basic-plugins-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">04adc669a1655a4f4dcadbdd520afd5f6f5dc82b44738fcabde3a280f36fb90f</sum>
        </package>
        <package name="python3-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>python3-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">05372f9ad377c74c0d221dacf23c7510171afbb751c03585fd3c09513d7e1bde</sum>
        </package>
        <package name="qemu-guest-agent" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-guest-agent-6.2.0-32.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">0851dbcd681f94ada4074a65f41522306862f8afa0e5863c4eb5b6d16ab705b5</sum>
        </package>
        <package name="libvirt-wireshark" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-wireshark-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">099fc3495153931ada9e8641e0b149ef76c5dcb96e620956f437cdf0771ec6a5</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-qemu-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">0a03059e46d2f3cd86e09d3163d360984a9c51c22ea5c0d790c92cf25ac14b9c</sum>
        </package>
        <package name="libnbd-devel" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libnbd-devel-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">0c1f0ee145a6b54bb1a2b502a47bc75e63b75d7e6b2e8c60a6c053988fc3b6ab</sum>
        </package>
        <package name="libguestfs-tools" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-tools-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">116835a3e003417d7186479fbf47960a09588a3ace207d4f34da6a19ab8c07de</sum>
        </package>
        <package name="netcf-devel" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-devel-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1888edc09e8d44539c2c7b84b7a8df91477b8a725fe93436ac4d71106e177d48</sum>
        </package>
        <package name="libguestfs-javadoc" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-javadoc-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">18b9d6c98999a3b289a865504944fb3dc9b2994eff5461933549add50c6faa5b</sum>
        </package>
        <package name="libvirt-client" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-client-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">1947967254e2d2d58735382615f04abe0bfb6b092c67324d3901479899edc880</sum>
        </package>
        <package name="nbdkit" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">1a6f5649d6acd35dd28d2d99042056bc8308fe0910ce6322bf27b0ec71bbee4f</sum>
        </package>
        <package name="hivex-devel" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>hivex-devel-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1aa145aa6a3f900531fc1c8f1c161197f37539d113d47c14efd9c66def20940a</sum>
        </package>
        <package name="nbdfuse" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdfuse-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1d3157c38399bbfb00c7e7762135285383554b08b780fcf5eb390ce2f5845d23</sum>
        </package>
        <package name="libvirt-docs" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-docs-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">1e609b5ec4c2903f0a13b379bf3d164b8753d330cf0069ea8512795d7f74da3d</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-storage-core-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">20d14323f54cfa124d1850a9fd48336ceee025a030a7918598967128d27f080a</sum>
        </package>
        <package name="qemu-kvm-common" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-kvm-common-6.2.0-32.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">2169d71be913a36de32d2760b854c0a63ac3625e48e1033ecbb6e0601a9f7e85</sum>
        </package>
        <package name="libnbd" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">2220e7631c2178fe00b6e20d56043e2efc51bec8ccbe9c14dabccdb05ec81abf</sum>
        </package>
        <package name="nbdkit-python-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-python-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">23c394ecc23e544232d78956b610b1403324cb6a46a3d46adc0fd256f19a1e4b</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">23df2c21fb48225382addc0483b0714deee12deab35a7771b6f6bde62356ad8d</sum>
        </package>
        <package name="nbdkit-tar-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tar-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">2521bcc64ce8e24df611cf9194277fd5f7856f3df3f72be3276748b10d23beb3</sum>
        </package>
        <package name="nbdkit-bash-completion" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="noarch" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-bash-completion-1.24.0-5.module_el8.8.0+3485+7cffc4a3.noarch.rpm</filename>
          <sum type="sha256">254dfbf64036ae05d930d81be90202718fba7b341f0457de4a29ecfca3aea646</sum>
        </package>
        <package name="nbdkit-xz-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-xz-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">263ad615e21aaba0dce020cf1ad8b569c3860640d8074e9f74035ff925c409d0</sum>
        </package>
        <package name="nbdkit-gzip-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-gzip-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">27675a3171d769e7f9ea9b7fa63303b3e51f8221a68feaee1f16aeb7d658dccb</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-kvm-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">2da37b3db04cbc1c746a46373b3edbe10fde2472002e02057f49f4f095725640</sum>
        </package>
        <package name="lua-guestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>lua-guestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">36d15a85e154608cf2bc661120c8a573356cb3e0e1dc77a94387aa3c8bce90ef</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-nwfilter-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">3e6e065e61ac2d4636ef7dec1ab3248173471f5ac5c74faea6723f95a22ee5b4</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-kvm-block-ssh-6.2.0-32.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">3fb0642bc1f49d65f8225c7f4de12c8c7f0d3df3ad218d1a3f21e0ccb515b731</sum>
        </package>
        <package name="libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">40e3ffa7c3e67b0fe9a110dbe8bf267fa9906f358a3bd81135b33a624e6429ba</sum>
        </package>
        <package name="ruby-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ruby-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">4428b40d29de3a3eda15340b2cbacebe838ba363b3897a1a91f904b9f2b4f8b9</sum>
        </package>
        <package name="qemu-kvm" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">443b75cb180f7bf02c2d32d90f315453759c021d0a2e140489bf01d413aaef58</sum>
        </package>
        <package name="libvirt-daemon" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">45ce50bbdfcd407493105c50a762792cf64f5c9854a1d05f5ab6e54e4e872f9d</sum>
        </package>
        <package name="nbdkit-basic-filters" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-basic-filters-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">494ad345b2b9b009436ba9a8c8c6bb245e8617e921dae51ab6d9281e95999f31</sum>
        </package>
        <package name="nbdkit-curl-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-curl-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">4fd1a6bbe855d7c4068fcf080b4b0b15b367ef7f635ac869b7bddb1698dafa01</sum>
        </package>
        <package name="libguestfs-bash-completion" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-bash-completion-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">5a67ce33e944ee07d6ea976afa13f8c832ce4be22f124591ace620dfe08b5178</sum>
        </package>
        <package name="libguestfs-gobject-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gobject-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">5e05d955e58bc16ccb3e4097f338dd34af18225ef9bcd2b420d794a9efdd269b</sum>
        </package>
        <package name="python3-libnbd" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>python3-libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">5e93f1875db0f5a6e64e8d785a745072133d63b53e30cf6a7984ebd2e8119320</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-storage-disk-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">659c848b04178b6b2d643fb4b83f0450016f261d46cda598c2b3ef0c43367754</sum>
        </package>
        <package name="libvirt-lock-sanlock" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-lock-sanlock-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">6b8658064f8530e33feb437eb97311c6f19f3d61abab81773406396673101532</sum>
        </package>
        <package name="nbdkit-tmpdisk-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tmpdisk-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">6f4728c5aa7cc03d70b241d6947aff1fe49546aac4cc62bd01a59c1b1b73ba35</sum>
        </package>
        <package name="libguestfs-java-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-java-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">6fc6fe19b2e83d70d5f240d776ccc00a181870a485d39667fccb62ec0b851f02</sum>
        </package>
        <package name="nbdkit-server" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-server-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">706c1dd5780f1e48f883702f6c86a985bd057078fcd41326947b283625a77e05</sum>
        </package>
        <package name="perl-Sys-Guestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>perl-Sys-Guestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">77c035cdcf2f7e819dcb6d76b9ba12ae63a6f07d615a9a435b7ec2dc8ca93330</sum>
        </package>
        <package name="qemu-kvm-docs" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-kvm-docs-6.2.0-32.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">7aab9e8d26cebad789508f0423aaa59328c29b4da0918b7b5ebae3caf34ff2cb</sum>
        </package>
        <package name="libguestfs-winsupport" version="8.8" release="1.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="libguestfs-winsupport-8.8-1.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>libguestfs-winsupport-8.8-1.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">7c02f43b3a4ebfc353505f79de1a3240bdbfece3ed82cfe88dcb73b7ed182f83</sum>
        </package>
        <package name="libguestfs-gfs2" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gfs2-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">7ee36ba216591f26a055c687e5e75e054585c69c86b085d8966cb419ddeb3362</sum>
        </package>
        <package name="libguestfs-gobject" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gobject-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">8292ca96b97184b2ca5475901b46b09f715adbe99d1a5983c9ad4a0d2b3d72bb</sum>
        </package>
        <package name="netcf-libs" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-libs-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">843b61e4019e8cec44d5f5823d3c8c0b803997791aecef6ff1023224147cd6f8</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">849193cc1ad7d301bcab7311281d008657322f954d4d82596597e9a419a2bf48</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-config-nwfilter-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">84fa39c30be0ca55bf692af3a5b7aa0f0c1fa25f040a2fbf502b09852a432571</sum>
        </package>
        <package name="nbdkit-linuxdisk-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-linuxdisk-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">8673003aa4610f82cbe152021387ac3c6c59d730a79b446aad432030e20f5eff</sum>
        </package>
        <package name="swtpm-tools" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-tools-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">87ce1c2ecc368965a92cf71a29a7cb1331508c7c86394cfaa7e4e87d20897d7b</sum>
        </package>
        <package name="nbdkit-tar-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tar-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">87ec102223607b5d8760ee3d8998a48b3fbce6a1abe6d8056782c1d9f94513ad</sum>
        </package>
        <package name="libtpms-devel" version="0.9.1" release="2.20211126git1ff6fe1f43.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libtpms-0.9.1-2.20211126git1ff6fe1f43.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libtpms-devel-0.9.1-2.20211126git1ff6fe1f43.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">89ae90d7efafa672b560568e0ef0ef902b42401a37036f7d862fc59cc1ebd301</sum>
        </package>
        <package name="supermin-devel" version="5.2.1" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="supermin-5.2.1-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>supermin-devel-5.2.1-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">8a47307269cf95719225e1e27dcd1cebdf6a0481948e4a044db972af12de9ce3</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-interface-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">8c88e127b0bb23b626e2434eacb44eab16ca12427b3a56c1e086db083fa5fd96</sum>
        </package>
        <package name="libguestfs-man-pages-uk" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-man-pages-uk-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">8cd1a80b657a0373e6dcf0b6699e7574c9874db489201985b16bc1d1d78cc55b</sum>
        </package>
        <package name="swtpm-tools-pkcs11" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-tools-pkcs11-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">8e7eeb060f1253ff8a48085d0b452c2ba2c1837e286fd23d91426f255d72398a</sum>
        </package>
        <package name="libvirt-devel" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-devel-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">9068beda3809029be73da24468e5a222d2a4385b481d0d355791a3bd0bd0891b</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">90f2bf649fb354650863af5857c04d86ff97083a6fd0f0cf7f35ef0410fbcc88</sum>
        </package>
        <package name="libguestfs-rescue" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-rescue-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">92093c28f6226504668df61e0bc2c5d1e7d8bf505a8bf762cdd5d2e7a50bb52f</sum>
        </package>
        <package name="netcf" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">9268b4ab854af88a5e511f78b47cf3c4acd66d76f7ea901452f6efd3f9c8bc7c</sum>
        </package>
        <package name="libguestfs-man-pages-ja" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-man-pages-ja-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">968dd115e865d941a07d1728940d84bdfef4f26d43d39aa225f4f4a5a821c89d</sum>
        </package>
        <package name="libguestfs-rsync" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-rsync-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">9cc94d5cec35a9f048fa74c69a8b7d6a0ec48c14074297bb564b91f4cdc4c54f</sum>
        </package>
        <package name="hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">9d259d5ff0ee30b3a2a8e5f897675750f74741ed06d50d3623cf469d1d0f01d8</sum>
        </package>
        <package name="libtpms" version="0.9.1" release="2.20211126git1ff6fe1f43.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libtpms-0.9.1-2.20211126git1ff6fe1f43.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libtpms-0.9.1-2.20211126git1ff6fe1f43.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">a09f59fa0d5d5412a339fd34cb171540a9333ff099311e0a0ee9f9f601a80997</sum>
        </package>
        <package name="libiscsi" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">a1c871e87ebd136bfd498f13824563fd7428fcaf66bcffb341cfbb8370c2a18d</sum>
        </package>
        <package name="swtpm" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">a7fbed17619ce4d6d7d43a459be652ec92882b41903ac386ebfd9815806bc622</sum>
        </package>
        <package name="perl-Sys-Virt" version="8.0.0" release="1.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="perl-Sys-Virt-8.0.0-1.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>perl-Sys-Virt-8.0.0-1.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">a8b115eb9ca2707d1d7f800ac1b7730dcc6718168ff355f065464e6778ef5929</sum>
        </package>
        <package name="nbdkit-nbd-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-nbd-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">a9427bee7f157a63f2acd2357032ce829e0561b24193d204072502adad4aa52e</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">ae385f9dcfa31d49e9eeda4a8880da1da76bfeee28200a96653dcc96aa21da4a</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">b0e8e105a4552e15db65da727ac545e4dc262b52a3ab3fb276bd492f5a21eb88</sum>
        </package>
        <package name="nbdkit-example-plugins" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-example-plugins-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">b10c0d094e84d5c035dae70b4db36c311eb7ff9cbee00c8443848f049a600ae4</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-network-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">b452adafc4befc8398ca74ff2f6573d7ff152b65e802688c811dc8ff9c7988ea</sum>
        </package>
        <package name="libguestfs-appliance" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-appliance-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">b5add06502e5bda5f39f712640e2ab0e8cf539b7a90370c6c1fd963bb73bc7d7</sum>
        </package>
        <package name="libiscsi-utils" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-utils-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">b6eb101dc2787a7d79b4fe51913319933f5927d1816ea03592d2be849ce21faf</sum>
        </package>
        <package name="ruby-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ruby-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">b8696f7658b7872cb5f4e9fe2319e00ec6b668fe0e9adea787890cb9500e0223</sum>
        </package>
        <package name="nbdkit-ssh-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-ssh-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">b9b590364d69f18da851dea269d4774ff711f44e3ace9b3304e87fe25f26aaa5</sum>
        </package>
        <package name="virt-dib" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>virt-dib-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">bf4b5929cf910fb7e4671e32c9ac2ce2f456e8b1e577cb0f4f33a0df8d316c27</sum>
        </package>
        <package name="libguestfs-java" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-java-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">bfc05f2dc57991bad44654221ea88f653c916e80637290b69c96e3e0f5aa55a8</sum>
        </package>
        <package name="libvirt-dbus" version="1.3.0" release="2.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libvirt-dbus-1.3.0-2.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libvirt-dbus-1.3.0-2.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">c20042be5784c1f4323e5590891be2a0e33244acff6b45149f36a2eef834064b</sum>
        </package>
        <package name="libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">c685dcd2fb41a700a866919788441d7c80c9a10b9757ea843e7a56c67a5d4be2</sum>
        </package>
        <package name="libvirt" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">c6e757d2dabd084afb7c89e72d982c7b663aabc7edeee45eaed61d611fc11251</sum>
        </package>
        <package name="libvirt-libs" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-libs-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">c763a466f4296b6a455aea252515ffd21ff8cef63c2ca8c49d6091d03a74a1a5</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-kvm-block-iscsi-6.2.0-32.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">c79fd5bac932536f50be35e1d434580600873386c51389d85edb999c12cb502f</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-nodedev-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">cced2f758d9688158d3fd40758cf95e5b815ced68c62392cd8d5060ec99d101d</sum>
        </package>
        <package name="swtpm-libs" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-libs-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">d077f2d1f54aa47907a883e12d46f0632e33ad5141bd16a25759a580f851b91c</sum>
        </package>
        <package name="libiscsi-devel" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-devel-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">d45a7d8438477f375ed86276eea276fd3bb0965844cb8733a09691fc68d730db</sum>
        </package>
        <package name="nbdkit-devel" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-devel-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">d5bc58eda3110ad1589ab9d239e347e155bf59eaee69e0bea028f67d9e0ea216</sum>
        </package>
        <package name="swtpm-devel" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-devel-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">d69840154560e2ca3f4ea1315bfcca103b2260692f2c3d5fa1a76dbed7ddfbe1</sum>
        </package>
        <package name="supermin" version="5.2.1" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="supermin-5.2.1-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>supermin-5.2.1-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">e15b529769bbaa1d035eb7e4d4f58f4757e58772523d45cb07cc7533eeef0057</sum>
        </package>
        <package name="python3-libvirt" version="8.0.0" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="libvirt-python-8.0.0-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>python3-libvirt-8.0.0-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">e36c5a8c03f3393622b5dd5badefcd4a05ee01b8de17de28812017ddfda63954</sum>
        </package>
        <package name="python3-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>python3-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">ec11102e66953715d97704c820c0effcd80944fdd525efca9645f70b1cfa2fa9</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-kvm-block-rbd-6.2.0-32.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">ecdfb86ce7c7ef3025ea558877e485be05745ecb4ea0fd663b410bc2db0c1a79</sum>
        </package>
        <package name="libguestfs-inspect-icons" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-inspect-icons-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">ece57f7c833d85599725786783875d496fd9d38644cdc96ce23e4d73c6d5e4c9</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-secret-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">ecf85a4fbacd9c275df95668e5e876254eda9ea10ac9a7a9db6952dd9c414620</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-kvm-block-curl-6.2.0-32.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">ef4561716d1e51ec049785ce2c876b8765682bc799898d97ad82c461b995a3d6</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-storage-logical-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">f2b483f7d47f66c6213c4da7e4dd8d16f842c123d012969a49c00d6801dcbbf8</sum>
        </package>
        <package name="nbdkit-gzip-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-gzip-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">f3befb065571d5207296b7d7f2db60348cb935ec26b3fcf7a5db2f66dbec7dc5</sum>
        </package>
        <package name="libguestfs-xfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-xfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">fa8ce4ce15f9b8d5753db18aa569fdbb4c636e16d88c6bb83fc588c594c1ee90</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-storage-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">fb0f53660e7379784d6128863aa33ea4d9e7386073d40f9c3b6f42b5acba895e</sum>
        </package>
        <package name="perl-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>perl-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">fcc1bade9f3d715b09d2679d6efc9fd94b2faa9e912dcae68dbc372613f90965</sum>
        </package>
        <package name="libguestfs-tools-c" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-tools-c-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">fce060540b90878b0d21bfa525965ac06b8622b0a7cf824c54761c92b79f0764</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-gluster" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-storage-gluster-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">fdea1cfccf06d3bf1301366c589bf611a936fd8f396430a55462d57a0eca31d4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3827</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-06-27 00:00:00"/>
    <updated date="2023-06-29 13:24:42"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: heap-based buffer overflow in processCropSelections() in tools/tiffcrop.c (CVE-2022-48281)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3827" id="RHSA-2023:3827" type="rhsa" title="RHSA-2023:3827"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48281" id="CVE-2022-48281" type="cve" title="CVE-2022-48281"/>
      <reference href="https://bugzilla.redhat.com/2163606" id="2163606" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3827.html" id="ALSA-2023:3827" type="self" title="ALSA-2023:3827"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="libtiff" version="4.0.9" release="28.el8_8" epoch="0" arch="s390x" src="libtiff-4.0.9-28.el8_8.src.rpm">
          <filename>libtiff-4.0.9-28.el8_8.s390x.rpm</filename>
          <sum type="sha256">80fbe1a38f303279c93c3f7c1fce2f287a8df4982958b410330f1d8e85ce1c80</sum>
        </package>
        <package name="libtiff-devel" version="4.0.9" release="28.el8_8" epoch="0" arch="s390x" src="libtiff-4.0.9-28.el8_8.src.rpm">
          <filename>libtiff-devel-4.0.9-28.el8_8.s390x.rpm</filename>
          <sum type="sha256">b8d3bcaed5c4fbed94f6eb347241367e06f00251c728ded1255e60952921d3ef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3839</id>
    <title>Moderate: libssh security update</title>
    <issued date="2023-06-27 00:00:00"/>
    <updated date="2023-06-30 11:12:50"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libssh security update</summary>
    <description>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.

Security Fix(es):

* libssh: NULL pointer dereference during rekeying with algorithm guessing (CVE-2023-1667)
* libssh: authorization bypass in pki_verify_data_signature (CVE-2023-2283)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3839" id="RHSA-2023:3839" type="rhsa" title="RHSA-2023:3839"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1667" id="CVE-2023-1667" type="cve" title="CVE-2023-1667"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2283" id="CVE-2023-2283" type="cve" title="CVE-2023-2283"/>
      <reference href="https://bugzilla.redhat.com/2182199" id="2182199" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2189736" id="2189736" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3839.html" id="ALSA-2023:3839" type="self" title="ALSA-2023:3839"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="libssh-devel" version="0.9.6" release="10.el8_8" epoch="0" arch="s390x" src="libssh-0.9.6-10.el8_8.src.rpm">
          <filename>libssh-devel-0.9.6-10.el8_8.s390x.rpm</filename>
          <sum type="sha256">0a4e091bb35fb79cb1359b1bfe17a40a555f8f1d5a1e486c51db936cebaa3a60</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3840</id>
    <title>Moderate: sqlite security update</title>
    <issued date="2023-06-27 00:00:00"/>
    <updated date="2023-06-29 13:07:00"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>sqlite security update</summary>
    <description>SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server.

Security Fix(es):

* sqlite: Crash due to misuse of window functions. (CVE-2020-24736)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3840" id="RHSA-2023:3840" type="rhsa" title="RHSA-2023:3840"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-24736" id="CVE-2020-24736" type="cve" title="CVE-2020-24736"/>
      <reference href="https://bugzilla.redhat.com/2186385" id="2186385" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3840.html" id="ALSA-2023:3840" type="self" title="ALSA-2023:3840"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="lemon" version="3.26.0" release="18.el8_8" epoch="0" arch="s390x" src="sqlite-3.26.0-18.el8_8.src.rpm">
          <filename>lemon-3.26.0-18.el8_8.s390x.rpm</filename>
          <sum type="sha256">0845c0dd40d0f9ded70225578124ccbc4d83703153ec94f91588c8c5692ad730</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3922</id>
    <title>Critical: go-toolset:rhel8 security update</title>
    <issued date="2023-06-29 00:00:00"/>
    <updated date="2023-06-29 21:17:22"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>go-toolset:rhel8 security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. 

Security Fix(es):

* golang: cmd/go: go command may generate unexpected code at build time when using cgo (CVE-2023-29402)
* golang: cmd/go: go command may execute arbitrary code at build time when using cgo (CVE-2023-29404)
* golang: cmd/cgo: Arbitratry code execution triggered by linker flags (CVE-2023-29405)
* golang: runtime: unexpected behavior of setuid/setgid binaries (CVE-2023-29403)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3922" id="RHSA-2023:3922" type="rhsa" title="RHSA-2023:3922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29402" id="CVE-2023-29402" type="cve" title="CVE-2023-29402"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29403" id="CVE-2023-29403" type="cve" title="CVE-2023-29403"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29404" id="CVE-2023-29404" type="cve" title="CVE-2023-29404"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29405" id="CVE-2023-29405" type="cve" title="CVE-2023-29405"/>
      <reference href="https://bugzilla.redhat.com/2216965" id="2216965" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2217562" id="2217562" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2217565" id="2217565" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2217569" id="2217569" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3922.html" id="ALSA-2023:3922" type="self" title="ALSA-2023:3922"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="go-toolset" stream="rhel8" version="8080020230629194832" context="9edba152" arch="s390x"/>
        <package name="golang" version="1.19.10" release="1.module_el8.8.0+3571+89db2ae0" epoch="0" arch="s390x" src="golang-1.19.10-1.module_el8.8.0+3571+89db2ae0.src.rpm">
          <filename>golang-1.19.10-1.module_el8.8.0+3571+89db2ae0.s390x.rpm</filename>
          <sum type="sha256">07e819fe7989b6d289c1ab529039009e379a07ca9f69bc25395912f74293af37</sum>
        </package>
        <package name="go-toolset" version="1.19.10" release="1.module_el8.8.0+3571+89db2ae0" epoch="0" arch="s390x" src="go-toolset-1.19.10-1.module_el8.8.0+3571+89db2ae0.src.rpm">
          <filename>go-toolset-1.19.10-1.module_el8.8.0+3571+89db2ae0.s390x.rpm</filename>
          <sum type="sha256">09a4d902170fd4af79018ea90c0ec2dd7ba03200aab006de7e603c58abcfb846</sum>
        </package>
        <package name="golang-bin" version="1.19.10" release="1.module_el8.8.0+3571+89db2ae0" epoch="0" arch="s390x" src="golang-1.19.10-1.module_el8.8.0+3571+89db2ae0.src.rpm">
          <filename>golang-bin-1.19.10-1.module_el8.8.0+3571+89db2ae0.s390x.rpm</filename>
          <sum type="sha256">49aba8875f0de843b7ce28c06b0cdd2114aef1f306c781fb709d84c0395dd54a</sum>
        </package>
        <package name="golang-tests" version="1.19.10" release="1.module_el8.8.0+3571+89db2ae0" epoch="0" arch="noarch" src="golang-1.19.10-1.module_el8.8.0+3571+89db2ae0.src.rpm">
          <filename>golang-tests-1.19.10-1.module_el8.8.0+3571+89db2ae0.noarch.rpm</filename>
          <sum type="sha256">750776fb36e8549dce282b03c6c9f318bebf198bc93cef65bc5d6da20b81fc26</sum>
        </package>
        <package name="golang-src" version="1.19.10" release="1.module_el8.8.0+3571+89db2ae0" epoch="0" arch="noarch" src="golang-1.19.10-1.module_el8.8.0+3571+89db2ae0.src.rpm">
          <filename>golang-src-1.19.10-1.module_el8.8.0+3571+89db2ae0.noarch.rpm</filename>
          <sum type="sha256">b3212de743a832a15739fa59117d9da41112829aebbf691d2a1e8b738c9ebbdb</sum>
        </package>
        <package name="golang-misc" version="1.19.10" release="1.module_el8.8.0+3571+89db2ae0" epoch="0" arch="noarch" src="golang-1.19.10-1.module_el8.8.0+3571+89db2ae0.src.rpm">
          <filename>golang-misc-1.19.10-1.module_el8.8.0+3571+89db2ae0.noarch.rpm</filename>
          <sum type="sha256">d742da5871ccc9d98d1b08d2d68c19d76eb651a078ee79d68f276945f73edd02</sum>
        </package>
        <package name="golang-docs" version="1.19.10" release="1.module_el8.8.0+3571+89db2ae0" epoch="0" arch="noarch" src="golang-1.19.10-1.module_el8.8.0+3571+89db2ae0.src.rpm">
          <filename>golang-docs-1.19.10-1.module_el8.8.0+3571+89db2ae0.noarch.rpm</filename>
          <sum type="sha256">d93d3a1723d5902a47bd53786802b2b4ca11dddbd7e4eb80c0eac7a7e34caad1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4034</id>
    <title>Important: nodejs:16 security update</title>
    <issued date="2023-07-12 00:00:00"/>
    <updated date="2023-07-12 21:11:22"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:16 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

Security Fix(es):

* c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)
* c-ares: Buffer Underwrite in ares_inet_net_pton() (CVE-2023-31130)
* c-ares: Insufficient randomness in generation of DNS query IDs (CVE-2023-31147)
* c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation (CVE-2023-31124)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4034" id="RHSA-2023:4034" type="rhsa" title="RHSA-2023:4034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31124" id="CVE-2023-31124" type="cve" title="CVE-2023-31124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31130" id="CVE-2023-31130" type="cve" title="CVE-2023-31130"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31147" id="CVE-2023-31147" type="cve" title="CVE-2023-31147"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32067" id="CVE-2023-32067" type="cve" title="CVE-2023-32067"/>
      <reference href="https://bugzilla.redhat.com/2209494" id="2209494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209497" id="2209497" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209501" id="2209501" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209502" id="2209502" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4034.html" id="ALSA-2023:4034" type="self" title="ALSA-2023:4034"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="nodejs" stream="16" version="8080020230712161641" context="9edba152" arch="s390x"/>
        <package name="nodejs-docs" version="16.19.1" release="2.module_el8.8.0+3586+d4fc0b72" epoch="1" arch="noarch" src="nodejs-16.19.1-2.module_el8.8.0+3586+d4fc0b72.src.rpm">
          <filename>nodejs-docs-16.19.1-2.module_el8.8.0+3586+d4fc0b72.noarch.rpm</filename>
          <sum type="sha256">a4b25c1c67d61d90aa855e74034d92650afaa83379a992bb0394c7b5ce6d56d3</sum>
        </package>
        <package name="nodejs-devel" version="16.19.1" release="2.module_el8.8.0+3586+d4fc0b72" epoch="1" arch="s390x" src="nodejs-16.19.1-2.module_el8.8.0+3586+d4fc0b72.src.rpm">
          <filename>nodejs-devel-16.19.1-2.module_el8.8.0+3586+d4fc0b72.s390x.rpm</filename>
          <sum type="sha256">dd40894e9450f2cdf2f2ab6dd213a8f7f116fb0cd43fa2448337b756508f6485</sum>
        </package>
        <package name="nodejs" version="16.19.1" release="2.module_el8.8.0+3586+d4fc0b72" epoch="1" arch="s390x" src="nodejs-16.19.1-2.module_el8.8.0+3586+d4fc0b72.src.rpm">
          <filename>nodejs-16.19.1-2.module_el8.8.0+3586+d4fc0b72.s390x.rpm</filename>
          <sum type="sha256">f2cb33da09dc0cad86d0419be5a8dce91bef59bb47035f4a5a97adb8be687faf</sum>
        </package>
        <package name="nodejs-full-i18n" version="16.19.1" release="2.module_el8.8.0+3586+d4fc0b72" epoch="1" arch="s390x" src="nodejs-16.19.1-2.module_el8.8.0+3586+d4fc0b72.src.rpm">
          <filename>nodejs-full-i18n-16.19.1-2.module_el8.8.0+3586+d4fc0b72.s390x.rpm</filename>
          <sum type="sha256">f9284833f057f9731171a0d2c5d7c9712dcffaebf78ef3a38519d8e4a796fc8d</sum>
        </package>
        <package name="nodejs-nodemon" version="2.0.20" release="3.module_el8.8.0+3586+d4fc0b72" epoch="0" arch="noarch" src="nodejs-nodemon-2.0.20-3.module_el8.8.0+3586+d4fc0b72.src.rpm">
          <filename>nodejs-nodemon-2.0.20-3.module_el8.8.0+3586+d4fc0b72.noarch.rpm</filename>
          <sum type="sha256">fb71c2e08da32540fb704aece39819820640aa092b48d536ca969a84bab50104</sum>
        </package>
        <package name="npm" version="8.19.3" release="1.16.19.1.2.module_el8.8.0+3586+d4fc0b72" epoch="1" arch="s390x" src="nodejs-16.19.1-2.module_el8.8.0+3586+d4fc0b72.src.rpm">
          <filename>npm-8.19.3-1.16.19.1.2.module_el8.8.0+3586+d4fc0b72.s390x.rpm</filename>
          <sum type="sha256">fd436022ec79a043aaee37a7727c8846b0721722071d01f5841a0ef7e316ff75</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4035</id>
    <title>Important: nodejs:18 security update</title>
    <issued date="2023-07-12 00:00:00"/>
    <updated date="2023-07-12 21:27:17"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:18 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

Security Fix(es):

* c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)
* c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)
* c-ares: Buffer Underwrite in ares_inet_net_pton() (CVE-2023-31130)
* c-ares: Insufficient randomness in generation of DNS query IDs (CVE-2023-31147)
* c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation (CVE-2023-31124)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4035" id="RHSA-2023:4035" type="rhsa" title="RHSA-2023:4035"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4904" id="CVE-2022-4904" type="cve" title="CVE-2022-4904"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31124" id="CVE-2023-31124" type="cve" title="CVE-2023-31124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31130" id="CVE-2023-31130" type="cve" title="CVE-2023-31130"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31147" id="CVE-2023-31147" type="cve" title="CVE-2023-31147"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32067" id="CVE-2023-32067" type="cve" title="CVE-2023-32067"/>
      <reference href="https://bugzilla.redhat.com/2168631" id="2168631" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209494" id="2209494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209497" id="2209497" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209501" id="2209501" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209502" id="2209502" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4035.html" id="ALSA-2023:4035" type="self" title="ALSA-2023:4035"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="nodejs" stream="18" version="8080020230712161821" context="9edba152" arch="s390x"/>
        <package name="nodejs" version="18.14.2" release="3.module_el8.8.0+3587+ee652244" epoch="1" arch="s390x" src="nodejs-18.14.2-3.module_el8.8.0+3587+ee652244.src.rpm">
          <filename>nodejs-18.14.2-3.module_el8.8.0+3587+ee652244.s390x.rpm</filename>
          <sum type="sha256">10a9f3f751708ddf3b2cd370dd5188959ebb0bb3637f8d36a75facaec44ab0d9</sum>
        </package>
        <package name="nodejs-docs" version="18.14.2" release="3.module_el8.8.0+3587+ee652244" epoch="1" arch="noarch" src="nodejs-18.14.2-3.module_el8.8.0+3587+ee652244.src.rpm">
          <filename>nodejs-docs-18.14.2-3.module_el8.8.0+3587+ee652244.noarch.rpm</filename>
          <sum type="sha256">6ac9575f39e4c73896e34470a773c0f02cb9510f0d65505e424b62416e7b9c89</sum>
        </package>
        <package name="nodejs-nodemon" version="2.0.20" release="2.module_el8.8.0+3587+ee652244" epoch="0" arch="noarch" src="nodejs-nodemon-2.0.20-2.module_el8.8.0+3587+ee652244.src.rpm">
          <filename>nodejs-nodemon-2.0.20-2.module_el8.8.0+3587+ee652244.noarch.rpm</filename>
          <sum type="sha256">7c11686ae92e7cfd073b0265d5869d9dadff8a9897d2b6cc7be7cc434eb44c2f</sum>
        </package>
        <package name="nodejs-devel" version="18.14.2" release="3.module_el8.8.0+3587+ee652244" epoch="1" arch="s390x" src="nodejs-18.14.2-3.module_el8.8.0+3587+ee652244.src.rpm">
          <filename>nodejs-devel-18.14.2-3.module_el8.8.0+3587+ee652244.s390x.rpm</filename>
          <sum type="sha256">90b418b6c2c92571e74fdf10b214914350da66db777391230488f06f82477423</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el8.7.0+3343+ea2b7901" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.noarch.rpm</filename>
          <sum type="sha256">9430d44c78a3cfbe1ae3d39b8531f651606661943959bc0c3de87b2f91ea6f67</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el8.7.0+3343+ea2b7901" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el8.7.0+3343+ea2b7901.noarch.rpm</filename>
          <sum type="sha256">dca36d100028686323583aeddaa86efff902ff7fe29cb97d4356c309e3e899d9</sum>
        </package>
        <package name="nodejs-full-i18n" version="18.14.2" release="3.module_el8.8.0+3587+ee652244" epoch="1" arch="s390x" src="nodejs-18.14.2-3.module_el8.8.0+3587+ee652244.src.rpm">
          <filename>nodejs-full-i18n-18.14.2-3.module_el8.8.0+3587+ee652244.s390x.rpm</filename>
          <sum type="sha256">e3ea78a1198e93e6287a49947b8dcdbd18aec6d5f7ad8c988899bace5807c5f9</sum>
        </package>
        <package name="npm" version="9.5.0" release="1.18.14.2.3.module_el8.8.0+3587+ee652244" epoch="1" arch="s390x" src="nodejs-18.14.2-3.module_el8.8.0+3587+ee652244.src.rpm">
          <filename>npm-9.5.0-1.18.14.2.3.module_el8.8.0+3587+ee652244.s390x.rpm</filename>
          <sum type="sha256">eb0b4c478802d35e4ea65dec4daf34cc96d427ffb5b50b5052eefa55bb5d04f9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4058</id>
    <title>Important: .NET 7.0 security, bug fix, and enhancement update</title>
    <issued date="2023-07-13 00:00:00"/>
    <updated date="2023-07-14 10:09:49"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

The following packages have been upgraded to a later upstream version: dotnet7.0 (SDK 7.0.109, Runtime 7.0.9). (BZ#2219633)

Security Fix(es):

* dotnet: race condition in Core SignInManager&lt;TUser&gt; PasswordSignInAsync method (CVE-2023-33170)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4058" id="RHSA-2023:4058" type="rhsa" title="RHSA-2023:4058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33170" id="CVE-2023-33170" type="cve" title="CVE-2023-33170"/>
      <reference href="https://bugzilla.redhat.com/2221854" id="2221854" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4058.html" id="ALSA-2023:4058" type="self" title="ALSA-2023:4058"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="dotnet-runtime-7.0" version="7.0.9" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.109-1.el8_8.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.9-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">0f6afdffb42488fdc05efad310ab90976548192e4a937473e7bb0af9b44d661d</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="7.0.109" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.109-1.el8_8.src.rpm">
          <filename>netstandard-targeting-pack-2.1-7.0.109-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">11abea518b7de582f28646c639cde04903aa60311e549709f9b4bcfeef1109fe</sum>
        </package>
        <package name="dotnet-hostfxr-7.0" version="7.0.9" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.109-1.el8_8.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.9-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">15377dd21052265cbee4be1985e4c72b8c595a1fd8b1ed08669e16a2d49827ae</sum>
        </package>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.9" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.109-1.el8_8.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.9-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">17fd31738721e41a1103cc2ac9db44490e5e823ba9b6e5de26133adb039b4a5b</sum>
        </package>
        <package name="dotnet-apphost-pack-7.0" version="7.0.9" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.109-1.el8_8.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.9-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">5d80db5caf88710e0a1241b78ad2d33b1056e29bde046e4bf5e9d7ad14d269a5</sum>
        </package>
        <package name="aspnetcore-runtime-7.0" version="7.0.9" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.109-1.el8_8.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.9-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">8f8c74e541c8fee735b3ef48a0d8a0e62e2de43cc4f1badfd07f1583d34beba5</sum>
        </package>
        <package name="dotnet-templates-7.0" version="7.0.109" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.109-1.el8_8.src.rpm">
          <filename>dotnet-templates-7.0-7.0.109-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">a1925a3a53b758faf03e32a28f754e449e77cd105768675d2fc05ae32e4841a4</sum>
        </package>
        <package name="dotnet-sdk-7.0" version="7.0.109" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.109-1.el8_8.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.109-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">afd9c86df807f170d3b213cce8af87bf89555bb86143adde66de259517395399</sum>
        </package>
        <package name="dotnet-targeting-pack-7.0" version="7.0.9" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.109-1.el8_8.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.9-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">b001e6b47bd3a84109f5f734156ef00f2084479a66f8d5eda2db6e75e2670b1b</sum>
        </package>
        <package name="dotnet-host" version="7.0.9" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.109-1.el8_8.src.rpm">
          <filename>dotnet-host-7.0.9-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">d83435099ed81945683bb3dc99b385083fff80aa1f1cf7e3a486d0d0ecf1de08</sum>
        </package>
        <package name="dotnet" version="7.0.109" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.109-1.el8_8.src.rpm">
          <filename>dotnet-7.0.109-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">f97be54040de1d1c459cec81a5645f15ae790188b3ffa0c4b398d7bfa9aa08ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4059</id>
    <title>Important: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-07-13 00:00:00"/>
    <updated date="2023-07-14 10:31:33"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

The following packages have been upgraded to a later upstream version: dotnet6.0 (SDK 6.0.120, Runtime 6.0.20). (BZ#2219639)

Security Fix(es):

* dotnet: race condition in Core SignInManager&lt;TUser&gt; PasswordSignInAsync method (CVE-2023-33170)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4059" id="RHSA-2023:4059" type="rhsa" title="RHSA-2023:4059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33170" id="CVE-2023-33170" type="cve" title="CVE-2023-33170"/>
      <reference href="https://bugzilla.redhat.com/2221854" id="2221854" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4059.html" id="ALSA-2023:4059" type="self" title="ALSA-2023:4059"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="dotnet-apphost-pack-6.0" version="6.0.20" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.120-1.el8_8.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.20-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">1df7545475bfd785722737c693a8ef3e6e78613f36496687d982b8ed5d5d606f</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.20" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.120-1.el8_8.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.20-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">23f5991fc4d9f1ad498884df2c1de31e35b5d6f2103d9ea1ed1a2b12d89f336e</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.20" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.120-1.el8_8.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.20-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">65bf2dadad9659df4c12ec2b433cff264855c78f32d9c711a43962cafb254daa</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.120" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.120-1.el8_8.src.rpm">
          <filename>dotnet-templates-6.0-6.0.120-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">69f84f2508b2218426cc26db4f4f2629ffcda47532172f4dfa73804a3de3be63</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.20" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.120-1.el8_8.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.20-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">6d07d93e164c958a5d4d372162e851d85b7f207703d400718a486c9833b3189b</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.20" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.120-1.el8_8.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.20-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">998449fe31b4504d467280f37ef119514c5cfa72eb15d14c41fba552f293ef5b</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.120" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.120-1.el8_8.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.120-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">aa116276f632c55579e9cf6532be059959a225a2212f3d74c8fae5edfcbea771</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.20" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.120-1.el8_8.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.20-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">afab1f09282720c9f3ab0f24bcef544df8f977423d3b94366eac3779ff57732c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4063</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-07-13 00:00:00"/>
    <updated date="2023-07-14 22:29:12"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.13.0.

Security Fix(es):

* Mozilla: Use-after-free in WebRTC certificate generation (CVE-2023-37201)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-37202)
* Mozilla: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13 (CVE-2023-37211)
* Mozilla: Fullscreen notification obscured (CVE-2023-37207)
* Mozilla: Lack of warning when opening Diagcab files (CVE-2023-37208)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4063" id="RHSA-2023:4063" type="rhsa" title="RHSA-2023:4063"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37201" id="CVE-2023-37201" type="cve" title="CVE-2023-37201"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37202" id="CVE-2023-37202" type="cve" title="CVE-2023-37202"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37207" id="CVE-2023-37207" type="cve" title="CVE-2023-37207"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37208" id="CVE-2023-37208" type="cve" title="CVE-2023-37208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37211" id="CVE-2023-37211" type="cve" title="CVE-2023-37211"/>
      <reference href="https://bugzilla.redhat.com/2219747" id="2219747" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219748" id="2219748" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219749" id="2219749" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219750" id="2219750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219751" id="2219751" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4063.html" id="ALSA-2023:4063" type="self" title="ALSA-2023:4063"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="thunderbird" version="102.13.0" release="2.el8_8.alma" epoch="0" arch="s390x" src="thunderbird-102.13.0-2.el8_8.alma.src.rpm">
          <filename>thunderbird-102.13.0-2.el8_8.alma.s390x.rpm</filename>
          <sum type="sha256">95af641a1478d238f532beb51b38ff7be8e61832b97334e399a8601174237873</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4076</id>
    <title>Important: firefox security update</title>
    <issued date="2023-07-13 00:00:00"/>
    <updated date="2023-07-14 22:04:33"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.13.0 ESR.

Security Fix(es):

* Mozilla: Use-after-free in WebRTC certificate generation (CVE-2023-37201)
* Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-37202)
* Mozilla: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13 (CVE-2023-37211)
* Mozilla: Fullscreen notification obscured (CVE-2023-37207)
* Mozilla: Lack of warning when opening Diagcab files (CVE-2023-37208)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4076" id="RHSA-2023:4076" type="rhsa" title="RHSA-2023:4076"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37201" id="CVE-2023-37201" type="cve" title="CVE-2023-37201"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37202" id="CVE-2023-37202" type="cve" title="CVE-2023-37202"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37207" id="CVE-2023-37207" type="cve" title="CVE-2023-37207"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37208" id="CVE-2023-37208" type="cve" title="CVE-2023-37208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37211" id="CVE-2023-37211" type="cve" title="CVE-2023-37211"/>
      <reference href="https://bugzilla.redhat.com/2219747" id="2219747" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219748" id="2219748" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219749" id="2219749" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219750" id="2219750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219751" id="2219751" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4076.html" id="ALSA-2023:4076" type="self" title="ALSA-2023:4076"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="firefox" version="102.13.0" release="2.el8_8.alma" epoch="0" arch="s390x" src="firefox-102.13.0-2.el8_8.alma.src.rpm">
          <filename>firefox-102.13.0-2.el8_8.alma.s390x.rpm</filename>
          <sum type="sha256">32eef713ac4ead9e6dce04ddb139ac98a77875e1b414a9eb453c929ba40488c7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4100</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2023-07-17 00:00:00"/>
    <updated date="2023-07-18 07:27:24"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: named's configured cache size limit can be significantly exceeded (CVE-2023-2828)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4100" id="RHSA-2023:4100" type="rhsa" title="RHSA-2023:4100"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2828" id="CVE-2023-2828" type="cve" title="CVE-2023-2828"/>
      <reference href="https://bugzilla.redhat.com/2216227" id="2216227" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4100.html" id="ALSA-2023:4100" type="self" title="ALSA-2023:4100"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="bind9.16-libs" version="9.16.23" release="0.14.el8_8.1.alma" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.14.el8_8.1.alma.src.rpm">
          <filename>bind9.16-libs-9.16.23-0.14.el8_8.1.alma.s390x.rpm</filename>
          <sum type="sha256">13476f60af094e80f5b4a97c19cf0b06a402d9fb028709acdc2750933337034c</sum>
        </package>
        <package name="bind9.16-dnssec-utils" version="9.16.23" release="0.14.el8_8.1.alma" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.14.el8_8.1.alma.src.rpm">
          <filename>bind9.16-dnssec-utils-9.16.23-0.14.el8_8.1.alma.s390x.rpm</filename>
          <sum type="sha256">391b4e8fcfb1d1842a972ec582bc4e8318e666c6d6b21b809362781459b18903</sum>
        </package>
        <package name="bind9.16-chroot" version="9.16.23" release="0.14.el8_8.1.alma" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.14.el8_8.1.alma.src.rpm">
          <filename>bind9.16-chroot-9.16.23-0.14.el8_8.1.alma.s390x.rpm</filename>
          <sum type="sha256">3e830ce9fe5f67a9353de234e99e65553d10a009ebc6299d7ab64c27addec659</sum>
        </package>
        <package name="bind9.16" version="9.16.23" release="0.14.el8_8.1.alma" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.14.el8_8.1.alma.src.rpm">
          <filename>bind9.16-9.16.23-0.14.el8_8.1.alma.s390x.rpm</filename>
          <sum type="sha256">4ae7e04422b7426c325b87e2d4b115bfff1edc163e8ae2b742b20434978035dd</sum>
        </package>
        <package name="python3-bind9.16" version="9.16.23" release="0.14.el8_8.1.alma" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.14.el8_8.1.alma.src.rpm">
          <filename>python3-bind9.16-9.16.23-0.14.el8_8.1.alma.noarch.rpm</filename>
          <sum type="sha256">5a9770a9790cafeb0aa3b909d6ec3e61c6900cb4d48478b99b49dab10323d351</sum>
        </package>
        <package name="bind9.16-license" version="9.16.23" release="0.14.el8_8.1.alma" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.14.el8_8.1.alma.src.rpm">
          <filename>bind9.16-license-9.16.23-0.14.el8_8.1.alma.noarch.rpm</filename>
          <sum type="sha256">87a9fa133c802778e9fc8517f30fc3ae1a555b7da44aa6ee7d1174eee8bb98db</sum>
        </package>
        <package name="bind9.16-utils" version="9.16.23" release="0.14.el8_8.1.alma" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.14.el8_8.1.alma.src.rpm">
          <filename>bind9.16-utils-9.16.23-0.14.el8_8.1.alma.s390x.rpm</filename>
          <sum type="sha256">c88372702a6f88bb3dd3480d3614586f8d05aff9ec025adc9048d501142beaed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4102</id>
    <title>Important: bind security update</title>
    <issued date="2023-07-17 00:00:00"/>
    <updated date="2023-07-18 09:46:50"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: named's configured cache size limit can be significantly exceeded (CVE-2023-2828)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4102" id="RHSA-2023:4102" type="rhsa" title="RHSA-2023:4102"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2828" id="CVE-2023-2828" type="cve" title="CVE-2023-2828"/>
      <reference href="https://bugzilla.redhat.com/2216227" id="2216227" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4102.html" id="ALSA-2023:4102" type="self" title="ALSA-2023:4102"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="bind-pkcs11-devel" version="9.11.36" release="8.el8_8.1" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.1.src.rpm">
          <filename>bind-pkcs11-devel-9.11.36-8.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">02ed2911d3b6b953ca288a75200fc560d2375dbd505d1b71740c601c0fefced9</sum>
        </package>
        <package name="bind-libs" version="9.11.36" release="8.el8_8.1" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.1.src.rpm">
          <filename>bind-libs-9.11.36-8.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">11fc59a8568e55f2262683b244a260fa65f6295f6d561354ce91b82b9372e6db</sum>
        </package>
        <package name="python3-bind" version="9.11.36" release="8.el8_8.1" epoch="32" arch="noarch" src="bind-9.11.36-8.el8_8.1.src.rpm">
          <filename>python3-bind-9.11.36-8.el8_8.1.noarch.rpm</filename>
          <sum type="sha256">146fd2babbcf85095c2f8b0e68ea3d7c68d4e29ffcf00d7174ab58f119c9552a</sum>
        </package>
        <package name="bind" version="9.11.36" release="8.el8_8.1" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.1.src.rpm">
          <filename>bind-9.11.36-8.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">16ae912a25edcf847725c33fdc3de8eb4973898e92172395240275dae8b98e13</sum>
        </package>
        <package name="bind-pkcs11" version="9.11.36" release="8.el8_8.1" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.1.src.rpm">
          <filename>bind-pkcs11-9.11.36-8.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">24f222638d05564388f19488758656ca46f0aea19b9642dde4b15bf12bcbd88b</sum>
        </package>
        <package name="bind-pkcs11-utils" version="9.11.36" release="8.el8_8.1" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.1.src.rpm">
          <filename>bind-pkcs11-utils-9.11.36-8.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">4fc2aab8b855879c510ea46ee5749dd856aec6c04a245f48540b677882eb54d0</sum>
        </package>
        <package name="bind-libs-lite" version="9.11.36" release="8.el8_8.1" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.1.src.rpm">
          <filename>bind-libs-lite-9.11.36-8.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">5ef1a6bed4149e32bac768214355086cfc8f499a7966820d7536313c478cda03</sum>
        </package>
        <package name="bind-pkcs11-libs" version="9.11.36" release="8.el8_8.1" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.1.src.rpm">
          <filename>bind-pkcs11-libs-9.11.36-8.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">6d97a7204d9ed61766c998218682a4c7029041889118c0d2ef9859eeccccae42</sum>
        </package>
        <package name="bind-license" version="9.11.36" release="8.el8_8.1" epoch="32" arch="noarch" src="bind-9.11.36-8.el8_8.1.src.rpm">
          <filename>bind-license-9.11.36-8.el8_8.1.noarch.rpm</filename>
          <sum type="sha256">803d036bbf106c2e2d3cafbf993735478aa1a90a51a44225695b144fd7c06e62</sum>
        </package>
        <package name="bind-sdb-chroot" version="9.11.36" release="8.el8_8.1" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.1.src.rpm">
          <filename>bind-sdb-chroot-9.11.36-8.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">9e1ec287cfd2e85598b9528d371ce72acd5508bfbf86a2f26ac78908acd8eee8</sum>
        </package>
        <package name="bind-lite-devel" version="9.11.36" release="8.el8_8.1" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.1.src.rpm">
          <filename>bind-lite-devel-9.11.36-8.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">a90f9efe48355621c3f508d36b704a41c3d8416eb935e8ccf78c5e399ab06a80</sum>
        </package>
        <package name="bind-utils" version="9.11.36" release="8.el8_8.1" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.1.src.rpm">
          <filename>bind-utils-9.11.36-8.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">ade862330ee45a15b1c86a384e0f20083720aebb018fdfe1e67bf819a4190626</sum>
        </package>
        <package name="bind-sdb" version="9.11.36" release="8.el8_8.1" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.1.src.rpm">
          <filename>bind-sdb-9.11.36-8.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">b259508acad7b590772e2169ce945e45b5a8c02df2607e0189a8838c27c173d8</sum>
        </package>
        <package name="bind-chroot" version="9.11.36" release="8.el8_8.1" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.1.src.rpm">
          <filename>bind-chroot-9.11.36-8.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">d614372b8cba5e91d270d5360719694a4255b4a7f7bb7bd404c8be5c269b368c</sum>
        </package>
        <package name="bind-devel" version="9.11.36" release="8.el8_8.1" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.1.src.rpm">
          <filename>bind-devel-9.11.36-8.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">dbe3a44b975dd702b01226b7cf05c9aea7a53eb570116e1fbd35e5a251b84d63</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4159</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2023-07-20 00:00:00"/>
    <updated date="2023-07-21 18:32:47"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)
* OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)
* OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
* harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)
* OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)
* OpenJDK: modulo operator array indexing issue (8304460) (CVE-2023-22044)
* OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Installing the same java-17-openjdk-headless package on two different systems resulted in distinct classes.jsa files getting generated. This was because the CDS archive was being generated by a post script action of the java-17-openjdk-headless package. This prevented the use of the dynamic dump feature, as the checksum in the archive would be different on each system. This is resolved in this release by using the .jsa files generated during the initial build. (RHBZ#2221655)
* Prepare for the next quarterly OpenJDK upstream release (2023-07, 17.0.8) [almalinux-8] (BZ#2222368)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4159" id="RHSA-2023:4159" type="rhsa" title="RHSA-2023:4159"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22006" id="CVE-2023-22006" type="cve" title="CVE-2023-22006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22036" id="CVE-2023-22036" type="cve" title="CVE-2023-22036"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22041" id="CVE-2023-22041" type="cve" title="CVE-2023-22041"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22044" id="CVE-2023-22044" type="cve" title="CVE-2023-22044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22045" id="CVE-2023-22045" type="cve" title="CVE-2023-22045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22049" id="CVE-2023-22049" type="cve" title="CVE-2023-22049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25193" id="CVE-2023-25193" type="cve" title="CVE-2023-25193"/>
      <reference href="https://bugzilla.redhat.com/2167254" id="2167254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221626" id="2221626" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221634" id="2221634" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221642" id="2221642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221645" id="2221645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221647" id="2221647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2223207" id="2223207" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4159.html" id="ALSA-2023:4159" type="self" title="ALSA-2023:4159"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="java-17-openjdk" version="17.0.8.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-17.0.8.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">1d9af0d1c269146e19874efe326bdd29b390ca1b93036d6993e8f350596c4d85</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.8.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-src-17.0.8.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">36166a16c96556cfc81c8924965af36e931de084a00f03d7f9b6e55c9034850e</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.8.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.8.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">3c636cc5e61ba7703f4886474e1fc2cf900af08bc47b0ae3f13197e5a2214910</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.8.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.8.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">5e81137fae6b18e59f4f78cf5224aa3c3a405db4edc2f740592736dc5ef4eaff</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.8.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.8.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">6a5a893c6c154c77a0a89db55dcc697240cadb1b2d9ee85ee0eb27a152554b9b</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.8.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-17.0.8.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">81590089d1467ba6b02106438f2bb5dc1231c50462609e664064dab4c41f0988</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.8.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-17.0.8.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">8de778cf295863fbb248a4ab2bdbe1b7e5b6f8c7aad53a1b84e313e16847ea6b</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.8.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-17.0.8.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">bb2601cbc47c36c99823b2cccc7ee3e3215881467af34a73b4d7654002445945</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.8.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.8.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">c3bc7b43d2be621fe25422ae82aa167acbf3a9b4ccc0c23d33a581a7bf845199</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4175</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2023-07-20 00:00:00"/>
    <updated date="2023-07-21 18:19:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)
* OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)
* OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
* harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)
* OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)
* OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* A virtual machine crash was observed in JDK 11.0.19 when executing the GregorianCalender.computeTime() method (JDK-8307683). It was found
that although the root cause of the crash is an old issue, a recent fix for a rare issue in the C2 compiler (JDK-8297951) made the crash much more likely. To mitigate this, the fix has been reverted in JDK 11.0.20 and will be reapplied once JDK-8307683 is resolved. (RHBZ#2222493)
* Prepare for the next quarterly OpenJDK upstream release (2023-07, 11.0.20) [almalinux-8] (BZ#2223101)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4175" id="RHSA-2023:4175" type="rhsa" title="RHSA-2023:4175"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22006" id="CVE-2023-22006" type="cve" title="CVE-2023-22006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22036" id="CVE-2023-22036" type="cve" title="CVE-2023-22036"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22041" id="CVE-2023-22041" type="cve" title="CVE-2023-22041"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22045" id="CVE-2023-22045" type="cve" title="CVE-2023-22045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22049" id="CVE-2023-22049" type="cve" title="CVE-2023-22049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25193" id="CVE-2023-25193" type="cve" title="CVE-2023-25193"/>
      <reference href="https://bugzilla.redhat.com/2167254" id="2167254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221626" id="2221626" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221634" id="2221634" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221645" id="2221645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221647" id="2221647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2223207" id="2223207" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4175.html" id="ALSA-2023:4175" type="self" title="ALSA-2023:4175"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="java-11-openjdk-javadoc" version="11.0.20.0.8" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-javadoc-11.0.20.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">0068a8cb5c238afd3d582f2d0168eedfc9467a58b0c0823e1206707debbe2ac6</sum>
        </package>
        <package name="java-11-openjdk-src" version="11.0.20.0.8" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-src-11.0.20.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">0205b2b0363e7b66993cb1106c20f381b12929ea3ad3353a31996d4fc4f0d5c6</sum>
        </package>
        <package name="java-11-openjdk-javadoc-zip" version="11.0.20.0.8" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-javadoc-zip-11.0.20.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">18145440bb521a03141ada15b204a3bd6fcbc097ee0237d5c23f3de53f7ffa3a</sum>
        </package>
        <package name="java-11-openjdk" version="11.0.20.0.8" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-11.0.20.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">33e354c803f3ce33631dcf384fee5047377142c858a3c1223f8112e42dc31292</sum>
        </package>
        <package name="java-11-openjdk-jmods" version="11.0.20.0.8" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-jmods-11.0.20.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">3c0e06b3f1f2c62d9ed3fd309920d035862c846e4a572099465352580f8d9fb7</sum>
        </package>
        <package name="java-11-openjdk-headless" version="11.0.20.0.8" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-headless-11.0.20.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">3f00ed792464bcb5a2aba6fac66c31ef2e6911662af7fc9db1552df9203203af</sum>
        </package>
        <package name="java-11-openjdk-demo" version="11.0.20.0.8" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-demo-11.0.20.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">40f32bed29624d6658ffd0a9cd503ce78fe80c8254e62911ebd8284a4faf19ae</sum>
        </package>
        <package name="java-11-openjdk-static-libs" version="11.0.20.0.8" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-static-libs-11.0.20.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">9b71e67e4c72f183718f4b8153013e1bb363530bef5d6f232751f823a64dc94b</sum>
        </package>
        <package name="java-11-openjdk-devel" version="11.0.20.0.8" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-devel-11.0.20.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">c5b19f3a2f25aafc03f1517fd7f974ea266d0ba54a82379587366d2af41b00f5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4176</id>
    <title>Moderate: java-1.8.0-openjdk security and bug fix update</title>
    <issued date="2023-07-20 00:00:00"/>
    <updated date="2023-07-21 15:46:02"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security and bug fix update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
* OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2023-07, 8u382) [almalinux-8] (BZ#2219727)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4176" id="RHSA-2023:4176" type="rhsa" title="RHSA-2023:4176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22045" id="CVE-2023-22045" type="cve" title="CVE-2023-22045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22049" id="CVE-2023-22049" type="cve" title="CVE-2023-22049"/>
      <reference href="https://bugzilla.redhat.com/2221645" id="2221645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221647" id="2221647" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4176.html" id="ALSA-2023:4176" type="self" title="ALSA-2023:4176"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="java-1.8.0-openjdk" version="1.8.0.382.b05" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.382.b05-2.el8.s390x.rpm</filename>
          <sum type="sha256">349a68dd78bcbd53b8874e6040e2ac773a38baa6806efea966c7cfe4af44062f</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.382.b05" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.382.b05-2.el8.s390x.rpm</filename>
          <sum type="sha256">3b37c55f0340c83a2e957f51f2f3153a7190d2be91fb119807ab222e09944f21</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.382.b05" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.382.b05-2.el8.s390x.rpm</filename>
          <sum type="sha256">501b022d3bf9137994a605991c42afcedef688e7515f8e7af7cbdacefdc30f13</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.382.b05" release="2.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.382.b05-2.el8.noarch.rpm</filename>
          <sum type="sha256">5e340f9b2ee56ef8101ccbc09cff283df7b7641faa4600bdf1d0eb2630b67afc</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.382.b05" release="2.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.382.b05-2.el8.noarch.rpm</filename>
          <sum type="sha256">8679b50ab173117d67776a9c623bc242551a4f3dbb5c56707b2cd35427ab6e07</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility" version="1.8.0.382.b05" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-1.8.0.382.b05-2.el8.s390x.rpm</filename>
          <sum type="sha256">ad028efce845c0f8be7016db580c178fb66c1eb7e7400b0e1d4aef49230c88f2</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.382.b05" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.382.b05-2.el8.s390x.rpm</filename>
          <sum type="sha256">ca41ba37a7e426b671ca4b641c341822cb45f5a68ca533836bfc73bb905b9930</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.382.b05" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.382.b05-2.el8.s390x.rpm</filename>
          <sum type="sha256">ff102962b00676c69e7e8c317ec5a3b9e26356ad3f0c395eb19d49d2e65bf83a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4202</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2023-07-18 00:00:00"/>
    <updated date="2023-07-19 08:42:27"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-32435)
* webkitgtk: type confusion issue leading to arbitrary code execution (CVE-2023-32439)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4202" id="RHSA-2023:4202" type="rhsa" title="RHSA-2023:4202"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32435" id="CVE-2023-32435" type="cve" title="CVE-2023-32435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32439" id="CVE-2023-32439" type="cve" title="CVE-2023-32439"/>
      <reference href="https://bugzilla.redhat.com/2218626" id="2218626" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218640" id="2218640" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4202.html" id="ALSA-2023:4202" type="self" title="ALSA-2023:4202"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="webkit2gtk3" version="2.38.5" release="1.el8_8.5.alma" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el8_8.5.alma.src.rpm">
          <filename>webkit2gtk3-2.38.5-1.el8_8.5.alma.s390x.rpm</filename>
          <sum type="sha256">0de41c970d552cff4fe70acb56e70ae71bbeedc3d67bd08b3d2d33c421c75462</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.38.5" release="1.el8_8.5.alma" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el8_8.5.alma.src.rpm">
          <filename>webkit2gtk3-jsc-2.38.5-1.el8_8.5.alma.s390x.rpm</filename>
          <sum type="sha256">97037757e3bfcb33efca0b4ff8d708e678b2a59ee75f94f66c1173b8909b8400</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.38.5" release="1.el8_8.5.alma" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el8_8.5.alma.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.38.5-1.el8_8.5.alma.s390x.rpm</filename>
          <sum type="sha256">a5be6530629136db70a8ad7870be80cf7e474a285371bd85bda1a935f20ec87b</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.38.5" release="1.el8_8.5.alma" epoch="0" arch="s390x" src="webkit2gtk3-2.38.5-1.el8_8.5.alma.src.rpm">
          <filename>webkit2gtk3-devel-2.38.5-1.el8_8.5.alma.s390x.rpm</filename>
          <sum type="sha256">a8715ba919428977c07eedf4afc42255b8b72d42d595964cb41a18dbc902bec0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4328</id>
    <title>Moderate: samba security and bug fix update</title>
    <issued date="2023-07-31 00:00:00"/>
    <updated date="2023-08-03 10:23:27"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security and bug fix update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: SMB2 packet signing is not enforced when "server signing = required" is set (CVE-2023-3347)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* The trust relationship between this workstation and the primary domain failed (BZ#2223601)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4328" id="RHSA-2023:4328" type="rhsa" title="RHSA-2023:4328"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3347" id="CVE-2023-3347" type="cve" title="CVE-2023-3347"/>
      <reference href="https://bugzilla.redhat.com/2222792" id="2222792" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4328.html" id="ALSA-2023:4328" type="self" title="ALSA-2023:4328"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="samba-vfs-iouring" version="4.17.5" release="3.el8_8.alma" epoch="0" arch="s390x" src="samba-4.17.5-3.el8_8.alma.src.rpm">
          <filename>samba-vfs-iouring-4.17.5-3.el8_8.alma.s390x.rpm</filename>
          <sum type="sha256">76074bd5f4a3933dc75024b931b8042cf9be213aa10c4b41aff1f35d02039273</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4418</id>
    <title>Important: mod_auth_openidc:2.3 security update</title>
    <issued date="2023-08-01 00:00:00"/>
    <updated date="2023-08-02 17:34:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mod_auth_openidc:2.3 security update</summary>
    <description>The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. 

Security Fix(es):

* cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE (CVE-2023-37464)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4418" id="RHSA-2023:4418" type="rhsa" title="RHSA-2023:4418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37464" id="CVE-2023-37464" type="cve" title="CVE-2023-37464"/>
      <reference href="https://bugzilla.redhat.com/2223295" id="2223295" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4418.html" id="ALSA-2023:4418" type="self" title="ALSA-2023:4418"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="mod_auth_openidc" stream="2.3" version="8070020221011155741" context="9edba152" arch="s390x"/>
        <package name="mod_auth_openidc" version="2.4.9.4" release="1.module_el8.7.0+3305+9a59f0c3" epoch="0" arch="s390x" src="mod_auth_openidc-2.4.9.4-1.module_el8.7.0+3305+9a59f0c3.src.rpm">
          <filename>mod_auth_openidc-2.4.9.4-1.module_el8.7.0+3305+9a59f0c3.s390x.rpm</filename>
          <sum type="sha256">077fdd85d3058f6e044b888c6f8fca6b17f6b9fbbaa32121123fa46c12231c88</sum>
        </package>
        <package name="cjose" version="0.6.1" release="3.module_el8.8.0+3591+c9939da8" epoch="0" arch="s390x" src="cjose-0.6.1-3.module_el8.8.0+3591+c9939da8.src.rpm">
          <filename>cjose-0.6.1-3.module_el8.8.0+3591+c9939da8.s390x.rpm</filename>
          <sum type="sha256">6a8d69ce7ad2b14244abaefa65232a75e6c5cd0207e8905dbc8b900b563fef7a</sum>
        </package>
        <package name="cjose-devel" version="0.6.1" release="3.module_el8.8.0+3591+c9939da8" epoch="0" arch="s390x" src="cjose-0.6.1-3.module_el8.8.0+3591+c9939da8.src.rpm">
          <filename>cjose-devel-0.6.1-3.module_el8.8.0+3591+c9939da8.s390x.rpm</filename>
          <sum type="sha256">75bca2726639729a99eb2acebb6f08f682b8206cdf29a60cf2a35ab8160c488c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4419</id>
    <title>Important: openssh security update</title>
    <issued date="2023-08-01 00:00:00"/>
    <updated date="2023-08-02 08:52:49"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openssh security update</summary>
    <description>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

* openssh: Remote code execution in ssh-agent PKCS#11 support (CVE-2023-38408)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4419" id="RHSA-2023:4419" type="rhsa" title="RHSA-2023:4419"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38408" id="CVE-2023-38408" type="cve" title="CVE-2023-38408"/>
      <reference href="https://bugzilla.redhat.com/2224173" id="2224173" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4419.html" id="ALSA-2023:4419" type="self" title="ALSA-2023:4419"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="openssh-askpass" version="8.0p1" release="19.el8_8" epoch="0" arch="s390x" src="openssh-8.0p1-19.el8_8.src.rpm">
          <filename>openssh-askpass-8.0p1-19.el8_8.s390x.rpm</filename>
          <sum type="sha256">bb9b58a0a0f830eb04832de7c735fd50a15baa07f440704ff38192d0de3151cc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4468</id>
    <title>Important: firefox security update</title>
    <issued date="2023-08-03 00:00:00"/>
    <updated date="2023-08-04 19:54:12"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>TODO: add package description

This update upgrades Firefox to version 102.14.0 ESR.

Security Fix(es):

* Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045)
* Mozilla: Incorrect value used during WASM compilation (CVE-2023-4046)
* Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-4047)
* Mozilla: Crash in DOMParser due to out-of-memory conditions (CVE-2023-4048)
* Mozilla: Fix potential race conditions when releasing platform objects (CVE-2023-4049)
* Mozilla: Stack buffer overflow in StorageManager (CVE-2023-4050)
* Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 (CVE-2023-4056)
* Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1 (CVE-2023-4057)
* Mozilla: Cookie jar overflow caused unexpected cookie jar state (CVE-2023-4055)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4468" id="RHSA-2023:4468" type="rhsa" title="RHSA-2023:4468"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4045" id="CVE-2023-4045" type="cve" title="CVE-2023-4045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4046" id="CVE-2023-4046" type="cve" title="CVE-2023-4046"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4047" id="CVE-2023-4047" type="cve" title="CVE-2023-4047"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4048" id="CVE-2023-4048" type="cve" title="CVE-2023-4048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4049" id="CVE-2023-4049" type="cve" title="CVE-2023-4049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4050" id="CVE-2023-4050" type="cve" title="CVE-2023-4050"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4055" id="CVE-2023-4055" type="cve" title="CVE-2023-4055"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4056" id="CVE-2023-4056" type="cve" title="CVE-2023-4056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4057" id="CVE-2023-4057" type="cve" title="CVE-2023-4057"/>
      <reference href="https://bugzilla.redhat.com/2228360" id="2228360" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228361" id="2228361" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228362" id="2228362" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228363" id="2228363" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228364" id="2228364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228365" id="2228365" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228367" id="2228367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228370" id="2228370" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228371" id="2228371" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4468.html" id="ALSA-2023:4468" type="self" title="ALSA-2023:4468"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="firefox" version="102.14.0" release="1.el8_8.alma" epoch="0" arch="s390x" src="firefox-102.14.0-1.el8_8.alma.src.rpm">
          <filename>firefox-102.14.0-1.el8_8.alma.s390x.rpm</filename>
          <sum type="sha256">28967002408329d0a08c4e1ebb38c3893d778e69a57de41db1ca24ba77cbf976</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4497</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-08-07 00:00:00"/>
    <updated date="2023-08-08 10:19:28"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.14.0.

Security Fix(es):

* Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045)
* Mozilla: Incorrect value used during WASM compilation (CVE-2023-4046)
* Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-4047)
* Mozilla: Crash in DOMParser due to out-of-memory conditions (CVE-2023-4048)
* Mozilla: Fix potential race conditions when releasing platform objects (CVE-2023-4049)
* Mozilla: Stack buffer overflow in StorageManager (CVE-2023-4050)
* Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 (CVE-2023-4056)
* Mozilla: Memory safety bugs fixed in Firefox ESR 115.1, and Thunderbird 115.1 (CVE-2023-4057)
* thunderbird: File Extension Spoofing using the Text Direction Override Character (CVE-2023-3417)
* Mozilla: Cookie jar overflow caused unexpected cookie jar state (CVE-2023-4055)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4497" id="RHSA-2023:4497" type="rhsa" title="RHSA-2023:4497"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3417" id="CVE-2023-3417" type="cve" title="CVE-2023-3417"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4045" id="CVE-2023-4045" type="cve" title="CVE-2023-4045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4046" id="CVE-2023-4046" type="cve" title="CVE-2023-4046"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4047" id="CVE-2023-4047" type="cve" title="CVE-2023-4047"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4048" id="CVE-2023-4048" type="cve" title="CVE-2023-4048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4049" id="CVE-2023-4049" type="cve" title="CVE-2023-4049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4050" id="CVE-2023-4050" type="cve" title="CVE-2023-4050"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4055" id="CVE-2023-4055" type="cve" title="CVE-2023-4055"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4056" id="CVE-2023-4056" type="cve" title="CVE-2023-4056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4057" id="CVE-2023-4057" type="cve" title="CVE-2023-4057"/>
      <reference href="https://bugzilla.redhat.com/2225325" id="2225325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228360" id="2228360" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228361" id="2228361" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228362" id="2228362" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228363" id="2228363" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228364" id="2228364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228365" id="2228365" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228367" id="2228367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228370" id="2228370" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228371" id="2228371" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4497.html" id="ALSA-2023:4497" type="self" title="ALSA-2023:4497"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="thunderbird" version="102.14.0" release="1.el8_8.alma" epoch="0" arch="s390x" src="thunderbird-102.14.0-1.el8_8.alma.src.rpm">
          <filename>thunderbird-102.14.0-1.el8_8.alma.s390x.rpm</filename>
          <sum type="sha256">14a8f1f6601b614cc6919ede5a5d46a87a42728c5bc914a3c513c3f62ad63672</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4498</id>
    <title>Moderate: dbus security update</title>
    <issued date="2023-08-07 00:00:00"/>
    <updated date="2023-08-08 07:04:34"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dbus security update</summary>
    <description>D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility.

Security Fix(es):

* dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered (CVE-2023-34969)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4498" id="RHSA-2023:4498" type="rhsa" title="RHSA-2023:4498"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34969" id="CVE-2023-34969" type="cve" title="CVE-2023-34969"/>
      <reference href="https://bugzilla.redhat.com/2213166" id="2213166" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4498.html" id="ALSA-2023:4498" type="self" title="ALSA-2023:4498"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="dbus-devel" version="1.12.8" release="24.el8_8.1" epoch="1" arch="s390x" src="dbus-1.12.8-24.el8_8.1.src.rpm">
          <filename>dbus-devel-1.12.8-24.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">980e7642fecd1cd5abe60c9cd6f9c43a450f98f87236319f24686ffe4cbad0b8</sum>
        </package>
        <package name="dbus-x11" version="1.12.8" release="24.el8_8.1" epoch="1" arch="s390x" src="dbus-1.12.8-24.el8_8.1.src.rpm">
          <filename>dbus-x11-1.12.8-24.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">a4163d9278227a6f63382d203316576bf824ec851df0b13383629c2d62b7b6d0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4527</id>
    <title>Moderate: postgresql:13 security update</title>
    <issued date="2023-08-08 00:00:00"/>
    <updated date="2023-08-09 14:42:26"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql:13 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: schema_element defeats protective search_path changes (CVE-2023-2454)
* postgresql: row security policies disregard user ID changes after inlining. (CVE-2023-2455)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4527" id="RHSA-2023:4527" type="rhsa" title="RHSA-2023:4527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2454" id="CVE-2023-2454" type="cve" title="CVE-2023-2454"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2455" id="CVE-2023-2455" type="cve" title="CVE-2023-2455"/>
      <reference href="https://bugzilla.redhat.com/2207568" id="2207568" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2207569" id="2207569" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4527.html" id="ALSA-2023:4527" type="self" title="ALSA-2023:4527"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="postgresql" stream="13" version="8080020230809092728" context="9edba152" arch="s390x"/>
        <package name="postgresql-upgrade-devel" version="13.11" release="1.module_el8.8.0+3601+ca64e769" epoch="0" arch="s390x" src="postgresql-13.11-1.module_el8.8.0+3601+ca64e769.src.rpm">
          <filename>postgresql-upgrade-devel-13.11-1.module_el8.8.0+3601+ca64e769.s390x.rpm</filename>
          <sum type="sha256">071b61aae63d4797b3f91d1e42056ac8bb4a4202d13b0912dd9bb908225697fa</sum>
        </package>
        <package name="postgresql-docs" version="13.11" release="1.module_el8.8.0+3601+ca64e769" epoch="0" arch="s390x" src="postgresql-13.11-1.module_el8.8.0+3601+ca64e769.src.rpm">
          <filename>postgresql-docs-13.11-1.module_el8.8.0+3601+ca64e769.s390x.rpm</filename>
          <sum type="sha256">1af9b4d89901c730237fb00aa89311698facf87e997a3f02d3e4bb777b7c347d</sum>
        </package>
        <package name="postgresql-plperl" version="13.11" release="1.module_el8.8.0+3601+ca64e769" epoch="0" arch="s390x" src="postgresql-13.11-1.module_el8.8.0+3601+ca64e769.src.rpm">
          <filename>postgresql-plperl-13.11-1.module_el8.8.0+3601+ca64e769.s390x.rpm</filename>
          <sum type="sha256">3438355e90bf1f6a004aa6a6cdb4f65185bfa412ff07dfe1170e90c99c6bd99e</sum>
        </package>
        <package name="postgresql-upgrade" version="13.11" release="1.module_el8.8.0+3601+ca64e769" epoch="0" arch="s390x" src="postgresql-13.11-1.module_el8.8.0+3601+ca64e769.src.rpm">
          <filename>postgresql-upgrade-13.11-1.module_el8.8.0+3601+ca64e769.s390x.rpm</filename>
          <sum type="sha256">5c1d6b56d3f181c794cf130f5328586d0f9f2cb87517a270a0762065cb930b3e</sum>
        </package>
        <package name="postgresql" version="13.11" release="1.module_el8.8.0+3601+ca64e769" epoch="0" arch="s390x" src="postgresql-13.11-1.module_el8.8.0+3601+ca64e769.src.rpm">
          <filename>postgresql-13.11-1.module_el8.8.0+3601+ca64e769.s390x.rpm</filename>
          <sum type="sha256">8421de7b8ea52144fb3a4ad3219e5f05b4d0ed61bb8bf2287b20d261479ac32d</sum>
        </package>
        <package name="postgresql-test" version="13.11" release="1.module_el8.8.0+3601+ca64e769" epoch="0" arch="s390x" src="postgresql-13.11-1.module_el8.8.0+3601+ca64e769.src.rpm">
          <filename>postgresql-test-13.11-1.module_el8.8.0+3601+ca64e769.s390x.rpm</filename>
          <sum type="sha256">86891130f216a3c56bcc27457d49d30a35fd9a24d8b36094c31ca7ba032b918e</sum>
        </package>
        <package name="postgresql-server" version="13.11" release="1.module_el8.8.0+3601+ca64e769" epoch="0" arch="s390x" src="postgresql-13.11-1.module_el8.8.0+3601+ca64e769.src.rpm">
          <filename>postgresql-server-13.11-1.module_el8.8.0+3601+ca64e769.s390x.rpm</filename>
          <sum type="sha256">9057c939f50d539b930d7957953c691766950281cafdb52e1b1895a328d77258</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="13.11" release="1.module_el8.8.0+3601+ca64e769" epoch="0" arch="noarch" src="postgresql-13.11-1.module_el8.8.0+3601+ca64e769.src.rpm">
          <filename>postgresql-test-rpm-macros-13.11-1.module_el8.8.0+3601+ca64e769.noarch.rpm</filename>
          <sum type="sha256">94174f80e6a7bdd0b3154192d4a200ca0f36b4f2dfbc5383bba2390194200516</sum>
        </package>
        <package name="postgresql-contrib" version="13.11" release="1.module_el8.8.0+3601+ca64e769" epoch="0" arch="s390x" src="postgresql-13.11-1.module_el8.8.0+3601+ca64e769.src.rpm">
          <filename>postgresql-contrib-13.11-1.module_el8.8.0+3601+ca64e769.s390x.rpm</filename>
          <sum type="sha256">a264fdddf4611cf55847a7ead02a570f54520452d7990af92e523dd9cb78bf46</sum>
        </package>
        <package name="pgaudit" version="1.5.0" release="1.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="pgaudit-1.5.0-1.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>pgaudit-1.5.0-1.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">a29cba50326b3c78b1cff9ad076eff7837022e71f02d7ec9e918aed69a9c3f35</sum>
        </package>
        <package name="postgres-decoderbufs" version="0.10.0" release="2.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">b11226898b888f8213eefe941cece0f636a08ccce2ceaa8bee2a38e6058ed4f3</sum>
        </package>
        <package name="postgresql-server-devel" version="13.11" release="1.module_el8.8.0+3601+ca64e769" epoch="0" arch="s390x" src="postgresql-13.11-1.module_el8.8.0+3601+ca64e769.src.rpm">
          <filename>postgresql-server-devel-13.11-1.module_el8.8.0+3601+ca64e769.s390x.rpm</filename>
          <sum type="sha256">b4bb9f0f71c1b6798ea3197f2548d40ba503af823e6f9636308c8ce447d08187</sum>
        </package>
        <package name="pg_repack" version="1.4.6" release="3.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="pg_repack-1.4.6-3.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>pg_repack-1.4.6-3.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">c1b386540b304a4de3ff8d840ec35dc9d67ecd1827aa06cd695f06060e8d2ea7</sum>
        </package>
        <package name="postgresql-static" version="13.11" release="1.module_el8.8.0+3601+ca64e769" epoch="0" arch="s390x" src="postgresql-13.11-1.module_el8.8.0+3601+ca64e769.src.rpm">
          <filename>postgresql-static-13.11-1.module_el8.8.0+3601+ca64e769.s390x.rpm</filename>
          <sum type="sha256">c2f1644fb5700cce212668e444bc3c5c8da50c09e1a5f00d5993824d065bd6c4</sum>
        </package>
        <package name="postgresql-plpython3" version="13.11" release="1.module_el8.8.0+3601+ca64e769" epoch="0" arch="s390x" src="postgresql-13.11-1.module_el8.8.0+3601+ca64e769.src.rpm">
          <filename>postgresql-plpython3-13.11-1.module_el8.8.0+3601+ca64e769.s390x.rpm</filename>
          <sum type="sha256">e0580c4260b7bf2bb172c4b7a47f8600d323f3ebbb0e43325852e19731d9526a</sum>
        </package>
        <package name="postgresql-pltcl" version="13.11" release="1.module_el8.8.0+3601+ca64e769" epoch="0" arch="s390x" src="postgresql-13.11-1.module_el8.8.0+3601+ca64e769.src.rpm">
          <filename>postgresql-pltcl-13.11-1.module_el8.8.0+3601+ca64e769.s390x.rpm</filename>
          <sum type="sha256">f170454f89ed72055cb96294fa7deaad528d772ae03f79ca6e0ee47a09223725</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4529</id>
    <title>Moderate: libxml2 security update</title>
    <issued date="2023-08-08 00:00:00"/>
    <updated date="2023-08-09 09:53:09"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

* libxml2: NULL dereference in xmlSchemaFixupComplexType (CVE-2023-28484)
* libxml2: Hashing of empty dict strings isn't deterministic (CVE-2023-29469)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4529" id="RHSA-2023:4529" type="rhsa" title="RHSA-2023:4529"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28484" id="CVE-2023-28484" type="cve" title="CVE-2023-28484"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29469" id="CVE-2023-29469" type="cve" title="CVE-2023-29469"/>
      <reference href="https://bugzilla.redhat.com/2185984" id="2185984" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2185994" id="2185994" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4529.html" id="ALSA-2023:4529" type="self" title="ALSA-2023:4529"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="libxml2-devel" version="2.9.7" release="16.el8_8.1" epoch="0" arch="s390x" src="libxml2-2.9.7-16.el8_8.1.src.rpm">
          <filename>libxml2-devel-2.9.7-16.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">a2a0e1d807cb733222716431ebd279ad891d233892f9c8c6cd9b221ff01779d6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4535</id>
    <title>Moderate: postgresql:12 security update</title>
    <issued date="2023-08-08 00:00:00"/>
    <updated date="2023-08-09 14:24:25"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql:12 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: schema_element defeats protective search_path changes (CVE-2023-2454)
* postgresql: row security policies disregard user ID changes after inlining. (CVE-2023-2455)
* postgresql: Client memory disclosure when connecting with Kerberos to modified server (CVE-2022-41862)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4535" id="RHSA-2023:4535" type="rhsa" title="RHSA-2023:4535"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41862" id="CVE-2022-41862" type="cve" title="CVE-2022-41862"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2454" id="CVE-2023-2454" type="cve" title="CVE-2023-2454"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2455" id="CVE-2023-2455" type="cve" title="CVE-2023-2455"/>
      <reference href="https://bugzilla.redhat.com/2165722" id="2165722" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2207568" id="2207568" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2207569" id="2207569" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4535.html" id="ALSA-2023:4535" type="self" title="ALSA-2023:4535"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="postgresql" stream="12" version="8080020230809092645" context="9edba152" arch="s390x"/>
        <package name="postgresql-server-devel" version="12.15" release="1.module_el8.8.0+3600+38330172" epoch="0" arch="s390x" src="postgresql-12.15-1.module_el8.8.0+3600+38330172.src.rpm">
          <filename>postgresql-server-devel-12.15-1.module_el8.8.0+3600+38330172.s390x.rpm</filename>
          <sum type="sha256">172543a450aab6d14db88346ed00d623656c44be088b442743c621dd843d303e</sum>
        </package>
        <package name="pg_repack" version="1.4.6" release="3.module_el8.6.0+3094+eb237fb8" epoch="0" arch="s390x" src="pg_repack-1.4.6-3.module_el8.6.0+3094+eb237fb8.src.rpm">
          <filename>pg_repack-1.4.6-3.module_el8.6.0+3094+eb237fb8.s390x.rpm</filename>
          <sum type="sha256">3173a22fefa8d2ea6d0e0a71673c633cd0c0ee550eb4d9620076c269f6532d94</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="12.15" release="1.module_el8.8.0+3600+38330172" epoch="0" arch="noarch" src="postgresql-12.15-1.module_el8.8.0+3600+38330172.src.rpm">
          <filename>postgresql-test-rpm-macros-12.15-1.module_el8.8.0+3600+38330172.noarch.rpm</filename>
          <sum type="sha256">35a23b05a357f299d5b418a82047eced1dece5e0a5f5aabdeada15db16c9b596</sum>
        </package>
        <package name="postgres-decoderbufs" version="0.10.0" release="2.module_el8.6.0+3094+eb237fb8" epoch="0" arch="s390x" src="postgres-decoderbufs-0.10.0-2.module_el8.6.0+3094+eb237fb8.src.rpm">
          <filename>postgres-decoderbufs-0.10.0-2.module_el8.6.0+3094+eb237fb8.s390x.rpm</filename>
          <sum type="sha256">39539f821d88e471de98cf0a89ec70e2f70c39805aee9d7d6cdbb1cb6bbbc101</sum>
        </package>
        <package name="postgresql-plperl" version="12.15" release="1.module_el8.8.0+3600+38330172" epoch="0" arch="s390x" src="postgresql-12.15-1.module_el8.8.0+3600+38330172.src.rpm">
          <filename>postgresql-plperl-12.15-1.module_el8.8.0+3600+38330172.s390x.rpm</filename>
          <sum type="sha256">445d589c5b82c76b5ac2d74dc1867301298438e2317097ca8b341aa6fecd3aac</sum>
        </package>
        <package name="postgresql-static" version="12.15" release="1.module_el8.8.0+3600+38330172" epoch="0" arch="s390x" src="postgresql-12.15-1.module_el8.8.0+3600+38330172.src.rpm">
          <filename>postgresql-static-12.15-1.module_el8.8.0+3600+38330172.s390x.rpm</filename>
          <sum type="sha256">64c44bcc3845d3c67cd32d6791c8965a16f40dc25e8a95ac80ba377402493460</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="12.15" release="1.module_el8.8.0+3600+38330172" epoch="0" arch="s390x" src="postgresql-12.15-1.module_el8.8.0+3600+38330172.src.rpm">
          <filename>postgresql-upgrade-devel-12.15-1.module_el8.8.0+3600+38330172.s390x.rpm</filename>
          <sum type="sha256">6a9f3f850e2e179b736d58d76ef8c3943dfdf26629c5f4edcb8a74af2f596f9f</sum>
        </package>
        <package name="postgresql-docs" version="12.15" release="1.module_el8.8.0+3600+38330172" epoch="0" arch="s390x" src="postgresql-12.15-1.module_el8.8.0+3600+38330172.src.rpm">
          <filename>postgresql-docs-12.15-1.module_el8.8.0+3600+38330172.s390x.rpm</filename>
          <sum type="sha256">6cd86fbdd78ad9c3205e290ddec8de8f3e8db6e05e9961b841772058b09498df</sum>
        </package>
        <package name="postgresql" version="12.15" release="1.module_el8.8.0+3600+38330172" epoch="0" arch="s390x" src="postgresql-12.15-1.module_el8.8.0+3600+38330172.src.rpm">
          <filename>postgresql-12.15-1.module_el8.8.0+3600+38330172.s390x.rpm</filename>
          <sum type="sha256">6ef7c1c5ff572446d81d44d810b0bc2032274a66c0ca3220581bc24e7db8e432</sum>
        </package>
        <package name="postgresql-pltcl" version="12.15" release="1.module_el8.8.0+3600+38330172" epoch="0" arch="s390x" src="postgresql-12.15-1.module_el8.8.0+3600+38330172.src.rpm">
          <filename>postgresql-pltcl-12.15-1.module_el8.8.0+3600+38330172.s390x.rpm</filename>
          <sum type="sha256">acf0e5791aebe67872b9012d272c4d1bde2147c2cf206b4458829381c9b0e622</sum>
        </package>
        <package name="postgresql-server" version="12.15" release="1.module_el8.8.0+3600+38330172" epoch="0" arch="s390x" src="postgresql-12.15-1.module_el8.8.0+3600+38330172.src.rpm">
          <filename>postgresql-server-12.15-1.module_el8.8.0+3600+38330172.s390x.rpm</filename>
          <sum type="sha256">b878267a80dfccc9a93e56392b574cf3fe27f3873b74f0ebe5aba2004fd84697</sum>
        </package>
        <package name="postgresql-plpython3" version="12.15" release="1.module_el8.8.0+3600+38330172" epoch="0" arch="s390x" src="postgresql-12.15-1.module_el8.8.0+3600+38330172.src.rpm">
          <filename>postgresql-plpython3-12.15-1.module_el8.8.0+3600+38330172.s390x.rpm</filename>
          <sum type="sha256">c9f08f8c9d268b939387e4694ea48bc1ca17e5cd26a620098d0d8ede9a9b99c7</sum>
        </package>
        <package name="postgresql-test" version="12.15" release="1.module_el8.8.0+3600+38330172" epoch="0" arch="s390x" src="postgresql-12.15-1.module_el8.8.0+3600+38330172.src.rpm">
          <filename>postgresql-test-12.15-1.module_el8.8.0+3600+38330172.s390x.rpm</filename>
          <sum type="sha256">e8713764a097786b7c40bc2eb16e7f0ccbdcd77a9d3625c1ae56a78592634519</sum>
        </package>
        <package name="pgaudit" version="1.4.0" release="5.module_el8.6.0+3094+eb237fb8" epoch="0" arch="s390x" src="pgaudit-1.4.0-5.module_el8.6.0+3094+eb237fb8.src.rpm">
          <filename>pgaudit-1.4.0-5.module_el8.6.0+3094+eb237fb8.s390x.rpm</filename>
          <sum type="sha256">ebe8d0086c062c5f70bc02c543c76de308bbcc91aecac318050e04c0ee330f84</sum>
        </package>
        <package name="postgresql-contrib" version="12.15" release="1.module_el8.8.0+3600+38330172" epoch="0" arch="s390x" src="postgresql-12.15-1.module_el8.8.0+3600+38330172.src.rpm">
          <filename>postgresql-contrib-12.15-1.module_el8.8.0+3600+38330172.s390x.rpm</filename>
          <sum type="sha256">f0e6b6e37624dcf9db0c0ff8eda76a2bb677748c18abbff0397ef246dad93346</sum>
        </package>
        <package name="postgresql-upgrade" version="12.15" release="1.module_el8.8.0+3600+38330172" epoch="0" arch="s390x" src="postgresql-12.15-1.module_el8.8.0+3600+38330172.src.rpm">
          <filename>postgresql-upgrade-12.15-1.module_el8.8.0+3600+38330172.s390x.rpm</filename>
          <sum type="sha256">f8d4d3d77629940e8dd3b72ce988ffca932208802abbbacc03612300168ce935</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4536</id>
    <title>Moderate: nodejs:18 security, bug fix, and enhancement update</title>
    <issued date="2023-08-08 00:00:00"/>
    <updated date="2023-08-09 09:24:33"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs:18 security, bug fix, and enhancement update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

The package has been upgraded to a later upstream version: nodejs (18.16.1). (BZ#2223630, BZ#2223631, BZ#2223632, BZ#2223633, BZ#2223635, BZ#2223642)

Security Fix(es):

* nodejs: mainModule.proto bypass experimental policy mechanism (CVE-2023-30581)
* nodejs: process interuption due to invalid Public Key information in x509 certificates (CVE-2023-30588)
* nodejs: HTTP Request Smuggling via Empty headers separated by CR (CVE-2023-30589)
* nodejs: DiffieHellman do not generate keys after setting a private key (CVE-2023-30590)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* nodejs:18/nodejs: Don't assume FIPS is disabled by default [almalinux-8] (BZ#2223639)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4536" id="RHSA-2023:4536" type="rhsa" title="RHSA-2023:4536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30581" id="CVE-2023-30581" type="cve" title="CVE-2023-30581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30588" id="CVE-2023-30588" type="cve" title="CVE-2023-30588"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30589" id="CVE-2023-30589" type="cve" title="CVE-2023-30589"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30590" id="CVE-2023-30590" type="cve" title="CVE-2023-30590"/>
      <reference href="https://bugzilla.redhat.com/2219824" id="2219824" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219838" id="2219838" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219841" id="2219841" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219842" id="2219842" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4536.html" id="ALSA-2023:4536" type="self" title="ALSA-2023:4536"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="nodejs" stream="18" version="8080020230808162227" context="9edba152" arch="s390x"/>
        <package name="nodejs-devel" version="18.16.1" release="1.module_el8.8.0+3595+0818e803" epoch="1" arch="s390x" src="nodejs-18.16.1-1.module_el8.8.0+3595+0818e803.src.rpm">
          <filename>nodejs-devel-18.16.1-1.module_el8.8.0+3595+0818e803.s390x.rpm</filename>
          <sum type="sha256">5bb1e92891554c3965ff9d5956c805f82071431cf94ffbc52a5b0eb1dfef845b</sum>
        </package>
        <package name="nodejs-nodemon" version="2.0.20" release="2.module_el8.8.0+3587+ee652244" epoch="0" arch="noarch" src="nodejs-nodemon-2.0.20-2.module_el8.8.0+3587+ee652244.src.rpm">
          <filename>nodejs-nodemon-2.0.20-2.module_el8.8.0+3587+ee652244.noarch.rpm</filename>
          <sum type="sha256">7c11686ae92e7cfd073b0265d5869d9dadff8a9897d2b6cc7be7cc434eb44c2f</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el8.7.0+3343+ea2b7901" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.noarch.rpm</filename>
          <sum type="sha256">9430d44c78a3cfbe1ae3d39b8531f651606661943959bc0c3de87b2f91ea6f67</sum>
        </package>
        <package name="nodejs-docs" version="18.16.1" release="1.module_el8.8.0+3595+0818e803" epoch="1" arch="noarch" src="nodejs-18.16.1-1.module_el8.8.0+3595+0818e803.src.rpm">
          <filename>nodejs-docs-18.16.1-1.module_el8.8.0+3595+0818e803.noarch.rpm</filename>
          <sum type="sha256">99ac04dd1dd60cb33e466c00cfb3f19d80cdc05f9a3bd2adbbe1286508a32816</sum>
        </package>
        <package name="nodejs-full-i18n" version="18.16.1" release="1.module_el8.8.0+3595+0818e803" epoch="1" arch="s390x" src="nodejs-18.16.1-1.module_el8.8.0+3595+0818e803.src.rpm">
          <filename>nodejs-full-i18n-18.16.1-1.module_el8.8.0+3595+0818e803.s390x.rpm</filename>
          <sum type="sha256">ba4ccf02dbc35082bc376b46c743e7c0ce93b41c0412bdc3304f8c0d6a493722</sum>
        </package>
        <package name="npm" version="9.5.1" release="1.18.16.1.1.module_el8.8.0+3595+0818e803" epoch="1" arch="s390x" src="nodejs-18.16.1-1.module_el8.8.0+3595+0818e803.src.rpm">
          <filename>npm-9.5.1-1.18.16.1.1.module_el8.8.0+3595+0818e803.s390x.rpm</filename>
          <sum type="sha256">c98e9c96b97e555373323eb9e99ea8dbe38bf9faebb10e967788c7c34a18ae00</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el8.7.0+3343+ea2b7901" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el8.7.0+3343+ea2b7901.noarch.rpm</filename>
          <sum type="sha256">dca36d100028686323583aeddaa86efff902ff7fe29cb97d4356c309e3e899d9</sum>
        </package>
        <package name="nodejs" version="18.16.1" release="1.module_el8.8.0+3595+0818e803" epoch="1" arch="s390x" src="nodejs-18.16.1-1.module_el8.8.0+3595+0818e803.src.rpm">
          <filename>nodejs-18.16.1-1.module_el8.8.0+3595+0818e803.s390x.rpm</filename>
          <sum type="sha256">f04f7d1e5829b45f3db4cba72189a4067f55b4ed1ab59afe01eac61ceaed3fd9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4537</id>
    <title>Moderate: nodejs:16 security, bug fix, and enhancement update</title>
    <issued date="2023-08-08 00:00:00"/>
    <updated date="2023-08-09 08:59:05"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs:16 security, bug fix, and enhancement update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

The package has been upgraded to a later upstream version: nodejs (16.20.1). (BZ#2223678, BZ#2223680, BZ#2223682, BZ#2223684, BZ#2223686, BZ#2223688)

Security Fix(es):

* nodejs: mainModule.proto bypass experimental policy mechanism (CVE-2023-30581)
* nodejs: process interuption due to invalid Public Key information in x509 certificates (CVE-2023-30588)
* nodejs: HTTP Request Smuggling via Empty headers separated by CR (CVE-2023-30589)
* nodejs: DiffieHellman do not generate keys after setting a private key (CVE-2023-30590)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4537" id="RHSA-2023:4537" type="rhsa" title="RHSA-2023:4537"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30581" id="CVE-2023-30581" type="cve" title="CVE-2023-30581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30588" id="CVE-2023-30588" type="cve" title="CVE-2023-30588"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30589" id="CVE-2023-30589" type="cve" title="CVE-2023-30589"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30590" id="CVE-2023-30590" type="cve" title="CVE-2023-30590"/>
      <reference href="https://bugzilla.redhat.com/2219824" id="2219824" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219838" id="2219838" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219841" id="2219841" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219842" id="2219842" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4537.html" id="ALSA-2023:4537" type="self" title="ALSA-2023:4537"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="nodejs" stream="16" version="8080020230808162205" context="9edba152" arch="s390x"/>
        <package name="nodejs-devel" version="16.20.1" release="1.module_el8.8.0+3594+e74fe53f" epoch="1" arch="s390x" src="nodejs-16.20.1-1.module_el8.8.0+3594+e74fe53f.src.rpm">
          <filename>nodejs-devel-16.20.1-1.module_el8.8.0+3594+e74fe53f.s390x.rpm</filename>
          <sum type="sha256">0154884126e5da571999d151d6fefc5ae09023bdcae06fc2f430d125706c93dc</sum>
        </package>
        <package name="nodejs-docs" version="16.20.1" release="1.module_el8.8.0+3594+e74fe53f" epoch="1" arch="noarch" src="nodejs-16.20.1-1.module_el8.8.0+3594+e74fe53f.src.rpm">
          <filename>nodejs-docs-16.20.1-1.module_el8.8.0+3594+e74fe53f.noarch.rpm</filename>
          <sum type="sha256">6af6200dc9bb780013915a01757d6824b52a120a8a0d1643b5ca1a8276853c70</sum>
        </package>
        <package name="nodejs-full-i18n" version="16.20.1" release="1.module_el8.8.0+3594+e74fe53f" epoch="1" arch="s390x" src="nodejs-16.20.1-1.module_el8.8.0+3594+e74fe53f.src.rpm">
          <filename>nodejs-full-i18n-16.20.1-1.module_el8.8.0+3594+e74fe53f.s390x.rpm</filename>
          <sum type="sha256">7a4a44e720942b1e70f30b7536e58eb13d5880453531afecd06ec581d9165d14</sum>
        </package>
        <package name="npm" version="8.19.4" release="1.16.20.1.1.module_el8.8.0+3594+e74fe53f" epoch="1" arch="s390x" src="nodejs-16.20.1-1.module_el8.8.0+3594+e74fe53f.src.rpm">
          <filename>npm-8.19.4-1.16.20.1.1.module_el8.8.0+3594+e74fe53f.s390x.rpm</filename>
          <sum type="sha256">b2b3a104c449cfcdbdb2f1c6a64e7d00ea08cc4303956b4543df978b36a2c863</sum>
        </package>
        <package name="nodejs" version="16.20.1" release="1.module_el8.8.0+3594+e74fe53f" epoch="1" arch="s390x" src="nodejs-16.20.1-1.module_el8.8.0+3594+e74fe53f.src.rpm">
          <filename>nodejs-16.20.1-1.module_el8.8.0+3594+e74fe53f.s390x.rpm</filename>
          <sum type="sha256">cc535ffca9b6a3c44e750ce23c352c3d9f74555c099754bd7ad000e14ad338be</sum>
        </package>
        <package name="nodejs-nodemon" version="2.0.20" release="3.module_el8.8.0+3586+d4fc0b72" epoch="0" arch="noarch" src="nodejs-nodemon-2.0.20-3.module_el8.8.0+3586+d4fc0b72.src.rpm">
          <filename>nodejs-nodemon-2.0.20-3.module_el8.8.0+3586+d4fc0b72.noarch.rpm</filename>
          <sum type="sha256">fb71c2e08da32540fb704aece39819820640aa092b48d536ca969a84bab50104</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4539</id>
    <title>Moderate: postgresql:10 security update</title>
    <issued date="2023-08-08 00:00:00"/>
    <updated date="2023-08-09 14:09:08"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql:10 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: schema_element defeats protective search_path changes (CVE-2023-2454)
* postgresql: row security policies disregard user ID changes after inlining. (CVE-2023-2455)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4539" id="RHSA-2023:4539" type="rhsa" title="RHSA-2023:4539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2454" id="CVE-2023-2454" type="cve" title="CVE-2023-2454"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2455" id="CVE-2023-2455" type="cve" title="CVE-2023-2455"/>
      <reference href="https://bugzilla.redhat.com/2207568" id="2207568" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2207569" id="2207569" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4539.html" id="ALSA-2023:4539" type="self" title="ALSA-2023:4539"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="postgresql" stream="10" version="8080020230809092606" context="9edba152" arch="s390x"/>
        <package name="postgresql-test-rpm-macros" version="10.23" release="2.module_el8.8.0+3599+77865fc6" epoch="0" arch="s390x" src="postgresql-10.23-2.module_el8.8.0+3599+77865fc6.src.rpm">
          <filename>postgresql-test-rpm-macros-10.23-2.module_el8.8.0+3599+77865fc6.s390x.rpm</filename>
          <sum type="sha256">0324eae3bfd344e58321339d0a17e59faf192d386069f082143766ffd6695340</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="10.23" release="2.module_el8.8.0+3599+77865fc6" epoch="0" arch="s390x" src="postgresql-10.23-2.module_el8.8.0+3599+77865fc6.src.rpm">
          <filename>postgresql-upgrade-devel-10.23-2.module_el8.8.0+3599+77865fc6.s390x.rpm</filename>
          <sum type="sha256">04c73912be2d0f460d28ed1e18a603786707cf4f305634715bc4fb29f65e7b2e</sum>
        </package>
        <package name="postgresql-plperl" version="10.23" release="2.module_el8.8.0+3599+77865fc6" epoch="0" arch="s390x" src="postgresql-10.23-2.module_el8.8.0+3599+77865fc6.src.rpm">
          <filename>postgresql-plperl-10.23-2.module_el8.8.0+3599+77865fc6.s390x.rpm</filename>
          <sum type="sha256">0db3771897eedca20622ef780829bc955c7f38dd6b93094122a81d928d17062f</sum>
        </package>
        <package name="postgresql-upgrade" version="10.23" release="2.module_el8.8.0+3599+77865fc6" epoch="0" arch="s390x" src="postgresql-10.23-2.module_el8.8.0+3599+77865fc6.src.rpm">
          <filename>postgresql-upgrade-10.23-2.module_el8.8.0+3599+77865fc6.s390x.rpm</filename>
          <sum type="sha256">130e97b83b041e958b2eface3bb511e90021ed2080ee5d2609a901ee36269437</sum>
        </package>
        <package name="postgresql-static" version="10.23" release="2.module_el8.8.0+3599+77865fc6" epoch="0" arch="s390x" src="postgresql-10.23-2.module_el8.8.0+3599+77865fc6.src.rpm">
          <filename>postgresql-static-10.23-2.module_el8.8.0+3599+77865fc6.s390x.rpm</filename>
          <sum type="sha256">34509edb90e0a74f0db2452b33f11f9e2f7ea820efe1c09c9e25f29c44bc5a13</sum>
        </package>
        <package name="postgresql-plpython3" version="10.23" release="2.module_el8.8.0+3599+77865fc6" epoch="0" arch="s390x" src="postgresql-10.23-2.module_el8.8.0+3599+77865fc6.src.rpm">
          <filename>postgresql-plpython3-10.23-2.module_el8.8.0+3599+77865fc6.s390x.rpm</filename>
          <sum type="sha256">365aec8d0f62dbf37b221e5648dbad07445a0f5371e62aaf0713bd0c738b72fa</sum>
        </package>
        <package name="postgresql-pltcl" version="10.23" release="2.module_el8.8.0+3599+77865fc6" epoch="0" arch="s390x" src="postgresql-10.23-2.module_el8.8.0+3599+77865fc6.src.rpm">
          <filename>postgresql-pltcl-10.23-2.module_el8.8.0+3599+77865fc6.s390x.rpm</filename>
          <sum type="sha256">3c9099a8ec74cafe7b8fe1ee81e603aba86af468e77d0b28c3af3010da5c622a</sum>
        </package>
        <package name="postgresql" version="10.23" release="2.module_el8.8.0+3599+77865fc6" epoch="0" arch="s390x" src="postgresql-10.23-2.module_el8.8.0+3599+77865fc6.src.rpm">
          <filename>postgresql-10.23-2.module_el8.8.0+3599+77865fc6.s390x.rpm</filename>
          <sum type="sha256">4bf8cbad6aed9a4d92e5b546c460571bc2fa89ef80317e677d0f4bc827957fd3</sum>
        </package>
        <package name="postgresql-contrib" version="10.23" release="2.module_el8.8.0+3599+77865fc6" epoch="0" arch="s390x" src="postgresql-10.23-2.module_el8.8.0+3599+77865fc6.src.rpm">
          <filename>postgresql-contrib-10.23-2.module_el8.8.0+3599+77865fc6.s390x.rpm</filename>
          <sum type="sha256">5883d508cee1e9f72cf89cc7f2d694335593a82304f6cc8bd93447cc1d32274a</sum>
        </package>
        <package name="postgresql-server" version="10.23" release="2.module_el8.8.0+3599+77865fc6" epoch="0" arch="s390x" src="postgresql-10.23-2.module_el8.8.0+3599+77865fc6.src.rpm">
          <filename>postgresql-server-10.23-2.module_el8.8.0+3599+77865fc6.s390x.rpm</filename>
          <sum type="sha256">d41733fa8f3196ce9c4cb9e8685232e399b283b777bcbeae81eb56f164cabc4f</sum>
        </package>
        <package name="postgresql-docs" version="10.23" release="2.module_el8.8.0+3599+77865fc6" epoch="0" arch="s390x" src="postgresql-10.23-2.module_el8.8.0+3599+77865fc6.src.rpm">
          <filename>postgresql-docs-10.23-2.module_el8.8.0+3599+77865fc6.s390x.rpm</filename>
          <sum type="sha256">da859c12f7468034f3acd28aaf7eb3c2337771ce16a3941e4d4dc5449360ae58</sum>
        </package>
        <package name="postgresql-test" version="10.23" release="2.module_el8.8.0+3599+77865fc6" epoch="0" arch="s390x" src="postgresql-10.23-2.module_el8.8.0+3599+77865fc6.src.rpm">
          <filename>postgresql-test-10.23-2.module_el8.8.0+3599+77865fc6.s390x.rpm</filename>
          <sum type="sha256">dccd06f61dbafd43543e11e59d6f4c7b4b33a225144c6d3bc40e7f218ed7a1af</sum>
        </package>
        <package name="postgresql-server-devel" version="10.23" release="2.module_el8.8.0+3599+77865fc6" epoch="0" arch="s390x" src="postgresql-10.23-2.module_el8.8.0+3599+77865fc6.src.rpm">
          <filename>postgresql-server-devel-10.23-2.module_el8.8.0+3599+77865fc6.s390x.rpm</filename>
          <sum type="sha256">f724cf77cd131628e223a31fd18e46837e19d2f88822565cf8e7c9bf9795876a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4570</id>
    <title>Important: iperf3 security update</title>
    <issued date="2023-08-08 00:00:00"/>
    <updated date="2023-08-09 11:53:22"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>iperf3 security update</summary>
    <description>Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

Security Fix(es):

* iperf3: memory allocation hazard and crash (CVE-2023-38403)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4570" id="RHSA-2023:4570" type="rhsa" title="RHSA-2023:4570"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38403" id="CVE-2023-38403" type="cve" title="CVE-2023-38403"/>
      <reference href="https://bugzilla.redhat.com/2222204" id="2222204" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4570.html" id="ALSA-2023:4570" type="self" title="ALSA-2023:4570"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="iperf3" version="3.5" release="7.el8_8.alma" epoch="0" arch="s390x" src="iperf3-3.5-7.el8_8.alma.src.rpm">
          <filename>iperf3-3.5-7.el8_8.alma.s390x.rpm</filename>
          <sum type="sha256">930aa6bd6a165e3ff42f1e2622fa1e9db5fb6781767bec92c8d27506c839336a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4635</id>
    <title>Important: rust-toolset:rhel8 security update</title>
    <issued date="2023-08-14 00:00:00"/>
    <updated date="2023-08-15 22:27:00"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>rust-toolset:rhel8 security update</summary>
    <description>Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and required libraries. 

Security Fix(es):

* rust-cargo: cargo does not respect the umask when extracting dependencies (CVE-2023-38497)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4635" id="RHSA-2023:4635" type="rhsa" title="RHSA-2023:4635"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38497" id="CVE-2023-38497" type="cve" title="CVE-2023-38497"/>
      <reference href="https://bugzilla.redhat.com/2228038" id="2228038" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4635.html" id="ALSA-2023:4635" type="self" title="ALSA-2023:4635"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="rust-toolset" stream="rhel8" version="8080020230815120012" context="24c76bea" arch="s390x"/>
        <package name="rust-debugger-common" version="1.66.1" release="2.module_el8.8.0+3604+b9bee1fc" epoch="0" arch="noarch" src="rust-1.66.1-2.module_el8.8.0+3604+b9bee1fc.src.rpm">
          <filename>rust-debugger-common-1.66.1-2.module_el8.8.0+3604+b9bee1fc.noarch.rpm</filename>
          <sum type="sha256">0f032c8a2844511835b404658605523b16a90c1bc5d7896791838d32e1f70cc5</sum>
        </package>
        <package name="rust-analyzer" version="1.66.1" release="2.module_el8.8.0+3604+b9bee1fc" epoch="0" arch="s390x" src="rust-1.66.1-2.module_el8.8.0+3604+b9bee1fc.src.rpm">
          <filename>rust-analyzer-1.66.1-2.module_el8.8.0+3604+b9bee1fc.s390x.rpm</filename>
          <sum type="sha256">333e7f5f392f7d2d04c47953248336853b3da93b8c7fa6170f8b1fbaa702b90c</sum>
        </package>
        <package name="rust-std-static" version="1.66.1" release="2.module_el8.8.0+3604+b9bee1fc" epoch="0" arch="s390x" src="rust-1.66.1-2.module_el8.8.0+3604+b9bee1fc.src.rpm">
          <filename>rust-std-static-1.66.1-2.module_el8.8.0+3604+b9bee1fc.s390x.rpm</filename>
          <sum type="sha256">3874d732bafb99867168c48e5cd8920249adc652a8e2aa8ac48f4c341f381e8e</sum>
        </package>
        <package name="rustfmt" version="1.66.1" release="2.module_el8.8.0+3604+b9bee1fc" epoch="0" arch="s390x" src="rust-1.66.1-2.module_el8.8.0+3604+b9bee1fc.src.rpm">
          <filename>rustfmt-1.66.1-2.module_el8.8.0+3604+b9bee1fc.s390x.rpm</filename>
          <sum type="sha256">39e1b99e8a8fdd175cc0f90e08befa85dba1d4d5c9488d7ebb2a43bb04ec8ae3</sum>
        </package>
        <package name="rust-analysis" version="1.66.1" release="2.module_el8.8.0+3604+b9bee1fc" epoch="0" arch="s390x" src="rust-1.66.1-2.module_el8.8.0+3604+b9bee1fc.src.rpm">
          <filename>rust-analysis-1.66.1-2.module_el8.8.0+3604+b9bee1fc.s390x.rpm</filename>
          <sum type="sha256">4a6c8ef2543072be9efc5beccabcc9d3a02d2f198f32d4cf14c1419510075c19</sum>
        </package>
        <package name="rust-gdb" version="1.66.1" release="2.module_el8.8.0+3604+b9bee1fc" epoch="0" arch="noarch" src="rust-1.66.1-2.module_el8.8.0+3604+b9bee1fc.src.rpm">
          <filename>rust-gdb-1.66.1-2.module_el8.8.0+3604+b9bee1fc.noarch.rpm</filename>
          <sum type="sha256">651d7b0b80f7dbb0d17412af1ef87fc7c32aef970dea2ffeec5dcb5b63485add</sum>
        </package>
        <package name="rust-toolset" version="1.66.1" release="2.module_el8.8.0+3604+b9bee1fc" epoch="0" arch="s390x" src="rust-1.66.1-2.module_el8.8.0+3604+b9bee1fc.src.rpm">
          <filename>rust-toolset-1.66.1-2.module_el8.8.0+3604+b9bee1fc.s390x.rpm</filename>
          <sum type="sha256">8f6678dad6cbd630c66f075afc34effbed514003386a1929a68c86baab6750e4</sum>
        </package>
        <package name="cargo" version="1.66.1" release="2.module_el8.8.0+3604+b9bee1fc" epoch="0" arch="s390x" src="rust-1.66.1-2.module_el8.8.0+3604+b9bee1fc.src.rpm">
          <filename>cargo-1.66.1-2.module_el8.8.0+3604+b9bee1fc.s390x.rpm</filename>
          <sum type="sha256">91581c8ece77876787be4bc2676baa4493db5b1feccf5b5e9a44471bd10a435a</sum>
        </package>
        <package name="clippy" version="1.66.1" release="2.module_el8.8.0+3604+b9bee1fc" epoch="0" arch="s390x" src="rust-1.66.1-2.module_el8.8.0+3604+b9bee1fc.src.rpm">
          <filename>clippy-1.66.1-2.module_el8.8.0+3604+b9bee1fc.s390x.rpm</filename>
          <sum type="sha256">a30b3a677da7b9ff3e9a23efd7df26fe738003b7dad381a621ddf68c8c65d8e2</sum>
        </package>
        <package name="rust" version="1.66.1" release="2.module_el8.8.0+3604+b9bee1fc" epoch="0" arch="s390x" src="rust-1.66.1-2.module_el8.8.0+3604+b9bee1fc.src.rpm">
          <filename>rust-1.66.1-2.module_el8.8.0+3604+b9bee1fc.s390x.rpm</filename>
          <sum type="sha256">a5b4dcfc7921ec5e8849b40cd7750195cfd1628abe50577ae780b2013781d576</sum>
        </package>
        <package name="rust-src" version="1.66.1" release="2.module_el8.8.0+3604+b9bee1fc" epoch="0" arch="noarch" src="rust-1.66.1-2.module_el8.8.0+3604+b9bee1fc.src.rpm">
          <filename>rust-src-1.66.1-2.module_el8.8.0+3604+b9bee1fc.noarch.rpm</filename>
          <sum type="sha256">a6734bff97d51698bbe733d03dc5639b8c7236d3ca9228f49bc046ab4085fa0e</sum>
        </package>
        <package name="rust-lldb" version="1.66.1" release="2.module_el8.8.0+3604+b9bee1fc" epoch="0" arch="noarch" src="rust-1.66.1-2.module_el8.8.0+3604+b9bee1fc.src.rpm">
          <filename>rust-lldb-1.66.1-2.module_el8.8.0+3604+b9bee1fc.noarch.rpm</filename>
          <sum type="sha256">ee0906458edfab86fade0bd203ee49a4f84cd917e8e5e2075bbf47376a5579f5</sum>
        </package>
        <package name="rust-doc" version="1.66.1" release="2.module_el8.8.0+3604+b9bee1fc" epoch="0" arch="s390x" src="rust-1.66.1-2.module_el8.8.0+3604+b9bee1fc.src.rpm">
          <filename>rust-doc-1.66.1-2.module_el8.8.0+3604+b9bee1fc.s390x.rpm</filename>
          <sum type="sha256">fb36da556ff08d1a5c655bce3b62c2eef8aca2643eed591c993ddbc1cd6cdfb3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4643</id>
    <title>Important: .NET 7.0 security, bug fix, and enhancement update</title>
    <issued date="2023-08-14 00:00:00"/>
    <updated date="2023-08-15 08:34:32"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.110 and .NET Runtime 7.0.10.

Security Fix(es):

* dotnet: RCE under dotnet commands (CVE-2023-35390)
* dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4643" id="RHSA-2023:4643" type="rhsa" title="RHSA-2023:4643"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35390" id="CVE-2023-35390" type="cve" title="CVE-2023-35390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38180" id="CVE-2023-38180" type="cve" title="CVE-2023-38180"/>
      <reference href="https://bugzilla.redhat.com/2228621" id="2228621" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228622" id="2228622" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4643.html" id="ALSA-2023:4643" type="self" title="ALSA-2023:4643"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="dotnet-targeting-pack-7.0" version="7.0.10" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.110-1.el8_8.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.10-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">130f2f1c37fac4a4b772e6d7ff4adf89bf51c22c6e993cc88236191425aea6a0</sum>
        </package>
        <package name="aspnetcore-runtime-7.0" version="7.0.10" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.110-1.el8_8.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.10-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">2716a9a7f053330bea09dc91a6e6ccfe0e64809f3fc21eaf2ef964f08ddf67a5</sum>
        </package>
        <package name="dotnet-runtime-7.0" version="7.0.10" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.110-1.el8_8.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.10-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">3ae44570d1ce21573f95dc93eb2166b6e93d6067f630e2cae0740212d6d9c243</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="7.0.110" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.110-1.el8_8.src.rpm">
          <filename>netstandard-targeting-pack-2.1-7.0.110-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">5c6819825ffb5e9dfa7db783f9804c1a71c1e23e1b2f55d9edf99c47aea72476</sum>
        </package>
        <package name="dotnet" version="7.0.110" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.110-1.el8_8.src.rpm">
          <filename>dotnet-7.0.110-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">601f0ea3e21c5fdc27000f7118c0f68d25cb8faca53c6fec21d81e19081c7da0</sum>
        </package>
        <package name="dotnet-hostfxr-7.0" version="7.0.10" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.110-1.el8_8.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.10-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">65de70e8b6673172af38bb3629d488a5be977cafd1e3441df3f0fcd7892da9a4</sum>
        </package>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.10" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.110-1.el8_8.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.10-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">682404b59f88dc5d95c4bd4b711be3b6847431dbaafbc292d041b0fe79cd3cac</sum>
        </package>
        <package name="dotnet-sdk-7.0" version="7.0.110" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.110-1.el8_8.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.110-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">ad6ab87c8950414c3edd2289dd616a780a4c879cd109de33a7a23ed7e3a79901</sum>
        </package>
        <package name="dotnet-host" version="7.0.10" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.110-1.el8_8.src.rpm">
          <filename>dotnet-host-7.0.10-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">c2b3f0d9883ce7107ecfcaef51a6697caf0e1c4f42b06358a5bd001ed48e2e0b</sum>
        </package>
        <package name="dotnet-apphost-pack-7.0" version="7.0.10" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.110-1.el8_8.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.10-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">d2434e8c551e068ffa3ca88d53b3cb37146fdf3b471c7e471eb9e24a138e3bf3</sum>
        </package>
        <package name="dotnet-templates-7.0" version="7.0.110" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.110-1.el8_8.src.rpm">
          <filename>dotnet-templates-7.0-7.0.110-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">dcfc29dc6f28ea4a3d3f65d382399752b1204c5963e7c864e96cdc9f940c9a92</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4645</id>
    <title>Important: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-08-14 00:00:00"/>
    <updated date="2023-08-15 08:08:49"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.121 and .NET Runtime 6.0.21.

Security Fix(es):

* dotnet: RCE under dotnet commands (CVE-2023-35390)
* dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4645" id="RHSA-2023:4645" type="rhsa" title="RHSA-2023:4645"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35390" id="CVE-2023-35390" type="cve" title="CVE-2023-35390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38180" id="CVE-2023-38180" type="cve" title="CVE-2023-38180"/>
      <reference href="https://bugzilla.redhat.com/2228621" id="2228621" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228622" id="2228622" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4645.html" id="ALSA-2023:4645" type="self" title="ALSA-2023:4645"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="dotnet-sdk-6.0" version="6.0.121" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.121-1.el8_8.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.121-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">2b993263ecd481fb8b4f92b50e66e342afcc050a8b95a4bd8af39de871742f87</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.21" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.121-1.el8_8.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.21-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">3da8183d1b8e455e053cd8fe7595117f4de26f94f3dbf7a87ab11a98f772233a</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.21" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.121-1.el8_8.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.21-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">41ba3d852e8cc5605be75ef90de342fcfc81e565106807f13e33b274f065276f</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.121" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.121-1.el8_8.src.rpm">
          <filename>dotnet-templates-6.0-6.0.121-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">449afacc6cdbc5bd3e5bf9d60bd6ee7b071499cac3f948e9d01c3bec9e462823</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.21" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.121-1.el8_8.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.21-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">7040bc2d4bc1e128ca7230174299b873d5c26d7d0d72ebb749f9b63101fd1133</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.21" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.121-1.el8_8.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.21-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">a12e683f35b98169ea4244c8ed2b0ea5e217a92cb61305ce56269740bf68df5c</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.21" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.121-1.el8_8.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.21-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">c1e6bc10c9883641f4e7f2e85e6ca23c55106d9e3e9ec46c4eb5ac0e3ba123ec</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.21" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.121-1.el8_8.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.21-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">fa602ab7e9b2e53811f6c5d68dfa63089b03e9c5361bf0f8d85db2a2ece1a695</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4706</id>
    <title>Important: subscription-manager security update</title>
    <issued date="2023-08-22 00:00:00"/>
    <updated date="2023-08-31 13:52:32"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>subscription-manager security update</summary>
    <description>The subscription-manager packages provide programs and libraries to allow users to manage subscriptions and yum repositories from the AlmaLinux entitlement platform.

Security Fix(es):

* subscription-manager: inadequate authorization of com.AlmaLinux.RHSM1 D-Bus interface allows local users to modify configuration (CVE-2023-3899)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4706" id="RHSA-2023:4706" type="rhsa" title="RHSA-2023:4706"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3899" id="CVE-2023-3899" type="cve" title="CVE-2023-3899"/>
      <reference href="https://bugzilla.redhat.com/2225407" id="2225407" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4706.html" id="ALSA-2023:4706" type="self" title="ALSA-2023:4706"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="subscription-manager-migration" version="1.28.36" release="3.el8_8.alma.1" epoch="0" arch="s390x" src="subscription-manager-1.28.36-3.el8_8.alma.1.src.rpm">
          <filename>subscription-manager-migration-1.28.36-3.el8_8.alma.1.s390x.rpm</filename>
          <sum type="sha256">f7c1939ea9ab7f7f9dc2ada883cdbfbf21a0c4881552fb598682de36878803cd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4864</id>
    <title>Important: cups security update</title>
    <issued date="2023-08-29 00:00:00"/>
    <updated date="2023-08-30 09:58:23"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>cups security update</summary>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.

Security Fix(es):

* cups: Information leak through Cups-Get-Document operation (CVE-2023-32360)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4864" id="RHSA-2023:4864" type="rhsa" title="RHSA-2023:4864"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32360" id="CVE-2023-32360" type="cve" title="CVE-2023-32360"/>
      <reference href="https://bugzilla.redhat.com/2230495" id="2230495" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4864.html" id="ALSA-2023:4864" type="self" title="ALSA-2023:4864"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="cups-client" version="2.2.6" release="51.el8_8.1" epoch="1" arch="s390x" src="cups-2.2.6-51.el8_8.1.src.rpm">
          <filename>cups-client-2.2.6-51.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">21cf4e534defe9c2d67d8aac3d844bf3ffe333dd98c9ef7e77da576cd538947f</sum>
        </package>
        <package name="cups-devel" version="2.2.6" release="51.el8_8.1" epoch="1" arch="s390x" src="cups-2.2.6-51.el8_8.1.src.rpm">
          <filename>cups-devel-2.2.6-51.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">27478952e7a0d357fed50fcefb83f60918e444bf4c5f14efc616ffc28839f9c6</sum>
        </package>
        <package name="cups-filesystem" version="2.2.6" release="51.el8_8.1" epoch="1" arch="noarch" src="cups-2.2.6-51.el8_8.1.src.rpm">
          <filename>cups-filesystem-2.2.6-51.el8_8.1.noarch.rpm</filename>
          <sum type="sha256">6420ad0d8972461044b633cec5cfc604e2c31c47d0e43dd4428dac90da37aa44</sum>
        </package>
        <package name="cups-ipptool" version="2.2.6" release="51.el8_8.1" epoch="1" arch="s390x" src="cups-2.2.6-51.el8_8.1.src.rpm">
          <filename>cups-ipptool-2.2.6-51.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">888eae1f3b564605e6392858f1e5dbe1437ab8f7954aaae4c0c8618825f42d38</sum>
        </package>
        <package name="cups-lpd" version="2.2.6" release="51.el8_8.1" epoch="1" arch="s390x" src="cups-2.2.6-51.el8_8.1.src.rpm">
          <filename>cups-lpd-2.2.6-51.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">b1f6ec9ff610aff0ffc4f24086ed66ac222ee73b202a64b029514d8f60853587</sum>
        </package>
        <package name="cups" version="2.2.6" release="51.el8_8.1" epoch="1" arch="s390x" src="cups-2.2.6-51.el8_8.1.src.rpm">
          <filename>cups-2.2.6-51.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">d0ce776b09d3d71611cb920ed54072d5bbaa45bc46f996ed221a0c7847317010</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4952</id>
    <title>Important: firefox security update</title>
    <issued date="2023-09-04 00:00:00"/>
    <updated date="2023-09-06 15:36:22"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.15.0 ESR.

Security Fix(es):

* Mozilla: Memory corruption in IPC CanvasTranslator (CVE-2023-4573)
* Mozilla: Memory corruption in IPC ColorPickerShownCallback (CVE-2023-4574)
* Mozilla: Memory corruption in IPC FilePickerShownCallback (CVE-2023-4575)
* Mozilla: Memory corruption in JIT UpdateRegExpStatics (CVE-2023-4577)
* Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (CVE-2023-4584)
* Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2 (CVE-2023-4585)
* Mozilla: Full screen notification obscured by file open dialog (CVE-2023-4051)
* Mozilla: Full screen notification obscured by external program (CVE-2023-4053)
* Mozilla: Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception (CVE-2023-4578)
* Mozilla: Push notifications saved to disk unencrypted (CVE-2023-4580)
* Mozilla: XLL file extensions were downloadable without warnings (CVE-2023-4581)
* Mozilla: Browsing Context potentially not cleared when closing Private Window (CVE-2023-4583)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4952" id="RHSA-2023:4952" type="rhsa" title="RHSA-2023:4952"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4051" id="CVE-2023-4051" type="cve" title="CVE-2023-4051"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4053" id="CVE-2023-4053" type="cve" title="CVE-2023-4053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4573" id="CVE-2023-4573" type="cve" title="CVE-2023-4573"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4574" id="CVE-2023-4574" type="cve" title="CVE-2023-4574"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4575" id="CVE-2023-4575" type="cve" title="CVE-2023-4575"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4577" id="CVE-2023-4577" type="cve" title="CVE-2023-4577"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4578" id="CVE-2023-4578" type="cve" title="CVE-2023-4578"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4580" id="CVE-2023-4580" type="cve" title="CVE-2023-4580"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4581" id="CVE-2023-4581" type="cve" title="CVE-2023-4581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4583" id="CVE-2023-4583" type="cve" title="CVE-2023-4583"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4584" id="CVE-2023-4584" type="cve" title="CVE-2023-4584"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4585" id="CVE-2023-4585" type="cve" title="CVE-2023-4585"/>
      <reference href="https://bugzilla.redhat.com/2236071" id="2236071" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236072" id="2236072" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236073" id="2236073" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236075" id="2236075" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236076" id="2236076" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236077" id="2236077" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236078" id="2236078" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236079" id="2236079" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236080" id="2236080" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236082" id="2236082" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236084" id="2236084" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236086" id="2236086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4952.html" id="ALSA-2023:4952" type="self" title="ALSA-2023:4952"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="firefox" version="102.15.0" release="1.el8_8.alma" epoch="0" arch="s390x" src="firefox-102.15.0-1.el8_8.alma.src.rpm">
          <filename>firefox-102.15.0-1.el8_8.alma.s390x.rpm</filename>
          <sum type="sha256">78051e12a67d480d0367178cdc9dd3a92f5f030c4999c35b8686c7cbf59972ec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4954</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-09-04 00:00:00"/>
    <updated date="2023-09-06 15:25:24"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.15.0.

Security Fix(es):

* Mozilla: Memory corruption in IPC CanvasTranslator (CVE-2023-4573)
* Mozilla: Memory corruption in IPC ColorPickerShownCallback (CVE-2023-4574)
* Mozilla: Memory corruption in IPC FilePickerShownCallback (CVE-2023-4575)
* Mozilla: Memory corruption in JIT UpdateRegExpStatics (CVE-2023-4577)
* Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (CVE-2023-4584)
* Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2 (CVE-2023-4585)
* Mozilla: Full screen notification obscured by file open dialog (CVE-2023-4051)
* Mozilla: Full screen notification obscured by external program (CVE-2023-4053)
* Mozilla: Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception (CVE-2023-4578)
* Mozilla: Push notifications saved to disk unencrypted (CVE-2023-4580)
* Mozilla: XLL file extensions were downloadable without warnings (CVE-2023-4581)
* Mozilla: Browsing Context potentially not cleared when closing Private Window (CVE-2023-4583)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4954" id="RHSA-2023:4954" type="rhsa" title="RHSA-2023:4954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4051" id="CVE-2023-4051" type="cve" title="CVE-2023-4051"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4053" id="CVE-2023-4053" type="cve" title="CVE-2023-4053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4573" id="CVE-2023-4573" type="cve" title="CVE-2023-4573"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4574" id="CVE-2023-4574" type="cve" title="CVE-2023-4574"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4575" id="CVE-2023-4575" type="cve" title="CVE-2023-4575"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4577" id="CVE-2023-4577" type="cve" title="CVE-2023-4577"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4578" id="CVE-2023-4578" type="cve" title="CVE-2023-4578"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4580" id="CVE-2023-4580" type="cve" title="CVE-2023-4580"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4581" id="CVE-2023-4581" type="cve" title="CVE-2023-4581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4583" id="CVE-2023-4583" type="cve" title="CVE-2023-4583"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4584" id="CVE-2023-4584" type="cve" title="CVE-2023-4584"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4585" id="CVE-2023-4585" type="cve" title="CVE-2023-4585"/>
      <reference href="https://bugzilla.redhat.com/2236071" id="2236071" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236072" id="2236072" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236073" id="2236073" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236075" id="2236075" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236076" id="2236076" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236077" id="2236077" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236078" id="2236078" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236079" id="2236079" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236080" id="2236080" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236082" id="2236082" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236084" id="2236084" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236086" id="2236086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4954.html" id="ALSA-2023:4954" type="self" title="ALSA-2023:4954"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="thunderbird" version="102.15.0" release="1.el8_8.alma" epoch="0" arch="s390x" src="thunderbird-102.15.0-1.el8_8.alma.src.rpm">
          <filename>thunderbird-102.15.0-1.el8_8.alma.s390x.rpm</filename>
          <sum type="sha256">2e9a03ad163dcde635795fd50d1551846dd1eca24310b945734174ae5b661762</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5046</id>
    <title>Important: flac security update</title>
    <issued date="2023-09-11 00:00:00"/>
    <updated date="2023-09-12 10:20:43"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>flac security update</summary>
    <description>FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files.

Security Fix(es):

* flac: Remote Code Execution (RCE) via the bitwriter_grow_ function, by supplying crafted input to the encoder (CVE-2020-22219)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5046" id="RHSA-2023:5046" type="rhsa" title="RHSA-2023:5046"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-22219" id="CVE-2020-22219" type="cve" title="CVE-2020-22219"/>
      <reference href="https://bugzilla.redhat.com/2235489" id="2235489" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5046.html" id="ALSA-2023:5046" type="self" title="ALSA-2023:5046"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="flac-libs" version="1.3.2" release="9.el8_8.1" epoch="0" arch="s390x" src="flac-1.3.2-9.el8_8.1.src.rpm">
          <filename>flac-libs-1.3.2-9.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">2c4f8aad2d187fced704e358c79b777d5983a244aac1eb926dd6f509f270cd7f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5050</id>
    <title>Moderate: httpd:2.4 security update</title>
    <issued date="2023-09-11 00:00:00"/>
    <updated date="2023-09-12 10:08:47"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>httpd:2.4 security update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: mod_proxy_uwsgi HTTP response splitting (CVE-2023-27522)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5050" id="RHSA-2023:5050" type="rhsa" title="RHSA-2023:5050"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27522" id="CVE-2023-27522" type="cve" title="CVE-2023-27522"/>
      <reference href="https://bugzilla.redhat.com/2176211" id="2176211" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5050.html" id="ALSA-2023:5050" type="self" title="ALSA-2023:5050"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="httpd" stream="2.4" version="8080020230911195637" context="9edba152" arch="s390x"/>
        <package name="mod_http2" version="1.15.7" release="8.module_el8.8.0+3554+ec1058a7.3" epoch="0" arch="s390x" src="mod_http2-1.15.7-8.module_el8.8.0+3554+ec1058a7.3.src.rpm">
          <filename>mod_http2-1.15.7-8.module_el8.8.0+3554+ec1058a7.3.s390x.rpm</filename>
          <sum type="sha256">1fa38ef405240dbf5163ab2e5ff95938a4f95185adf2321fd3e0d83c76512a84</sum>
        </package>
        <package name="mod_ldap" version="2.4.37" release="56.module_el8.8.0+3605+a3cf1030.7" epoch="0" arch="s390x" src="httpd-2.4.37-56.module_el8.8.0+3605+a3cf1030.7.src.rpm">
          <filename>mod_ldap-2.4.37-56.module_el8.8.0+3605+a3cf1030.7.s390x.rpm</filename>
          <sum type="sha256">39b7b6000ce47a017ddf7cc8d2a810cbe0b3cf66eba78a0b0dc825be4d1542cb</sum>
        </package>
        <package name="httpd" version="2.4.37" release="56.module_el8.8.0+3605+a3cf1030.7" epoch="0" arch="s390x" src="httpd-2.4.37-56.module_el8.8.0+3605+a3cf1030.7.src.rpm">
          <filename>httpd-2.4.37-56.module_el8.8.0+3605+a3cf1030.7.s390x.rpm</filename>
          <sum type="sha256">422a8d1b22a8e3bef68a788d008fddf7e524a0a1b02ca345d3010245146e025a</sum>
        </package>
        <package name="httpd-tools" version="2.4.37" release="56.module_el8.8.0+3605+a3cf1030.7" epoch="0" arch="s390x" src="httpd-2.4.37-56.module_el8.8.0+3605+a3cf1030.7.src.rpm">
          <filename>httpd-tools-2.4.37-56.module_el8.8.0+3605+a3cf1030.7.s390x.rpm</filename>
          <sum type="sha256">442ef707cb62189fdf1e0c8729945b344d83b1a1736b50f58df2cfbb6dcf8a00</sum>
        </package>
        <package name="httpd-filesystem" version="2.4.37" release="56.module_el8.8.0+3605+a3cf1030.7" epoch="0" arch="noarch" src="httpd-2.4.37-56.module_el8.8.0+3605+a3cf1030.7.src.rpm">
          <filename>httpd-filesystem-2.4.37-56.module_el8.8.0+3605+a3cf1030.7.noarch.rpm</filename>
          <sum type="sha256">54a5f5221ed32cbf184ee66bcbcdf012b835c504610c30a083d5dd91943c7a8f</sum>
        </package>
        <package name="mod_session" version="2.4.37" release="56.module_el8.8.0+3605+a3cf1030.7" epoch="0" arch="s390x" src="httpd-2.4.37-56.module_el8.8.0+3605+a3cf1030.7.src.rpm">
          <filename>mod_session-2.4.37-56.module_el8.8.0+3605+a3cf1030.7.s390x.rpm</filename>
          <sum type="sha256">87343acc33bd486a69ad342e1f5f44fcc62610707f4a1f57e1b68d97c0b870cf</sum>
        </package>
        <package name="mod_ssl" version="2.4.37" release="56.module_el8.8.0+3605+a3cf1030.7" epoch="1" arch="s390x" src="httpd-2.4.37-56.module_el8.8.0+3605+a3cf1030.7.src.rpm">
          <filename>mod_ssl-2.4.37-56.module_el8.8.0+3605+a3cf1030.7.s390x.rpm</filename>
          <sum type="sha256">a5e7d8515d32dc8231c1c069675991e19fd2ea6b57b62fdba65949fc01e88574</sum>
        </package>
        <package name="httpd-devel" version="2.4.37" release="56.module_el8.8.0+3605+a3cf1030.7" epoch="0" arch="s390x" src="httpd-2.4.37-56.module_el8.8.0+3605+a3cf1030.7.src.rpm">
          <filename>httpd-devel-2.4.37-56.module_el8.8.0+3605+a3cf1030.7.s390x.rpm</filename>
          <sum type="sha256">b015dd87cb13391af16f7f02b9183f2a0409f5373008098fde349c137cb6d84b</sum>
        </package>
        <package name="mod_md" version="2.0.8" release="8.module_el8.6.0+3031+fb177b09" epoch="1" arch="s390x" src="mod_md-2.0.8-8.module_el8.6.0+3031+fb177b09.src.rpm">
          <filename>mod_md-2.0.8-8.module_el8.6.0+3031+fb177b09.s390x.rpm</filename>
          <sum type="sha256">e47754aea99df8718074dd3d1df288b448b0af9d0ba4f0f8c6a3b5c8a164a1a7</sum>
        </package>
        <package name="mod_proxy_html" version="2.4.37" release="56.module_el8.8.0+3605+a3cf1030.7" epoch="1" arch="s390x" src="httpd-2.4.37-56.module_el8.8.0+3605+a3cf1030.7.src.rpm">
          <filename>mod_proxy_html-2.4.37-56.module_el8.8.0+3605+a3cf1030.7.s390x.rpm</filename>
          <sum type="sha256">efd46fcde62bcbd4e271d8130593b8b6f6f1642a70da1edcba24209d8f868abd</sum>
        </package>
        <package name="httpd-manual" version="2.4.37" release="56.module_el8.8.0+3605+a3cf1030.7" epoch="0" arch="noarch" src="httpd-2.4.37-56.module_el8.8.0+3605+a3cf1030.7.src.rpm">
          <filename>httpd-manual-2.4.37-56.module_el8.8.0+3605+a3cf1030.7.noarch.rpm</filename>
          <sum type="sha256">f170a5d5a80fecb98555ed4d31dd3790ac23feffd89cd43d4fdac1c2bb71eb24</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5144</id>
    <title>Moderate: .NET 6.0 security update</title>
    <issued date="2023-09-13 00:00:00"/>
    <updated date="2023-09-14 11:00:36"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.122 and .NET Runtime 6.0.22.

Security Fix(es):

* dotnet:  Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5144" id="RHSA-2023:5144" type="rhsa" title="RHSA-2023:5144"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5144.html" id="ALSA-2023:5144" type="self" title="ALSA-2023:5144"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="dotnet-sdk-6.0" version="6.0.122" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.122-1.el8_8.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.122-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">07d2a3d63ba770331b2fbfbd17a97f094b6cf42bdb16777c55aab1ff562a5b9f</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.22" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.122-1.el8_8.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.22-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">0ee9aa1e0bf81ebd82e42669d9dacb822ddb88967afb873444ec88daaad613c7</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.22" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.122-1.el8_8.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.22-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">3cc9ab341c176d563de688a846c414d945500659349af34746fb6671b1ec9703</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.22" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.122-1.el8_8.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.22-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">6ff97c9e1aecaf3857e1f2181c65d18f173f20c5899f2142d9208b2c1fa5f53a</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.22" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.122-1.el8_8.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.22-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">8d005b706debaf3fbd06205df307e8eded7be1c5b752a1947b23f368bb2b8ad8</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.22" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.122-1.el8_8.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.22-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">92b5bfa38e2081ff0b42cda363302e5858873be209b6c3385c50a8e83529f2c2</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.22" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.122-1.el8_8.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.22-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">a72e0b6719451d02ff3dfedcc9c2fa7b6da69b31171484fe14ba67b84f792ae7</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.122" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.122-1.el8_8.src.rpm">
          <filename>dotnet-templates-6.0-6.0.122-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">d4e011a3c6ce17774332e5e37e0d8bfcacb7fb11598d2b8045283572b91202c3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5145</id>
    <title>Moderate: .NET 7.0 security update</title>
    <issued date="2023-09-13 00:00:00"/>
    <updated date="2023-09-14 10:22:25"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.111 and .NET Runtime 7.0.11.

Security Fix(es):

* dotnet:  Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5145" id="RHSA-2023:5145" type="rhsa" title="RHSA-2023:5145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5145.html" id="ALSA-2023:5145" type="self" title="ALSA-2023:5145"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="dotnet-sdk-7.0" version="7.0.111" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.111-1.el8_8.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.111-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">06bd5d64c917198cb0f5988d909760281cd007b5658206e1c54f9890b8e54de6</sum>
        </package>
        <package name="dotnet-targeting-pack-7.0" version="7.0.11" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.111-1.el8_8.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.11-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">241a4558ae8387c8ab80a0c1d2436a6d5b318e83411bb5c5541c633239e34700</sum>
        </package>
        <package name="dotnet-host" version="7.0.11" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.111-1.el8_8.src.rpm">
          <filename>dotnet-host-7.0.11-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">2aa9805aea1619acb58f18a606b94ccde71867c55f9f7b133f232f564b65bc07</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="7.0.111" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.111-1.el8_8.src.rpm">
          <filename>netstandard-targeting-pack-2.1-7.0.111-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">2c2c1a3fb6c625e74af962701b4d835c775ddb72afa4c5dab9b6b115a15bf622</sum>
        </package>
        <package name="dotnet-apphost-pack-7.0" version="7.0.11" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.111-1.el8_8.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.11-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">539a0b2b03d34bd7f6f316f6b813f5ac50f38b100118cb40c3e659491c28414e</sum>
        </package>
        <package name="dotnet-hostfxr-7.0" version="7.0.11" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.111-1.el8_8.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.11-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">6a27fd229e9b657e65c81260683ad422c1422d0228da9639f35f383c8c08581c</sum>
        </package>
        <package name="dotnet-templates-7.0" version="7.0.111" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.111-1.el8_8.src.rpm">
          <filename>dotnet-templates-7.0-7.0.111-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">6fe8e13640587f87a09a58cae868e05319dd327e977dac69be6e8bafd74df77b</sum>
        </package>
        <package name="aspnetcore-runtime-7.0" version="7.0.11" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.111-1.el8_8.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.11-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">8cb87a83652ec038130fba4f02f31850597f881508680860888333cb3138300c</sum>
        </package>
        <package name="dotnet-runtime-7.0" version="7.0.11" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.111-1.el8_8.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.11-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">a7cd88cfc017efb5b51d2840f7849378c6923f23e7a4ab8ac90ae0b93c46b40a</sum>
        </package>
        <package name="dotnet" version="7.0.111" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.111-1.el8_8.src.rpm">
          <filename>dotnet-7.0.111-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">b6a060e31593c2dc39eb562547a7e2c5b2b134691ac963957400963b1087fa3f</sum>
        </package>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.11" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.111-1.el8_8.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.11-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">d5b067a48e74046f12a31236da5fc5197bb42bbc653c7e5ea91b41a95afdf8f1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5184</id>
    <title>Important: firefox security update</title>
    <issued date="2023-09-18 00:00:00"/>
    <updated date="2023-09-21 13:26:09"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.15.1 ESR.

Security Fix(es):

* libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5184" id="RHSA-2023:5184" type="rhsa" title="RHSA-2023:5184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4863" id="CVE-2023-4863" type="cve" title="CVE-2023-4863"/>
      <reference href="https://bugzilla.redhat.com/2238431" id="2238431" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5184.html" id="ALSA-2023:5184" type="self" title="ALSA-2023:5184"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="firefox" version="102.15.1" release="1.el8_8.alma" epoch="0" arch="s390x" src="firefox-102.15.1-1.el8_8.alma.src.rpm">
          <filename>firefox-102.15.1-1.el8_8.alma.s390x.rpm</filename>
          <sum type="sha256">2dc227156724e7b46f61d3b63c54128e3dc8534f243786732ed5e26b91298e3a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5201</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-09-18 00:00:00"/>
    <updated date="2023-09-21 13:39:13"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.15.1.

Security Fix(es):

* libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5201" id="RHSA-2023:5201" type="rhsa" title="RHSA-2023:5201"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4863" id="CVE-2023-4863" type="cve" title="CVE-2023-4863"/>
      <reference href="https://bugzilla.redhat.com/2238431" id="2238431" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5201.html" id="ALSA-2023:5201" type="self" title="ALSA-2023:5201"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="thunderbird" version="102.15.1" release="1.el8_8.alma" epoch="0" arch="s390x" src="thunderbird-102.15.1-1.el8_8.alma.src.rpm">
          <filename>thunderbird-102.15.1-1.el8_8.alma.s390x.rpm</filename>
          <sum type="sha256">2d91147b5943ab70bb44269975d910d7d08a70b2706658878f2664546abd49b6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5219</id>
    <title>Important: frr security and bug fix update</title>
    <issued date="2023-09-19 00:00:00"/>
    <updated date="2023-09-20 15:37:02"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>frr security and bug fix update</summary>
    <description>FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. 

Security Fix(es):

* frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router (CVE-2023-38802)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* BFD crash in FRR running in MetalLB (BZ#2231829)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5219" id="RHSA-2023:5219" type="rhsa" title="RHSA-2023:5219"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38802" id="CVE-2023-38802" type="cve" title="CVE-2023-38802"/>
      <reference href="https://bugzilla.redhat.com/2230983" id="2230983" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5219.html" id="ALSA-2023:5219" type="self" title="ALSA-2023:5219"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="frr" version="7.5.1" release="7.el8_8.2.alma.1" epoch="0" arch="s390x" src="frr-7.5.1-7.el8_8.2.alma.1.src.rpm">
          <filename>frr-7.5.1-7.el8_8.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">d08cd884e3145d79c8005e3c3a2cab318b33dade936071ccdedcafbdf956ec5a</sum>
        </package>
        <package name="frr-selinux" version="7.5.1" release="7.el8_8.2.alma.1" epoch="0" arch="noarch" src="frr-7.5.1-7.el8_8.2.alma.1.src.rpm">
          <filename>frr-selinux-7.5.1-7.el8_8.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">e1d3859df2467af1a2aecaae2a45adff33b5a74046a85a20e06da09a508fb603</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5259</id>
    <title>Moderate: mariadb:10.3 security, bug fix, and enhancement update</title>
    <issued date="2023-09-19 00:00:00"/>
    <updated date="2023-09-21 17:41:57"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mariadb:10.3 security, bug fix, and enhancement update</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. 

The following packages have been upgraded to a later upstream version: mariadb (10.3). (BZ#2223572, BZ#2223574, BZ#2223962, BZ#2223965)

Security Fix(es):

* mariadb: segmentation fault via the component sub_select (CVE-2022-32084)
* mariadb: server crash in JOIN_CACHE::free or in copy_fields (CVE-2022-32091)
* mariadb: compress_write() fails to release mutex on failure (CVE-2022-38791)
* mariadb: NULL pointer dereference in spider_db_mbase::print_warnings() (CVE-2022-47015)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* [MariaDB 10.3.32] socat: E Failed to set SNI host "" (SST failure) (BZ#2223961)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5259" id="RHSA-2023:5259" type="rhsa" title="RHSA-2023:5259"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32084" id="CVE-2022-32084" type="cve" title="CVE-2022-32084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32091" id="CVE-2022-32091" type="cve" title="CVE-2022-32091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38791" id="CVE-2022-38791" type="cve" title="CVE-2022-38791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-47015" id="CVE-2022-47015" type="cve" title="CVE-2022-47015"/>
      <reference href="https://bugzilla.redhat.com/2106034" id="2106034" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106042" id="2106042" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2130105" id="2130105" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2163609" id="2163609" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5259.html" id="ALSA-2023:5259" type="self" title="ALSA-2023:5259"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="mariadb" stream="10.3" version="8060020220503130727" context="9edba152" arch="s390x"/>
        <package name="mariadb-gssapi-server" version="10.3.39" release="1.module_el8.8.0+3609+204d4ab0" epoch="3" arch="s390x" src="mariadb-10.3.39-1.module_el8.8.0+3609+204d4ab0.src.rpm">
          <filename>mariadb-gssapi-server-10.3.39-1.module_el8.8.0+3609+204d4ab0.s390x.rpm</filename>
          <sum type="sha256">12f03b492b58b83616ba641a1d2316e0edcbd3d3d9a3290aa6d8b654ecf9d12d</sum>
        </package>
        <package name="mariadb-test" version="10.3.39" release="1.module_el8.8.0+3609+204d4ab0" epoch="3" arch="s390x" src="mariadb-10.3.39-1.module_el8.8.0+3609+204d4ab0.src.rpm">
          <filename>mariadb-test-10.3.39-1.module_el8.8.0+3609+204d4ab0.s390x.rpm</filename>
          <sum type="sha256">17891139851f6d2457e468ced38d5a87dc9306f436593014121706df39120d9b</sum>
        </package>
        <package name="mariadb-common" version="10.3.39" release="1.module_el8.8.0+3609+204d4ab0" epoch="3" arch="s390x" src="mariadb-10.3.39-1.module_el8.8.0+3609+204d4ab0.src.rpm">
          <filename>mariadb-common-10.3.39-1.module_el8.8.0+3609+204d4ab0.s390x.rpm</filename>
          <sum type="sha256">21a01f719d19484452d9b538ef5e849b93250ad06b7c38ec55c4abbe6ed7ef60</sum>
        </package>
        <package name="galera" version="25.3.37" release="1.module_el8.8.0+3609+204d4ab0" epoch="0" arch="s390x" src="galera-25.3.37-1.module_el8.8.0+3609+204d4ab0.src.rpm">
          <filename>galera-25.3.37-1.module_el8.8.0+3609+204d4ab0.s390x.rpm</filename>
          <sum type="sha256">2ed6ad752d2c43a32105d8c2c7532db2f75fec62d4a2403e90afae864df9c0f1</sum>
        </package>
        <package name="mariadb-server-utils" version="10.3.39" release="1.module_el8.8.0+3609+204d4ab0" epoch="3" arch="s390x" src="mariadb-10.3.39-1.module_el8.8.0+3609+204d4ab0.src.rpm">
          <filename>mariadb-server-utils-10.3.39-1.module_el8.8.0+3609+204d4ab0.s390x.rpm</filename>
          <sum type="sha256">446618ae53013a4b3d6568221e4dd682310c5443fb8a77dc0974b69d734b535e</sum>
        </package>
        <package name="mariadb-errmsg" version="10.3.39" release="1.module_el8.8.0+3609+204d4ab0" epoch="3" arch="s390x" src="mariadb-10.3.39-1.module_el8.8.0+3609+204d4ab0.src.rpm">
          <filename>mariadb-errmsg-10.3.39-1.module_el8.8.0+3609+204d4ab0.s390x.rpm</filename>
          <sum type="sha256">5e4deb95f8c63bcc1c623e584c401826fd0fcbe105f182c1b92c02f77cfaaee8</sum>
        </package>
        <package name="mariadb-oqgraph-engine" version="10.3.39" release="1.module_el8.8.0+3609+204d4ab0" epoch="3" arch="s390x" src="mariadb-10.3.39-1.module_el8.8.0+3609+204d4ab0.src.rpm">
          <filename>mariadb-oqgraph-engine-10.3.39-1.module_el8.8.0+3609+204d4ab0.s390x.rpm</filename>
          <sum type="sha256">64cbae6970ab963f341bfa2cd31f1aa659bdbd701182c5a81124abb0c6c7d161</sum>
        </package>
        <package name="mariadb-devel" version="10.3.39" release="1.module_el8.8.0+3609+204d4ab0" epoch="3" arch="s390x" src="mariadb-10.3.39-1.module_el8.8.0+3609+204d4ab0.src.rpm">
          <filename>mariadb-devel-10.3.39-1.module_el8.8.0+3609+204d4ab0.s390x.rpm</filename>
          <sum type="sha256">69ae23dd3478663708c3d413175c66ad1a11a0e4600686354164b7c08eb047b3</sum>
        </package>
        <package name="mariadb-backup" version="10.3.39" release="1.module_el8.8.0+3609+204d4ab0" epoch="3" arch="s390x" src="mariadb-10.3.39-1.module_el8.8.0+3609+204d4ab0.src.rpm">
          <filename>mariadb-backup-10.3.39-1.module_el8.8.0+3609+204d4ab0.s390x.rpm</filename>
          <sum type="sha256">94095904a848bab61b85c0787eed846b347dd530ef0b741eed19d3b26ea2f46f</sum>
        </package>
        <package name="mariadb-embedded-devel" version="10.3.39" release="1.module_el8.8.0+3609+204d4ab0" epoch="3" arch="s390x" src="mariadb-10.3.39-1.module_el8.8.0+3609+204d4ab0.src.rpm">
          <filename>mariadb-embedded-devel-10.3.39-1.module_el8.8.0+3609+204d4ab0.s390x.rpm</filename>
          <sum type="sha256">971960fe5acc4262cf65b281beff3199d86c861e5283108bf21b81c6e745cc41</sum>
        </package>
        <package name="mariadb-server-galera" version="10.3.39" release="1.module_el8.8.0+3609+204d4ab0" epoch="3" arch="s390x" src="mariadb-10.3.39-1.module_el8.8.0+3609+204d4ab0.src.rpm">
          <filename>mariadb-server-galera-10.3.39-1.module_el8.8.0+3609+204d4ab0.s390x.rpm</filename>
          <sum type="sha256">a90f217439d331c2b5d4cf6a485b427b91b942025191023f9f9d12ff300ffbbf</sum>
        </package>
        <package name="mariadb" version="10.3.39" release="1.module_el8.8.0+3609+204d4ab0" epoch="3" arch="s390x" src="mariadb-10.3.39-1.module_el8.8.0+3609+204d4ab0.src.rpm">
          <filename>mariadb-10.3.39-1.module_el8.8.0+3609+204d4ab0.s390x.rpm</filename>
          <sum type="sha256">b047dab8057acab9d9d090dda5186aa8d6c254493e55e8b54ecd10d6a31f791d</sum>
        </package>
        <package name="Judy" version="1.0.5" release="18.module_el8.6.0+3138+72759d2f" epoch="0" arch="s390x" src="Judy-1.0.5-18.module_el8.6.0+3138+72759d2f.src.rpm">
          <filename>Judy-1.0.5-18.module_el8.6.0+3138+72759d2f.s390x.rpm</filename>
          <sum type="sha256">b376d3549511285acea7e0dde37b7ccd41444e935fde76ab71d0218e2f690e6f</sum>
        </package>
        <package name="mariadb-server" version="10.3.39" release="1.module_el8.8.0+3609+204d4ab0" epoch="3" arch="s390x" src="mariadb-10.3.39-1.module_el8.8.0+3609+204d4ab0.src.rpm">
          <filename>mariadb-server-10.3.39-1.module_el8.8.0+3609+204d4ab0.s390x.rpm</filename>
          <sum type="sha256">eeae3b5ae48f86965f0754f2780d5019d9671fe07ce18294c57807646b026ba9</sum>
        </package>
        <package name="mariadb-embedded" version="10.3.39" release="1.module_el8.8.0+3609+204d4ab0" epoch="3" arch="s390x" src="mariadb-10.3.39-1.module_el8.8.0+3609+204d4ab0.src.rpm">
          <filename>mariadb-embedded-10.3.39-1.module_el8.8.0+3609+204d4ab0.s390x.rpm</filename>
          <sum type="sha256">f9262ce01f653e487d3ec3654954f15f45d05f2bd921f11c8869cee162524c08</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5264</id>
    <title>Important: virt:rhel and virt-devel:rhel security and bug fix update</title>
    <issued date="2023-09-19 00:00:00"/>
    <updated date="2023-09-22 15:41:45"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>virt:rhel and virt-devel:rhel security and bug fix update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service (CVE-2023-3354)
* NTFS-3G: buffer overflow issue in NTFS-3G can cause code execution via crafted metadata in an NTFS image (CVE-2022-40284)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* "No bootable device" with OS boot disk interface VirtIO-SCSI and with more than 9 VirtIO disks. (BZ#2228485)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5264" id="RHSA-2023:5264" type="rhsa" title="RHSA-2023:5264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40284" id="CVE-2022-40284" type="cve" title="CVE-2022-40284"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3354" id="CVE-2023-3354" type="cve" title="CVE-2023-3354"/>
      <reference href="https://bugzilla.redhat.com/2216478" id="2216478" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236130" id="2236130" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5264.html" id="ALSA-2023:5264" type="self" title="ALSA-2023:5264"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="virt" stream="rhel" version="8080020230712134837" context="9edba152" arch="s390x"/>
        <package name="libvirt-daemon-config-network" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-config-network-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">03cf2f03ee84155fd58e5d5f714dcb2d908ac291387dd2504b5befa8390ffe09</sum>
        </package>
        <package name="libvirt-nss" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-nss-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">04682b35fee6f8f3b8e2065655621e33df3b1fc7bd609845bbd75e743c716223</sum>
        </package>
        <package name="nbdkit-basic-plugins" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-basic-plugins-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">04adc669a1655a4f4dcadbdd520afd5f6f5dc82b44738fcabde3a280f36fb90f</sum>
        </package>
        <package name="python3-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>python3-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">05372f9ad377c74c0d221dacf23c7510171afbb751c03585fd3c09513d7e1bde</sum>
        </package>
        <package name="libvirt-wireshark" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-wireshark-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">099fc3495153931ada9e8641e0b149ef76c5dcb96e620956f437cdf0771ec6a5</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-qemu-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">0a03059e46d2f3cd86e09d3163d360984a9c51c22ea5c0d790c92cf25ac14b9c</sum>
        </package>
        <package name="libnbd-devel" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libnbd-devel-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">0c1f0ee145a6b54bb1a2b502a47bc75e63b75d7e6b2e8c60a6c053988fc3b6ab</sum>
        </package>
        <package name="libguestfs-tools" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-tools-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">116835a3e003417d7186479fbf47960a09588a3ace207d4f34da6a19ab8c07de</sum>
        </package>
        <package name="netcf-devel" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-devel-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1888edc09e8d44539c2c7b84b7a8df91477b8a725fe93436ac4d71106e177d48</sum>
        </package>
        <package name="libguestfs-javadoc" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-javadoc-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">18b9d6c98999a3b289a865504944fb3dc9b2994eff5461933549add50c6faa5b</sum>
        </package>
        <package name="libvirt-client" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-client-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">1947967254e2d2d58735382615f04abe0bfb6b092c67324d3901479899edc880</sum>
        </package>
        <package name="nbdkit" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">1a6f5649d6acd35dd28d2d99042056bc8308fe0910ce6322bf27b0ec71bbee4f</sum>
        </package>
        <package name="hivex-devel" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>hivex-devel-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1aa145aa6a3f900531fc1c8f1c161197f37539d113d47c14efd9c66def20940a</sum>
        </package>
        <package name="nbdfuse" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdfuse-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1d3157c38399bbfb00c7e7762135285383554b08b780fcf5eb390ce2f5845d23</sum>
        </package>
        <package name="libvirt-docs" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-docs-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">1e609b5ec4c2903f0a13b379bf3d164b8753d330cf0069ea8512795d7f74da3d</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-storage-core-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">20d14323f54cfa124d1850a9fd48336ceee025a030a7918598967128d27f080a</sum>
        </package>
        <package name="libnbd" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">2220e7631c2178fe00b6e20d56043e2efc51bec8ccbe9c14dabccdb05ec81abf</sum>
        </package>
        <package name="nbdkit-python-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-python-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">23c394ecc23e544232d78956b610b1403324cb6a46a3d46adc0fd256f19a1e4b</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">23df2c21fb48225382addc0483b0714deee12deab35a7771b6f6bde62356ad8d</sum>
        </package>
        <package name="nbdkit-tar-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tar-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">2521bcc64ce8e24df611cf9194277fd5f7856f3df3f72be3276748b10d23beb3</sum>
        </package>
        <package name="nbdkit-bash-completion" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="noarch" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-bash-completion-1.24.0-5.module_el8.8.0+3485+7cffc4a3.noarch.rpm</filename>
          <sum type="sha256">254dfbf64036ae05d930d81be90202718fba7b341f0457de4a29ecfca3aea646</sum>
        </package>
        <package name="nbdkit-xz-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-xz-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">263ad615e21aaba0dce020cf1ad8b569c3860640d8074e9f74035ff925c409d0</sum>
        </package>
        <package name="nbdkit-gzip-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-gzip-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">27675a3171d769e7f9ea9b7fa63303b3e51f8221a68feaee1f16aeb7d658dccb</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="6.2.0" release="33.module_el8.8.0+3612+f18d2b89.alma.1" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.src.rpm">
          <filename>qemu-kvm-block-iscsi-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.s390x.rpm</filename>
          <sum type="sha256">2bd1d8f22f260d55e435c862a7a1779775727ada9ced385931b0bab9e359e5da</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-kvm-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">2da37b3db04cbc1c746a46373b3edbe10fde2472002e02057f49f4f095725640</sum>
        </package>
        <package name="seabios-bin" version="1.16.0" release="4.module_el8.8.0+3612+f18d2b89" epoch="0" arch="noarch" src="seabios-1.16.0-4.module_el8.8.0+3612+f18d2b89.src.rpm">
          <filename>seabios-bin-1.16.0-4.module_el8.8.0+3612+f18d2b89.noarch.rpm</filename>
          <sum type="sha256">2e263857a51300898a9c1ad104bfee3a74e43bf989a93a5b6b89c17001f45c69</sum>
        </package>
        <package name="lua-guestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>lua-guestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">36d15a85e154608cf2bc661120c8a573356cb3e0e1dc77a94387aa3c8bce90ef</sum>
        </package>
        <package name="qemu-img" version="6.2.0" release="33.module_el8.8.0+3612+f18d2b89.alma.1" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.src.rpm">
          <filename>qemu-img-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.s390x.rpm</filename>
          <sum type="sha256">3d0eaefc558061052930dcf51f6a0cfeb73fbfe3305ff3c1f07e15ed9ef750b8</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-nwfilter-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">3e6e065e61ac2d4636ef7dec1ab3248173471f5ac5c74faea6723f95a22ee5b4</sum>
        </package>
        <package name="libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">40e3ffa7c3e67b0fe9a110dbe8bf267fa9906f358a3bd81135b33a624e6429ba</sum>
        </package>
        <package name="qemu-kvm-docs" version="6.2.0" release="33.module_el8.8.0+3612+f18d2b89.alma.1" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.src.rpm">
          <filename>qemu-kvm-docs-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.s390x.rpm</filename>
          <sum type="sha256">4312186bc922c764399e04180cab2bebe64f9cf89bc219a5aef8a9bc18247fed</sum>
        </package>
        <package name="ruby-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ruby-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">4428b40d29de3a3eda15340b2cbacebe838ba363b3897a1a91f904b9f2b4f8b9</sum>
        </package>
        <package name="libvirt-daemon" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">45ce50bbdfcd407493105c50a762792cf64f5c9854a1d05f5ab6e54e4e872f9d</sum>
        </package>
        <package name="nbdkit-basic-filters" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-basic-filters-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">494ad345b2b9b009436ba9a8c8c6bb245e8617e921dae51ab6d9281e95999f31</sum>
        </package>
        <package name="nbdkit-curl-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-curl-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">4fd1a6bbe855d7c4068fcf080b4b0b15b367ef7f635ac869b7bddb1698dafa01</sum>
        </package>
        <package name="libguestfs-bash-completion" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-bash-completion-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">5a67ce33e944ee07d6ea976afa13f8c832ce4be22f124591ace620dfe08b5178</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="6.2.0" release="33.module_el8.8.0+3612+f18d2b89.alma.1" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.src.rpm">
          <filename>qemu-kvm-block-curl-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.s390x.rpm</filename>
          <sum type="sha256">5ccfca72a93f61e8f41b97670273c6bd9e6c14a781d04c01a69c31a3325f1b84</sum>
        </package>
        <package name="libguestfs-gobject-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gobject-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">5e05d955e58bc16ccb3e4097f338dd34af18225ef9bcd2b420d794a9efdd269b</sum>
        </package>
        <package name="python3-libnbd" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>python3-libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">5e93f1875db0f5a6e64e8d785a745072133d63b53e30cf6a7984ebd2e8119320</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-storage-disk-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">659c848b04178b6b2d643fb4b83f0450016f261d46cda598c2b3ef0c43367754</sum>
        </package>
        <package name="libvirt-lock-sanlock" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-lock-sanlock-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">6b8658064f8530e33feb437eb97311c6f19f3d61abab81773406396673101532</sum>
        </package>
        <package name="nbdkit-tmpdisk-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tmpdisk-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">6f4728c5aa7cc03d70b241d6947aff1fe49546aac4cc62bd01a59c1b1b73ba35</sum>
        </package>
        <package name="libguestfs-java-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-java-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">6fc6fe19b2e83d70d5f240d776ccc00a181870a485d39667fccb62ec0b851f02</sum>
        </package>
        <package name="nbdkit-server" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-server-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">706c1dd5780f1e48f883702f6c86a985bd057078fcd41326947b283625a77e05</sum>
        </package>
        <package name="qemu-kvm-core" version="6.2.0" release="33.module_el8.8.0+3612+f18d2b89.alma.1" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.src.rpm">
          <filename>qemu-kvm-core-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.s390x.rpm</filename>
          <sum type="sha256">738ea81f01186da40b2944cf9bc43b2419e356bbe3576e0382a36e8a006f502c</sum>
        </package>
        <package name="perl-Sys-Guestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>perl-Sys-Guestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">77c035cdcf2f7e819dcb6d76b9ba12ae63a6f07d615a9a435b7ec2dc8ca93330</sum>
        </package>
        <package name="libguestfs-gfs2" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gfs2-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">7ee36ba216591f26a055c687e5e75e054585c69c86b085d8966cb419ddeb3362</sum>
        </package>
        <package name="libguestfs-gobject" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gobject-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">8292ca96b97184b2ca5475901b46b09f715adbe99d1a5983c9ad4a0d2b3d72bb</sum>
        </package>
        <package name="netcf-libs" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-libs-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">843b61e4019e8cec44d5f5823d3c8c0b803997791aecef6ff1023224147cd6f8</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">849193cc1ad7d301bcab7311281d008657322f954d4d82596597e9a419a2bf48</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-config-nwfilter-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">84fa39c30be0ca55bf692af3a5b7aa0f0c1fa25f040a2fbf502b09852a432571</sum>
        </package>
        <package name="seavgabios-bin" version="1.16.0" release="4.module_el8.8.0+3612+f18d2b89" epoch="0" arch="noarch" src="seabios-1.16.0-4.module_el8.8.0+3612+f18d2b89.src.rpm">
          <filename>seavgabios-bin-1.16.0-4.module_el8.8.0+3612+f18d2b89.noarch.rpm</filename>
          <sum type="sha256">861a8898638783ad697969cd967559f623c7bac054447b6f9101b631e0ad56d3</sum>
        </package>
        <package name="nbdkit-linuxdisk-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-linuxdisk-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">8673003aa4610f82cbe152021387ac3c6c59d730a79b446aad432030e20f5eff</sum>
        </package>
        <package name="swtpm-tools" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-tools-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">87ce1c2ecc368965a92cf71a29a7cb1331508c7c86394cfaa7e4e87d20897d7b</sum>
        </package>
        <package name="nbdkit-tar-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tar-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">87ec102223607b5d8760ee3d8998a48b3fbce6a1abe6d8056782c1d9f94513ad</sum>
        </package>
        <package name="libtpms-devel" version="0.9.1" release="2.20211126git1ff6fe1f43.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libtpms-0.9.1-2.20211126git1ff6fe1f43.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libtpms-devel-0.9.1-2.20211126git1ff6fe1f43.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">89ae90d7efafa672b560568e0ef0ef902b42401a37036f7d862fc59cc1ebd301</sum>
        </package>
        <package name="supermin-devel" version="5.2.1" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="supermin-5.2.1-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>supermin-devel-5.2.1-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">8a47307269cf95719225e1e27dcd1cebdf6a0481948e4a044db972af12de9ce3</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-interface-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">8c88e127b0bb23b626e2434eacb44eab16ca12427b3a56c1e086db083fa5fd96</sum>
        </package>
        <package name="libguestfs-man-pages-uk" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-man-pages-uk-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">8cd1a80b657a0373e6dcf0b6699e7574c9874db489201985b16bc1d1d78cc55b</sum>
        </package>
        <package name="swtpm-tools-pkcs11" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-tools-pkcs11-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">8e7eeb060f1253ff8a48085d0b452c2ba2c1837e286fd23d91426f255d72398a</sum>
        </package>
        <package name="libvirt-devel" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-devel-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">9068beda3809029be73da24468e5a222d2a4385b481d0d355791a3bd0bd0891b</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">90f2bf649fb354650863af5857c04d86ff97083a6fd0f0cf7f35ef0410fbcc88</sum>
        </package>
        <package name="libguestfs-rescue" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-rescue-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">92093c28f6226504668df61e0bc2c5d1e7d8bf505a8bf762cdd5d2e7a50bb52f</sum>
        </package>
        <package name="netcf" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">9268b4ab854af88a5e511f78b47cf3c4acd66d76f7ea901452f6efd3f9c8bc7c</sum>
        </package>
        <package name="libguestfs-man-pages-ja" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-man-pages-ja-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">968dd115e865d941a07d1728940d84bdfef4f26d43d39aa225f4f4a5a821c89d</sum>
        </package>
        <package name="libguestfs-rsync" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-rsync-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">9cc94d5cec35a9f048fa74c69a8b7d6a0ec48c14074297bb564b91f4cdc4c54f</sum>
        </package>
        <package name="hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">9d259d5ff0ee30b3a2a8e5f897675750f74741ed06d50d3623cf469d1d0f01d8</sum>
        </package>
        <package name="libtpms" version="0.9.1" release="2.20211126git1ff6fe1f43.module_el8.8.0+3553+bd08596b" epoch="0" arch="s390x" src="libtpms-0.9.1-2.20211126git1ff6fe1f43.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>libtpms-0.9.1-2.20211126git1ff6fe1f43.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">a09f59fa0d5d5412a339fd34cb171540a9333ff099311e0a0ee9f9f601a80997</sum>
        </package>
        <package name="libiscsi" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">a1c871e87ebd136bfd498f13824563fd7428fcaf66bcffb341cfbb8370c2a18d</sum>
        </package>
        <package name="swtpm" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">a7fbed17619ce4d6d7d43a459be652ec92882b41903ac386ebfd9815806bc622</sum>
        </package>
        <package name="perl-Sys-Virt" version="8.0.0" release="1.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="perl-Sys-Virt-8.0.0-1.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>perl-Sys-Virt-8.0.0-1.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">a8b115eb9ca2707d1d7f800ac1b7730dcc6718168ff355f065464e6778ef5929</sum>
        </package>
        <package name="nbdkit-nbd-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-nbd-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">a9427bee7f157a63f2acd2357032ce829e0561b24193d204072502adad4aa52e</sum>
        </package>
        <package name="libguestfs-winsupport" version="8.8" release="2.module_el8.8.0+3612+f18d2b89" epoch="0" arch="s390x" src="libguestfs-winsupport-8.8-2.module_el8.8.0+3612+f18d2b89.src.rpm">
          <filename>libguestfs-winsupport-8.8-2.module_el8.8.0+3612+f18d2b89.s390x.rpm</filename>
          <sum type="sha256">ab296b69eaabfd07e0bb71a1e8a58c26958a122fe9662a7b862b45c90d05c550</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">ae385f9dcfa31d49e9eeda4a8880da1da76bfeee28200a96653dcc96aa21da4a</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">b0e8e105a4552e15db65da727ac545e4dc262b52a3ab3fb276bd492f5a21eb88</sum>
        </package>
        <package name="nbdkit-example-plugins" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-example-plugins-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">b10c0d094e84d5c035dae70b4db36c311eb7ff9cbee00c8443848f049a600ae4</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-network-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">b452adafc4befc8398ca74ff2f6573d7ff152b65e802688c811dc8ff9c7988ea</sum>
        </package>
        <package name="libguestfs-appliance" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-appliance-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">b5add06502e5bda5f39f712640e2ab0e8cf539b7a90370c6c1fd963bb73bc7d7</sum>
        </package>
        <package name="libiscsi-utils" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-utils-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">b6eb101dc2787a7d79b4fe51913319933f5927d1816ea03592d2be849ce21faf</sum>
        </package>
        <package name="ruby-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ruby-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">b8696f7658b7872cb5f4e9fe2319e00ec6b668fe0e9adea787890cb9500e0223</sum>
        </package>
        <package name="nbdkit-ssh-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-ssh-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">b9b590364d69f18da851dea269d4774ff711f44e3ace9b3304e87fe25f26aaa5</sum>
        </package>
        <package name="virt-dib" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>virt-dib-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">bf4b5929cf910fb7e4671e32c9ac2ce2f456e8b1e577cb0f4f33a0df8d316c27</sum>
        </package>
        <package name="libguestfs-java" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-java-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">bfc05f2dc57991bad44654221ea88f653c916e80637290b69c96e3e0f5aa55a8</sum>
        </package>
        <package name="libvirt-dbus" version="1.3.0" release="2.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libvirt-dbus-1.3.0-2.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libvirt-dbus-1.3.0-2.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">c20042be5784c1f4323e5590891be2a0e33244acff6b45149f36a2eef834064b</sum>
        </package>
        <package name="libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">c685dcd2fb41a700a866919788441d7c80c9a10b9757ea843e7a56c67a5d4be2</sum>
        </package>
        <package name="libvirt" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">c6e757d2dabd084afb7c89e72d982c7b663aabc7edeee45eaed61d611fc11251</sum>
        </package>
        <package name="libvirt-libs" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-libs-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">c763a466f4296b6a455aea252515ffd21ff8cef63c2ca8c49d6091d03a74a1a5</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-nodedev-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">cced2f758d9688158d3fd40758cf95e5b815ced68c62392cd8d5060ec99d101d</sum>
        </package>
        <package name="qemu-guest-agent" version="6.2.0" release="33.module_el8.8.0+3612+f18d2b89.alma.1" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.src.rpm">
          <filename>qemu-guest-agent-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.s390x.rpm</filename>
          <sum type="sha256">cff8f45c0382dc43ba37121b77eabc3856cd83a1caeeede951f9fc3a91927977</sum>
        </package>
        <package name="swtpm-libs" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-libs-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">d077f2d1f54aa47907a883e12d46f0632e33ad5141bd16a25759a580f851b91c</sum>
        </package>
        <package name="libiscsi-devel" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-devel-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">d45a7d8438477f375ed86276eea276fd3bb0965844cb8733a09691fc68d730db</sum>
        </package>
        <package name="nbdkit-devel" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-devel-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">d5bc58eda3110ad1589ab9d239e347e155bf59eaee69e0bea028f67d9e0ea216</sum>
        </package>
        <package name="swtpm-devel" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-devel-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">d69840154560e2ca3f4ea1315bfcca103b2260692f2c3d5fa1a76dbed7ddfbe1</sum>
        </package>
        <package name="qemu-kvm" version="6.2.0" release="33.module_el8.8.0+3612+f18d2b89.alma.1" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.src.rpm">
          <filename>qemu-kvm-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.s390x.rpm</filename>
          <sum type="sha256">d7a7815a8331534a1abfde1b1d0bb56eb00033de1fe1a23ec01bbfcc9e5f3275</sum>
        </package>
        <package name="qemu-kvm-common" version="6.2.0" release="33.module_el8.8.0+3612+f18d2b89.alma.1" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.src.rpm">
          <filename>qemu-kvm-common-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.s390x.rpm</filename>
          <sum type="sha256">e08c5907680dac4259d5ea3164b0afab6199d3422fe444fb8bb1f7edcca3c07d</sum>
        </package>
        <package name="supermin" version="5.2.1" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="supermin-5.2.1-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>supermin-5.2.1-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">e15b529769bbaa1d035eb7e4d4f58f4757e58772523d45cb07cc7533eeef0057</sum>
        </package>
        <package name="python3-libvirt" version="8.0.0" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="libvirt-python-8.0.0-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>python3-libvirt-8.0.0-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">e36c5a8c03f3393622b5dd5badefcd4a05ee01b8de17de28812017ddfda63954</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="6.2.0" release="33.module_el8.8.0+3612+f18d2b89.alma.1" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.src.rpm">
          <filename>qemu-kvm-block-ssh-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.s390x.rpm</filename>
          <sum type="sha256">e5f083b7ce555718afcfe88e8c2b7ceb1c0de0f6748153f9c35ba4741bd96ccf</sum>
        </package>
        <package name="python3-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>python3-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">ec11102e66953715d97704c820c0effcd80944fdd525efca9645f70b1cfa2fa9</sum>
        </package>
        <package name="libguestfs-inspect-icons" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-inspect-icons-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">ece57f7c833d85599725786783875d496fd9d38644cdc96ce23e4d73c6d5e4c9</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-secret-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">ecf85a4fbacd9c275df95668e5e876254eda9ea10ac9a7a9db6952dd9c414620</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="6.2.0" release="33.module_el8.8.0+3612+f18d2b89.alma.1" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.src.rpm">
          <filename>qemu-kvm-block-rbd-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.s390x.rpm</filename>
          <sum type="sha256">f122e636af8194f6abd26896b31f0615770c494f18d1344d576a9ca8e24cf214</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-storage-logical-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">f2b483f7d47f66c6213c4da7e4dd8d16f842c123d012969a49c00d6801dcbbf8</sum>
        </package>
        <package name="nbdkit-gzip-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-gzip-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">f3befb065571d5207296b7d7f2db60348cb935ec26b3fcf7a5db2f66dbec7dc5</sum>
        </package>
        <package name="libguestfs-xfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-xfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">fa8ce4ce15f9b8d5753db18aa569fdbb4c636e16d88c6bb83fc588c594c1ee90</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-storage-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">fb0f53660e7379784d6128863aa33ea4d9e7386073d40f9c3b6f42b5acba895e</sum>
        </package>
        <package name="perl-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>perl-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">fcc1bade9f3d715b09d2679d6efc9fd94b2faa9e912dcae68dbc372613f90965</sum>
        </package>
        <package name="libguestfs-tools-c" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-tools-c-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">fce060540b90878b0d21bfa525965ac06b8622b0a7cf824c54761c92b79f0764</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-gluster" version="8.0.0" release="19.2.module_el8.8.0+3585+76b9c397.alma" epoch="0" arch="s390x" src="libvirt-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.src.rpm">
          <filename>libvirt-daemon-driver-storage-gluster-8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma.s390x.rpm</filename>
          <sum type="sha256">fdea1cfccf06d3bf1301366c589bf611a936fd8f396430a55462d57a0eca31d4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5269</id>
    <title>Moderate: postgresql:15 security update</title>
    <issued date="2023-09-19 00:00:00"/>
    <updated date="2023-09-21 17:17:02"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql:15 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: schema_element defeats protective search_path changes (CVE-2023-2454)
* postgresql: row security policies disregard user ID changes after inlining. (CVE-2023-2455)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5269" id="RHSA-2023:5269" type="rhsa" title="RHSA-2023:5269"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2454" id="CVE-2023-2454" type="cve" title="CVE-2023-2454"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2455" id="CVE-2023-2455" type="cve" title="CVE-2023-2455"/>
      <reference href="https://bugzilla.redhat.com/2207568" id="2207568" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2207569" id="2207569" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5269.html" id="ALSA-2023:5269" type="self" title="ALSA-2023:5269"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="postgresql" stream="15" version="8080020230921120311" context="9edba152" arch="s390x"/>
        <package name="postgres-decoderbufs" version="1.9.7" release="1.Final.module_el8.8.0+3487+43ec1b9f" epoch="0" arch="s390x" src="postgres-decoderbufs-1.9.7-1.Final.module_el8.8.0+3487+43ec1b9f.src.rpm">
          <filename>postgres-decoderbufs-1.9.7-1.Final.module_el8.8.0+3487+43ec1b9f.s390x.rpm</filename>
          <sum type="sha256">055fe6bbecc74f7919f9ec57e1e42bb9eb94476114d930ec210f1efc3108b92d</sum>
        </package>
        <package name="pg_repack" version="1.4.8" release="1.module_el8.8.0+3487+43ec1b9f" epoch="0" arch="s390x" src="pg_repack-1.4.8-1.module_el8.8.0+3487+43ec1b9f.src.rpm">
          <filename>pg_repack-1.4.8-1.module_el8.8.0+3487+43ec1b9f.s390x.rpm</filename>
          <sum type="sha256">081ea0091971a8aa105bd973398a6bd2618e4c4774ddba96fcc6732fea454d53</sum>
        </package>
        <package name="postgresql-upgrade" version="15.3" release="1.module_el8.8.0+3610+f1fe5820" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el8.8.0+3610+f1fe5820.src.rpm">
          <filename>postgresql-upgrade-15.3-1.module_el8.8.0+3610+f1fe5820.s390x.rpm</filename>
          <sum type="sha256">12c94e7f44fce759242f57d00ab1eea29c0bae04ca785346d2db7d0e60345f79</sum>
        </package>
        <package name="pgaudit" version="1.7.0" release="1.module_el8.8.0+3487+43ec1b9f" epoch="0" arch="s390x" src="pgaudit-1.7.0-1.module_el8.8.0+3487+43ec1b9f.src.rpm">
          <filename>pgaudit-1.7.0-1.module_el8.8.0+3487+43ec1b9f.s390x.rpm</filename>
          <sum type="sha256">12cd22b7d2193b09d54d32baa05dd1b7085110c0332c6a91154d9bebffb96c95</sum>
        </package>
        <package name="postgresql-docs" version="15.3" release="1.module_el8.8.0+3610+f1fe5820" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el8.8.0+3610+f1fe5820.src.rpm">
          <filename>postgresql-docs-15.3-1.module_el8.8.0+3610+f1fe5820.s390x.rpm</filename>
          <sum type="sha256">15195f35259a2389afd961ca7efdb6af6660ca9d211f21254697f1b445959a80</sum>
        </package>
        <package name="postgresql-plpython3" version="15.3" release="1.module_el8.8.0+3610+f1fe5820" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el8.8.0+3610+f1fe5820.src.rpm">
          <filename>postgresql-plpython3-15.3-1.module_el8.8.0+3610+f1fe5820.s390x.rpm</filename>
          <sum type="sha256">197ce1bf5aa98830eb26b6c18eb91dc32cbd028ebbaf78065549e685e6893dc7</sum>
        </package>
        <package name="postgresql" version="15.3" release="1.module_el8.8.0+3610+f1fe5820" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el8.8.0+3610+f1fe5820.src.rpm">
          <filename>postgresql-15.3-1.module_el8.8.0+3610+f1fe5820.s390x.rpm</filename>
          <sum type="sha256">284d58a37ffe310cadaea43487234d32007827b73881c05b28c1f3b323705bf5</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="15.3" release="1.module_el8.8.0+3610+f1fe5820" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el8.8.0+3610+f1fe5820.src.rpm">
          <filename>postgresql-upgrade-devel-15.3-1.module_el8.8.0+3610+f1fe5820.s390x.rpm</filename>
          <sum type="sha256">30e3a44cd8be09dcfc064d67c16c7a93b4c43dd09fedd1cb971cceff6a1f3f0a</sum>
        </package>
        <package name="postgresql-contrib" version="15.3" release="1.module_el8.8.0+3610+f1fe5820" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el8.8.0+3610+f1fe5820.src.rpm">
          <filename>postgresql-contrib-15.3-1.module_el8.8.0+3610+f1fe5820.s390x.rpm</filename>
          <sum type="sha256">32b82a753f250fe93505626ab594254e577b2953e9d1ea70e59d4c135b1e6dfc</sum>
        </package>
        <package name="postgresql-test" version="15.3" release="1.module_el8.8.0+3610+f1fe5820" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el8.8.0+3610+f1fe5820.src.rpm">
          <filename>postgresql-test-15.3-1.module_el8.8.0+3610+f1fe5820.s390x.rpm</filename>
          <sum type="sha256">56701f749697e4463e49a7e77802f52a033f0b4356c692c7edf2d764c20e0e65</sum>
        </package>
        <package name="postgresql-private-devel" version="15.3" release="1.module_el8.8.0+3610+f1fe5820" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el8.8.0+3610+f1fe5820.src.rpm">
          <filename>postgresql-private-devel-15.3-1.module_el8.8.0+3610+f1fe5820.s390x.rpm</filename>
          <sum type="sha256">61c0c2759f8b26835f50a081c4b653b75725d8d0b9e34f2bee7e1bbc952cd5e7</sum>
        </package>
        <package name="postgresql-pltcl" version="15.3" release="1.module_el8.8.0+3610+f1fe5820" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el8.8.0+3610+f1fe5820.src.rpm">
          <filename>postgresql-pltcl-15.3-1.module_el8.8.0+3610+f1fe5820.s390x.rpm</filename>
          <sum type="sha256">70ead720616d5423a9c8a4175a9c94dbd0b1f9013450fd18d4e162d22cc9b9be</sum>
        </package>
        <package name="postgresql-server" version="15.3" release="1.module_el8.8.0+3610+f1fe5820" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el8.8.0+3610+f1fe5820.src.rpm">
          <filename>postgresql-server-15.3-1.module_el8.8.0+3610+f1fe5820.s390x.rpm</filename>
          <sum type="sha256">8546b17dd6557115c6d185cbf8e531486dda868b64e08b326e3298e44d1512cc</sum>
        </package>
        <package name="postgresql-plperl" version="15.3" release="1.module_el8.8.0+3610+f1fe5820" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el8.8.0+3610+f1fe5820.src.rpm">
          <filename>postgresql-plperl-15.3-1.module_el8.8.0+3610+f1fe5820.s390x.rpm</filename>
          <sum type="sha256">c94e2701eda754a4545049181662fa40004a514f42bcd5d5985770cfcd7f4b79</sum>
        </package>
        <package name="postgresql-private-libs" version="15.3" release="1.module_el8.8.0+3610+f1fe5820" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el8.8.0+3610+f1fe5820.src.rpm">
          <filename>postgresql-private-libs-15.3-1.module_el8.8.0+3610+f1fe5820.s390x.rpm</filename>
          <sum type="sha256">d0cacb7c4f9103bfc8a515f536cea470e1e95eb546c5bc9e39a8fc49bc2aa4bd</sum>
        </package>
        <package name="postgresql-server-devel" version="15.3" release="1.module_el8.8.0+3610+f1fe5820" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el8.8.0+3610+f1fe5820.src.rpm">
          <filename>postgresql-server-devel-15.3-1.module_el8.8.0+3610+f1fe5820.s390x.rpm</filename>
          <sum type="sha256">d75ec92fb630b921c58dfa404f14e2d3d046a12de2465517c524454fdd0473fd</sum>
        </package>
        <package name="postgresql-static" version="15.3" release="1.module_el8.8.0+3610+f1fe5820" epoch="0" arch="s390x" src="postgresql-15.3-1.module_el8.8.0+3610+f1fe5820.src.rpm">
          <filename>postgresql-static-15.3-1.module_el8.8.0+3610+f1fe5820.s390x.rpm</filename>
          <sum type="sha256">e770f923e918a14c3d0a012f975f34638b0e0badf15cfd184c45690264a3bcc5</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="15.3" release="1.module_el8.8.0+3610+f1fe5820" epoch="0" arch="noarch" src="postgresql-15.3-1.module_el8.8.0+3610+f1fe5820.src.rpm">
          <filename>postgresql-test-rpm-macros-15.3-1.module_el8.8.0+3610+f1fe5820.noarch.rpm</filename>
          <sum type="sha256">ebae1378fe0f52894036c9e1d04b1652ee85a80fb9ae162de58a3cb97a46a570</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5309</id>
    <title>Important: libwebp security update</title>
    <issued date="2023-09-20 00:00:00"/>
    <updated date="2023-09-21 12:35:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libwebp security update</summary>
    <description>The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently.

Security Fix(es):

* libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5309" id="RHSA-2023:5309" type="rhsa" title="RHSA-2023:5309"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4863" id="CVE-2023-4863" type="cve" title="CVE-2023-4863"/>
      <reference href="https://bugzilla.redhat.com/2238431" id="2238431" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5309.html" id="ALSA-2023:5309" type="self" title="ALSA-2023:5309"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="libwebp" version="1.0.0" release="8.el8_8.1" epoch="0" arch="s390x" src="libwebp-1.0.0-8.el8_8.1.src.rpm">
          <filename>libwebp-1.0.0-8.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">bc0ed1a0ff7da081ff42a3f40e4eea73bf65bbc5ae356f318409e470944da5c4</sum>
        </package>
        <package name="libwebp-devel" version="1.0.0" release="8.el8_8.1" epoch="0" arch="s390x" src="libwebp-1.0.0-8.el8_8.1.src.rpm">
          <filename>libwebp-devel-1.0.0-8.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">c070e4ea96427aee1063d0e10b86916503666d8b5788a062ea21fca43e2c303e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5353</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-09-26 00:00:00"/>
    <updated date="2023-09-27 09:26:34"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0800)
* libtiff: out-of-bounds write in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0801)
* libtiff: out-of-bounds write in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0802)
* libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0803)
* libtiff: out-of-bounds write in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5353" id="RHSA-2023:5353" type="rhsa" title="RHSA-2023:5353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0800" id="CVE-2023-0800" type="cve" title="CVE-2023-0800"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0801" id="CVE-2023-0801" type="cve" title="CVE-2023-0801"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0802" id="CVE-2023-0802" type="cve" title="CVE-2023-0802"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0803" id="CVE-2023-0803" type="cve" title="CVE-2023-0803"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0804" id="CVE-2023-0804" type="cve" title="CVE-2023-0804"/>
      <reference href="https://bugzilla.redhat.com/2170167" id="2170167" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170172" id="2170172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170178" id="2170178" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170187" id="2170187" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170192" id="2170192" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5353.html" id="ALSA-2023:5353" type="self" title="ALSA-2023:5353"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="libtiff-devel" version="4.0.9" release="29.el8_8" epoch="0" arch="s390x" src="libtiff-4.0.9-29.el8_8.src.rpm">
          <filename>libtiff-devel-4.0.9-29.el8_8.s390x.rpm</filename>
          <sum type="sha256">4c32a069c01f06c7725d8929e10ae021adba408295893d957638062cdd9ef8cf</sum>
        </package>
        <package name="libtiff" version="4.0.9" release="29.el8_8" epoch="0" arch="s390x" src="libtiff-4.0.9-29.el8_8.src.rpm">
          <filename>libtiff-4.0.9-29.el8_8.s390x.rpm</filename>
          <sum type="sha256">4d964dbc92d343b6b23a8b7e776cfca2c276332b72b6d2e52c23f69e8ba81dd3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5360</id>
    <title>Important: nodejs:16 security, bug fix, and enhancement update</title>
    <issued date="2023-09-26 00:00:00"/>
    <updated date="2023-09-27 17:32:16"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:16 security, bug fix, and enhancement update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

The following packages have been upgraded to a later upstream version: nodejs (16). (BZ#2233891)

Security Fix(es):

* nodejs: Permissions policies can be bypassed via Module._load (CVE-2023-32002)
* nodejs-semver: Regular expression denial of service (CVE-2022-25883)
* nodejs: Permissions policies can impersonate other modules in using module.constructor.createRequire() (CVE-2023-32006)
* nodejs: Permissions policies can be bypassed via process.binding (CVE-2023-32559)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* nodejs:16/nodejs: nodejs.prov doesn't generate the bundled dependency for modules starting @ like @colors/colors (BZ#2237394)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5360" id="RHSA-2023:5360" type="rhsa" title="RHSA-2023:5360"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25883" id="CVE-2022-25883" type="cve" title="CVE-2022-25883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32002" id="CVE-2023-32002" type="cve" title="CVE-2023-32002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32006" id="CVE-2023-32006" type="cve" title="CVE-2023-32006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32559" id="CVE-2023-32559" type="cve" title="CVE-2023-32559"/>
      <reference href="https://bugzilla.redhat.com/2216475" id="2216475" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2230948" id="2230948" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2230955" id="2230955" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2230956" id="2230956" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5360.html" id="ALSA-2023:5360" type="self" title="ALSA-2023:5360"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="nodejs" stream="16" version="8080020230927094520" context="9edba152" arch="s390x"/>
        <package name="nodejs-full-i18n" version="16.20.2" release="2.module_el8.8.0+3614+204d6f43" epoch="1" arch="s390x" src="nodejs-16.20.2-2.module_el8.8.0+3614+204d6f43.src.rpm">
          <filename>nodejs-full-i18n-16.20.2-2.module_el8.8.0+3614+204d6f43.s390x.rpm</filename>
          <sum type="sha256">0f05666d2296bf43d689e3e0d614fcb0547bba20460e0dcfdf9e9a3944f70b60</sum>
        </package>
        <package name="nodejs-devel" version="16.20.2" release="2.module_el8.8.0+3614+204d6f43" epoch="1" arch="s390x" src="nodejs-16.20.2-2.module_el8.8.0+3614+204d6f43.src.rpm">
          <filename>nodejs-devel-16.20.2-2.module_el8.8.0+3614+204d6f43.s390x.rpm</filename>
          <sum type="sha256">13aa008763560be8fd7abc55c8d20b73d264ccdc2d999214133cc647a993048c</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.8.0+3614+204d6f43" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.8.0+3614+204d6f43.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.8.0+3614+204d6f43.noarch.rpm</filename>
          <sum type="sha256">2b8db0b6778841b5b0d2e3e86ff1391c8b370f251408760a942901ec43e8c298</sum>
        </package>
        <package name="nodejs-packaging" version="26" release="1.module_el8.8.0+3614+204d6f43" epoch="0" arch="noarch" src="nodejs-packaging-26-1.module_el8.8.0+3614+204d6f43.src.rpm">
          <filename>nodejs-packaging-26-1.module_el8.8.0+3614+204d6f43.noarch.rpm</filename>
          <sum type="sha256">55ff8b1958f44d03607bb59c4e3229e1bc8b05fa82bcc87babfe8f2b25c1c841</sum>
        </package>
        <package name="nodejs-docs" version="16.20.2" release="2.module_el8.8.0+3614+204d6f43" epoch="1" arch="noarch" src="nodejs-16.20.2-2.module_el8.8.0+3614+204d6f43.src.rpm">
          <filename>nodejs-docs-16.20.2-2.module_el8.8.0+3614+204d6f43.noarch.rpm</filename>
          <sum type="sha256">76643e9ce82b1fbe45d9fabd860df9c336402e6e5f75bb6cb6b5bd4c607fd644</sum>
        </package>
        <package name="npm" version="8.19.4" release="1.16.20.2.2.module_el8.8.0+3614+204d6f43" epoch="1" arch="s390x" src="nodejs-16.20.2-2.module_el8.8.0+3614+204d6f43.src.rpm">
          <filename>npm-8.19.4-1.16.20.2.2.module_el8.8.0+3614+204d6f43.s390x.rpm</filename>
          <sum type="sha256">9f81583da5047920e20ecfc2e6b78c7453bae46beb674536af782ce036664fd4</sum>
        </package>
        <package name="nodejs" version="16.20.2" release="2.module_el8.8.0+3614+204d6f43" epoch="1" arch="s390x" src="nodejs-16.20.2-2.module_el8.8.0+3614+204d6f43.src.rpm">
          <filename>nodejs-16.20.2-2.module_el8.8.0+3614+204d6f43.s390x.rpm</filename>
          <sum type="sha256">cd0618a366af3486e16c47c9d80bd3f19b06ce58fe8b9069bea94840ac3e517c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5362</id>
    <title>Important: nodejs:18 security, bug fix, and enhancement update</title>
    <issued date="2023-09-26 00:00:00"/>
    <updated date="2023-09-27 15:20:06"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:18 security, bug fix, and enhancement update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

The following packages have been upgraded to a later upstream version: nodejs (18). (BZ#2234409)

Security Fix(es):

* nodejs: Permissions policies can be bypassed via Module._load (CVE-2023-32002)
* nodejs-semver: Regular expression denial of service (CVE-2022-25883)
* nodejs: Permissions policies can impersonate other modules in using module.constructor.createRequire() (CVE-2023-32006)
* nodejs: Permissions policies can be bypassed via process.binding (CVE-2023-32559)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5362" id="RHSA-2023:5362" type="rhsa" title="RHSA-2023:5362"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25883" id="CVE-2022-25883" type="cve" title="CVE-2022-25883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32002" id="CVE-2023-32002" type="cve" title="CVE-2023-32002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32006" id="CVE-2023-32006" type="cve" title="CVE-2023-32006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32559" id="CVE-2023-32559" type="cve" title="CVE-2023-32559"/>
      <reference href="https://bugzilla.redhat.com/2216475" id="2216475" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2230948" id="2230948" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2230955" id="2230955" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2230956" id="2230956" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5362.html" id="ALSA-2023:5362" type="self" title="ALSA-2023:5362"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="nodejs" stream="18" version="8080020230927092540" context="9edba152" arch="s390x"/>
        <package name="nodejs" version="18.17.1" release="1.module_el8.8.0+3613+1ed8c91d" epoch="1" arch="s390x" src="nodejs-18.17.1-1.module_el8.8.0+3613+1ed8c91d.src.rpm">
          <filename>nodejs-18.17.1-1.module_el8.8.0+3613+1ed8c91d.s390x.rpm</filename>
          <sum type="sha256">0a25d76c346c49e639022052ad8517e29d1b95ce843a92ee0e499fee71c9ec85</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.8.0+3613+1ed8c91d" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.8.0+3613+1ed8c91d.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.8.0+3613+1ed8c91d.noarch.rpm</filename>
          <sum type="sha256">1de153a1170baeaa24f02ebd86d32d508ac48ea9ed54e2a70c5250a81952a65b</sum>
        </package>
        <package name="nodejs-devel" version="18.17.1" release="1.module_el8.8.0+3613+1ed8c91d" epoch="1" arch="s390x" src="nodejs-18.17.1-1.module_el8.8.0+3613+1ed8c91d.src.rpm">
          <filename>nodejs-devel-18.17.1-1.module_el8.8.0+3613+1ed8c91d.s390x.rpm</filename>
          <sum type="sha256">2eaf8c6355a7463b03669c6745dcdb47e55249caed7b003313015f71377a1328</sum>
        </package>
        <package name="nodejs-docs" version="18.17.1" release="1.module_el8.8.0+3613+1ed8c91d" epoch="1" arch="noarch" src="nodejs-18.17.1-1.module_el8.8.0+3613+1ed8c91d.src.rpm">
          <filename>nodejs-docs-18.17.1-1.module_el8.8.0+3613+1ed8c91d.noarch.rpm</filename>
          <sum type="sha256">84153ed813b0358ecd3979b9a5619cbaf475a7bd8b48e79725a178e290ed17f3</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el8.7.0+3343+ea2b7901" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.noarch.rpm</filename>
          <sum type="sha256">9430d44c78a3cfbe1ae3d39b8531f651606661943959bc0c3de87b2f91ea6f67</sum>
        </package>
        <package name="npm" version="9.6.7" release="1.18.17.1.1.module_el8.8.0+3613+1ed8c91d" epoch="1" arch="s390x" src="nodejs-18.17.1-1.module_el8.8.0+3613+1ed8c91d.src.rpm">
          <filename>npm-9.6.7-1.18.17.1.1.module_el8.8.0+3613+1ed8c91d.s390x.rpm</filename>
          <sum type="sha256">b9864416f4907b029718d7a0b89a98d6a620a2536d9e21d41e0ad0b7e9333dbb</sum>
        </package>
        <package name="nodejs-full-i18n" version="18.17.1" release="1.module_el8.8.0+3613+1ed8c91d" epoch="1" arch="s390x" src="nodejs-18.17.1-1.module_el8.8.0+3613+1ed8c91d.src.rpm">
          <filename>nodejs-full-i18n-18.17.1-1.module_el8.8.0+3613+1ed8c91d.s390x.rpm</filename>
          <sum type="sha256">bb4fba6745e4aef5a41cce68a488645a07b65bc618b6bd476d6a5df5763d3b64</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el8.7.0+3343+ea2b7901" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el8.7.0+3343+ea2b7901.noarch.rpm</filename>
          <sum type="sha256">dca36d100028686323583aeddaa86efff902ff7fe29cb97d4356c309e3e899d9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5455</id>
    <title>Important: glibc security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-05 23:16:25"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: buffer overflow in ld.so leading to privilege escalation (CVE-2023-4911)
* glibc: Stack read overflow in getaddrinfo in no-aaaa mode (CVE-2023-4527)
* glibc: potential use-after-free in getaddrinfo() (CVE-2023-4806)
* glibc: potential use-after-free in gaih_inet() (CVE-2023-4813)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5455" id="RHSA-2023:5455" type="rhsa" title="RHSA-2023:5455"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4527" id="CVE-2023-4527" type="cve" title="CVE-2023-4527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4806" id="CVE-2023-4806" type="cve" title="CVE-2023-4806"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4813" id="CVE-2023-4813" type="cve" title="CVE-2023-4813"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4911" id="CVE-2023-4911" type="cve" title="CVE-2023-4911"/>
      <reference href="https://bugzilla.redhat.com/2234712" id="2234712" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237782" id="2237782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237798" id="2237798" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238352" id="2238352" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5455.html" id="ALSA-2023:5455" type="self" title="ALSA-2023:5455"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="glibc-utils" version="2.28" release="225.el8_8.6" epoch="0" arch="s390x" src="glibc-2.28-225.el8_8.6.src.rpm">
          <filename>glibc-utils-2.28-225.el8_8.6.s390x.rpm</filename>
          <sum type="sha256">8a6ad8a8c26f07c347f07265089242c48dcc7b47d2ad782fdf643e0110a23ba0</sum>
        </package>
        <package name="compat-libpthread-nonshared" version="2.28" release="225.el8_8.6" epoch="0" arch="s390x" src="glibc-2.28-225.el8_8.6.src.rpm">
          <filename>compat-libpthread-nonshared-2.28-225.el8_8.6.s390x.rpm</filename>
          <sum type="sha256">b9017e88d3fdad462f3906e2a870e9e2efe23c1a76ef0b324343d8423b6054c5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5460</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-06 10:02:13"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: stack exhaustion in control channel code may lead to DoS (CVE-2023-3341)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5460" id="RHSA-2023:5460" type="rhsa" title="RHSA-2023:5460"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3341" id="CVE-2023-3341" type="cve" title="CVE-2023-3341"/>
      <reference href="https://bugzilla.redhat.com/2239621" id="2239621" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5460.html" id="ALSA-2023:5460" type="self" title="ALSA-2023:5460"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="bind9.16-dnssec-utils" version="9.16.23" release="0.14.el8_8.2.alma.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.14.el8_8.2.alma.1.src.rpm">
          <filename>bind9.16-dnssec-utils-9.16.23-0.14.el8_8.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">005476981a7851a4fdb83eced9d3e3dce81548a8326dcfd2d6be1201dcf99bf9</sum>
        </package>
        <package name="python3-bind9.16" version="9.16.23" release="0.14.el8_8.2.alma.1" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.14.el8_8.2.alma.1.src.rpm">
          <filename>python3-bind9.16-9.16.23-0.14.el8_8.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">5d84c7719bb5ddba51d00175b26bff26333f6904f08bf6408084927fb24c80c6</sum>
        </package>
        <package name="bind9.16-libs" version="9.16.23" release="0.14.el8_8.2.alma.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.14.el8_8.2.alma.1.src.rpm">
          <filename>bind9.16-libs-9.16.23-0.14.el8_8.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">b414606596478fed9dc18524f01fdbe9de583b3956e6da1fe83ecea2d3fa5c20</sum>
        </package>
        <package name="bind9.16-license" version="9.16.23" release="0.14.el8_8.2.alma.1" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.14.el8_8.2.alma.1.src.rpm">
          <filename>bind9.16-license-9.16.23-0.14.el8_8.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">b4b5bbfa4be8453ed0a34c8637e440adb001438fc59c65af8ab5c007a9d5bd96</sum>
        </package>
        <package name="bind9.16-chroot" version="9.16.23" release="0.14.el8_8.2.alma.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.14.el8_8.2.alma.1.src.rpm">
          <filename>bind9.16-chroot-9.16.23-0.14.el8_8.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">b68e45c53108287079ea9c962012e17b0c9d4e75a4b62c6efe2849d27d5e0793</sum>
        </package>
        <package name="bind9.16-utils" version="9.16.23" release="0.14.el8_8.2.alma.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.14.el8_8.2.alma.1.src.rpm">
          <filename>bind9.16-utils-9.16.23-0.14.el8_8.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">ddf6080959436182d5f77e6439c6d6cd1aef56fc7bc14620382ad78ff89940da</sum>
        </package>
        <package name="bind9.16" version="9.16.23" release="0.14.el8_8.2.alma.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.14.el8_8.2.alma.1.src.rpm">
          <filename>bind9.16-9.16.23-0.14.el8_8.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">f055f0e852f597e9d9bfcd778986183f73f53fa22600fcaf1262bf1672d8b4f2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5463</id>
    <title>Important: python3.11 security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-06 09:33:47"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.

Security Fix(es):

* python: TLS handshake bypass (CVE-2023-40217)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5463" id="RHSA-2023:5463" type="rhsa" title="RHSA-2023:5463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40217" id="CVE-2023-40217" type="cve" title="CVE-2023-40217"/>
      <reference href="https://bugzilla.redhat.com/2235789" id="2235789" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5463.html" id="ALSA-2023:5463" type="self" title="ALSA-2023:5463"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="python3.11" version="3.11.2" release="2.el8_8.2" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el8_8.2.src.rpm">
          <filename>python3.11-3.11.2-2.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">43483f5124970704e4c168b5f092e8ebb175d223badcef1dab1103760d7a07a3</sum>
        </package>
        <package name="python3.11-rpm-macros" version="3.11.2" release="2.el8_8.2" epoch="0" arch="noarch" src="python3.11-3.11.2-2.el8_8.2.src.rpm">
          <filename>python3.11-rpm-macros-3.11.2-2.el8_8.2.noarch.rpm</filename>
          <sum type="sha256">678bde342133be317a11236e091d8da2101c239582a8e9d087fa350f9b2f402f</sum>
        </package>
        <package name="python3.11-devel" version="3.11.2" release="2.el8_8.2" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el8_8.2.src.rpm">
          <filename>python3.11-devel-3.11.2-2.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">834ddd564425d86e1142362e5c7ad5bea9d3b8b4a722885534aa8c3cfa8e871f</sum>
        </package>
        <package name="python3.11-libs" version="3.11.2" release="2.el8_8.2" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el8_8.2.src.rpm">
          <filename>python3.11-libs-3.11.2-2.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">aae10b3aaa119cd13669cb6372569d4cadf8b835055a30055c0a0dd8ec410c19</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.2" release="2.el8_8.2" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el8_8.2.src.rpm">
          <filename>python3.11-tkinter-3.11.2-2.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">b37550e0ad03d85037ebb1d8c6396ecbfe24d9932c81fa3d8af3cfd516702307</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5474</id>
    <title>Important: bind security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-06 08:34:28"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: stack exhaustion in control channel code may lead to DoS (CVE-2023-3341)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5474" id="RHSA-2023:5474" type="rhsa" title="RHSA-2023:5474"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3341" id="CVE-2023-3341" type="cve" title="CVE-2023-3341"/>
      <reference href="https://bugzilla.redhat.com/2239621" id="2239621" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5474.html" id="ALSA-2023:5474" type="self" title="ALSA-2023:5474"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="bind-libs-lite" version="9.11.36" release="8.el8_8.2" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.2.src.rpm">
          <filename>bind-libs-lite-9.11.36-8.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">152fc85105c6ccaca5ff69a95c4ff2835a493138df9a23788c016c5d7b609cd3</sum>
        </package>
        <package name="bind-sdb-chroot" version="9.11.36" release="8.el8_8.2" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.2.src.rpm">
          <filename>bind-sdb-chroot-9.11.36-8.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">1ff0c858c4c22cf05e195462af0859c7871e4d091b159a5602b8d4517b9af891</sum>
        </package>
        <package name="bind-sdb" version="9.11.36" release="8.el8_8.2" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.2.src.rpm">
          <filename>bind-sdb-9.11.36-8.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">4fa25cdb2d15b2fb7d6f1360bf908002c42ae67c1d763b6418c354de99930748</sum>
        </package>
        <package name="bind-pkcs11-devel" version="9.11.36" release="8.el8_8.2" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.2.src.rpm">
          <filename>bind-pkcs11-devel-9.11.36-8.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">69470dc4f3d7e594159a5fcb3e1f17655d7f1b7c2688d714835af725fa54462f</sum>
        </package>
        <package name="bind-devel" version="9.11.36" release="8.el8_8.2" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.2.src.rpm">
          <filename>bind-devel-9.11.36-8.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">7222fe2e56a82cd55d8dedffaa7b027cee7e95b9eb3a77caab09fe3cf6a0bd33</sum>
        </package>
        <package name="bind-libs" version="9.11.36" release="8.el8_8.2" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.2.src.rpm">
          <filename>bind-libs-9.11.36-8.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">7ccf50ea54f1f6219c6c18f5e4a534332f3da4ec984c76441f24144b7e6d6a3a</sum>
        </package>
        <package name="bind-lite-devel" version="9.11.36" release="8.el8_8.2" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.2.src.rpm">
          <filename>bind-lite-devel-9.11.36-8.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">856b479e5c9c89a64d58b287dd16aaff26008c7a77728608bf5eaab54645e250</sum>
        </package>
        <package name="python3-bind" version="9.11.36" release="8.el8_8.2" epoch="32" arch="noarch" src="bind-9.11.36-8.el8_8.2.src.rpm">
          <filename>python3-bind-9.11.36-8.el8_8.2.noarch.rpm</filename>
          <sum type="sha256">ab6c3a762af059e74b3d299db55b7f81cf9229e42cd1fb8cab3ecfb7864e118c</sum>
        </package>
        <package name="bind-pkcs11" version="9.11.36" release="8.el8_8.2" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.2.src.rpm">
          <filename>bind-pkcs11-9.11.36-8.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">b8fffd5119bde377d299d9c651e5efcebe43939a8846f5df1504031bdf3b9bf4</sum>
        </package>
        <package name="bind-pkcs11-libs" version="9.11.36" release="8.el8_8.2" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.2.src.rpm">
          <filename>bind-pkcs11-libs-9.11.36-8.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">c6fba7ae0d4a6a71a8be5a3edd96dbace2017c0809632d8f3ad8c81c5a22c650</sum>
        </package>
        <package name="bind" version="9.11.36" release="8.el8_8.2" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.2.src.rpm">
          <filename>bind-9.11.36-8.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">c9907f047140b7649ba22f5bc7c8347114a714a555703f669ef318852d3923f1</sum>
        </package>
        <package name="bind-pkcs11-utils" version="9.11.36" release="8.el8_8.2" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.2.src.rpm">
          <filename>bind-pkcs11-utils-9.11.36-8.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">d2c9b01a4a19a5672c3f88ebe0cf3ee1d79dd1290a75a3de041a379a7daf6bec</sum>
        </package>
        <package name="bind-chroot" version="9.11.36" release="8.el8_8.2" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.2.src.rpm">
          <filename>bind-chroot-9.11.36-8.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">d3baf2d8a053dbdf28f1ed9fd0ba6e0ffc8ab11e841ae78f6ef22556100c4f28</sum>
        </package>
        <package name="bind-license" version="9.11.36" release="8.el8_8.2" epoch="32" arch="noarch" src="bind-9.11.36-8.el8_8.2.src.rpm">
          <filename>bind-license-9.11.36-8.el8_8.2.noarch.rpm</filename>
          <sum type="sha256">dabe80f14c6075372f182eaa264a81454af275cff90a0c0845edc23084541032</sum>
        </package>
        <package name="bind-utils" version="9.11.36" release="8.el8_8.2" epoch="32" arch="s390x" src="bind-9.11.36-8.el8_8.2.src.rpm">
          <filename>bind-utils-9.11.36-8.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">f2c9dd12ac5c9737593c6fac5b5b760c64798d5b7c0bbc645d0144585bd4cf48</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5537</id>
    <title>Important: libvpx security update</title>
    <issued date="2023-10-09 00:00:00"/>
    <updated date="2023-10-10 08:12:44"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libvpx security update</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

* libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)
* libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5537" id="RHSA-2023:5537" type="rhsa" title="RHSA-2023:5537"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44488" id="CVE-2023-44488" type="cve" title="CVE-2023-44488"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5217" id="CVE-2023-5217" type="cve" title="CVE-2023-5217"/>
      <reference href="https://bugzilla.redhat.com/2241191" id="2241191" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241806" id="2241806" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5537.html" id="ALSA-2023:5537" type="self" title="ALSA-2023:5537"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="libvpx" version="1.7.0" release="10.el8_8.alma.1" epoch="0" arch="s390x" src="libvpx-1.7.0-10.el8_8.alma.1.src.rpm">
          <filename>libvpx-1.7.0-10.el8_8.alma.1.s390x.rpm</filename>
          <sum type="sha256">09ecc1b7a6e9a79272b6a712956b0201dd9c3fc98eb03240144bf97b20207393</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5683</id>
    <title>Important: mariadb:10.5 security update</title>
    <issued date="2023-10-12 00:00:00"/>
    <updated date="2023-10-13 18:15:02"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mariadb:10.5 security update</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. 

The following packages have been upgraded to a later upstream version: galera
(26.4.14), mariadb (10.5.22).

Security Fix(es):

* mariadb: node crashes with Transport endpoint is not connected mysqld got signal 6 (CVE-2023-5157)
* mariadb: use-after-poison in prepare_inplace_add_virtual in handler0alter.cc (CVE-2022-32081)
* mariadb: assertion failure at table-&gt;get_ref_count() == 0 in dict0dict.cc (CVE-2022-32082)
* mariadb: segmentation fault via the component sub_select (CVE-2022-32084)
* mariadb: server crash in st_select_lex_unit::exclude_level (CVE-2022-32089)
* mariadb: server crash in JOIN_CACHE::free or in copy_fields (CVE-2022-32091)
* mariadb: compress_write() fails to release mutex on failure (CVE-2022-38791)
* mariadb: NULL pointer dereference in spider_db_mbase::print_warnings() (CVE-2022-47015)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5683" id="RHSA-2023:5683" type="rhsa" title="RHSA-2023:5683"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32081" id="CVE-2022-32081" type="cve" title="CVE-2022-32081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32082" id="CVE-2022-32082" type="cve" title="CVE-2022-32082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32084" id="CVE-2022-32084" type="cve" title="CVE-2022-32084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32089" id="CVE-2022-32089" type="cve" title="CVE-2022-32089"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32091" id="CVE-2022-32091" type="cve" title="CVE-2022-32091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38791" id="CVE-2022-38791" type="cve" title="CVE-2022-38791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-47015" id="CVE-2022-47015" type="cve" title="CVE-2022-47015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5157" id="CVE-2023-5157" type="cve" title="CVE-2023-5157"/>
      <reference href="https://bugzilla.redhat.com/2106028" id="2106028" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106030" id="2106030" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106034" id="2106034" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106035" id="2106035" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106042" id="2106042" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2130105" id="2130105" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2163609" id="2163609" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2240246" id="2240246" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5683.html" id="ALSA-2023:5683" type="self" title="ALSA-2023:5683"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="mariadb" stream="10.5" version="8060020220803092659" context="9edba152" arch="s390x"/>
        <package name="mariadb-embedded-devel" version="10.5.22" release="1.module_el8.8.0+3620+5d452900" epoch="3" arch="s390x" src="mariadb-10.5.22-1.module_el8.8.0+3620+5d452900.src.rpm">
          <filename>mariadb-embedded-devel-10.5.22-1.module_el8.8.0+3620+5d452900.s390x.rpm</filename>
          <sum type="sha256">174c3060329be3328d1e9f8fbf3d63bc8b160fde71bc3d2946c50c0b4b5253a5</sum>
        </package>
        <package name="galera" version="26.4.14" release="1.module_el8.8.0+3620+5d452900" epoch="0" arch="s390x" src="galera-26.4.14-1.module_el8.8.0+3620+5d452900.src.rpm">
          <filename>galera-26.4.14-1.module_el8.8.0+3620+5d452900.s390x.rpm</filename>
          <sum type="sha256">2c30f32ba77726914cc4410bb62686b5ae1892ee7ed592f5618c2eae2723a9d2</sum>
        </package>
        <package name="mariadb-gssapi-server" version="10.5.22" release="1.module_el8.8.0+3620+5d452900" epoch="3" arch="s390x" src="mariadb-10.5.22-1.module_el8.8.0+3620+5d452900.src.rpm">
          <filename>mariadb-gssapi-server-10.5.22-1.module_el8.8.0+3620+5d452900.s390x.rpm</filename>
          <sum type="sha256">5726fbc6e73ff185de8168f59759dee8c5b5871e82425791374ae11d9e85872b</sum>
        </package>
        <package name="Judy" version="1.0.5" release="18.module_el8.6.0+3139+3c630e87" epoch="0" arch="s390x" src="Judy-1.0.5-18.module_el8.6.0+3139+3c630e87.src.rpm">
          <filename>Judy-1.0.5-18.module_el8.6.0+3139+3c630e87.s390x.rpm</filename>
          <sum type="sha256">59dbe47a24dd747f379e9f6d5ffd2bc78e4a00761f786bda069dc504479a570e</sum>
        </package>
        <package name="mariadb-devel" version="10.5.22" release="1.module_el8.8.0+3620+5d452900" epoch="3" arch="s390x" src="mariadb-10.5.22-1.module_el8.8.0+3620+5d452900.src.rpm">
          <filename>mariadb-devel-10.5.22-1.module_el8.8.0+3620+5d452900.s390x.rpm</filename>
          <sum type="sha256">6335648d8f8f64c5aef9c56241941dd9f265446b0e68d8fe75699c6a170b2ce7</sum>
        </package>
        <package name="mariadb-test" version="10.5.22" release="1.module_el8.8.0+3620+5d452900" epoch="3" arch="s390x" src="mariadb-10.5.22-1.module_el8.8.0+3620+5d452900.src.rpm">
          <filename>mariadb-test-10.5.22-1.module_el8.8.0+3620+5d452900.s390x.rpm</filename>
          <sum type="sha256">667301749419a20bda1aea858c393d00f0ab35678dd860a25a08f6b36cc7a7c5</sum>
        </package>
        <package name="mariadb-server-utils" version="10.5.22" release="1.module_el8.8.0+3620+5d452900" epoch="3" arch="s390x" src="mariadb-10.5.22-1.module_el8.8.0+3620+5d452900.src.rpm">
          <filename>mariadb-server-utils-10.5.22-1.module_el8.8.0+3620+5d452900.s390x.rpm</filename>
          <sum type="sha256">6d007ad80a3bc882cfc3c6d958bef4cd91036761b1b93743f12918144f7455cc</sum>
        </package>
        <package name="mariadb-common" version="10.5.22" release="1.module_el8.8.0+3620+5d452900" epoch="3" arch="s390x" src="mariadb-10.5.22-1.module_el8.8.0+3620+5d452900.src.rpm">
          <filename>mariadb-common-10.5.22-1.module_el8.8.0+3620+5d452900.s390x.rpm</filename>
          <sum type="sha256">757a7b0df848e1663f2471f391db4318db8f0ef519af0aeeb5c4e748a826542b</sum>
        </package>
        <package name="mariadb-oqgraph-engine" version="10.5.22" release="1.module_el8.8.0+3620+5d452900" epoch="3" arch="s390x" src="mariadb-10.5.22-1.module_el8.8.0+3620+5d452900.src.rpm">
          <filename>mariadb-oqgraph-engine-10.5.22-1.module_el8.8.0+3620+5d452900.s390x.rpm</filename>
          <sum type="sha256">84001f43caa9e81cc9be2ab76d130cf06bb23477e66f576cbff097e30b52f7f7</sum>
        </package>
        <package name="mariadb" version="10.5.22" release="1.module_el8.8.0+3620+5d452900" epoch="3" arch="s390x" src="mariadb-10.5.22-1.module_el8.8.0+3620+5d452900.src.rpm">
          <filename>mariadb-10.5.22-1.module_el8.8.0+3620+5d452900.s390x.rpm</filename>
          <sum type="sha256">84279fbf1aea6731b4ef5a55cc4fe5a882a3919b9bff81e0d63aea5687b35e67</sum>
        </package>
        <package name="mariadb-server" version="10.5.22" release="1.module_el8.8.0+3620+5d452900" epoch="3" arch="s390x" src="mariadb-10.5.22-1.module_el8.8.0+3620+5d452900.src.rpm">
          <filename>mariadb-server-10.5.22-1.module_el8.8.0+3620+5d452900.s390x.rpm</filename>
          <sum type="sha256">aa292cc608df6e887aefa2545d6fb8a802594a187715287f71ae08a008321430</sum>
        </package>
        <package name="mariadb-errmsg" version="10.5.22" release="1.module_el8.8.0+3620+5d452900" epoch="3" arch="s390x" src="mariadb-10.5.22-1.module_el8.8.0+3620+5d452900.src.rpm">
          <filename>mariadb-errmsg-10.5.22-1.module_el8.8.0+3620+5d452900.s390x.rpm</filename>
          <sum type="sha256">aeb584d6fc586ac9b8625628e1792e1590d2f7c9edbede5da1f0465654e9fa95</sum>
        </package>
        <package name="mariadb-backup" version="10.5.22" release="1.module_el8.8.0+3620+5d452900" epoch="3" arch="s390x" src="mariadb-10.5.22-1.module_el8.8.0+3620+5d452900.src.rpm">
          <filename>mariadb-backup-10.5.22-1.module_el8.8.0+3620+5d452900.s390x.rpm</filename>
          <sum type="sha256">c590942e8d58cb8838b27ad3187187f131a9838944750ee4bb5f180c925fcdf7</sum>
        </package>
        <package name="mariadb-pam" version="10.5.22" release="1.module_el8.8.0+3620+5d452900" epoch="3" arch="s390x" src="mariadb-10.5.22-1.module_el8.8.0+3620+5d452900.src.rpm">
          <filename>mariadb-pam-10.5.22-1.module_el8.8.0+3620+5d452900.s390x.rpm</filename>
          <sum type="sha256">d20cdadd181b41f4f3951c64977c5775a097613ec899af2ddcaf1222800c7cf3</sum>
        </package>
        <package name="mariadb-embedded" version="10.5.22" release="1.module_el8.8.0+3620+5d452900" epoch="3" arch="s390x" src="mariadb-10.5.22-1.module_el8.8.0+3620+5d452900.src.rpm">
          <filename>mariadb-embedded-10.5.22-1.module_el8.8.0+3620+5d452900.s390x.rpm</filename>
          <sum type="sha256">deddaa569404bede7e8537052d649d7e7461c6a46f4a5cc9ea0c92883874caed</sum>
        </package>
        <package name="mariadb-server-galera" version="10.5.22" release="1.module_el8.8.0+3620+5d452900" epoch="3" arch="s390x" src="mariadb-10.5.22-1.module_el8.8.0+3620+5d452900.src.rpm">
          <filename>mariadb-server-galera-10.5.22-1.module_el8.8.0+3620+5d452900.s390x.rpm</filename>
          <sum type="sha256">df62546670ae0df592ad0a81920aa03deb3b106fed5a8722a54f5779c3eddf0a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5709</id>
    <title>Important: dotnet7.0 security update</title>
    <issued date="2023-10-16 00:00:00"/>
    <updated date="2023-10-17 11:22:42"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 7.0 to SDK 7.0.112 and Runtime 7.0.12.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5709" id="RHSA-2023:5709" type="rhsa" title="RHSA-2023:5709"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5709.html" id="ALSA-2023:5709" type="self" title="ALSA-2023:5709"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="dotnet-apphost-pack-7.0" version="7.0.12" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.112-1.el8_8.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.12-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">10562be1889dc6c835c2a454bdc927cd01149e99a90f64c40d95d7aabf179fb5</sum>
        </package>
        <package name="dotnet-host" version="7.0.12" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.112-1.el8_8.src.rpm">
          <filename>dotnet-host-7.0.12-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">12086af646c2a016e69865c15f505a9c2823ce10ec2fe56cefa6e9300fd431cb</sum>
        </package>
        <package name="aspnetcore-runtime-7.0" version="7.0.12" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.112-1.el8_8.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.12-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">35bc3149e5036c45a22e52de73ab95ed2b2356a523b9ec212ec4f7dee5e929cb</sum>
        </package>
        <package name="dotnet-targeting-pack-7.0" version="7.0.12" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.112-1.el8_8.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.12-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">4748cc0b8d07cbcfd5fe2c244bb20c9dce48fbd0ccd3962ae52cb2a3567f2adc</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="7.0.112" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.112-1.el8_8.src.rpm">
          <filename>netstandard-targeting-pack-2.1-7.0.112-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">573b5df2ea76904f45164e13a6ac64c51f8bbe38978ca8e6f8464f6b951090d8</sum>
        </package>
        <package name="dotnet-sdk-7.0" version="7.0.112" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.112-1.el8_8.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.112-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">78b1b225be422ffef2240949d10d192d5f7fb818652612a4cc391e277e04db3b</sum>
        </package>
        <package name="dotnet-hostfxr-7.0" version="7.0.12" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.112-1.el8_8.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.12-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">7d46ab61186b9a48737ca7c7efa3235a25bc00294d367c12e119d53259b8518a</sum>
        </package>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.12" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.112-1.el8_8.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.12-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">a7e6dd9a2753c764cd35fed31898d0de6a8c5ad2b82593c8bec2afd8d7469738</sum>
        </package>
        <package name="dotnet" version="7.0.112" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.112-1.el8_8.src.rpm">
          <filename>dotnet-7.0.112-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">bbba8dddcb3c2988cd23ded7758bc38222fd5c91840dc071cca858ee5e5779e8</sum>
        </package>
        <package name="dotnet-templates-7.0" version="7.0.112" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.112-1.el8_8.src.rpm">
          <filename>dotnet-templates-7.0-7.0.112-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">e5e5976005f3dc24298d2c06dd0c74fadbf99cd452902eb8f288f7da850a743b</sum>
        </package>
        <package name="dotnet-runtime-7.0" version="7.0.12" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.112-1.el8_8.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.12-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">ffa9118099aebcc5d472eac3ece811ae164817811391993d03327c76a02fcd39</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5710</id>
    <title>Important: dotnet6.0 security update</title>
    <issued date="2023-10-16 00:00:00"/>
    <updated date="2023-10-20 06:45:37"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 6.0 to SDK 6.0.123 and Runtime 6.0.23.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5710" id="RHSA-2023:5710" type="rhsa" title="RHSA-2023:5710"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5710.html" id="ALSA-2023:5710" type="self" title="ALSA-2023:5710"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="dotnet-templates-6.0" version="6.0.123" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.123-1.el8_8.src.rpm">
          <filename>dotnet-templates-6.0-6.0.123-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">4499b2d116f425532aacb870fa7ac16ddbb29d606dd9f4aae9939bdd7853bb1b</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.23" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.123-1.el8_8.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.23-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">45e565d91e570ddee277464a9b0809bccc5453eef2ac1026726b00a76fad8375</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.23" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.123-1.el8_8.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.23-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">4fa063a93216f862d2c683d0f7174c1c0f0b16e76874c019da7b1f32fb982fb6</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.23" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.123-1.el8_8.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.23-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">a1abfad623ddf25ded8bbf77dc5f6cbeed2cf4f7e06bdd5fce96bf018ca66c6d</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.23" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.123-1.el8_8.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.23-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">ab97338c4f6252d1d61d5a5bc225cf14c9dcfec971284c18299d98cc5ff75940</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.123" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.123-1.el8_8.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.123-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">acb79da09057add146a2eff77631d4683d4a7d68dfce620cdbf0a96f7ea84583</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.23" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.123-1.el8_8.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.23-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">c4395e8882accab171cfb6d2eb68a1350b47019f131e4f05944b717edea2e1cf</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.23" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.123-1.el8_8.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.23-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">caa862e26358eb1aafdd26fbb3c65353345518471061e8ebd5cd07ee50e441b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5712</id>
    <title>Moderate: nginx:1.20 security update</title>
    <issued date="2023-10-16 00:00:00"/>
    <updated date="2023-10-23 07:15:05"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nginx:1.20 security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. 

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5712" id="RHSA-2023:5712" type="rhsa" title="RHSA-2023:5712"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5712.html" id="ALSA-2023:5712" type="self" title="ALSA-2023:5712"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="nginx" stream="1.20" version="8080020231017064931" context="9edba152" arch="s390x"/>
        <package name="nginx-mod-stream" version="1.20.1" release="1.module_el8.8.0+3624+abf02be4.1.alma.1" epoch="1" arch="s390x" src="nginx-1.20.1-1.module_el8.8.0+3624+abf02be4.1.alma.1.src.rpm">
          <filename>nginx-mod-stream-1.20.1-1.module_el8.8.0+3624+abf02be4.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">156cfbe3d31e37fdd073f07c1730537a886a0abfc898590c0bdc2e8668575fda</sum>
        </package>
        <package name="nginx-mod-mail" version="1.20.1" release="1.module_el8.8.0+3624+abf02be4.1.alma.1" epoch="1" arch="s390x" src="nginx-1.20.1-1.module_el8.8.0+3624+abf02be4.1.alma.1.src.rpm">
          <filename>nginx-mod-mail-1.20.1-1.module_el8.8.0+3624+abf02be4.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">2914ebd3e00bc0e365ec7645e9b0f5db919142af59cb268765253c154a775cc5</sum>
        </package>
        <package name="nginx-mod-devel" version="1.20.1" release="1.module_el8.8.0+3624+abf02be4.1.alma.1" epoch="1" arch="s390x" src="nginx-1.20.1-1.module_el8.8.0+3624+abf02be4.1.alma.1.src.rpm">
          <filename>nginx-mod-devel-1.20.1-1.module_el8.8.0+3624+abf02be4.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">2d0fdc8bd975e35fab9033c5af729e386e78da7eac156d5d7b225e62193630d8</sum>
        </package>
        <package name="nginx" version="1.20.1" release="1.module_el8.8.0+3624+abf02be4.1.alma.1" epoch="1" arch="s390x" src="nginx-1.20.1-1.module_el8.8.0+3624+abf02be4.1.alma.1.src.rpm">
          <filename>nginx-1.20.1-1.module_el8.8.0+3624+abf02be4.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">3d16e704567975a89e60156f5cfacc86722adcf404bc59b6128f1a3705aee3d5</sum>
        </package>
        <package name="nginx-mod-http-perl" version="1.20.1" release="1.module_el8.8.0+3624+abf02be4.1.alma.1" epoch="1" arch="s390x" src="nginx-1.20.1-1.module_el8.8.0+3624+abf02be4.1.alma.1.src.rpm">
          <filename>nginx-mod-http-perl-1.20.1-1.module_el8.8.0+3624+abf02be4.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">a70d2b85df137b2e88f12fe40024bb02475e187af73d6138faffc63d6fd9ae82</sum>
        </package>
        <package name="nginx-all-modules" version="1.20.1" release="1.module_el8.8.0+3624+abf02be4.1.alma.1" epoch="1" arch="noarch" src="nginx-1.20.1-1.module_el8.8.0+3624+abf02be4.1.alma.1.src.rpm">
          <filename>nginx-all-modules-1.20.1-1.module_el8.8.0+3624+abf02be4.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">bf647384a030eb26027faac4f68354de2da684dd53716bc0421bf8012e66d29c</sum>
        </package>
        <package name="nginx-mod-http-xslt-filter" version="1.20.1" release="1.module_el8.8.0+3624+abf02be4.1.alma.1" epoch="1" arch="s390x" src="nginx-1.20.1-1.module_el8.8.0+3624+abf02be4.1.alma.1.src.rpm">
          <filename>nginx-mod-http-xslt-filter-1.20.1-1.module_el8.8.0+3624+abf02be4.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">c213e059bf51b60ecfb0141d721adf3608f47789d8521c4ebffc3fcebe3b1888</sum>
        </package>
        <package name="nginx-mod-http-image-filter" version="1.20.1" release="1.module_el8.8.0+3624+abf02be4.1.alma.1" epoch="1" arch="s390x" src="nginx-1.20.1-1.module_el8.8.0+3624+abf02be4.1.alma.1.src.rpm">
          <filename>nginx-mod-http-image-filter-1.20.1-1.module_el8.8.0+3624+abf02be4.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">e0a25ba4524e0db4037ac1aa3113390a164a81f9ed49dd97e9b2cd9e5f7ae96e</sum>
        </package>
        <package name="nginx-filesystem" version="1.20.1" release="1.module_el8.8.0+3624+abf02be4.1.alma.1" epoch="1" arch="noarch" src="nginx-1.20.1-1.module_el8.8.0+3624+abf02be4.1.alma.1.src.rpm">
          <filename>nginx-filesystem-1.20.1-1.module_el8.8.0+3624+abf02be4.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">e8e06deae2e40887bee906cbf67828b01d490a4f2bef70443e2a8c31b4b55b2f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5713</id>
    <title>Moderate: nginx:1.22 security update</title>
    <issued date="2023-10-16 00:00:00"/>
    <updated date="2023-10-17 11:05:23"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nginx:1.22 security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. 

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5713" id="RHSA-2023:5713" type="rhsa" title="RHSA-2023:5713"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5713.html" id="ALSA-2023:5713" type="self" title="ALSA-2023:5713"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="nginx" stream="1.22" version="8080020231017064907" context="9edba152" arch="s390x"/>
        <package name="nginx-mod-http-xslt-filter" version="1.22.1" release="1.module_el8.8.0+3623+f96e6422.1.alma.1" epoch="1" arch="s390x" src="nginx-1.22.1-1.module_el8.8.0+3623+f96e6422.1.alma.1.src.rpm">
          <filename>nginx-mod-http-xslt-filter-1.22.1-1.module_el8.8.0+3623+f96e6422.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">061ff2271b4ca8ee6c07612d51c170cf7dfab46e8f685dea47e044acfa0b1435</sum>
        </package>
        <package name="nginx-mod-stream" version="1.22.1" release="1.module_el8.8.0+3623+f96e6422.1.alma.1" epoch="1" arch="s390x" src="nginx-1.22.1-1.module_el8.8.0+3623+f96e6422.1.alma.1.src.rpm">
          <filename>nginx-mod-stream-1.22.1-1.module_el8.8.0+3623+f96e6422.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">240a21a5553b0c0f19a453a96e4c8d798a0a178bda5bc2042eec8a30e5c91b5c</sum>
        </package>
        <package name="nginx-mod-http-image-filter" version="1.22.1" release="1.module_el8.8.0+3623+f96e6422.1.alma.1" epoch="1" arch="s390x" src="nginx-1.22.1-1.module_el8.8.0+3623+f96e6422.1.alma.1.src.rpm">
          <filename>nginx-mod-http-image-filter-1.22.1-1.module_el8.8.0+3623+f96e6422.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">2c5eed33b5d6d6233b7e2eaaacd03cf59e85c601e782ef23d734f5d3a06cdf40</sum>
        </package>
        <package name="nginx-mod-mail" version="1.22.1" release="1.module_el8.8.0+3623+f96e6422.1.alma.1" epoch="1" arch="s390x" src="nginx-1.22.1-1.module_el8.8.0+3623+f96e6422.1.alma.1.src.rpm">
          <filename>nginx-mod-mail-1.22.1-1.module_el8.8.0+3623+f96e6422.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">3625409347e5a6414fe218a0ec9e7a68444831cd9d3512dab24b7019ee97bc8e</sum>
        </package>
        <package name="nginx-mod-http-perl" version="1.22.1" release="1.module_el8.8.0+3623+f96e6422.1.alma.1" epoch="1" arch="s390x" src="nginx-1.22.1-1.module_el8.8.0+3623+f96e6422.1.alma.1.src.rpm">
          <filename>nginx-mod-http-perl-1.22.1-1.module_el8.8.0+3623+f96e6422.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">3d629be0a7e19c80da59e4909adc08986961500089c523a1013b886bb0a3c4f0</sum>
        </package>
        <package name="nginx-filesystem" version="1.22.1" release="1.module_el8.8.0+3623+f96e6422.1.alma.1" epoch="1" arch="noarch" src="nginx-1.22.1-1.module_el8.8.0+3623+f96e6422.1.alma.1.src.rpm">
          <filename>nginx-filesystem-1.22.1-1.module_el8.8.0+3623+f96e6422.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">70778d0027306eba4485f388a9025c8899e4b6b93932e1a897e78ffed59145f4</sum>
        </package>
        <package name="nginx-all-modules" version="1.22.1" release="1.module_el8.8.0+3623+f96e6422.1.alma.1" epoch="1" arch="noarch" src="nginx-1.22.1-1.module_el8.8.0+3623+f96e6422.1.alma.1.src.rpm">
          <filename>nginx-all-modules-1.22.1-1.module_el8.8.0+3623+f96e6422.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">92403518d2ed3bde3573db0069874267ba9c58c6b12a382e820ebc2834983bc3</sum>
        </package>
        <package name="nginx" version="1.22.1" release="1.module_el8.8.0+3623+f96e6422.1.alma.1" epoch="1" arch="s390x" src="nginx-1.22.1-1.module_el8.8.0+3623+f96e6422.1.alma.1.src.rpm">
          <filename>nginx-1.22.1-1.module_el8.8.0+3623+f96e6422.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">a02c6c3d8e2eb64d508f53c0578e748cfe942bc60b5341c04ca541662a8c3e18</sum>
        </package>
        <package name="nginx-mod-devel" version="1.22.1" release="1.module_el8.8.0+3623+f96e6422.1.alma.1" epoch="1" arch="s390x" src="nginx-1.22.1-1.module_el8.8.0+3623+f96e6422.1.alma.1.src.rpm">
          <filename>nginx-mod-devel-1.22.1-1.module_el8.8.0+3623+f96e6422.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">adb3451f69c9cf5b05f556c023e18f60e851d0bb56362b4a6d7e15e2250cdb84</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5721</id>
    <title>Important: go-toolset:rhel8 security update</title>
    <issued date="2023-10-16 00:00:00"/>
    <updated date="2023-10-17 10:46:52"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>go-toolset:rhel8 security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. 

Security Fix(es):

* golang: net/http, x/net/http2: rapid stream resets can cause excessive work [CVE-2023-44487] (CVE-2023-39325)
* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5721" id="RHSA-2023:5721" type="rhsa" title="RHSA-2023:5721"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39325" id="CVE-2023-39325" type="cve" title="CVE-2023-39325"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243296" id="2243296" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5721.html" id="ALSA-2023:5721" type="self" title="ALSA-2023:5721"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="go-toolset" stream="rhel8" version="8080020231017065418" context="9edba152" arch="s390x"/>
        <package name="golang-src" version="1.19.13" release="1.module_el8.8.0+3625+a06035cf" epoch="0" arch="noarch" src="golang-1.19.13-1.module_el8.8.0+3625+a06035cf.src.rpm">
          <filename>golang-src-1.19.13-1.module_el8.8.0+3625+a06035cf.noarch.rpm</filename>
          <sum type="sha256">34a5c4f1a214bdf59275050135043b427cabd5afdc722c5d32786074daeb19c3</sum>
        </package>
        <package name="golang-misc" version="1.19.13" release="1.module_el8.8.0+3625+a06035cf" epoch="0" arch="noarch" src="golang-1.19.13-1.module_el8.8.0+3625+a06035cf.src.rpm">
          <filename>golang-misc-1.19.13-1.module_el8.8.0+3625+a06035cf.noarch.rpm</filename>
          <sum type="sha256">37c94e3103e1e1d09e98fd782d304b2c522449bbcad45c8bf2b2d1ec3527324b</sum>
        </package>
        <package name="golang-tests" version="1.19.13" release="1.module_el8.8.0+3625+a06035cf" epoch="0" arch="noarch" src="golang-1.19.13-1.module_el8.8.0+3625+a06035cf.src.rpm">
          <filename>golang-tests-1.19.13-1.module_el8.8.0+3625+a06035cf.noarch.rpm</filename>
          <sum type="sha256">9034ab467c4923424ace0ae804a9111010560a7c9f49d35529381fc9ca21d8e3</sum>
        </package>
        <package name="go-toolset" version="1.19.13" release="1.module_el8.8.0+3625+a06035cf" epoch="0" arch="s390x" src="go-toolset-1.19.13-1.module_el8.8.0+3625+a06035cf.src.rpm">
          <filename>go-toolset-1.19.13-1.module_el8.8.0+3625+a06035cf.s390x.rpm</filename>
          <sum type="sha256">9a73aa21c4b5469a5d29b9b5f65dc467ce27b161735ca06e188ca4153e412dcd</sum>
        </package>
        <package name="golang-docs" version="1.19.13" release="1.module_el8.8.0+3625+a06035cf" epoch="0" arch="noarch" src="golang-1.19.13-1.module_el8.8.0+3625+a06035cf.src.rpm">
          <filename>golang-docs-1.19.13-1.module_el8.8.0+3625+a06035cf.noarch.rpm</filename>
          <sum type="sha256">ed86c0fd6696b5159c9b7f8dc9e46c14b2a2d73d008954aec30f6094e0e53241</sum>
        </package>
        <package name="golang-bin" version="1.19.13" release="1.module_el8.8.0+3625+a06035cf" epoch="0" arch="s390x" src="golang-1.19.13-1.module_el8.8.0+3625+a06035cf.src.rpm">
          <filename>golang-bin-1.19.13-1.module_el8.8.0+3625+a06035cf.s390x.rpm</filename>
          <sum type="sha256">ee34cc1e755206e747bcf221adfa5b00ce4f63c0481d6991a12199ca29ed3e3d</sum>
        </package>
        <package name="golang" version="1.19.13" release="1.module_el8.8.0+3625+a06035cf" epoch="0" arch="s390x" src="golang-1.19.13-1.module_el8.8.0+3625+a06035cf.src.rpm">
          <filename>golang-1.19.13-1.module_el8.8.0+3625+a06035cf.s390x.rpm</filename>
          <sum type="sha256">fc76a9cd4b7cf835cf40c4faf7f3ae1c22c8ed4f9525d548843b6e96f49572c2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5731</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-20 14:50:08"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: segmentation fault in ciMethodBlocks (CVE-2022-40433)
* OpenJDK: IOR deserialization issue in CORBA (8303384) (CVE-2023-22067)
* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 8u382 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 8u392, increases it to 16 MB. (AlmaLinux-13635)
* The /usr/bin/jfr alternative is now owned by the java-1.8.0-openjdk package (AlmaLinux-13641)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5731" id="RHSA-2023:5731" type="rhsa" title="RHSA-2023:5731"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40433" id="CVE-2022-40433" type="cve" title="CVE-2022-40433"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22067" id="CVE-2023-22067" type="cve" title="CVE-2023-22067"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22081" id="CVE-2023-22081" type="cve" title="CVE-2023-22081"/>
      <reference href="https://bugzilla.redhat.com/2237709" id="2237709" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243627" id="2243627" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243637" id="2243637" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5731.html" id="ALSA-2023:5731" type="self" title="ALSA-2023:5731"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.392.b08" release="4.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.392.b08-4.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.392.b08-4.el8.s390x.rpm</filename>
          <sum type="sha256">5051d6af06896b7d83723b07513f4e397b3762c9e2497e58676fb365b96ea18f</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.392.b08" release="4.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.392.b08-4.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.392.b08-4.el8.noarch.rpm</filename>
          <sum type="sha256">586c76317dee37443b85d5358a42178112e1a58b35fe4def17245ca3623a5e20</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.392.b08" release="4.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.392.b08-4.el8.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.392.b08-4.el8.s390x.rpm</filename>
          <sum type="sha256">7749a42b2de6fcb0df0ef5fd56c0683d72cf841457bc27c180d067bd2c9869a1</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.392.b08" release="4.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.392.b08-4.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.392.b08-4.el8.s390x.rpm</filename>
          <sum type="sha256">90843c6dfc41ebc1dcc1f5042f311737b62ef7ef39a7c07f0ac91d790dc86cc6</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.392.b08" release="4.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.392.b08-4.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.392.b08-4.el8.noarch.rpm</filename>
          <sum type="sha256">a1273c52bf9db7eb41a84db9cd015eeae46711a2d674f12ad3fc7ede14bf4061</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.392.b08" release="4.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.392.b08-4.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.392.b08-4.el8.s390x.rpm</filename>
          <sum type="sha256">a357f984d138f0ac186ea171d04eecb831fb7625c52b93000adf8f030bbc0e3a</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility" version="1.8.0.392.b08" release="4.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.392.b08-4.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-1.8.0.392.b08-4.el8.s390x.rpm</filename>
          <sum type="sha256">afd8b2ce08b31a67280e305e1831cd0d28b4c755eb2b92d4a4fc3c7d1de05710</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.392.b08" release="4.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.392.b08-4.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.392.b08-4.el8.s390x.rpm</filename>
          <sum type="sha256">c57c152152628c0886622d7f6993cba734a02fc7faf73c4518e9e828178797f4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5742</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-20 14:22:54"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 11.0.20 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 11.0.20.1, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true. (RHBZ#2237170)
* A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 11.0.20 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 11.0.20.1, increases it to 16 MB.
* The serviceability agent would print an exception when encountering null addresses while producing thread dumps. These null values are now handled appropriately. (JDK-8243210, AlmaLinux-2763)
* The /usr/bin/jfr alternative is now owned by the java-11-openjdk package (AlmaLinux-13559)
* The jcmd tool is now provided by the java-11-openjdk-headless package, rather than java-11-openjdk-devel, to make it more accessible (AlmaLinux-13566)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5742" id="RHSA-2023:5742" type="rhsa" title="RHSA-2023:5742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22081" id="CVE-2023-22081" type="cve" title="CVE-2023-22081"/>
      <reference href="https://bugzilla.redhat.com/2243627" id="2243627" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5742.html" id="ALSA-2023:5742" type="self" title="ALSA-2023:5742"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="java-11-openjdk" version="11.0.21.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-11.0.21.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">094981173868c748a6847defc0b95c7fc052844fb90e9a10ecde6ca3da2148f4</sum>
        </package>
        <package name="java-11-openjdk-jmods" version="11.0.21.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-jmods-11.0.21.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">3a37582cc6896fbc5571942ab7f86e6005de7f9edf208ddad4e55655a27e13a9</sum>
        </package>
        <package name="java-11-openjdk-src" version="11.0.21.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-src-11.0.21.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">619d57f8a182da5dfa3045c0c3e92c26e337d1f1ab2c597d3ca79cd071ab209c</sum>
        </package>
        <package name="java-11-openjdk-static-libs" version="11.0.21.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-static-libs-11.0.21.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">a80f089acfead08d25e2b59cbd9a53216259375e0433e2883360ad6d79ff0832</sum>
        </package>
        <package name="java-11-openjdk-demo" version="11.0.21.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-demo-11.0.21.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">bde0483d2f04aac8ff26825ba7fe31f93590436e6fdf37cc9762846c55240978</sum>
        </package>
        <package name="java-11-openjdk-devel" version="11.0.21.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-devel-11.0.21.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">c7738dd9145dcb8afdb93c9a5eea2de8db3e5b97e75dea96d0ca277cd5999817</sum>
        </package>
        <package name="java-11-openjdk-headless" version="11.0.21.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-headless-11.0.21.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">dfe92f52880f795f1667b1d29bdc5407fdaa3785958322943111fd3193bf9d8d</sum>
        </package>
        <package name="java-11-openjdk-javadoc" version="11.0.21.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-javadoc-11.0.21.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">eb8429413ea244b8f8099f3df85d7331fe83f1d226bbc85325c942b9f0674d3c</sum>
        </package>
        <package name="java-11-openjdk-javadoc-zip" version="11.0.21.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-javadoc-zip-11.0.21.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">f2bc554910aead68b76f36c88eb3e1bb5b03b1d42699c69959fd80d364ddc016</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5751</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-20 13:54:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: memory corruption issue on x86_64 with AVX-512 (8317121) (CVE-2023-22025)
* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 17.0.8 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 17.0.9, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true. (RHBZ#2237178)
* The /usr/bin/jfr alternative is now owned by the java-17-openjdk package (AlmaLinux-13708)
* The jcmd tool is now provided by the java-17-openjdk-headless package, rather than java-17-openjdk-devel, to make it more accessible (AlmaLinux-13658)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5751" id="RHSA-2023:5751" type="rhsa" title="RHSA-2023:5751"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22025" id="CVE-2023-22025" type="cve" title="CVE-2023-22025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22081" id="CVE-2023-22081" type="cve" title="CVE-2023-22081"/>
      <reference href="https://bugzilla.redhat.com/2243627" id="2243627" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243805" id="2243805" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5751.html" id="ALSA-2023:5751" type="self" title="ALSA-2023:5751"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="java-17-openjdk-static-libs" version="17.0.9.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.9.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">033af7ad2cd0456d3774447206d8215e33b6c3f2b3f6e9e2f940de338248aae2</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.9.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-17.0.9.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">1519049fdc5f36a6cb9a435a3a996ed8988118106b74687a27e81e30697f5c1e</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.9.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.9.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">4a84e8043619b06013754af58323bc9c4d176128af1cb8a2819050f4a8a834d3</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.9.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.9.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">857142a502c378f8329359342608713d20a8bbba89cf00adce8722e966bf5548</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.9.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-17.0.9.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">938d1dd26585827e1c11d186aa6848d17e70529adbddb6c4e706094afe583114</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.9.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-17.0.9.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">a23b264755609b124da0f3ca56897a3550aff75a240d58caab049e2aba1b8ee1</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.9.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.9.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">ad606d67d6af9f6b49cbd2a2e84588f146a0f1edf76a2ee15cafef6f13790307</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.9.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-17.0.9.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">add98245fe496d1852107d23242957cf0261ee6b52866668a353f5eec64b5dc7</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.9.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-src-17.0.9.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">f6ea0e5d3affb85f2c0192cf31c2fd4a2b0ac69a5a5d486589aa193b0b7a843b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5790</id>
    <title>Important: python-reportlab security update</title>
    <issued date="2023-10-17 00:00:00"/>
    <updated date="2023-10-18 18:52:58"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python-reportlab security update</summary>
    <description>Python-reportlab is a library used for generation of PDF documents.

Security Fix(es):

* python-reportlab: code injection in paraparser.py allows code execution (CVE-2019-19450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5790" id="RHSA-2023:5790" type="rhsa" title="RHSA-2023:5790"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-19450" id="CVE-2019-19450" type="cve" title="CVE-2019-19450"/>
      <reference href="https://bugzilla.redhat.com/2239920" id="2239920" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5790.html" id="ALSA-2023:5790" type="self" title="ALSA-2023:5790"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="python3-reportlab" version="3.4.0" release="8.el8_8.1.alma.1" epoch="0" arch="s390x" src="python-reportlab-3.4.0-8.el8_8.1.alma.1.src.rpm">
          <filename>python3-reportlab-3.4.0-8.el8_8.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">c44ad23b7f059ed31fa0294276335901ebe7c3250b1d3bbbc13e14b7d8989131</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5850</id>
    <title>Important: nodejs:16 security update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-19 14:20:28"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:16 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5850" id="RHSA-2023:5850" type="rhsa" title="RHSA-2023:5850"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5850.html" id="ALSA-2023:5850" type="self" title="ALSA-2023:5850"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="nodejs" stream="16" version="8080020231019062924" context="9edba152" arch="s390x"/>
        <package name="nodejs" version="16.20.2" release="3.module_el8.8.0+3653+c77a731f" epoch="1" arch="s390x" src="nodejs-16.20.2-3.module_el8.8.0+3653+c77a731f.src.rpm">
          <filename>nodejs-16.20.2-3.module_el8.8.0+3653+c77a731f.s390x.rpm</filename>
          <sum type="sha256">1404a9d011db24dd1def02f81d80f5c8a3b035477ff13db76fe8d76c4c9cdf66</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.8.0+3614+204d6f43" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.8.0+3614+204d6f43.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.8.0+3614+204d6f43.noarch.rpm</filename>
          <sum type="sha256">2b8db0b6778841b5b0d2e3e86ff1391c8b370f251408760a942901ec43e8c298</sum>
        </package>
        <package name="nodejs-docs" version="16.20.2" release="3.module_el8.8.0+3653+c77a731f" epoch="1" arch="noarch" src="nodejs-16.20.2-3.module_el8.8.0+3653+c77a731f.src.rpm">
          <filename>nodejs-docs-16.20.2-3.module_el8.8.0+3653+c77a731f.noarch.rpm</filename>
          <sum type="sha256">3206285f73bb4737da1c92328820995ce6c07245ef82e67293114e8a419fa42f</sum>
        </package>
        <package name="nodejs-packaging" version="26" release="1.module_el8.8.0+3614+204d6f43" epoch="0" arch="noarch" src="nodejs-packaging-26-1.module_el8.8.0+3614+204d6f43.src.rpm">
          <filename>nodejs-packaging-26-1.module_el8.8.0+3614+204d6f43.noarch.rpm</filename>
          <sum type="sha256">55ff8b1958f44d03607bb59c4e3229e1bc8b05fa82bcc87babfe8f2b25c1c841</sum>
        </package>
        <package name="nodejs-full-i18n" version="16.20.2" release="3.module_el8.8.0+3653+c77a731f" epoch="1" arch="s390x" src="nodejs-16.20.2-3.module_el8.8.0+3653+c77a731f.src.rpm">
          <filename>nodejs-full-i18n-16.20.2-3.module_el8.8.0+3653+c77a731f.s390x.rpm</filename>
          <sum type="sha256">92ab6b52b77e3827b3491d7c1aca6fa917dde73df98e27e94847e627a9a6e872</sum>
        </package>
        <package name="npm" version="8.19.4" release="1.16.20.2.3.module_el8.8.0+3653+c77a731f" epoch="1" arch="s390x" src="nodejs-16.20.2-3.module_el8.8.0+3653+c77a731f.src.rpm">
          <filename>npm-8.19.4-1.16.20.2.3.module_el8.8.0+3653+c77a731f.s390x.rpm</filename>
          <sum type="sha256">bbff7aecdb5d092d3bef0b0c9dff8f678a505f21161d334206196313544ff5ed</sum>
        </package>
        <package name="nodejs-devel" version="16.20.2" release="3.module_el8.8.0+3653+c77a731f" epoch="1" arch="s390x" src="nodejs-16.20.2-3.module_el8.8.0+3653+c77a731f.src.rpm">
          <filename>nodejs-devel-16.20.2-3.module_el8.8.0+3653+c77a731f.s390x.rpm</filename>
          <sum type="sha256">ebadd860f64c54cec893bc65a688ae44048c08bdfecf16613019b9b1100869de</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5863</id>
    <title>Moderate: grafana security update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-19 14:58:07"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.

Security Fix(es):

* grafana: golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325)
* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

A AlmaLinux Security Bulletin which addresses further details about this flaw is available in the References section.

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5863" id="RHSA-2023:5863" type="rhsa" title="RHSA-2023:5863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39325" id="CVE-2023-39325" type="cve" title="CVE-2023-39325"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243296" id="2243296" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5863.html" id="ALSA-2023:5863" type="self" title="ALSA-2023:5863"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="grafana" version="7.5.15" release="5.el8_8.alma.1" epoch="0" arch="s390x" src="grafana-7.5.15-5.el8_8.alma.1.src.rpm">
          <filename>grafana-7.5.15-5.el8_8.alma.1.s390x.rpm</filename>
          <sum type="sha256">9a8b319eedc9291db41b655b48955e8a89ad3e444105c9355c0b4e951d7b6e58</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5869</id>
    <title>Important: nodejs:18 security update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-19 15:44:30"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:18 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

A AlmaLinux Security Bulletin which addresses further details about this flaw is available in the References section.

* nodejs: integrity checks according to policies can be circumvented (CVE-2023-38552)
* nodejs: code injection via WebAssembly export names (CVE-2023-39333)
* node-undici: cookie leakage (CVE-2023-45143)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5869" id="RHSA-2023:5869" type="rhsa" title="RHSA-2023:5869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38552" id="CVE-2023-38552" type="cve" title="CVE-2023-38552"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39333" id="CVE-2023-39333" type="cve" title="CVE-2023-39333"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45143" id="CVE-2023-45143" type="cve" title="CVE-2023-45143"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244104" id="2244104" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244415" id="2244415" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244418" id="2244418" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5869.html" id="ALSA-2023:5869" type="self" title="ALSA-2023:5869"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="nodejs" stream="18" version="8080020231019054927" context="9edba152" arch="s390x"/>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.8.0+3613+1ed8c91d" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.8.0+3613+1ed8c91d.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.8.0+3613+1ed8c91d.noarch.rpm</filename>
          <sum type="sha256">1de153a1170baeaa24f02ebd86d32d508ac48ea9ed54e2a70c5250a81952a65b</sum>
        </package>
        <package name="nodejs-devel" version="18.18.2" release="1.module_el8.8.0+3652+0e111ba0" epoch="1" arch="s390x" src="nodejs-18.18.2-1.module_el8.8.0+3652+0e111ba0.src.rpm">
          <filename>nodejs-devel-18.18.2-1.module_el8.8.0+3652+0e111ba0.s390x.rpm</filename>
          <sum type="sha256">3b9c93a65cfd7caec05caf3118305732c1b7eae6c4b4d64ef1aafa0d43b1c327</sum>
        </package>
        <package name="nodejs" version="18.18.2" release="1.module_el8.8.0+3652+0e111ba0" epoch="1" arch="s390x" src="nodejs-18.18.2-1.module_el8.8.0+3652+0e111ba0.src.rpm">
          <filename>nodejs-18.18.2-1.module_el8.8.0+3652+0e111ba0.s390x.rpm</filename>
          <sum type="sha256">40a4359f9996ea393c2cbcac0db10aebe989502262ea0193fa4836acff689c25</sum>
        </package>
        <package name="nodejs-full-i18n" version="18.18.2" release="1.module_el8.8.0+3652+0e111ba0" epoch="1" arch="s390x" src="nodejs-18.18.2-1.module_el8.8.0+3652+0e111ba0.src.rpm">
          <filename>nodejs-full-i18n-18.18.2-1.module_el8.8.0+3652+0e111ba0.s390x.rpm</filename>
          <sum type="sha256">5cfcdc347516505d5cdb50522976c16081177f468441b04fb4b0c2fd1d38ff58</sum>
        </package>
        <package name="nodejs-docs" version="18.18.2" release="1.module_el8.8.0+3652+0e111ba0" epoch="1" arch="noarch" src="nodejs-18.18.2-1.module_el8.8.0+3652+0e111ba0.src.rpm">
          <filename>nodejs-docs-18.18.2-1.module_el8.8.0+3652+0e111ba0.noarch.rpm</filename>
          <sum type="sha256">6fec2683c346724c612290622fc4b607b609b6cebdaec32ffb1a63729eee4993</sum>
        </package>
        <package name="npm" version="9.8.1" release="1.18.18.2.1.module_el8.8.0+3652+0e111ba0" epoch="1" arch="s390x" src="nodejs-18.18.2-1.module_el8.8.0+3652+0e111ba0.src.rpm">
          <filename>npm-9.8.1-1.18.18.2.1.module_el8.8.0+3652+0e111ba0.s390x.rpm</filename>
          <sum type="sha256">8eede94cb565176770f937d4c0e40574adcd8a1b65d7160a3bd17fccda833317</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el8.7.0+3343+ea2b7901" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.noarch.rpm</filename>
          <sum type="sha256">9430d44c78a3cfbe1ae3d39b8531f651606661943959bc0c3de87b2f91ea6f67</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el8.7.0+3343+ea2b7901" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el8.7.0+3343+ea2b7901.noarch.rpm</filename>
          <sum type="sha256">dca36d100028686323583aeddaa86efff902ff7fe29cb97d4356c309e3e899d9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5927</id>
    <title>Important: php:8.0 security update</title>
    <issued date="2023-10-19 00:00:00"/>
    <updated date="2023-10-20 08:26:24"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>php:8.0 security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

* php: XML loading external entity without being enabled (CVE-2023-3823)
* php: phar Buffer mismanagement (CVE-2023-3824)
* php: 1-byte array overrun in common path resolve code (CVE-2023-0568)
* php: DoS vulnerability when parsing multipart request body (CVE-2023-0662)
* php: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP (CVE-2023-3247)
* php: Password_verify() always return true with some hash (CVE-2023-0567)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5927" id="RHSA-2023:5927" type="rhsa" title="RHSA-2023:5927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0567" id="CVE-2023-0567" type="cve" title="CVE-2023-0567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0568" id="CVE-2023-0568" type="cve" title="CVE-2023-0568"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0662" id="CVE-2023-0662" type="cve" title="CVE-2023-0662"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3247" id="CVE-2023-3247" type="cve" title="CVE-2023-3247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3823" id="CVE-2023-3823" type="cve" title="CVE-2023-3823"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3824" id="CVE-2023-3824" type="cve" title="CVE-2023-3824"/>
      <reference href="https://bugzilla.redhat.com/2170761" id="2170761" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170770" id="2170770" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170771" id="2170771" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219290" id="2219290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2229396" id="2229396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2230101" id="2230101" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5927.html" id="ALSA-2023:5927" type="self" title="ALSA-2023:5927"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="php" stream="8.0" version="8060020220701053234" context="4c984ee0" arch="s390x"/>
        <package name="php-snmp" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-snmp-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">0a079b403ed3f529827251a9d87d916d45224796d2c5ef515fde7a25edaa683b</sum>
        </package>
        <package name="php-pecl-rrd" version="2.0.3" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="php-pecl-rrd-2.0.3-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>php-pecl-rrd-2.0.3-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">1815b836403954c7082e11cd6249dc3342bd651cc381b3f165c199c6a22b203d</sum>
        </package>
        <package name="php-ffi" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-ffi-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">20832c5f5220b01c63bb79b0bd5418a750e288e8f28cbc2c2793134921d3a5e2</sum>
        </package>
        <package name="php-common" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-common-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">22693e3fb90b5dff32efef4257d5424e4c444c2aa0b5463f3080641b78c6e517</sum>
        </package>
        <package name="php-mbstring" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-mbstring-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">24be165a9f1c7155f924a14bedfc2f8181a928aaa54b39438ee14abd17d19f8c</sum>
        </package>
        <package name="php-soap" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-soap-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">282adea4e280b357217ffd9a990077f56c69f2441f0c486a591945347ae813aa</sum>
        </package>
        <package name="php-enchant" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-enchant-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">31b928e183a2687aa7f062fdc928b34fb61e50ca46966ed1617161f83e1e52ff</sum>
        </package>
        <package name="php-embedded" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-embedded-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">35ffcf35fe58881e7b627c60facd78317b80b271e4da17b3f5dfddd601ce6b35</sum>
        </package>
        <package name="php-pdo" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-pdo-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">445daf7a6ecd3ffa7840bdcd869142692e2216340ecd014f7ad724a62dcfc133</sum>
        </package>
        <package name="php-dba" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-dba-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">47ed9489a623e01539bd1f69dc9ab13dbc1b2d110f43c82087fe376066ec2410</sum>
        </package>
        <package name="php-devel" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-devel-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">50abaa7a964e48f083fc33af4619ad78a4bf5044097c91932c6576d9c94fab3b</sum>
        </package>
        <package name="php-mysqlnd" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-mysqlnd-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">5216906401697aed81a77326ce5956b6678ddf3d8d0a076739d709bd869b1549</sum>
        </package>
        <package name="libzip" version="1.7.3" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="libzip-1.7.3-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>libzip-1.7.3-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">5962ee62531b91b8d089dda94343f02f6278557e387f3aa076843e7d6ebcec89</sum>
        </package>
        <package name="php-intl" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-intl-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">61d07c476336b4cad681bccdaedd067ef7fcb186f969c60bf5e2a1ee6a0dafbc</sum>
        </package>
        <package name="php-fpm" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-fpm-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">6276c97dd52f5ca81d7e5f985f1367334b356bdf38da87b90ae5dd71ff1ceca9</sum>
        </package>
        <package name="php-xml" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-xml-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">64f4f3a1286c24cfabb25b36f32b14ee41d6ee9882a819494ca5a1e2beb1dcc0</sum>
        </package>
        <package name="php-cli" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-cli-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">6793a04d19e941769624a9f4f201612493ee79ddc937a4f112b461048f199adc</sum>
        </package>
        <package name="php-pecl-apcu" version="5.1.20" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.20-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>php-pecl-apcu-5.1.20-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">6a2a352400dc0dfaf36d2e796cf5419699675bcd79fb8833e2b9886e765eb0ca</sum>
        </package>
        <package name="php-gmp" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-gmp-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">6aacb4d9b973a2c576b9027d3a7b3bcabfeb8a5eec7c24fc24d14e31a595a511</sum>
        </package>
        <package name="php-gd" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-gd-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">73c5b52a4a9ad9d3c7fa63e43923d07dcac151b969598c7fd02cac856b046148</sum>
        </package>
        <package name="php-ldap" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-ldap-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">82721c44d1c6dcea45d5b0a995c04b1a336d5c06b1ce0355a159944dacc22f81</sum>
        </package>
        <package name="libzip-tools" version="1.7.3" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="libzip-1.7.3-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>libzip-tools-1.7.3-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">82f44435fd17b8150202e9da2ccd129a9337445a3e95f12d0faef344bf26b60d</sum>
        </package>
        <package name="php-pgsql" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-pgsql-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">94898e2584f422e65dcc006556601c28d824ab749b36714e77cf7511a6a2c33e</sum>
        </package>
        <package name="php-pecl-zip" version="1.19.2" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="php-pecl-zip-1.19.2-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>php-pecl-zip-1.19.2-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">ba120b545a1f35a3c47c106a002c8f5b85137e17a1b438c5222818ac9ecd89a9</sum>
        </package>
        <package name="php-bcmath" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-bcmath-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">bc68df39de1811446dc78eb67a38491538f26954da06f5e01cddb5454a0113e8</sum>
        </package>
        <package name="php-odbc" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-odbc-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">bfe83f13bbd8270ae2413471b5c5963c32ade785329fdb61495db4652c934d04</sum>
        </package>
        <package name="php-dbg" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-dbg-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">c56974177f079307992cc6cf7b87f8fe208183e85c6fbaae462eb8e29e57fd89</sum>
        </package>
        <package name="php-opcache" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-opcache-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">d31880e94abb5adc9b50e8284732f553dbd00e240a43e18bc54a6cb4f28f1beb</sum>
        </package>
        <package name="php-pecl-apcu-devel" version="5.1.20" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.20-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>php-pecl-apcu-devel-5.1.20-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">d8b1ca7ae8a8163bf0c24aedde00491313cb3724e4dc44a314ad369de4b944c0</sum>
        </package>
        <package name="php-pecl-xdebug3" version="3.1.2" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="php-pecl-xdebug3-3.1.2-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>php-pecl-xdebug3-3.1.2-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">df908d724c4ed5f547dfd7ba483e35309af5e2089a72a24f2c05ba1ddc9529e8</sum>
        </package>
        <package name="php-process" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-process-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">e31a133b7ac930017713372da1dbeb32c36a837bde16f5d7204d0c369a3d6e41</sum>
        </package>
        <package name="libzip-devel" version="1.7.3" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="libzip-1.7.3-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>libzip-devel-1.7.3-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">e47efaf25e1c9dcaad2fd645d6bf07cc6e4c97e78b3e08594aeb21eff49e3be9</sum>
        </package>
        <package name="php" version="8.0.30" release="1.module_el8.8.0+3655+3335cff6" epoch="0" arch="s390x" src="php-8.0.30-1.module_el8.8.0+3655+3335cff6.src.rpm">
          <filename>php-8.0.30-1.module_el8.8.0+3655+3335cff6.s390x.rpm</filename>
          <sum type="sha256">f02c49321b009bbdca0411f9fc1dbc6feddf832777a3655bae0f80e90c3f1250</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5928</id>
    <title>Important: tomcat security update</title>
    <issued date="2023-10-19 00:00:00"/>
    <updated date="2023-10-20 11:16:24"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tomcat security update</summary>
    <description>Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5928" id="RHSA-2023:5928" type="rhsa" title="RHSA-2023:5928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5928.html" id="ALSA-2023:5928" type="self" title="ALSA-2023:5928"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="tomcat-docs-webapp" version="9.0.62" release="5.el8_8.2" epoch="1" arch="noarch" src="tomcat-9.0.62-5.el8_8.2.src.rpm">
          <filename>tomcat-docs-webapp-9.0.62-5.el8_8.2.noarch.rpm</filename>
          <sum type="sha256">51c075fe41c26e3d8d8e799baa45d4ece2219a3d62886ac2365cf4dcb46916b1</sum>
        </package>
        <package name="tomcat" version="9.0.62" release="5.el8_8.2" epoch="1" arch="noarch" src="tomcat-9.0.62-5.el8_8.2.src.rpm">
          <filename>tomcat-9.0.62-5.el8_8.2.noarch.rpm</filename>
          <sum type="sha256">89106fb3321103f102da03a6cd8ff2948e1c89476e65ac084f3b2fcfe46c0d36</sum>
        </package>
        <package name="tomcat-jsp-2.3-api" version="9.0.62" release="5.el8_8.2" epoch="1" arch="noarch" src="tomcat-9.0.62-5.el8_8.2.src.rpm">
          <filename>tomcat-jsp-2.3-api-9.0.62-5.el8_8.2.noarch.rpm</filename>
          <sum type="sha256">8b8c1f7e77f2f2edb728a4d0a6a403388d5dc606c2205c192cf898aad7a2a4b8</sum>
        </package>
        <package name="tomcat-admin-webapps" version="9.0.62" release="5.el8_8.2" epoch="1" arch="noarch" src="tomcat-9.0.62-5.el8_8.2.src.rpm">
          <filename>tomcat-admin-webapps-9.0.62-5.el8_8.2.noarch.rpm</filename>
          <sum type="sha256">bc9448f9507c113e8d6dc1f4f6592378a5368a3b5f0eb96aee0912de0c0c0429</sum>
        </package>
        <package name="tomcat-webapps" version="9.0.62" release="5.el8_8.2" epoch="1" arch="noarch" src="tomcat-9.0.62-5.el8_8.2.src.rpm">
          <filename>tomcat-webapps-9.0.62-5.el8_8.2.noarch.rpm</filename>
          <sum type="sha256">c2ad6c8f3df8b97a2afb6d43f00aebd1825b521c2ba07703ea7413762c784d2b</sum>
        </package>
        <package name="tomcat-servlet-4.0-api" version="9.0.62" release="5.el8_8.2" epoch="1" arch="noarch" src="tomcat-9.0.62-5.el8_8.2.src.rpm">
          <filename>tomcat-servlet-4.0-api-9.0.62-5.el8_8.2.noarch.rpm</filename>
          <sum type="sha256">ca5762dc44b100abf0f89cb17cbab1eed8114551ce3c8e6dc1ab35ab3af25efb</sum>
        </package>
        <package name="tomcat-el-3.0-api" version="9.0.62" release="5.el8_8.2" epoch="1" arch="noarch" src="tomcat-9.0.62-5.el8_8.2.src.rpm">
          <filename>tomcat-el-3.0-api-9.0.62-5.el8_8.2.noarch.rpm</filename>
          <sum type="sha256">d5c4628e001915573f8ee60ca11346d46893323a8dd17b8c30ee6fdad73dcf3f</sum>
        </package>
        <package name="tomcat-lib" version="9.0.62" release="5.el8_8.2" epoch="1" arch="noarch" src="tomcat-9.0.62-5.el8_8.2.src.rpm">
          <filename>tomcat-lib-9.0.62-5.el8_8.2.noarch.rpm</filename>
          <sum type="sha256">f5338717b080c4c62c82b7832c8e86200a02ff0039c84be7e0c97b8654f8ca50</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5989</id>
    <title>Important: varnish security update</title>
    <issued date="2023-10-23 00:00:00"/>
    <updated date="2023-10-25 14:24:57"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>varnish security update</summary>
    <description>Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5989" id="RHSA-2023:5989" type="rhsa" title="RHSA-2023:5989"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5989.html" id="ALSA-2023:5989" type="self" title="ALSA-2023:5989"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="varnish" stream="6" version="8080020231025101519" context="9edba152" arch="s390x"/>
        <package name="varnish" version="6.0.8" release="3.module_el8.8.0+3665+0b8dabc5.1.alma.1" epoch="0" arch="s390x" src="varnish-6.0.8-3.module_el8.8.0+3665+0b8dabc5.1.alma.1.src.rpm">
          <filename>varnish-6.0.8-3.module_el8.8.0+3665+0b8dabc5.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">82754d18c975aa479eaf39059cfb55a388f9eed2c33404a5f4a884fb6d67788d</sum>
        </package>
        <package name="varnish-devel" version="6.0.8" release="3.module_el8.8.0+3665+0b8dabc5.1.alma.1" epoch="0" arch="s390x" src="varnish-6.0.8-3.module_el8.8.0+3665+0b8dabc5.1.alma.1.src.rpm">
          <filename>varnish-devel-6.0.8-3.module_el8.8.0+3665+0b8dabc5.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">d64f4924838ce33e038dc6d68a68cc4bfd6236c11cdc77e0ab85361a502e7ef2</sum>
        </package>
        <package name="varnish-modules" version="0.15.0" release="6.module_el8.6.0+3089+dac88e97" epoch="0" arch="s390x" src="varnish-modules-0.15.0-6.module_el8.6.0+3089+dac88e97.src.rpm">
          <filename>varnish-modules-0.15.0-6.module_el8.6.0+3089+dac88e97.s390x.rpm</filename>
          <sum type="sha256">f87b7bda5607c3d394f1298c744e857d5fa547aa968815ad8846b1da44910b24</sum>
        </package>
        <package name="varnish-docs" version="6.0.8" release="3.module_el8.8.0+3665+0b8dabc5.1.alma.1" epoch="0" arch="s390x" src="varnish-6.0.8-3.module_el8.8.0+3665+0b8dabc5.1.alma.1.src.rpm">
          <filename>varnish-docs-6.0.8-3.module_el8.8.0+3665+0b8dabc5.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">fed82212378de2346b0b92718f3802eb54206f6d0290f5cd45cdaaa3005064ac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5994</id>
    <title>Important: python27:2.7 security update</title>
    <issued date="2023-10-23 00:00:00"/>
    <updated date="2023-10-25 13:28:12"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python27:2.7 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL.

Security Fix(es):

* python: TLS handshake bypass (CVE-2023-40217)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5994" id="RHSA-2023:5994" type="rhsa" title="RHSA-2023:5994"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40217" id="CVE-2023-40217" type="cve" title="CVE-2023-40217"/>
      <reference href="https://bugzilla.redhat.com/2235789" id="2235789" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5994.html" id="ALSA-2023:5994" type="self" title="ALSA-2023:5994"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="python27" stream="2.7" version="8060020220421123549" context="182f7c73" arch="s390x"/>
        <package name="python2-debug" version="2.7.18" release="13.module_el8.8.0+3663+627ce7bb.2.alma.1" epoch="0" arch="s390x" src="python2-2.7.18-13.module_el8.8.0+3663+627ce7bb.2.alma.1.src.rpm">
          <filename>python2-debug-2.7.18-13.module_el8.8.0+3663+627ce7bb.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">19b14002b3b4a8480f66f2e6fab86acdacb3dad2fdd083b11f18bfa5912fd5ea</sum>
        </package>
        <package name="python2-virtualenv" version="15.1.0" release="22.module_el8.8.0+3580+eeda85da" epoch="0" arch="noarch" src="python-virtualenv-15.1.0-22.module_el8.8.0+3580+eeda85da.src.rpm">
          <filename>python2-virtualenv-15.1.0-22.module_el8.8.0+3580+eeda85da.noarch.rpm</filename>
          <sum type="sha256">202ff137c90bcd0e5f65f198c2b5ea4b1b493fd3bd4e0db830fedc3e82b0dbfe</sum>
        </package>
        <package name="python2-Cython" version="0.28.1" release="7.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="Cython-0.28.1-7.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-Cython-0.28.1-7.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">33e5c6fee3819774cc5605ac9884d333321fd0e18a2e6ad15bd4cc626854bf92</sum>
        </package>
        <package name="python2" version="2.7.18" release="13.module_el8.8.0+3663+627ce7bb.2.alma.1" epoch="0" arch="s390x" src="python2-2.7.18-13.module_el8.8.0+3663+627ce7bb.2.alma.1.src.rpm">
          <filename>python2-2.7.18-13.module_el8.8.0+3663+627ce7bb.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">3437e342f6841528e87d9bc46b04b677c52fefb179a0322c45164cb1a011335f</sum>
        </package>
        <package name="python2-lxml" version="4.2.3" release="6.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-lxml-4.2.3-6.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-lxml-4.2.3-6.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">34d05166229eef26e630797e84fd32f0aa76104895186ba2de4852d1931449c2</sum>
        </package>
        <package name="python2-markupsafe" version="0.23" release="19.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-markupsafe-0.23-19.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-markupsafe-0.23-19.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">4df63f354ef866a6834b7ae6bbf00de4e90db40a23c0175d0a8e091f46c3831b</sum>
        </package>
        <package name="python2-numpy-f2py" version="1.14.2" release="16.module_el8.6.0+3162+01a09e5a" epoch="1" arch="s390x" src="numpy-1.14.2-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-numpy-f2py-1.14.2-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">5122909fad88771bdc7f253154548be55681207a76858df98d83aee4c019fb99</sum>
        </package>
        <package name="python-psycopg2-doc" version="2.7.5" release="7.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-7.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python-psycopg2-doc-2.7.5-7.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">5244c8d18dfd502b39b8ef31626e36d7fad138955a3e659b6a0aa1f41c37e45b</sum>
        </package>
        <package name="python2-psycopg2-tests" version="2.7.5" release="7.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-7.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-psycopg2-tests-2.7.5-7.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">5531ddd2cf70dd5de39bd273d89c0cbb56da7a0b546589c5cd1a4f68d21546d2</sum>
        </package>
        <package name="python2-tools" version="2.7.18" release="13.module_el8.8.0+3663+627ce7bb.2.alma.1" epoch="0" arch="s390x" src="python2-2.7.18-13.module_el8.8.0+3663+627ce7bb.2.alma.1.src.rpm">
          <filename>python2-tools-2.7.18-13.module_el8.8.0+3663+627ce7bb.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">6b735eab579739662d0450579a3a344a427fbb9b6c04044d4482acfce974236d</sum>
        </package>
        <package name="python2-pymongo" version="3.7.0" release="1.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">6b7bcb16061d074203f3da5d62159766e919e5fc57ef7c9df634c2d56dbe44e1</sum>
        </package>
        <package name="python2-scipy" version="1.0.0" release="21.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="scipy-1.0.0-21.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-scipy-1.0.0-21.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">81de1440a78869d680e428d1a0bca31199b203067f1d24c27c6676507af7c68f</sum>
        </package>
        <package name="python2-psycopg2-debug" version="2.7.5" release="7.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-7.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-psycopg2-debug-2.7.5-7.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">83fda0ce9cab16410651f67b969d7a8bd6bdeeb57844f48416c137e5a2490135</sum>
        </package>
        <package name="python2-numpy" version="1.14.2" release="16.module_el8.6.0+3162+01a09e5a" epoch="1" arch="s390x" src="numpy-1.14.2-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-numpy-1.14.2-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">852f2d82ccc6de54efa8bf6c6dcf9ede79257d3aa5144c12fc290d43e20b4ab1</sum>
        </package>
        <package name="python2-sqlalchemy" version="1.3.2" release="2.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-sqlalchemy-1.3.2-2.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-sqlalchemy-1.3.2-2.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">854347b4f4c344b9ee4f49435eb2f75b9be1a134ed76388c16d4affae402f809</sum>
        </package>
        <package name="python2-tkinter" version="2.7.18" release="13.module_el8.8.0+3663+627ce7bb.2.alma.1" epoch="0" arch="s390x" src="python2-2.7.18-13.module_el8.8.0+3663+627ce7bb.2.alma.1.src.rpm">
          <filename>python2-tkinter-2.7.18-13.module_el8.8.0+3663+627ce7bb.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">8c140f2d34b452f748ebe9c2acd90aafb2c73385bcf0198d016c6fc7d412419d</sum>
        </package>
        <package name="python2-backports" version="1.0" release="16.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-backports-1.0-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-backports-1.0-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">8ce54e96fff1eff1c45e38503fc221bb6e8866180e9e558fe581fa8cc4059796</sum>
        </package>
        <package name="python2-test" version="2.7.18" release="13.module_el8.8.0+3663+627ce7bb.2.alma.1" epoch="0" arch="s390x" src="python2-2.7.18-13.module_el8.8.0+3663+627ce7bb.2.alma.1.src.rpm">
          <filename>python2-test-2.7.18-13.module_el8.8.0+3663+627ce7bb.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">a60efea099ffc0904ec087ec29e7b923d3d8bbf28bffcabf2f48e262ff804947</sum>
        </package>
        <package name="python2-pymongo-gridfs" version="3.7.0" release="1.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-pymongo-gridfs-3.7.0-1.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">b28d3022855edc1cc4a549f1d3ce67a23d2da958f852bbf7821b325e67895d64</sum>
        </package>
        <package name="python2-devel" version="2.7.18" release="13.module_el8.8.0+3663+627ce7bb.2.alma.1" epoch="0" arch="s390x" src="python2-2.7.18-13.module_el8.8.0+3663+627ce7bb.2.alma.1.src.rpm">
          <filename>python2-devel-2.7.18-13.module_el8.8.0+3663+627ce7bb.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">c890fb171263d769185c338716a6f4c3ff3a0f234d37bb919c9ff14690996228</sum>
        </package>
        <package name="python2-libs" version="2.7.18" release="13.module_el8.8.0+3663+627ce7bb.2.alma.1" epoch="0" arch="s390x" src="python2-2.7.18-13.module_el8.8.0+3663+627ce7bb.2.alma.1.src.rpm">
          <filename>python2-libs-2.7.18-13.module_el8.8.0+3663+627ce7bb.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">d76eb378b883195cca2cd10b5c081b8ab9b71861671070f04fe85d2e999a1f91</sum>
        </package>
        <package name="python2-bson" version="3.7.0" release="1.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-bson-3.7.0-1.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">de74cd7b4f4870f2bac803f8a8aeca7062cc342d4bf9533f9939bf03f306ebfb</sum>
        </package>
        <package name="python2-psycopg2" version="2.7.5" release="7.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-7.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-psycopg2-2.7.5-7.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">dfef98c52b1b501aac8ea1b769a1db7cca4665eb671e41f824cd894346493e6b</sum>
        </package>
        <package name="python2-coverage" version="4.5.1" release="4.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-coverage-4.5.1-4.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-coverage-4.5.1-4.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">e24b9859ffcdb0d4bd5c3bc2ad9395b0aa55175b96fd08d2a7ae4b026d2ee0ed</sum>
        </package>
        <package name="python2-pyyaml" version="3.12" release="16.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="PyYAML-3.12-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-pyyaml-3.12-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">fd83c9d2f395a877fc6cc657333bc13305e5d5ebe62c39ec0e2040e8e36542e7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5997</id>
    <title>Important: python3 security update</title>
    <issued date="2023-10-23 00:00:00"/>
    <updated date="2023-10-25 09:13:17"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: TLS handshake bypass (CVE-2023-40217)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5997" id="RHSA-2023:5997" type="rhsa" title="RHSA-2023:5997"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40217" id="CVE-2023-40217" type="cve" title="CVE-2023-40217"/>
      <reference href="https://bugzilla.redhat.com/2235789" id="2235789" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5997.html" id="ALSA-2023:5997" type="self" title="ALSA-2023:5997"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="python3-tkinter" version="3.6.8" release="51.el8_8.2.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-51.el8_8.2.alma.1.src.rpm">
          <filename>python3-tkinter-3.6.8-51.el8_8.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">2604f0f3930c7b432e744269fbdede94516817be5d9d9f1f3790e4e6dc4f807a</sum>
        </package>
        <package name="platform-python-debug" version="3.6.8" release="51.el8_8.2.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-51.el8_8.2.alma.1.src.rpm">
          <filename>platform-python-debug-3.6.8-51.el8_8.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">48db9ad3f4f8369a35b0f1e358c12b21fffbf6e1eaa3f4f75faf10f6ee7f02a8</sum>
        </package>
        <package name="python3-idle" version="3.6.8" release="51.el8_8.2.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-51.el8_8.2.alma.1.src.rpm">
          <filename>python3-idle-3.6.8-51.el8_8.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">73be90e9f5e055488e22cf5535c65dda46d45cc4d378308a6de732fb52db8332</sum>
        </package>
        <package name="platform-python-devel" version="3.6.8" release="51.el8_8.2.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-51.el8_8.2.alma.1.src.rpm">
          <filename>platform-python-devel-3.6.8-51.el8_8.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">82a126f0167fdafcd323658ebc418d26e8b0eaadad07103b7fec4cfa03b5415f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5998</id>
    <title>Important: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2023-10-23 00:00:00"/>
    <updated date="2023-10-25 07:21:12"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: TLS handshake bypass (CVE-2023-40217)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5998" id="RHSA-2023:5998" type="rhsa" title="RHSA-2023:5998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40217" id="CVE-2023-40217" type="cve" title="CVE-2023-40217"/>
      <reference href="https://bugzilla.redhat.com/2235789" id="2235789" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5998.html" id="ALSA-2023:5998" type="self" title="ALSA-2023:5998"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="python39" stream="3.9" version="8080020231024184852" context="0a5380d9" arch="s390x"/>
        <package name="python39-test" version="3.9.16" release="1.module_el8.8.0+3664+2b1e4686.2" epoch="0" arch="s390x" src="python39-3.9.16-1.module_el8.8.0+3664+2b1e4686.2.src.rpm">
          <filename>python39-test-3.9.16-1.module_el8.8.0+3664+2b1e4686.2.s390x.rpm</filename>
          <sum type="sha256">010fe6f591a1656894c42395d795819d5ecdbbf7f9a655d2db5866eef829a4a4</sum>
        </package>
        <package name="python39-scipy" version="1.5.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="scipy-1.5.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-scipy-1.5.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">29c1816d1b128f5b3a9f8863106cc1a21a9e75b10be7a14561be4ebb36951957</sum>
        </package>
        <package name="python39" version="3.9.16" release="1.module_el8.8.0+3664+2b1e4686.2" epoch="0" arch="s390x" src="python39-3.9.16-1.module_el8.8.0+3664+2b1e4686.2.src.rpm">
          <filename>python39-3.9.16-1.module_el8.8.0+3664+2b1e4686.2.s390x.rpm</filename>
          <sum type="sha256">3b36fce8487533e771b5d2797d4662a9ed859e3afe15a61b38d6c9a05120e673</sum>
        </package>
        <package name="python39-libs" version="3.9.16" release="1.module_el8.8.0+3664+2b1e4686.2" epoch="0" arch="s390x" src="python39-3.9.16-1.module_el8.8.0+3664+2b1e4686.2.src.rpm">
          <filename>python39-libs-3.9.16-1.module_el8.8.0+3664+2b1e4686.2.s390x.rpm</filename>
          <sum type="sha256">3eeff08236366ecef6edafe7be7bbdaeab8767441e1d3a208071298254b88207</sum>
        </package>
        <package name="python39-rpm-macros" version="3.9.16" release="1.module_el8.8.0+3664+2b1e4686.2" epoch="0" arch="noarch" src="python39-3.9.16-1.module_el8.8.0+3664+2b1e4686.2.src.rpm">
          <filename>python39-rpm-macros-3.9.16-1.module_el8.8.0+3664+2b1e4686.2.noarch.rpm</filename>
          <sum type="sha256">462c8a375a3503de315002d52f82de5fc13706810a60f21ff490cae0c2f9a6d1</sum>
        </package>
        <package name="python39-cryptography" version="3.3.1" release="2.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-cryptography-3.3.1-2.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-cryptography-3.3.1-2.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">56a1136df87128c9c969dff35385bd263b36300d3c30efa3c5110f2cec64c371</sum>
        </package>
        <package name="python39-numpy-f2py" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-f2py-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">56f4a39fc3b7cacfec741e84c3c59e67da9e3b2f122f09e59cac8a8020a4ba7c</sum>
        </package>
        <package name="python39-devel" version="3.9.16" release="1.module_el8.8.0+3664+2b1e4686.2" epoch="0" arch="s390x" src="python39-3.9.16-1.module_el8.8.0+3664+2b1e4686.2.src.rpm">
          <filename>python39-devel-3.9.16-1.module_el8.8.0+3664+2b1e4686.2.s390x.rpm</filename>
          <sum type="sha256">5d9a7a8e61ff1a8c3e5512910b9acc9372486b528935765e4230512ea439979b</sum>
        </package>
        <package name="python39-idle" version="3.9.16" release="1.module_el8.8.0+3664+2b1e4686.2" epoch="0" arch="s390x" src="python39-3.9.16-1.module_el8.8.0+3664+2b1e4686.2.src.rpm">
          <filename>python39-idle-3.9.16-1.module_el8.8.0+3664+2b1e4686.2.s390x.rpm</filename>
          <sum type="sha256">88188a7661147c7fd5e7a6126ed9d72fbbb07db1d74a72682a857471625ae3e8</sum>
        </package>
        <package name="python39-psutil" version="5.8.0" release="4.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9300840b5b4e742063f5617bc74cc2b05b4f3d5bdcd113ee5b3a9745baf3d0dc</sum>
        </package>
        <package name="python39-numpy" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9ffe33f6e51a25e79b88e45fa5cdca37a3b77d0868fe40e156f615224308810c</sum>
        </package>
        <package name="python39-psycopg2-tests" version="2.8.6" release="2.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-psycopg2-tests-2.8.6-2.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">aea9e9377b4ce6484c9cab9cc63b725b12a55d4895321eaa422328a4b79bb21b</sum>
        </package>
        <package name="python39-psycopg2" version="2.8.6" release="2.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">b7c35659538650d156ec7273186c4f59fa5fecab60c4ccfd3a93bbe67c0af914</sum>
        </package>
        <package name="python39-psycopg2-doc" version="2.8.6" release="2.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-psycopg2-doc-2.8.6-2.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">b973731de198689b345b74939539b99cd20047bf9b09cd68ab7b166eae5773fe</sum>
        </package>
        <package name="python39-lxml" version="4.6.5" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">dc2ce0990738ea69e2b3641de1886825066554244cf58815971db30e321b56b2</sum>
        </package>
        <package name="python39-mod_wsgi" version="4.7.1" release="5.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="mod_wsgi-4.7.1-5.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-mod_wsgi-4.7.1-5.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">e45288562bc7c28ad66653998a34bc52fe2539e305ea984f6ebebac9a1c49030</sum>
        </package>
        <package name="python39-cffi" version="1.14.3" release="2.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">ec3acbe8ceecf82559556caacd8c41e2b40e69348f2e6893f0b7598aa36371fd</sum>
        </package>
        <package name="python39-pyyaml" version="5.4.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="PyYAML-5.4.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pyyaml-5.4.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">faa90d54ace8329c64942f01e18434bce14edf19cc3a534ae07de7bc301cd27f</sum>
        </package>
        <package name="python39-tkinter" version="3.9.16" release="1.module_el8.8.0+3664+2b1e4686.2" epoch="0" arch="s390x" src="python39-3.9.16-1.module_el8.8.0+3664+2b1e4686.2.src.rpm">
          <filename>python39-tkinter-3.9.16-1.module_el8.8.0+3664+2b1e4686.2.s390x.rpm</filename>
          <sum type="sha256">fc4220c10fe8537a9762b07ca60474cfc1b82ae836b5b4c02d4372a99ca04706</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6187</id>
    <title>Important: firefox security update</title>
    <issued date="2023-10-30 00:00:00"/>
    <updated date="2023-11-09 06:31:53"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.4.0 ESR.

Security Fix(es):

* Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)
* Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4 (CVE-2023-5730)
* libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)
* Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)
* Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)
* Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash. (CVE-2023-5728)
* Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6187" id="RHSA-2023:6187" type="rhsa" title="RHSA-2023:6187"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44488" id="CVE-2023-44488" type="cve" title="CVE-2023-44488"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5721" id="CVE-2023-5721" type="cve" title="CVE-2023-5721"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5724" id="CVE-2023-5724" type="cve" title="CVE-2023-5724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5725" id="CVE-2023-5725" type="cve" title="CVE-2023-5725"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5728" id="CVE-2023-5728" type="cve" title="CVE-2023-5728"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5730" id="CVE-2023-5730" type="cve" title="CVE-2023-5730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5732" id="CVE-2023-5732" type="cve" title="CVE-2023-5732"/>
      <reference href="https://bugzilla.redhat.com/2241806" id="2241806" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245896" id="2245896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245898" id="2245898" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245899" id="2245899" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245900" id="2245900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245903" id="2245903" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245906" id="2245906" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6187.html" id="ALSA-2023:6187" type="self" title="ALSA-2023:6187"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="firefox" version="115.4.0" release="1.el8_8.alma.1" epoch="0" arch="s390x" src="firefox-115.4.0-1.el8_8.alma.1.src.rpm">
          <filename>firefox-115.4.0-1.el8_8.alma.1.s390x.rpm</filename>
          <sum type="sha256">9209f41bbc056c3e63ba34b29fd4e3c9a22d9c41af8a4123390e891b299dc17c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6194</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-10-30 00:00:00"/>
    <updated date="2023-11-10 07:21:53"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.4.1.

Security Fix(es):

* Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)
* Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4 (CVE-2023-5730)
* libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)
* Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)
* Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)
* Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash. (CVE-2023-5728)
* Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6194" id="RHSA-2023:6194" type="rhsa" title="RHSA-2023:6194"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44488" id="CVE-2023-44488" type="cve" title="CVE-2023-44488"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5721" id="CVE-2023-5721" type="cve" title="CVE-2023-5721"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5724" id="CVE-2023-5724" type="cve" title="CVE-2023-5724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5725" id="CVE-2023-5725" type="cve" title="CVE-2023-5725"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5728" id="CVE-2023-5728" type="cve" title="CVE-2023-5728"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5730" id="CVE-2023-5730" type="cve" title="CVE-2023-5730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5732" id="CVE-2023-5732" type="cve" title="CVE-2023-5732"/>
      <reference href="https://bugzilla.redhat.com/2241806" id="2241806" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245896" id="2245896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245898" id="2245898" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245899" id="2245899" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245900" id="2245900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245903" id="2245903" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245906" id="2245906" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6194.html" id="ALSA-2023:6194" type="self" title="ALSA-2023:6194"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="thunderbird" version="115.4.1" release="1.el8_8.alma.1" epoch="0" arch="s390x" src="thunderbird-115.4.1-1.el8_8.alma.1.src.rpm">
          <filename>thunderbird-115.4.1-1.el8_8.alma.1.s390x.rpm</filename>
          <sum type="sha256">d086d17ae54e5d4e25a3ac01f3a5680385d1c7070e1fcff22a4f7fdcb7d375a1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6236</id>
    <title>Moderate: binutils security update</title>
    <issued date="2023-11-01 00:00:00"/>
    <updated date="2023-11-03 09:37:46"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>binutils security update</summary>
    <description>The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities.

Security Fix(es):

* binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault (CVE-2022-4285)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6236" id="RHSA-2023:6236" type="rhsa" title="RHSA-2023:6236"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4285" id="CVE-2022-4285" type="cve" title="CVE-2022-4285"/>
      <reference href="https://bugzilla.redhat.com/2150768" id="2150768" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6236.html" id="ALSA-2023:6236" type="self" title="ALSA-2023:6236"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="binutils-devel" version="2.30" release="119.el8_8.2" epoch="0" arch="s390x" src="binutils-2.30-119.el8_8.2.src.rpm">
          <filename>binutils-devel-2.30-119.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">c4d78bac931150e226eccfca6226513b422942e22397866466c2820224aa5703</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6245</id>
    <title>Moderate: .NET 6.0 security update</title>
    <issued date="2023-11-01 00:00:00"/>
    <updated date="2023-11-03 10:15:12"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.124 and .NET Runtime 6.0.24.

Security Fix(es):

* dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6245" id="RHSA-2023:6245" type="rhsa" title="RHSA-2023:6245"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6245.html" id="ALSA-2023:6245" type="self" title="ALSA-2023:6245"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="dotnet-hostfxr-6.0" version="6.0.24" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.124-1.el8_8.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.24-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">02881595d31a57a3f6577ccfd08db7ab82e9609d61bae4bc702e7d7d19924fb9</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.24" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.124-1.el8_8.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.24-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">1320fad8312ae3353b5386061e0df226950e28f69497e8780b523ebb9f9769ee</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.24" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.124-1.el8_8.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.24-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">2c1c825ec53684554e59002e3e4adf2995f326440a03729a1eb1fd8b2502ba94</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.24" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.124-1.el8_8.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.24-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">5f63e295684b893a5c22f7c26e05a72bf0d504ced81fdf0417f29d5d95471b4b</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.24" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.124-1.el8_8.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.24-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">8b2403f76cb2de307a88b1068eed0987246677f8763e46a61e2bfde19a309e36</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.24" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.124-1.el8_8.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.24-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">9f1ad020521c527bf2e5c276c7607c7e3519e4a88cb863d0ef3296c1b316d873</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.124" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.124-1.el8_8.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.124-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">beaae676f3ef42123a58c3cf8f285e825bcdad9267df568120ad587e40f0856e</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.124" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.124-1.el8_8.src.rpm">
          <filename>dotnet-templates-6.0-6.0.124-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">e5bd0be0a722dcf14fc4f977765f6dc0a9026100af67abef44120195e2bae424</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6247</id>
    <title>Moderate: .NET 7.0 security update</title>
    <issued date="2023-11-01 00:00:00"/>
    <updated date="2023-11-09 06:18:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.113 and .NET Runtime 7.0.13.

Security Fix(es):

* dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6247" id="RHSA-2023:6247" type="rhsa" title="RHSA-2023:6247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6247.html" id="ALSA-2023:6247" type="self" title="ALSA-2023:6247"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <package name="dotnet-host" version="7.0.13" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.113-1.el8_8.src.rpm">
          <filename>dotnet-host-7.0.13-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">06a7afb3cb2009e8a1afe1e3841549581ea46868e61f7e4eb4153a15311c76ee</sum>
        </package>
        <package name="dotnet-apphost-pack-7.0" version="7.0.13" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.113-1.el8_8.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.13-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">19b71fbba879999d544048de2b82dc0be9cc9785de95bc0b62cd53a6cffcf688</sum>
        </package>
        <package name="dotnet-sdk-7.0" version="7.0.113" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.113-1.el8_8.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.113-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">1ae6e0ecab45ed7e11521d8006e6222cfa47ecfdfd9d08d44209a63bf3056a16</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="7.0.113" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.113-1.el8_8.src.rpm">
          <filename>netstandard-targeting-pack-2.1-7.0.113-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">2599ada8a710f80ae211199d9c37b25f85b034b75d0da5e0054ca522ddc3d83b</sum>
        </package>
        <package name="dotnet-hostfxr-7.0" version="7.0.13" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.113-1.el8_8.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.13-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">2a36061a295562c69f5f90e2c63b0165765fc861b73eb0f21f829810d3dc2cdd</sum>
        </package>
        <package name="aspnetcore-runtime-7.0" version="7.0.13" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.113-1.el8_8.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.13-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">35e72bd2b6d18b8d8f2c36e65e53cb11e0aac334022ca9a1b7b6162e6239fd07</sum>
        </package>
        <package name="dotnet" version="7.0.113" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.113-1.el8_8.src.rpm">
          <filename>dotnet-7.0.113-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">44186dc9950b7f4a1559f2842efae6027dd4e944e835b852bfdf619d1acc719b</sum>
        </package>
        <package name="dotnet-templates-7.0" version="7.0.113" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.113-1.el8_8.src.rpm">
          <filename>dotnet-templates-7.0-7.0.113-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">909d1754fb1494b0544dcca2dc4f5c7a026a222cc40ddc73f122c74549aa0012</sum>
        </package>
        <package name="dotnet-targeting-pack-7.0" version="7.0.13" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.113-1.el8_8.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.13-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">9a6bbb254bc8a62109eb25ae0fdfa54611d0e96b54ac2731a235ddf51b052d75</sum>
        </package>
        <package name="dotnet-runtime-7.0" version="7.0.13" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.113-1.el8_8.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.13-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">e1d7638cf5a7a5ba3868305641ceefa1e8e1553fa3245a78b4d64288d079c883</sum>
        </package>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.13" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.113-1.el8_8.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.13-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">e27947dceda018a75403d233fec09403222db053260e9ced68b9aca715a67a04</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6267</id>
    <title>Critical: squid:4 security update</title>
    <issued date="2023-11-02 00:00:00"/>
    <updated date="2023-11-09 12:47:44"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>squid:4 security update</summary>
    <description>Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

* SQUID-2023:3 squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)
* SQUID-2023:1 squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6267" id="RHSA-2023:6267" type="rhsa" title="RHSA-2023:6267"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46846" id="CVE-2023-46846" type="cve" title="CVE-2023-46846"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46847" id="CVE-2023-46847" type="cve" title="CVE-2023-46847"/>
      <reference href="https://bugzilla.redhat.com/2245910" id="2245910" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245916" id="2245916" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6267.html" id="ALSA-2023:6267" type="self" title="ALSA-2023:6267"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_8_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_8_default</name>
        <module name="squid" stream="4" version="8060020220707110313" context="9edba152" arch="s390x"/>
        <package name="squid" version="4.15" release="6.module_el8.8.0+3670+56cb3c8e.1.alma.1" epoch="7" arch="s390x" src="squid-4.15-6.module_el8.8.0+3670+56cb3c8e.1.alma.1.src.rpm">
          <filename>squid-4.15-6.module_el8.8.0+3670+56cb3c8e.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">383865aff6070264fe987c742dd234a5a23101c2f89df0e3cc2ebd6e6e362029</sum>
        </package>
        <package name="libecap" version="1.0.1" release="2.module_el8.6.0+3048+383bc947" epoch="0" arch="s390x" src="libecap-1.0.1-2.module_el8.6.0+3048+383bc947.src.rpm">
          <filename>libecap-1.0.1-2.module_el8.6.0+3048+383bc947.s390x.rpm</filename>
          <sum type="sha256">6f8eb1f500a9dca1949f5f05aedf6b97764817d9f17284be3612eec04618f4e1</sum>
        </package>
        <package name="libecap-devel" version="1.0.1" release="2.module_el8.6.0+3048+383bc947" epoch="0" arch="s390x" src="libecap-1.0.1-2.module_el8.6.0+3048+383bc947.src.rpm">
          <filename>libecap-devel-1.0.1-2.module_el8.6.0+3048+383bc947.s390x.rpm</filename>
          <sum type="sha256">96f15e87a90682f6ec87bc4ed7c8edae439f414cd0382f1865dcf76ac3a7807d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6887</id>
    <title>Moderate: java-21-openjdk security and bug fix update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-24 10:51:47"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security and bug fix update</summary>
    <description>The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* OpenJDK: memory corruption issue on x86_64 with AVX-512 (8317121) (CVE-2023-22025)
* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 21.0.0 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 21.0.1, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true.
* A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 20.0.0 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 20.0.1, increases it to 16 MB. (AlmaLinux-14952)
* When Transparent Huge Pages (THP) are unconditionally enabled on a system, Java applications using many threads were found to have a large Resident Set Size (RSS). This was due to a race between the kernel transforming thread stack memory into huge pages and the Java Virtual Machine (JVM) shattering these pages into smaller ones when adding a guard page. This release resolves this issue by getting glibc to insert a guard page and prevent the creation of huge pages. (AlmaLinux-14961)
* Installing the same java-21-openjdk-headless package on two different systems resulted in distinct classes.jsa files getting generated. This was because the CDS archive was being generated by a post script action of the java-21-openjdk-headless package. This prevented the use of the dynamic dump feature, because the checksum in the archive would be different on each system. This release resolves this issue by using the .jsa files generated during the initial build. (AlmaLinux-14944)
* The /usr/bin/jfr alternative is now owned by the java-21-openjdk package. (AlmaLinux-14960)
* The jcmd tool is now provided by the java-21-openjdk-headless package, rather than java-21-openjdk-devel, to make it more accessible. (AlmaLinux-14950)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6887" id="RHSA-2023:6887" type="rhsa" title="RHSA-2023:6887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22025" id="CVE-2023-22025" type="cve" title="CVE-2023-22025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22081" id="CVE-2023-22081" type="cve" title="CVE-2023-22081"/>
      <reference href="https://bugzilla.redhat.com/2243627" id="2243627" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243805" id="2243805" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6887.html" id="ALSA-2023:6887" type="self" title="ALSA-2023:6887"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="java-21-openjdk-jmods" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-21.0.1.0.12-2.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">357d328efed3a3454d0eb52933f759b1d9b5bbce735454e3eaf5050c12dc6218</sum>
        </package>
        <package name="java-21-openjdk-headless" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-21.0.1.0.12-2.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">3f8ee324329ce3607f6fe629e1f11ea59cbe278331fe822d972fd2b05d42a850</sum>
        </package>
        <package name="java-21-openjdk-javadoc-zip" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-zip-21.0.1.0.12-2.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">5ff95483059042d19517f07290edcc53facc69c4f2cccfcb42e7f19cf024effb</sum>
        </package>
        <package name="java-21-openjdk-src" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-src-21.0.1.0.12-2.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">8bd92fb2e0cc7333b1de24b12fb79863fa8e4159f2d5e40664e64b17972ee351</sum>
        </package>
        <package name="java-21-openjdk-static-libs" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-21.0.1.0.12-2.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">a73398648edf4ed1a5773bea447e16b93debcfa4977c5f0e05481f45da5cc473</sum>
        </package>
        <package name="java-21-openjdk" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-21.0.1.0.12-2.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">a7346f612d172aabbe1f0ba0a40c0b150c955b76c39f790ff3052d12f7c1b486</sum>
        </package>
        <package name="java-21-openjdk-devel" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-21.0.1.0.12-2.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">b5af092e271259908ab02f5a56f2e3a928ca62c6045a683c6210784f634035d6</sum>
        </package>
        <package name="java-21-openjdk-demo" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-21.0.1.0.12-2.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">d7c5da8c13dec86c73739f6e7208b266bcd16fcaf2b77a85f7777702c5748282</sum>
        </package>
        <package name="java-21-openjdk-javadoc" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-21.0.1.0.12-2.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">e9c1e44a4a9b59ba0d07f8c641ad6fd45cdd400a4d2a82ab1d18da94b25aa5a3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6914</id>
    <title>Moderate: python3.11-pip security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 08:38:25"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11-pip security update</summary>
    <description>pip is a package management system used to install and manage software packages written in Python. Many packages can be found in the Python Package Index (PyPI). pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python".

Security Fix(es):

* python: tarfile module directory traversal (CVE-2007-4559)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6914" id="RHSA-2023:6914" type="rhsa" title="RHSA-2023:6914"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2007-4559" id="CVE-2007-4559" type="cve" title="CVE-2007-4559"/>
      <reference href="https://bugzilla.redhat.com/263261" id="263261" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6914.html" id="ALSA-2023:6914" type="self" title="ALSA-2023:6914"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="python3.11-pip-wheel" version="22.3.1" release="4.el8" epoch="0" arch="noarch" src="python3.11-pip-22.3.1-4.el8.src.rpm">
          <filename>python3.11-pip-wheel-22.3.1-4.el8.noarch.rpm</filename>
          <sum type="sha256">0e5dff63d78ea0e950919eb3b234d675419252a779b0e24662410c21109617ec</sum>
        </package>
        <package name="python3.11-pip" version="22.3.1" release="4.el8" epoch="0" arch="noarch" src="python3.11-pip-22.3.1-4.el8.src.rpm">
          <filename>python3.11-pip-22.3.1-4.el8.noarch.rpm</filename>
          <sum type="sha256">85531f56ca3d67c983d2b9d55c76346b8e5c64aad823df72c4f2cf6674b09258</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6916</id>
    <title>Moderate: xorg-x11-server security and bug fix update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:20:24"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security and bug fix update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability (CVE-2023-1393)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6916" id="RHSA-2023:6916" type="rhsa" title="RHSA-2023:6916"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1393" id="CVE-2023-1393" type="cve" title="CVE-2023-1393"/>
      <reference href="https://bugzilla.redhat.com/2180288" id="2180288" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6916.html" id="ALSA-2023:6916" type="self" title="ALSA-2023:6916"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="xorg-x11-server-Xdmx" version="1.20.11" release="17.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-17.el8.src.rpm">
          <filename>xorg-x11-server-Xdmx-1.20.11-17.el8.s390x.rpm</filename>
          <sum type="sha256">122ead214c03dd73ec81551fc2c2bc1b52cbe40263ac9c7b3a9d52bd917dc815</sum>
        </package>
        <package name="xorg-x11-server-Xorg" version="1.20.11" release="17.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-17.el8.src.rpm">
          <filename>xorg-x11-server-Xorg-1.20.11-17.el8.s390x.rpm</filename>
          <sum type="sha256">3025fc5dfb40cfcd3e7faf3ad87390042101e7160fcf61a5caa619f66d985038</sum>
        </package>
        <package name="xorg-x11-server-Xvfb" version="1.20.11" release="17.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-17.el8.src.rpm">
          <filename>xorg-x11-server-Xvfb-1.20.11-17.el8.s390x.rpm</filename>
          <sum type="sha256">6e34972848cfcb4bc652d2790d74d4f70350e0d4486c76b435ace6bc2906466d</sum>
        </package>
        <package name="xorg-x11-server-common" version="1.20.11" release="17.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-17.el8.src.rpm">
          <filename>xorg-x11-server-common-1.20.11-17.el8.s390x.rpm</filename>
          <sum type="sha256">9102657de240f449cd245dee4acc5ec95fde9fb8954aa9cd1eb3bbbdac2b2e11</sum>
        </package>
        <package name="xorg-x11-server-Xnest" version="1.20.11" release="17.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-17.el8.src.rpm">
          <filename>xorg-x11-server-Xnest-1.20.11-17.el8.s390x.rpm</filename>
          <sum type="sha256">92a15bc8072fe67bd27374b4f0e055298d3ed0218e3aaa9ef804028a26de9c29</sum>
        </package>
        <package name="xorg-x11-server-Xephyr" version="1.20.11" release="17.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-17.el8.src.rpm">
          <filename>xorg-x11-server-Xephyr-1.20.11-17.el8.s390x.rpm</filename>
          <sum type="sha256">bbdf72bad8fb520a67d2f9e098e25653e3fc57a789a4449f7de5ee56bf3c01c4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6917</id>
    <title>Moderate: xorg-x11-server-Xwayland security and bug fix update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:42"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server-Xwayland security and bug fix update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

* xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability (CVE-2023-1393)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6917" id="RHSA-2023:6917" type="rhsa" title="RHSA-2023:6917"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1393" id="CVE-2023-1393" type="cve" title="CVE-2023-1393"/>
      <reference href="https://bugzilla.redhat.com/2180288" id="2180288" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6917.html" id="ALSA-2023:6917" type="self" title="ALSA-2023:6917"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="xorg-x11-server-Xwayland" version="21.1.3" release="12.el8" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-21.1.3-12.el8.src.rpm">
          <filename>xorg-x11-server-Xwayland-21.1.3-12.el8.s390x.rpm</filename>
          <sum type="sha256">8cf71cf09e67a2d199322a599ac62638c4697001af4dda5c7e785b64048be125</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6933</id>
    <title>Moderate: libreoffice security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 09:42:54"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libreoffice security update</summary>
    <description>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

Security Fix(es):

* libreoffice: Empty entry in Java class path (CVE-2022-38745)
* libreoffice: Array index underflow in Calc formula parsing (CVE-2023-0950)
* libreoffice: Arbitrary file write (CVE-2023-1183)
* libreoffice: Remote documents loaded without prompt via IFrame (CVE-2023-2255)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6933" id="RHSA-2023:6933" type="rhsa" title="RHSA-2023:6933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38745" id="CVE-2022-38745" type="cve" title="CVE-2022-38745"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0950" id="CVE-2023-0950" type="cve" title="CVE-2023-0950"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1183" id="CVE-2023-1183" type="cve" title="CVE-2023-1183"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2255" id="CVE-2023-2255" type="cve" title="CVE-2023-2255"/>
      <reference href="https://bugzilla.redhat.com/2182044" id="2182044" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2208506" id="2208506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210185" id="2210185" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210186" id="2210186" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6933.html" id="ALSA-2023:6933" type="self" title="ALSA-2023:6933"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="libreoffice-ure" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>libreoffice-ure-6.4.7.2-15.el8.alma.s390x.rpm</filename>
          <sum type="sha256">054b642a1711e8960246de92b95639c681d772f92072a0e31e9f73f12c3619b9</sum>
        </package>
        <package name="libreoffice-graphicfilter" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>libreoffice-graphicfilter-6.4.7.2-15.el8.alma.s390x.rpm</filename>
          <sum type="sha256">21c29637bfa240a85e1576cf5352197c0ea303a65df6a6f1517fa01c19619412</sum>
        </package>
        <package name="libreoffice-data" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>libreoffice-data-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">2abe15946aef094aaddf3578d06be0625b6e7961542087d7564e91a1d03612a5</sum>
        </package>
        <package name="libreoffice-core" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>libreoffice-core-6.4.7.2-15.el8.alma.s390x.rpm</filename>
          <sum type="sha256">2fc96cc74415d159becb3768d8aa8c7f7122a21f53bb7a4b5d9e613f301b199b</sum>
        </package>
        <package name="libreoffice-calc" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>libreoffice-calc-6.4.7.2-15.el8.alma.s390x.rpm</filename>
          <sum type="sha256">36a5508b975c0efd7694fb45cb4dca6d3d8ef6491fca210d4b568033393300eb</sum>
        </package>
        <package name="libreoffice-ogltrans" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>libreoffice-ogltrans-6.4.7.2-15.el8.alma.s390x.rpm</filename>
          <sum type="sha256">4039818c3df283f4bff0874dd3a1983915f04bca515e4dbb35a8e1d5571bf5b2</sum>
        </package>
        <package name="libreoffice-impress" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>libreoffice-impress-6.4.7.2-15.el8.alma.s390x.rpm</filename>
          <sum type="sha256">47e77dbb3f80004eaf2268d6a7ed6a1cf2abe4218f3a16b6d8a8e03407a22958</sum>
        </package>
        <package name="libreoffice-writer" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>libreoffice-writer-6.4.7.2-15.el8.alma.s390x.rpm</filename>
          <sum type="sha256">4918c0323e46e00bf51bbd84d6f2be5687a7627ff4c63ed25b3af67c46838d9f</sum>
        </package>
        <package name="libreoffice-pdfimport" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>libreoffice-pdfimport-6.4.7.2-15.el8.alma.s390x.rpm</filename>
          <sum type="sha256">50f6f618b3b5f6cef4302ee5ccd0a302c04cd203cd73b5a894e4957fc48c8a8d</sum>
        </package>
        <package name="libreoffice-ure-common" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>libreoffice-ure-common-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">5b1d2dc6bc23488817b6f3788a27b8e5f534c71463c41526124699ba904597c6</sum>
        </package>
        <package name="autocorr-en" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>autocorr-en-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">69d7596b5fef7c42945b5e32f08d2f4805668f31a2c102c0ee40ae0ec178e544</sum>
        </package>
        <package name="libreoffice-pyuno" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>libreoffice-pyuno-6.4.7.2-15.el8.alma.s390x.rpm</filename>
          <sum type="sha256">786a7591360c1551914b6af386b91bee023fa3678f98a5cdc904b6226ed2236a</sum>
        </package>
        <package name="libreoffice-langpack-en" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>libreoffice-langpack-en-6.4.7.2-15.el8.alma.s390x.rpm</filename>
          <sum type="sha256">9b0303802766f4880fb98fd7d1159f5705bb8f365daef5fdc8a62da163fd081f</sum>
        </package>
        <package name="libreoffice-opensymbol-fonts" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>libreoffice-opensymbol-fonts-6.4.7.2-15.el8.alma.noarch.rpm</filename>
          <sum type="sha256">b01d58a74a9287d31c630aa4f145ec1df49e8edf5ff873e9b094975d58564dd8</sum>
        </package>
        <package name="libreoffice-help-en" version="6.4.7.2" release="15.el8.alma" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-15.el8.alma.src.rpm">
          <filename>libreoffice-help-en-6.4.7.2-15.el8.alma.s390x.rpm</filename>
          <sum type="sha256">cff13fab9261f4627dfad50e87631a6c61cf6388d7372df73bb569e03e11f731</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6938</id>
    <title>Moderate: container-tools:4.0 security and bug fix update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-24 13:34:18"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>container-tools:4.0 security and bug fix update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents (CVE-2022-3064)
* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)
* net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723)
* golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)
* golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)
* golang.org/x/net/html: Cross site scripting (CVE-2023-3978)
* golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534)
* golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536)
* golang: go/parser: Infinite loop in parsing (CVE-2023-24537)
* golang: html/template: backticks not treated as string delimiters (CVE-2023-24538)
* golang: html/template: improper sanitization of CSS values (CVE-2023-24539)
* runc: Rootless runc makes `/sys/fs/cgroup` writable (CVE-2023-25809)
* runc: volume mount race condition (regression of CVE-2019-19921) (CVE-2023-27561)
* runc: AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration (CVE-2023-28642)
* golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)
* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6938" id="RHSA-2023:6938" type="rhsa" title="RHSA-2023:6938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3064" id="CVE-2022-3064" type="cve" title="CVE-2022-3064"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41723" id="CVE-2022-41723" type="cve" title="CVE-2022-41723"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41724" id="CVE-2022-41724" type="cve" title="CVE-2022-41724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41725" id="CVE-2022-41725" type="cve" title="CVE-2022-41725"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24534" id="CVE-2023-24534" type="cve" title="CVE-2023-24534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24536" id="CVE-2023-24536" type="cve" title="CVE-2023-24536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24537" id="CVE-2023-24537" type="cve" title="CVE-2023-24537"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24538" id="CVE-2023-24538" type="cve" title="CVE-2023-24538"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24539" id="CVE-2023-24539" type="cve" title="CVE-2023-24539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24540" id="CVE-2023-24540" type="cve" title="CVE-2023-24540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25809" id="CVE-2023-25809" type="cve" title="CVE-2023-25809"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27561" id="CVE-2023-27561" type="cve" title="CVE-2023-27561"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28642" id="CVE-2023-28642" type="cve" title="CVE-2023-28642"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29400" id="CVE-2023-29400" type="cve" title="CVE-2023-29400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29406" id="CVE-2023-29406" type="cve" title="CVE-2023-29406"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3978" id="CVE-2023-3978" type="cve" title="CVE-2023-3978"/>
      <reference href="https://bugzilla.redhat.com/2163037" id="2163037" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2175721" id="2175721" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178358" id="2178358" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178488" id="2178488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178492" id="2178492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2182883" id="2182883" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2182884" id="2182884" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184481" id="2184481" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184482" id="2184482" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184483" id="2184483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184484" id="2184484" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196026" id="2196026" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196027" id="2196027" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196029" id="2196029" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222167" id="2222167" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228689" id="2228689" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6938.html" id="ALSA-2023:6938" type="self" title="ALSA-2023:6938"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="container-tools" stream="4.0" version="8090020231017095551" context="20125149" arch="s390x"/>
        <package name="oci-seccomp-bpf-hook" version="1.2.5" release="2.module_el8.8.0+3468+16b86c82" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.5-2.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.5-2.module_el8.8.0+3468+16b86c82.s390x.rpm</filename>
          <sum type="sha256">1e162c539720ce081534f6fb7d539a7332ff986a28465e81ca5532262dc0b96e</sum>
        </package>
        <package name="buildah" version="1.24.6" release="7.module_el8.9.0+3627+db8ec155" epoch="1" arch="s390x" src="buildah-1.24.6-7.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>buildah-1.24.6-7.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">2212f05af7f42d74bbb1be8bfe81d9d18a0ed02036561861b15eefb3d2f51e3d</sum>
        </package>
        <package name="conmon" version="2.1.4" release="2.module_el8.9.0+3627+db8ec155" epoch="2" arch="s390x" src="conmon-2.1.4-2.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>conmon-2.1.4-2.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">226c630303667df696d2486c3f96e53edf6e9017aab9c0ac1d6354058bb30469</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="1.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="libslirp-4.4.0-1.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>libslirp-devel-4.4.0-1.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">23a930ac511e216078f3ebd78a7940a7f4a6b6d16fe2d3c7f7c04c5dd9050b3b</sum>
        </package>
        <package name="podman-tests" version="4.0.2" release="24.module_el8.9.0+3627+db8ec155" epoch="2" arch="s390x" src="podman-4.0.2-24.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>podman-tests-4.0.2-24.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">2a008dcb505a448394068ab1fc7a0199b829503ea1560454cc8cedfe5e6c209f</sum>
        </package>
        <package name="crun" version="1.8.3" release="1.module_el8.9.0+3627+db8ec155" epoch="0" arch="s390x" src="crun-1.8.3-1.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>crun-1.8.3-1.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">2cebf2c497aaa6f6241b4db65e9bcf403a38416e278bbca49c35e1d583924a45</sum>
        </package>
        <package name="podman-docker" version="4.0.2" release="24.module_el8.9.0+3627+db8ec155" epoch="2" arch="noarch" src="podman-4.0.2-24.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>podman-docker-4.0.2-24.module_el8.9.0+3627+db8ec155.noarch.rpm</filename>
          <sum type="sha256">2fd308704d36c3f5ab53b0bd230a78bfadca3a43b75202e05b08681b1e0f83e7</sum>
        </package>
        <package name="podman" version="4.0.2" release="24.module_el8.9.0+3627+db8ec155" epoch="2" arch="s390x" src="podman-4.0.2-24.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>podman-4.0.2-24.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">342b15e504378732850831e7d11b24c9f407831e20c153b2f1d363db4948e87a</sum>
        </package>
        <package name="podman-catatonit" version="4.0.2" release="24.module_el8.9.0+3627+db8ec155" epoch="2" arch="s390x" src="podman-4.0.2-24.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>podman-catatonit-4.0.2-24.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">3abbfd61f5648956507dea2d9b815e86555d86bb8e75f50a23bd5bd583e0136b</sum>
        </package>
        <package name="criu-devel" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>criu-devel-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">3b5df64c4e5adb160d2985d7477aa84f2df350f8b8651dee3d1a73cb22e4ff2b</sum>
        </package>
        <package name="python3-podman" version="4.0.0" release="2.module_el8.9.0+3627+db8ec155" epoch="0" arch="noarch" src="python-podman-4.0.0-2.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>python3-podman-4.0.0-2.module_el8.9.0+3627+db8ec155.noarch.rpm</filename>
          <sum type="sha256">4a27742746229fff2355b72070587cb7db657cf3d6d3aeb092b3bc5111e8cbb6</sum>
        </package>
        <package name="cockpit-podman" version="46" release="1.module_el8.7.0+3344+5bcd850f" epoch="0" arch="noarch" src="cockpit-podman-46-1.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>cockpit-podman-46-1.module_el8.7.0+3344+5bcd850f.noarch.rpm</filename>
          <sum type="sha256">4befd0793ef210df16649c866d5c1c4e69991cc174ecf348a5fbe591aa93b387</sum>
        </package>
        <package name="slirp4netns" version="1.1.8" release="3.module_el8.9.0+3627+db8ec155" epoch="0" arch="s390x" src="slirp4netns-1.1.8-3.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>slirp4netns-1.1.8-3.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">502d4654a521453555bfb5a5277a8a9750897dd2b8e99332778cdafca7829e59</sum>
        </package>
        <package name="containers-common" version="1" release="38.module_el8.9.0+3627+db8ec155" epoch="2" arch="s390x" src="containers-common-1-38.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>containers-common-1-38.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">59743e519719ebda4b03e9224b0027f9f0b94172bd75944acd94345533910cab</sum>
        </package>
        <package name="podman-remote" version="4.0.2" release="24.module_el8.9.0+3627+db8ec155" epoch="2" arch="s390x" src="podman-4.0.2-24.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>podman-remote-4.0.2-24.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">5e6cc97ba2e006c06d8f25c0122ca2a6b36dba4cb5b7d4749961deee1cc19bd9</sum>
        </package>
        <package name="crit" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>crit-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">63e66b7937f70ee985aabe920c4d8c1e590159f72b4b79a311e986f58bc147e1</sum>
        </package>
        <package name="runc" version="1.1.5" release="2.module_el8.9.0+3627+db8ec155" epoch="1" arch="s390x" src="runc-1.1.5-2.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>runc-1.1.5-2.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">6a715f59254dab309fe536768fd7991f4e033b908166ffca745274ce469ee2ce</sum>
        </package>
        <package name="udica" version="0.2.6" release="4.module_el8.9.0+3627+db8ec155" epoch="0" arch="noarch" src="udica-0.2.6-4.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>udica-0.2.6-4.module_el8.9.0+3627+db8ec155.noarch.rpm</filename>
          <sum type="sha256">6a7a865e0c91be7e1c5cbbe01c6eb5a9a723db86526d9b178828dd5a6155863a</sum>
        </package>
        <package name="python3-criu" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>python3-criu-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">6b152daf504ff66ecb343dfbca61a7adb1ddceb7d77ba0af696194d2d2d0db43</sum>
        </package>
        <package name="fuse-overlayfs" version="1.9" release="2.module_el8.9.0+3627+db8ec155" epoch="0" arch="s390x" src="fuse-overlayfs-1.9-2.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>fuse-overlayfs-1.9-2.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">769fd619e20112145f23e5c5e36c0c5dbf24116ffe3d85022ae3168f6ab40f80</sum>
        </package>
        <package name="buildah-tests" version="1.24.6" release="7.module_el8.9.0+3627+db8ec155" epoch="1" arch="s390x" src="buildah-1.24.6-7.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>buildah-tests-1.24.6-7.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">82831a8632e8380fc3239ff32c297cc67f8e6f17ba58be5239487522626b1d15</sum>
        </package>
        <package name="podman-plugins" version="4.0.2" release="24.module_el8.9.0+3627+db8ec155" epoch="2" arch="s390x" src="podman-4.0.2-24.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>podman-plugins-4.0.2-24.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">9583b10a44d689917fd6e3ac1c310f4c1dd35fd9699e1ae257348400fbac1f94</sum>
        </package>
        <package name="containernetworking-plugins" version="1.1.1" release="5.module_el8.9.0+3627+db8ec155" epoch="1" arch="s390x" src="containernetworking-plugins-1.1.1-5.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>containernetworking-plugins-1.1.1-5.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">9594b139358a2cd638a8e698c040ebdaedda5a6af716ccffa228f44321c9d41d</sum>
        </package>
        <package name="netavark" version="1.0.1" release="38.module_el8.9.0+3627+db8ec155" epoch="2" arch="s390x" src="containers-common-1-38.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>netavark-1.0.1-38.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">96369473b0af8c0668bbaab115f37a3eaaf018ddd042d90b4cd1891954dc0bda</sum>
        </package>
        <package name="skopeo-tests" version="1.6.2" release="8.module_el8.9.0+3627+db8ec155" epoch="2" arch="s390x" src="skopeo-1.6.2-8.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>skopeo-tests-1.6.2-8.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">a261fe25d8e63217c4c17bf6ab0ce0a3078996dc3b6c95ccc5c9a0d82142547f</sum>
        </package>
        <package name="container-selinux" version="2.205.0" release="3.module_el8.9.0+3627+db8ec155" epoch="2" arch="noarch" src="container-selinux-2.205.0-3.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>container-selinux-2.205.0-3.module_el8.9.0+3627+db8ec155.noarch.rpm</filename>
          <sum type="sha256">a79efe804a83f4463008df090115d03d27f7a89b56063410939fa11c6025c398</sum>
        </package>
        <package name="aardvark-dns" version="1.0.1" release="38.module_el8.9.0+3627+db8ec155" epoch="2" arch="s390x" src="containers-common-1-38.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>aardvark-dns-1.0.1-38.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">b74f5f3d7125aab41b62a1440e4a9d6db11ac82b22312437f944e9a2563ad3d8</sum>
        </package>
        <package name="criu" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>criu-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">c08a42b3160aaaca1d8eb6f81df59b8ea0a45448fd676479d2cae70b46600d46</sum>
        </package>
        <package name="toolbox" version="0.0.99.4" release="5.module_el8.9.0+3627+db8ec155" epoch="0" arch="s390x" src="toolbox-0.0.99.4-5.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>toolbox-0.0.99.4-5.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">dea080dc9abeebb066d991b64b5a8f7d667befa81b5ae983cb3b3acca30d626f</sum>
        </package>
        <package name="criu-libs" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>criu-libs-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">e4c16247d9bcf785747fb00cd48e60e73f98ce6fcb5202032c264dfb343a7bce</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.4" release="5.module_el8.9.0+3627+db8ec155" epoch="0" arch="s390x" src="toolbox-0.0.99.4-5.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>toolbox-tests-0.0.99.4-5.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">e9c564f21054028335b29a43cc179070a0218effbcadd66b0d4d56f9e188fbeb</sum>
        </package>
        <package name="skopeo" version="1.6.2" release="8.module_el8.9.0+3627+db8ec155" epoch="2" arch="s390x" src="skopeo-1.6.2-8.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>skopeo-1.6.2-8.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">ec236bcd34541a864f6ffb2666e02ce67fe8dac69c2815d0b6d4dd0ba2f7743c</sum>
        </package>
        <package name="podman-gvproxy" version="4.0.2" release="24.module_el8.9.0+3627+db8ec155" epoch="2" arch="s390x" src="podman-4.0.2-24.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>podman-gvproxy-4.0.2-24.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">efd534b01dda417770eef53e2dfdedf5318ce95e2041fa231157e3edacb39c8b</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="1.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="libslirp-4.4.0-1.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>libslirp-4.4.0-1.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">f2c8aa7fab8501dbdf33f68a74cb5600af266839424a6d637732ac248a58edc7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6939</id>
    <title>Moderate: container-tools:rhel8 security and bug fix update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-27 12:22:52"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>container-tools:rhel8 security and bug fix update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents (CVE-2022-3064)
* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)
* net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723)
* golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)
* golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)
* golang.org/x/net/html: Cross site scripting (CVE-2023-3978)
* golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534)
* golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536)
* golang: go/parser: Infinite loop in parsing (CVE-2023-24537)
* golang: html/template: backticks not treated as string delimiters (CVE-2023-24538)
* golang: html/template: improper sanitization of CSS values (CVE-2023-24539)
* containerd: Supplementary groups are not set up properly (CVE-2023-25173)
* runc: Rootless runc makes `/sys/fs/cgroup` writable (CVE-2023-25809)
* runc: volume mount race condition (regression of CVE-2019-19921) (CVE-2023-27561)
* runc: AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration (CVE-2023-28642)
* golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)
* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6939" id="RHSA-2023:6939" type="rhsa" title="RHSA-2023:6939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3064" id="CVE-2022-3064" type="cve" title="CVE-2022-3064"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41723" id="CVE-2022-41723" type="cve" title="CVE-2022-41723"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41724" id="CVE-2022-41724" type="cve" title="CVE-2022-41724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41725" id="CVE-2022-41725" type="cve" title="CVE-2022-41725"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24534" id="CVE-2023-24534" type="cve" title="CVE-2023-24534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24536" id="CVE-2023-24536" type="cve" title="CVE-2023-24536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24537" id="CVE-2023-24537" type="cve" title="CVE-2023-24537"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24538" id="CVE-2023-24538" type="cve" title="CVE-2023-24538"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24539" id="CVE-2023-24539" type="cve" title="CVE-2023-24539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24540" id="CVE-2023-24540" type="cve" title="CVE-2023-24540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25173" id="CVE-2023-25173" type="cve" title="CVE-2023-25173"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25809" id="CVE-2023-25809" type="cve" title="CVE-2023-25809"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27561" id="CVE-2023-27561" type="cve" title="CVE-2023-27561"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28642" id="CVE-2023-28642" type="cve" title="CVE-2023-28642"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29400" id="CVE-2023-29400" type="cve" title="CVE-2023-29400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29406" id="CVE-2023-29406" type="cve" title="CVE-2023-29406"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3978" id="CVE-2023-3978" type="cve" title="CVE-2023-3978"/>
      <reference href="https://bugzilla.redhat.com/2163037" id="2163037" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2174485" id="2174485" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2175721" id="2175721" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178358" id="2178358" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178488" id="2178488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2178492" id="2178492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2182883" id="2182883" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2182884" id="2182884" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184481" id="2184481" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184482" id="2184482" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184483" id="2184483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184484" id="2184484" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196026" id="2196026" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196027" id="2196027" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196029" id="2196029" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222167" id="2222167" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228689" id="2228689" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6939.html" id="ALSA-2023:6939" type="self" title="ALSA-2023:6939"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="container-tools" stream="rhel8" version="8090020231018100244" context="20125149" arch="s390x"/>
        <package name="runc" version="1.1.9" release="1.module_el8.9.0+3643+9234dc3b" epoch="1" arch="s390x" src="runc-1.1.9-1.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>runc-1.1.9-1.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">084bcbeb84be89c057369a0f36b2002467cfbc8132f32ba41ef9ca2d1396e2e7</sum>
        </package>
        <package name="containernetworking-plugins" version="1.3.0" release="4.module_el8.9.0+3643+9234dc3b" epoch="1" arch="s390x" src="containernetworking-plugins-1.3.0-4.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>containernetworking-plugins-1.3.0-4.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">09cf5140a8d58002cfae3ccea4566bd8d20497e71a3bd18d21bbcd6d3495acc9</sum>
        </package>
        <package name="crun" version="1.8.7" release="1.module_el8.9.0+3643+9234dc3b" epoch="0" arch="s390x" src="crun-1.8.7-1.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>crun-1.8.7-1.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">0c7ca1a17f578d9f13aa6a06266ba01976e82bce2b8bbedc36c663a6bd0f4d2d</sum>
        </package>
        <package name="conmon" version="2.1.8" release="1.module_el8.9.0+3643+9234dc3b" epoch="3" arch="s390x" src="conmon-2.1.8-1.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>conmon-2.1.8-1.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">17bbcf221a9a6d29fa50b8f589ef96664baf4247819692a9a2de4edc353282aa</sum>
        </package>
        <package name="skopeo-tests" version="1.13.3" release="1.module_el8.9.0+3643+9234dc3b" epoch="2" arch="s390x" src="skopeo-1.13.3-1.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>skopeo-tests-1.13.3-1.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">1b48a1a2b60f0a300cd4661e5679068c5652bc940a26197fde06b81876f9a95f</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="1.module_el8.8.0+3615+3543c705" epoch="0" arch="s390x" src="libslirp-4.4.0-1.module_el8.8.0+3615+3543c705.src.rpm">
          <filename>libslirp-4.4.0-1.module_el8.8.0+3615+3543c705.s390x.rpm</filename>
          <sum type="sha256">26dbf69e6f53dc63a9e4cc2da4b96e267a65b7fccd7b92775d7641f8ccf215e1</sum>
        </package>
        <package name="buildah" version="1.31.3" release="1.module_el8.9.0+3643+9234dc3b" epoch="1" arch="s390x" src="buildah-1.31.3-1.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>buildah-1.31.3-1.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">2e6e33d15799bcb1cf116307a888ab1ad40b64781f5aca3758cd2bc23b88d885</sum>
        </package>
        <package name="netavark" version="1.7.0" release="1.module_el8.9.0+3643+9234dc3b" epoch="2" arch="s390x" src="netavark-1.7.0-1.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>netavark-1.7.0-1.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">377edba487fbb56fd9474838749f33a681f80567e94c26684207993a1ef1a977</sum>
        </package>
        <package name="cockpit-podman" version="75" release="1.module_el8.9.0+3643+9234dc3b" epoch="0" arch="noarch" src="cockpit-podman-75-1.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>cockpit-podman-75-1.module_el8.9.0+3643+9234dc3b.noarch.rpm</filename>
          <sum type="sha256">3ae90cff135ddbea6c044f08f9c866530630268244c5b9c22c2b80da8163f85c</sum>
        </package>
        <package name="udica" version="0.2.6" release="20.module_el8.8.0+3615+3543c705" epoch="0" arch="noarch" src="udica-0.2.6-20.module_el8.8.0+3615+3543c705.src.rpm">
          <filename>udica-0.2.6-20.module_el8.8.0+3615+3543c705.noarch.rpm</filename>
          <sum type="sha256">3c6eca5d4da56513a3c6905e61d4117684d6e67c2cfa6362f19dc36321ca9301</sum>
        </package>
        <package name="criu-devel" version="3.18" release="4.module_el8.9.0+3643+9234dc3b" epoch="0" arch="s390x" src="criu-3.18-4.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>criu-devel-3.18-4.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">3cefbafc355b9914ca58f711c72db5c09d7bc7d6c9a5db23cddf65010e6b9e86</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="1.module_el8.8.0+3615+3543c705" epoch="0" arch="s390x" src="libslirp-4.4.0-1.module_el8.8.0+3615+3543c705.src.rpm">
          <filename>libslirp-devel-4.4.0-1.module_el8.8.0+3615+3543c705.s390x.rpm</filename>
          <sum type="sha256">43f3367becc9258121351339da9138dcd3aecc8c00061abb4f912ecbf5af85df</sum>
        </package>
        <package name="containers-common" version="1" release="54.module_el8.9.0+3673+0c64b403" epoch="2" arch="s390x" src="containers-common-1-54.module_el8.9.0+3673+0c64b403.src.rpm">
          <filename>containers-common-1-54.module_el8.9.0+3673+0c64b403.s390x.rpm</filename>
          <sum type="sha256">567f18636409df1edcb5b75a4d428faad0ae414b673e08966aa45041e605323f</sum>
        </package>
        <package name="python3-criu" version="3.18" release="4.module_el8.9.0+3643+9234dc3b" epoch="0" arch="s390x" src="criu-3.18-4.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>python3-criu-3.18-4.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">603cace748355416972f35ae9066b87fe822f483dfc2d93884628794c44997d1</sum>
        </package>
        <package name="aardvark-dns" version="1.7.0" release="1.module_el8.9.0+3657+d86e192f" epoch="2" arch="s390x" src="aardvark-dns-1.7.0-1.module_el8.9.0+3657+d86e192f.src.rpm">
          <filename>aardvark-dns-1.7.0-1.module_el8.9.0+3657+d86e192f.s390x.rpm</filename>
          <sum type="sha256">70aa732bf836db90d4cf9a8c4242c53fd4cc0044d379b2f2e1bd2caaec49876b</sum>
        </package>
        <package name="toolbox" version="0.0.99.4" release="5.module_el8.9.0+3643+9234dc3b" epoch="0" arch="s390x" src="toolbox-0.0.99.4-5.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>toolbox-0.0.99.4-5.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">7f722cacf86c8a62afae98d6082b4de7f54289bd1c9a7fbde6083fc183e05596</sum>
        </package>
        <package name="podman-catatonit" version="4.6.1" release="4.module_el8.9.0+3643+9234dc3b" epoch="3" arch="s390x" src="podman-4.6.1-4.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>podman-catatonit-4.6.1-4.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">94450e53f1ea462ac9e81ee617399923e3873bd9a733fe3dd505c5be213d5473</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.9" release="1.module_el8.9.0+3643+9234dc3b" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.9-1.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.9-1.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">9cb153e3a53c22560cf4f3e9d8b2ac18538e00739b2ccc048444bed08c786b2a</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.4" release="5.module_el8.9.0+3643+9234dc3b" epoch="0" arch="s390x" src="toolbox-0.0.99.4-5.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>toolbox-tests-0.0.99.4-5.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">9d0ab2a03159997a4b44762dafaf15d9ca002f85757942cbd60917de360b55b4</sum>
        </package>
        <package name="podman-gvproxy" version="4.6.1" release="4.module_el8.9.0+3643+9234dc3b" epoch="3" arch="s390x" src="podman-4.6.1-4.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>podman-gvproxy-4.6.1-4.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">a16ec6e9c6ebe0c752718d500db6f8f5ea2ac1e99922fc9bcfe4c9be7d0ea776</sum>
        </package>
        <package name="podman-plugins" version="4.6.1" release="4.module_el8.9.0+3643+9234dc3b" epoch="3" arch="s390x" src="podman-4.6.1-4.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>podman-plugins-4.6.1-4.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">a17ccdf1317af969ddb75eece2898ce59a0b384cf5e6f9390c6cbe2d85061ea9</sum>
        </package>
        <package name="skopeo" version="1.13.3" release="1.module_el8.9.0+3643+9234dc3b" epoch="2" arch="s390x" src="skopeo-1.13.3-1.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>skopeo-1.13.3-1.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">a62f4a15d0bdbc330a526d2c1559b0d14d10f5df6ccd8bae634550f6317c87b6</sum>
        </package>
        <package name="criu-libs" version="3.18" release="4.module_el8.9.0+3643+9234dc3b" epoch="0" arch="s390x" src="criu-3.18-4.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>criu-libs-3.18-4.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">ae82eca0706c9d945a6d28628dc08af90966d8dd56c9609e11639606844ba90e</sum>
        </package>
        <package name="podman-tests" version="4.6.1" release="4.module_el8.9.0+3643+9234dc3b" epoch="3" arch="s390x" src="podman-4.6.1-4.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>podman-tests-4.6.1-4.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">b38066d7656e8a98ecf12aeeff139d6bb3e856bbfc431cddc1b60d0c0ca30c7d</sum>
        </package>
        <package name="container-selinux" version="2.221.0" release="1.module_el8.9.0+3643+9234dc3b" epoch="2" arch="noarch" src="container-selinux-2.221.0-1.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>container-selinux-2.221.0-1.module_el8.9.0+3643+9234dc3b.noarch.rpm</filename>
          <sum type="sha256">b995544a6519b352c72fc28716ba3c7c69dab864e5328056d5ea5b21ced2185a</sum>
        </package>
        <package name="slirp4netns" version="1.2.1" release="1.module_el8.9.0+3643+9234dc3b" epoch="0" arch="s390x" src="slirp4netns-1.2.1-1.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>slirp4netns-1.2.1-1.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">bad736abd2bcb68bb98f52ef0c3d460fa0db0730c49a4dca98b820964c0838fa</sum>
        </package>
        <package name="fuse-overlayfs" version="1.12" release="1.module_el8.9.0+3643+9234dc3b" epoch="0" arch="s390x" src="fuse-overlayfs-1.12-1.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>fuse-overlayfs-1.12-1.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">bfd8e44217b967b18fafebcf536754d9f13628dd8328d62104ef5434c5572cd6</sum>
        </package>
        <package name="podman" version="4.6.1" release="4.module_el8.9.0+3643+9234dc3b" epoch="3" arch="s390x" src="podman-4.6.1-4.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>podman-4.6.1-4.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">e1a1319b0eb88a675aecf13a3e8a8e58ac040a3a3637e096914ce2cc64f948e3</sum>
        </package>
        <package name="buildah-tests" version="1.31.3" release="1.module_el8.9.0+3643+9234dc3b" epoch="1" arch="s390x" src="buildah-1.31.3-1.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>buildah-tests-1.31.3-1.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">ee35632e55cc357ee2e7f7148a7762e3edb1a7f72c2eeab35ebd6079ac778c1d</sum>
        </package>
        <package name="podman-remote" version="4.6.1" release="4.module_el8.9.0+3643+9234dc3b" epoch="3" arch="s390x" src="podman-4.6.1-4.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>podman-remote-4.6.1-4.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">eec6b874df8932d911c44e34fb9c8800b1195238209fa11ad7a18bc5d1346166</sum>
        </package>
        <package name="python3-podman" version="4.6.0" release="1.module_el8.9.0+3643+9234dc3b" epoch="0" arch="noarch" src="python-podman-4.6.0-1.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>python3-podman-4.6.0-1.module_el8.9.0+3643+9234dc3b.noarch.rpm</filename>
          <sum type="sha256">ef7ee276ebc7e495f2ee31983420574bc1f855d228f09c52e9c8ef56acc1c20a</sum>
        </package>
        <package name="podman-docker" version="4.6.1" release="4.module_el8.9.0+3643+9234dc3b" epoch="3" arch="noarch" src="podman-4.6.1-4.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>podman-docker-4.6.1-4.module_el8.9.0+3643+9234dc3b.noarch.rpm</filename>
          <sum type="sha256">f75cac70207c87efef32df6c4129fa7494b93c4cfa7c58f6a421c535fb2a6c52</sum>
        </package>
        <package name="criu" version="3.18" release="4.module_el8.9.0+3643+9234dc3b" epoch="0" arch="s390x" src="criu-3.18-4.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>criu-3.18-4.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">fbd024ef6932bb2dd95b208e75fc68f16b512136eea6920d39e9ff55216f24b6</sum>
        </package>
        <package name="crit" version="3.18" release="4.module_el8.9.0+3643+9234dc3b" epoch="0" arch="s390x" src="criu-3.18-4.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>crit-3.18-4.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">fe7e61b434de6925a0923e1b84f6aa96f955e23b7bc4b0e16e7f311fe7580170</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6940</id>
    <title>Moderate: mod_auth_openidc:2.3 security and bug fix update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:19:17"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mod_auth_openidc:2.3 security and bug fix update</summary>
    <description>The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. 

Security Fix(es):

* mod_auth_openidc: Open Redirect in oidc_validate_redirect_url() using tab character (CVE-2022-23527)
* mod_auth_openidc: NULL pointer dereference when OIDCStripCookies is set and a crafted Cookie header is supplied (CVE-2023-28625)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6940" id="RHSA-2023:6940" type="rhsa" title="RHSA-2023:6940"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-23527" id="CVE-2022-23527" type="cve" title="CVE-2022-23527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28625" id="CVE-2023-28625" type="cve" title="CVE-2023-28625"/>
      <reference href="https://bugzilla.redhat.com/2153655" id="2153655" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184118" id="2184118" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6940.html" id="ALSA-2023:6940" type="self" title="ALSA-2023:6940"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="mod_auth_openidc" stream="2.3" version="8090020231017130740" context="9edba152" arch="s390x"/>
        <package name="mod_auth_openidc" version="2.4.9.4" release="5.module_el8.9.0+3631+0ced13d7" epoch="0" arch="s390x" src="mod_auth_openidc-2.4.9.4-5.module_el8.9.0+3631+0ced13d7.src.rpm">
          <filename>mod_auth_openidc-2.4.9.4-5.module_el8.9.0+3631+0ced13d7.s390x.rpm</filename>
          <sum type="sha256">2bca885eb9d8ad3ecbf09a882e8fed825e72d86af7923638316534ea4bc575b0</sum>
        </package>
        <package name="cjose" version="0.6.1" release="4.module_el8.9.0+3631+0ced13d7" epoch="0" arch="s390x" src="cjose-0.6.1-4.module_el8.9.0+3631+0ced13d7.src.rpm">
          <filename>cjose-0.6.1-4.module_el8.9.0+3631+0ced13d7.s390x.rpm</filename>
          <sum type="sha256">4d081700a8fb0babd3d14773b9d53b33ddd02d52eebae59fc99f7cd9b0d93b9f</sum>
        </package>
        <package name="cjose-devel" version="0.6.1" release="4.module_el8.9.0+3631+0ced13d7" epoch="0" arch="s390x" src="cjose-0.6.1-4.module_el8.9.0+3631+0ced13d7.src.rpm">
          <filename>cjose-devel-0.6.1-4.module_el8.9.0+3631+0ced13d7.s390x.rpm</filename>
          <sum type="sha256">ce03707da865baaa5be9a51305a4a868164b517be94280cd83e11e625f788c40</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6943</id>
    <title>Moderate: cloud-init security, bug fix, and enhancement update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:22:20"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>cloud-init security, bug fix, and enhancement update</summary>
    <description>The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts.

Security Fix(es):

* cloud-init: sensitive data could be exposed in logs (CVE-2023-1786)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6943" id="RHSA-2023:6943" type="rhsa" title="RHSA-2023:6943"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1786" id="CVE-2023-1786" type="cve" title="CVE-2023-1786"/>
      <reference href="https://bugzilla.redhat.com/2190079" id="2190079" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6943.html" id="ALSA-2023:6943" type="self" title="ALSA-2023:6943"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="cloud-init" version="23.1.1" release="10.el8.alma.1" epoch="0" arch="noarch" src="cloud-init-23.1.1-10.el8.alma.1.src.rpm">
          <filename>cloud-init-23.1.1-10.el8.alma.1.noarch.rpm</filename>
          <sum type="sha256">a68318ff8dbd9c5982a6478530e0a1b570b70fcbe1df5c0a4a8cae107125752c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6944</id>
    <title>Moderate: protobuf-c security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:19:18"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>protobuf-c security update</summary>
    <description>The protobuf-c packages provide C bindings for Google's Protocol Buffers.

Security Fix(es):

* protobuf-c: unsigned integer overflow in parse_required_member (CVE-2022-48468)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6944" id="RHSA-2023:6944" type="rhsa" title="RHSA-2023:6944"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48468" id="CVE-2022-48468" type="cve" title="CVE-2022-48468"/>
      <reference href="https://bugzilla.redhat.com/2186673" id="2186673" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6944.html" id="ALSA-2023:6944" type="self" title="ALSA-2023:6944"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="protobuf-c-devel" version="1.3.0" release="8.el8" epoch="0" arch="s390x" src="protobuf-c-1.3.0-8.el8.src.rpm">
          <filename>protobuf-c-devel-1.3.0-8.el8.s390x.rpm</filename>
          <sum type="sha256">1f2a101c8c9f74559865a207493310e132470dfd909a6ff3ffd8188ab06ea49c</sum>
        </package>
        <package name="protobuf-c-compiler" version="1.3.0" release="8.el8" epoch="0" arch="s390x" src="protobuf-c-1.3.0-8.el8.src.rpm">
          <filename>protobuf-c-compiler-1.3.0-8.el8.s390x.rpm</filename>
          <sum type="sha256">48f369d178a46c8157c95e2c486b06c851af138928fafcef4c3116cf0065db50</sum>
        </package>
        <package name="protobuf-c" version="1.3.0" release="8.el8" epoch="0" arch="s390x" src="protobuf-c-1.3.0-8.el8.src.rpm">
          <filename>protobuf-c-1.3.0-8.el8.s390x.rpm</filename>
          <sum type="sha256">f90bd83ebf0a82feb905c14e5d7250360661762c88e221b53562c930a8b81adf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6961</id>
    <title>Low: qt5-qtsvg security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:19:18"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>qt5-qtsvg security update</summary>
    <description>Scalable Vector Graphics (SVG) is an XML-based language for describing two-dimensional vector graphics. Qt provides classes for rendering and displaying SVG drawings in widgets and on other paint devices.

Security Fix(es):

* qt: Uninitialized variable usage in m_unitsPerEm (CVE-2023-32573)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6961" id="RHSA-2023:6961" type="rhsa" title="RHSA-2023:6961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32573" id="CVE-2023-32573" type="cve" title="CVE-2023-32573"/>
      <reference href="https://bugzilla.redhat.com/2208135" id="2208135" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6961.html" id="ALSA-2023:6961" type="self" title="ALSA-2023:6961"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="qt5-qtsvg-examples" version="5.15.3" release="2.el8" epoch="0" arch="s390x" src="qt5-qtsvg-5.15.3-2.el8.src.rpm">
          <filename>qt5-qtsvg-examples-5.15.3-2.el8.s390x.rpm</filename>
          <sum type="sha256">9bac0dfecade2edd93aae616b11a03e9530bf5f882165c709ab650370b70fe28</sum>
        </package>
        <package name="qt5-qtsvg" version="5.15.3" release="2.el8" epoch="0" arch="s390x" src="qt5-qtsvg-5.15.3-2.el8.src.rpm">
          <filename>qt5-qtsvg-5.15.3-2.el8.s390x.rpm</filename>
          <sum type="sha256">a6bb25cbe1f25f281c4f6dd2ac657a410349d517a6f516b388353c91c5ece7fe</sum>
        </package>
        <package name="qt5-qtsvg-devel" version="5.15.3" release="2.el8" epoch="0" arch="s390x" src="qt5-qtsvg-5.15.3-2.el8.src.rpm">
          <filename>qt5-qtsvg-devel-5.15.3-2.el8.s390x.rpm</filename>
          <sum type="sha256">c55a7b2af19609c1e03128180633aa8360513a94129b31ad494fda2d57e03974</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6967</id>
    <title>Moderate: qt5-qtbase security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 08:37:02"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt5-qtbase security update</summary>
    <description>Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. 

Security Fix(es):

* qt: buffer over-read via a crafted reply from a DNS server (CVE-2023-33285)
* qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410)
* qtbase: buffer overflow in QXmlStreamReader (CVE-2023-37369)
* qtbase: infinite loops in QXmlStreamReader (CVE-2023-38197)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6967" id="RHSA-2023:6967" type="rhsa" title="RHSA-2023:6967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33285" id="CVE-2023-33285" type="cve" title="CVE-2023-33285"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34410" id="CVE-2023-34410" type="cve" title="CVE-2023-34410"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37369" id="CVE-2023-37369" type="cve" title="CVE-2023-37369"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38197" id="CVE-2023-38197" type="cve" title="CVE-2023-38197"/>
      <reference href="https://bugzilla.redhat.com/2209488" id="2209488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212747" id="2212747" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222767" id="2222767" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2232173" id="2232173" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6967.html" id="ALSA-2023:6967" type="self" title="ALSA-2023:6967"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="qt5-qtbase-devel" version="5.15.3" release="5.el8" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-5.el8.src.rpm">
          <filename>qt5-qtbase-devel-5.15.3-5.el8.s390x.rpm</filename>
          <sum type="sha256">4fbce5431db497c0466bc3c61286de3e19d15ddf5984631eabb41d32edd99825</sum>
        </package>
        <package name="qt5-qtbase" version="5.15.3" release="5.el8" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-5.el8.src.rpm">
          <filename>qt5-qtbase-5.15.3-5.el8.s390x.rpm</filename>
          <sum type="sha256">5494d58feaa5c6957d442a3dc8eff8dddc2e413a6adfe5d6dd4a6f66c89fb658</sum>
        </package>
        <package name="qt5-qtbase-examples" version="5.15.3" release="5.el8" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-5.el8.src.rpm">
          <filename>qt5-qtbase-examples-5.15.3-5.el8.s390x.rpm</filename>
          <sum type="sha256">878eefb8b2bc9bff2caf6b025d7e71bbdac2fe4b6b4c57990927981e4baa5845</sum>
        </package>
        <package name="qt5-qtbase-common" version="5.15.3" release="5.el8" epoch="0" arch="noarch" src="qt5-qtbase-5.15.3-5.el8.src.rpm">
          <filename>qt5-qtbase-common-5.15.3-5.el8.noarch.rpm</filename>
          <sum type="sha256">a64567a8ec7e3c92b32b55bd231ab6f7f6c81550e73a50d2872546a924eeb6cf</sum>
        </package>
        <package name="qt5-qtbase-mysql" version="5.15.3" release="5.el8" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-5.el8.src.rpm">
          <filename>qt5-qtbase-mysql-5.15.3-5.el8.s390x.rpm</filename>
          <sum type="sha256">c69689382d0079f517c71a36e4c98fe49f155c5503ed701af7543a9bdc50b99b</sum>
        </package>
        <package name="qt5-qtbase-gui" version="5.15.3" release="5.el8" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-5.el8.src.rpm">
          <filename>qt5-qtbase-gui-5.15.3-5.el8.s390x.rpm</filename>
          <sum type="sha256">d55f2180426b14d52cec022712c72f760d7b0c5404f734bec523197c2b8aee7b</sum>
        </package>
        <package name="qt5-qtbase-private-devel" version="5.15.3" release="5.el8" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-5.el8.src.rpm">
          <filename>qt5-qtbase-private-devel-5.15.3-5.el8.s390x.rpm</filename>
          <sum type="sha256">de1eaa5dfc315ab4173932b1e3a0bbd82661bc0ccd32540c289b0c2e7a3c9024</sum>
        </package>
        <package name="qt5-qtbase-odbc" version="5.15.3" release="5.el8" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-5.el8.src.rpm">
          <filename>qt5-qtbase-odbc-5.15.3-5.el8.s390x.rpm</filename>
          <sum type="sha256">dfa12875adba52cfede54b5b553fd04f2f60d24245aa17f22d1ff59b748013a8</sum>
        </package>
        <package name="qt5-qtbase-postgresql" version="5.15.3" release="5.el8" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-5.el8.src.rpm">
          <filename>qt5-qtbase-postgresql-5.15.3-5.el8.s390x.rpm</filename>
          <sum type="sha256">f40be69156d6df68158f67258e63e2120dc0ef04fc96ebe5d9fd08ba5eaf8dc2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6972</id>
    <title>Moderate: grafana security and enhancement update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:44"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grafana security and enhancement update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB. 

Security Fix(es):

* grafana: account takeover possible when using Azure AD OAuth (CVE-2023-3128)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6972" id="RHSA-2023:6972" type="rhsa" title="RHSA-2023:6972"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3128" id="CVE-2023-3128" type="cve" title="CVE-2023-3128"/>
      <reference href="https://bugzilla.redhat.com/2213626" id="2213626" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6972.html" id="ALSA-2023:6972" type="self" title="ALSA-2023:6972"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="grafana" version="9.2.10" release="7.el8_9.alma.1" epoch="0" arch="s390x" src="grafana-9.2.10-7.el8_9.alma.1.src.rpm">
          <filename>grafana-9.2.10-7.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">932fa49326e6bb5128c627d2c0b216edb6031cf74ec04d4fb05901e6b78a7067</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6976</id>
    <title>Moderate: libfastjson security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:44"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libfastjson security update</summary>
    <description>The libfastjson library provides essential JavaScript Object Notation (JSON) handling functions. The library enables users to construct JSON objects in C, output them as JSON-formatted strings, and convert JSON-formatted strings back to the C representation of JSON objects.

Security Fix(es):

* json-c, libfastjson: integer overflow and out-of-bounds write via a large JSON file (CVE-2020-12762)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6976" id="RHSA-2023:6976" type="rhsa" title="RHSA-2023:6976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-12762" id="CVE-2020-12762" type="cve" title="CVE-2020-12762"/>
      <reference href="https://bugzilla.redhat.com/1835253" id="1835253" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6976.html" id="ALSA-2023:6976" type="self" title="ALSA-2023:6976"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="libfastjson" version="0.99.9" release="2.el8" epoch="0" arch="s390x" src="libfastjson-0.99.9-2.el8.src.rpm">
          <filename>libfastjson-0.99.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">1610718c934c95065160501e16229cbe7a648e36b5f66265ceb16edd2eb3d683</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6980</id>
    <title>Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-24 14:34:20"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>virt:rhel and virt-devel:rhel security, bug fix, and enhancement update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free (CVE-2021-3750)
* QEMU: net: triggerable assertion due to race condition in hot-unplug (CVE-2023-3301)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6980" id="RHSA-2023:6980" type="rhsa" title="RHSA-2023:6980"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3750" id="CVE-2021-3750" type="cve" title="CVE-2021-3750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3301" id="CVE-2023-3301" type="cve" title="CVE-2023-3301"/>
      <reference href="https://bugzilla.redhat.com/1999073" id="1999073" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2215784" id="2215784" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6980.html" id="ALSA-2023:6980" type="self" title="ALSA-2023:6980"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="virt" stream="rhel" version="8060020220803091505" context="9edba152" arch="s390x"/>
        <package name="libvirt-daemon-driver-storage" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-daemon-driver-storage-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">02c975952b145deec82fdbfae7787ba0b77ef896150afa046cec4372f64729d6</sum>
        </package>
        <package name="nbdkit-basic-plugins" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-basic-plugins-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">04adc669a1655a4f4dcadbdd520afd5f6f5dc82b44738fcabde3a280f36fb90f</sum>
        </package>
        <package name="python3-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>python3-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">05372f9ad377c74c0d221dacf23c7510171afbb751c03585fd3c09513d7e1bde</sum>
        </package>
        <package name="qemu-kvm-docs" version="6.2.0" release="40.module_el8.9.0+3681+41cbbcc0.1.alma.1" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.src.rpm">
          <filename>qemu-kvm-docs-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">072dd97762534a9523a4dc09bf0a623af07a1d70188cd9ce334863eea9493623</sum>
        </package>
        <package name="qemu-kvm-core" version="6.2.0" release="40.module_el8.9.0+3681+41cbbcc0.1.alma.1" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.src.rpm">
          <filename>qemu-kvm-core-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">08286c3d3652549a2d5e2fdee26d0982614dbb19e8e95778234d8b263e5007c4</sum>
        </package>
        <package name="libnbd-devel" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libnbd-devel-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">0c1f0ee145a6b54bb1a2b502a47bc75e63b75d7e6b2e8c60a6c053988fc3b6ab</sum>
        </package>
        <package name="libguestfs-tools" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-tools-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">116835a3e003417d7186479fbf47960a09588a3ace207d4f34da6a19ab8c07de</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-daemon-driver-storage-logical-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">13520814910fe65dfa565e61976aa9d5edffcf0f509122b99ea78580ce6c0daa</sum>
        </package>
        <package name="libvirt-nss" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-nss-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">14a1f016bd61816090d7a1d61f2114ecbde28e194ad27f0bb0004efc91ecd0a5</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-daemon-driver-nwfilter-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">1554b3a0b3daf082586e656dfe2456957788aec3e333176ab1931450422cf412</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="6.2.0" release="40.module_el8.9.0+3681+41cbbcc0.1.alma.1" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.src.rpm">
          <filename>qemu-kvm-block-curl-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">1562913b8e0ea49b67daeec21737e32b9d8d436c8f93ecfcd5284d4dd90a1d3e</sum>
        </package>
        <package name="netcf-devel" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-devel-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1888edc09e8d44539c2c7b84b7a8df91477b8a725fe93436ac4d71106e177d48</sum>
        </package>
        <package name="libguestfs-javadoc" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-javadoc-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">18b9d6c98999a3b289a865504944fb3dc9b2994eff5461933549add50c6faa5b</sum>
        </package>
        <package name="qemu-kvm-common" version="6.2.0" release="40.module_el8.9.0+3681+41cbbcc0.1.alma.1" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.src.rpm">
          <filename>qemu-kvm-common-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">1a654e3da1ef1a1a0d997b7422305af3fc610f3f12a7cb8e66b1d05c7418ed50</sum>
        </package>
        <package name="nbdkit" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">1a6f5649d6acd35dd28d2d99042056bc8308fe0910ce6322bf27b0ec71bbee4f</sum>
        </package>
        <package name="hivex-devel" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>hivex-devel-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1aa145aa6a3f900531fc1c8f1c161197f37539d113d47c14efd9c66def20940a</sum>
        </package>
        <package name="nbdfuse" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdfuse-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1d3157c38399bbfb00c7e7762135285383554b08b780fcf5eb390ce2f5845d23</sum>
        </package>
        <package name="libnbd" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">2220e7631c2178fe00b6e20d56043e2efc51bec8ccbe9c14dabccdb05ec81abf</sum>
        </package>
        <package name="nbdkit-python-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-python-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">23c394ecc23e544232d78956b610b1403324cb6a46a3d46adc0fd256f19a1e4b</sum>
        </package>
        <package name="nbdkit-tar-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tar-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">2521bcc64ce8e24df611cf9194277fd5f7856f3df3f72be3276748b10d23beb3</sum>
        </package>
        <package name="nbdkit-bash-completion" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="noarch" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-bash-completion-1.24.0-5.module_el8.8.0+3485+7cffc4a3.noarch.rpm</filename>
          <sum type="sha256">254dfbf64036ae05d930d81be90202718fba7b341f0457de4a29ecfca3aea646</sum>
        </package>
        <package name="nbdkit-xz-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-xz-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">263ad615e21aaba0dce020cf1ad8b569c3860640d8074e9f74035ff925c409d0</sum>
        </package>
        <package name="libtpms-devel" version="0.9.1" release="2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3" epoch="0" arch="s390x" src="libtpms-0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3.src.rpm">
          <filename>libtpms-devel-0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3.s390x.rpm</filename>
          <sum type="sha256">269f20560a0beff0b38ed88964a0be1d0318c9057569bd209332e0a87ddbae0b</sum>
        </package>
        <package name="nbdkit-gzip-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-gzip-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">27675a3171d769e7f9ea9b7fa63303b3e51f8221a68feaee1f16aeb7d658dccb</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="6.2.0" release="40.module_el8.9.0+3681+41cbbcc0.1.alma.1" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.src.rpm">
          <filename>qemu-kvm-block-rbd-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">28a0f7031f99c3800586ceca668110610d785b14a66af26f4a457d454282655c</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-daemon-driver-interface-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">28e1103ad98a957aff8f0e3e0695c095182870348f8672af0cf8a241e8c2a07d</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-daemon-kvm-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">2afd9d013b4f82c8e39eb2af71ef3a4367be94453f028fbdf70487650fb70f0d</sum>
        </package>
        <package name="lua-guestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>lua-guestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">36d15a85e154608cf2bc661120c8a573356cb3e0e1dc77a94387aa3c8bce90ef</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">3ccd4da27747c60c2a90623e319ecc2eff6d6bc51d1e7d322f7e473ceb7b653d</sum>
        </package>
        <package name="libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">40e3ffa7c3e67b0fe9a110dbe8bf267fa9906f358a3bd81135b33a624e6429ba</sum>
        </package>
        <package name="libvirt-docs" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-docs-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">42938a112e55f94a1fdb0db6e8dcda4639484e7d4af8d1d9b98a9c2208d127ed</sum>
        </package>
        <package name="ruby-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ruby-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">4428b40d29de3a3eda15340b2cbacebe838ba363b3897a1a91f904b9f2b4f8b9</sum>
        </package>
        <package name="nbdkit-basic-filters" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-basic-filters-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">494ad345b2b9b009436ba9a8c8c6bb245e8617e921dae51ab6d9281e95999f31</sum>
        </package>
        <package name="libvirt-lock-sanlock" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-lock-sanlock-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">4aae7e5a22e0f78510c8bdc4ee99775172968d39416e76aaf175b25bbd818415</sum>
        </package>
        <package name="nbdkit-curl-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-curl-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">4fd1a6bbe855d7c4068fcf080b4b0b15b367ef7f635ac869b7bddb1698dafa01</sum>
        </package>
        <package name="libguestfs-bash-completion" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-bash-completion-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">5a67ce33e944ee07d6ea976afa13f8c832ce4be22f124591ace620dfe08b5178</sum>
        </package>
        <package name="libguestfs-gobject-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gobject-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">5e05d955e58bc16ccb3e4097f338dd34af18225ef9bcd2b420d794a9efdd269b</sum>
        </package>
        <package name="python3-libnbd" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>python3-libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">5e93f1875db0f5a6e64e8d785a745072133d63b53e30cf6a7984ebd2e8119320</sum>
        </package>
        <package name="qemu-guest-agent" version="6.2.0" release="40.module_el8.9.0+3681+41cbbcc0.1.alma.1" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.src.rpm">
          <filename>qemu-guest-agent-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">5f986ee017f781ccdd127228f47d01a04647c785b2d1505b7c008fa934b29dae</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">682f177f1b6c936d0a8024ead0a3df723a7821692e84f8bb26ec0c11dadebc0c</sum>
        </package>
        <package name="libvirt-wireshark" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-wireshark-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">6df132c260e1019f6279e13e118fd5afd55f6b05d2cb0240c301d66b1b31239f</sum>
        </package>
        <package name="nbdkit-tmpdisk-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tmpdisk-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">6f4728c5aa7cc03d70b241d6947aff1fe49546aac4cc62bd01a59c1b1b73ba35</sum>
        </package>
        <package name="libguestfs-java-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-java-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">6fc6fe19b2e83d70d5f240d776ccc00a181870a485d39667fccb62ec0b851f02</sum>
        </package>
        <package name="nbdkit-server" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-server-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">706c1dd5780f1e48f883702f6c86a985bd057078fcd41326947b283625a77e05</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">7760a87a620dcafd05560f1ce876c258b3c7b76f89df16bf523af3bb4c39f916</sum>
        </package>
        <package name="perl-Sys-Guestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>perl-Sys-Guestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">77c035cdcf2f7e819dcb6d76b9ba12ae63a6f07d615a9a435b7ec2dc8ca93330</sum>
        </package>
        <package name="libguestfs-gfs2" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gfs2-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">7ee36ba216591f26a055c687e5e75e054585c69c86b085d8966cb419ddeb3362</sum>
        </package>
        <package name="libguestfs-gobject" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gobject-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">8292ca96b97184b2ca5475901b46b09f715adbe99d1a5983c9ad4a0d2b3d72bb</sum>
        </package>
        <package name="netcf-libs" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-libs-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">843b61e4019e8cec44d5f5823d3c8c0b803997791aecef6ff1023224147cd6f8</sum>
        </package>
        <package name="nbdkit-linuxdisk-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-linuxdisk-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">8673003aa4610f82cbe152021387ac3c6c59d730a79b446aad432030e20f5eff</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-daemon-config-nwfilter-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">8707d7043e77b31efc55b2b350e439e5bc7c4ecd45374b03bd5ceef9e1129a4b</sum>
        </package>
        <package name="swtpm-tools" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-tools-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">87ce1c2ecc368965a92cf71a29a7cb1331508c7c86394cfaa7e4e87d20897d7b</sum>
        </package>
        <package name="nbdkit-tar-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tar-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">87ec102223607b5d8760ee3d8998a48b3fbce6a1abe6d8056782c1d9f94513ad</sum>
        </package>
        <package name="supermin-devel" version="5.2.1" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="supermin-5.2.1-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>supermin-devel-5.2.1-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">8a47307269cf95719225e1e27dcd1cebdf6a0481948e4a044db972af12de9ce3</sum>
        </package>
        <package name="libguestfs-man-pages-uk" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-man-pages-uk-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">8cd1a80b657a0373e6dcf0b6699e7574c9874db489201985b16bc1d1d78cc55b</sum>
        </package>
        <package name="swtpm-tools-pkcs11" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-tools-pkcs11-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">8e7eeb060f1253ff8a48085d0b452c2ba2c1837e286fd23d91426f255d72398a</sum>
        </package>
        <package name="libguestfs-rescue" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-rescue-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">92093c28f6226504668df61e0bc2c5d1e7d8bf505a8bf762cdd5d2e7a50bb52f</sum>
        </package>
        <package name="netcf" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">9268b4ab854af88a5e511f78b47cf3c4acd66d76f7ea901452f6efd3f9c8bc7c</sum>
        </package>
        <package name="libguestfs-man-pages-ja" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-man-pages-ja-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">968dd115e865d941a07d1728940d84bdfef4f26d43d39aa225f4f4a5a821c89d</sum>
        </package>
        <package name="libguestfs-rsync" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-rsync-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">9cc94d5cec35a9f048fa74c69a8b7d6a0ec48c14074297bb564b91f4cdc4c54f</sum>
        </package>
        <package name="hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">9d259d5ff0ee30b3a2a8e5f897675750f74741ed06d50d3623cf469d1d0f01d8</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-daemon-driver-storage-disk-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">9d79e19f18a1fd021d5e60e8ba6c8cbf11f04660ac40fbde385eea3b9b836383</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-daemon-driver-qemu-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">9fe370cbc10739d350786f38cf75b3cf3d64305535731fd2b1bc69f91a40f9ca</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-daemon-driver-secret-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">a11199c3fd44fd9ee30126815bb94f153a41e61a3ebfe3b88fde67c0697bbdd1</sum>
        </package>
        <package name="libiscsi" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">a1c871e87ebd136bfd498f13824563fd7428fcaf66bcffb341cfbb8370c2a18d</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="6.2.0" release="40.module_el8.9.0+3681+41cbbcc0.1.alma.1" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.src.rpm">
          <filename>qemu-kvm-block-iscsi-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">a3220b65f49b4376e536d383caffec220458db8f7448bd90b1c3d71b6c18ade8</sum>
        </package>
        <package name="qemu-kvm" version="6.2.0" release="40.module_el8.9.0+3681+41cbbcc0.1.alma.1" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.src.rpm">
          <filename>qemu-kvm-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">a6886a5e4be4b7c7c4f9d66601f80f3db4729a61d16baa524ad7a050ad7e9175</sum>
        </package>
        <package name="swtpm" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">a7fbed17619ce4d6d7d43a459be652ec92882b41903ac386ebfd9815806bc622</sum>
        </package>
        <package name="perl-Sys-Virt" version="8.0.0" release="1.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="perl-Sys-Virt-8.0.0-1.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>perl-Sys-Virt-8.0.0-1.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">a8b115eb9ca2707d1d7f800ac1b7730dcc6718168ff355f065464e6778ef5929</sum>
        </package>
        <package name="nbdkit-nbd-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-nbd-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">a9427bee7f157a63f2acd2357032ce829e0561b24193d204072502adad4aa52e</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">ad8c6c1a814978f73b2a96b3627e1a643f193c6ccd7923c9e5906065f8e88a57</sum>
        </package>
        <package name="nbdkit-example-plugins" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-example-plugins-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">b10c0d094e84d5c035dae70b4db36c311eb7ff9cbee00c8443848f049a600ae4</sum>
        </package>
        <package name="libvirt-client" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-client-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">b36a8f1fcc8db9c23be6a3687c0727f26301a54a4f8ed8d351e82dbb8c7dd041</sum>
        </package>
        <package name="libguestfs-appliance" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-appliance-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">b5add06502e5bda5f39f712640e2ab0e8cf539b7a90370c6c1fd963bb73bc7d7</sum>
        </package>
        <package name="libiscsi-utils" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-utils-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">b6eb101dc2787a7d79b4fe51913319933f5927d1816ea03592d2be849ce21faf</sum>
        </package>
        <package name="ruby-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ruby-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">b8696f7658b7872cb5f4e9fe2319e00ec6b668fe0e9adea787890cb9500e0223</sum>
        </package>
        <package name="nbdkit-ssh-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-ssh-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">b9b590364d69f18da851dea269d4774ff711f44e3ace9b3304e87fe25f26aaa5</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-daemon-driver-network-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">bc2dd6bfb8b68938a325de62a34fcc92ecbd41be2263049b73585a26eee58551</sum>
        </package>
        <package name="virt-dib" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>virt-dib-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">bf4b5929cf910fb7e4671e32c9ac2ce2f456e8b1e577cb0f4f33a0df8d316c27</sum>
        </package>
        <package name="libguestfs-java" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-java-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">bfc05f2dc57991bad44654221ea88f653c916e80637290b69c96e3e0f5aa55a8</sum>
        </package>
        <package name="libvirt-libs" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-libs-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">c0ae068b87bf20f08b55ef24be88be7a89caa402c962ac57a780c8d38cc0b730</sum>
        </package>
        <package name="libvirt-dbus" version="1.3.0" release="2.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libvirt-dbus-1.3.0-2.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libvirt-dbus-1.3.0-2.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">c20042be5784c1f4323e5590891be2a0e33244acff6b45149f36a2eef834064b</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-daemon-driver-nodedev-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">c3fe809551615ab5dfb2b81f944a327a81bc13b74c75d583dd4f4aaf35d4b40a</sum>
        </package>
        <package name="libtpms" version="0.9.1" release="2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3" epoch="0" arch="s390x" src="libtpms-0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3.src.rpm">
          <filename>libtpms-0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3.s390x.rpm</filename>
          <sum type="sha256">c3ffd3692f5d8a7b71c37dad7b8413e74a7099fbb3af07604cec46ee00eb50fd</sum>
        </package>
        <package name="libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">c685dcd2fb41a700a866919788441d7c80c9a10b9757ea843e7a56c67a5d4be2</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">c85f2ed9ce44ad7a5d5bcb33bb55ba565ddc5a19bd6e6544904e5684c5b2f96d</sum>
        </package>
        <package name="libvirt-devel" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-devel-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">cb24e68f98589cec14c9a9d4171c849f0845e97d4d4fbd0bdd159d74600050af</sum>
        </package>
        <package name="swtpm-libs" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-libs-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">d077f2d1f54aa47907a883e12d46f0632e33ad5141bd16a25759a580f851b91c</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-gluster" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-daemon-driver-storage-gluster-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">d3ff725a5a9eec8111487aeaee9edfda4634f66aa5d6ef4553b4cfba6d549bac</sum>
        </package>
        <package name="libiscsi-devel" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-devel-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">d45a7d8438477f375ed86276eea276fd3bb0965844cb8733a09691fc68d730db</sum>
        </package>
        <package name="nbdkit-devel" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-devel-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">d5bc58eda3110ad1589ab9d239e347e155bf59eaee69e0bea028f67d9e0ea216</sum>
        </package>
        <package name="swtpm-devel" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-devel-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">d69840154560e2ca3f4ea1315bfcca103b2260692f2c3d5fa1a76dbed7ddfbe1</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-daemon-driver-storage-core-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">d743541f8330924033e42419c2a3c06a3a4b63c1e97d38df5ce8349e95c352cb</sum>
        </package>
        <package name="qemu-img" version="6.2.0" release="40.module_el8.9.0+3681+41cbbcc0.1.alma.1" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.src.rpm">
          <filename>qemu-img-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">d7648146cd3a508e8bdc8caa5864b32088ed192dbdb2ee53c6a9eba058fa5bdd</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-daemon-config-network-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">d917b6d6465814eae81dc8882e9e6cce3f2418e1b8440ceffa4eabce6d78a845</sum>
        </package>
        <package name="supermin" version="5.2.1" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="supermin-5.2.1-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>supermin-5.2.1-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">e15b529769bbaa1d035eb7e4d4f58f4757e58772523d45cb07cc7533eeef0057</sum>
        </package>
        <package name="python3-libvirt" version="8.0.0" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="libvirt-python-8.0.0-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>python3-libvirt-8.0.0-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">e36c5a8c03f3393622b5dd5badefcd4a05ee01b8de17de28812017ddfda63954</sum>
        </package>
        <package name="python3-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>python3-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">ec11102e66953715d97704c820c0effcd80944fdd525efca9645f70b1cfa2fa9</sum>
        </package>
        <package name="libvirt" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">ecc71e3bc4dfa562c8c0e952252f02a09e9ebf5b54d3113ae69ea23d6dd59f21</sum>
        </package>
        <package name="libguestfs-inspect-icons" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-inspect-icons-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">ece57f7c833d85599725786783875d496fd9d38644cdc96ce23e4d73c6d5e4c9</sum>
        </package>
        <package name="nbdkit-gzip-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-gzip-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">f3befb065571d5207296b7d7f2db60348cb935ec26b3fcf7a5db2f66dbec7dc5</sum>
        </package>
        <package name="libguestfs-xfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-xfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">fa8ce4ce15f9b8d5753db18aa569fdbb4c636e16d88c6bb83fc588c594c1ee90</sum>
        </package>
        <package name="libguestfs-winsupport" version="8.9" release="1.module_el8.9.0+3662+ef5fc290.alma.1" epoch="0" arch="s390x" src="libguestfs-winsupport-8.9-1.module_el8.9.0+3662+ef5fc290.alma.1.src.rpm">
          <filename>libguestfs-winsupport-8.9-1.module_el8.9.0+3662+ef5fc290.alma.1.s390x.rpm</filename>
          <sum type="sha256">fafa208a92a34918f20656e59682ff9b228b29e764bc7758c7321be077fa95c4</sum>
        </package>
        <package name="perl-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>perl-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">fcc1bade9f3d715b09d2679d6efc9fd94b2faa9e912dcae68dbc372613f90965</sum>
        </package>
        <package name="libguestfs-tools-c" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-tools-c-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">fce060540b90878b0d21bfa525965ac06b8622b0a7cf824c54761c92b79f0764</sum>
        </package>
        <package name="libvirt-daemon" version="8.0.0" release="22.module_el8.9.0+3662+ef5fc290" epoch="0" arch="s390x" src="libvirt-8.0.0-22.module_el8.9.0+3662+ef5fc290.src.rpm">
          <filename>libvirt-daemon-8.0.0-22.module_el8.9.0+3662+ef5fc290.s390x.rpm</filename>
          <sum type="sha256">fe9d9250155763a3d2a09a159f4340502ceecc31f38d9544d6a49809fff34ce2</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="6.2.0" release="40.module_el8.9.0+3681+41cbbcc0.1.alma.1" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.src.rpm">
          <filename>qemu-kvm-block-ssh-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">ff65143cd520364604908f47eda62e58102b2e7c5da0e348b6a0551487e430b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7010</id>
    <title>Moderate: sysstat security and bug fix update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:44"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>sysstat security and bug fix update</summary>
    <description>The sysstat packages provide the sar and iostat commands. These commands enable system monitoring of disk, network, and other I/O activity.

Security Fix(es):

* sysstat: check_overflow() function can work incorrectly that lead to an overflow (CVE-2023-33204)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7010" id="RHSA-2023:7010" type="rhsa" title="RHSA-2023:7010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33204" id="CVE-2023-33204" type="cve" title="CVE-2023-33204"/>
      <reference href="https://bugzilla.redhat.com/2208270" id="2208270" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7010.html" id="ALSA-2023:7010" type="self" title="ALSA-2023:7010"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="sysstat" version="11.7.3" release="11.el8" epoch="0" arch="s390x" src="sysstat-11.7.3-11.el8.src.rpm">
          <filename>sysstat-11.7.3-11.el8.s390x.rpm</filename>
          <sum type="sha256">0ece6c0bf1ed8e2d85bd0b2e97054edb598dbd71122cba85cc93ef5b1f36efa6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7015</id>
    <title>Moderate: wireshark security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>wireshark security update</summary>
    <description>The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.

Security Fix(es):

* wireshark: RTPS dissector crash (CVE-2023-0666)
* wireshark: VMS TCPIPtrace file parser crash (CVE-2023-2856)
* wireshark: NetScaler file parser crash (CVE-2023-2858)
* wireshark: XRA dissector infinite loop (CVE-2023-2952)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7015" id="RHSA-2023:7015" type="rhsa" title="RHSA-2023:7015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0666" id="CVE-2023-0666" type="cve" title="CVE-2023-0666"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2856" id="CVE-2023-2856" type="cve" title="CVE-2023-2856"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2858" id="CVE-2023-2858" type="cve" title="CVE-2023-2858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2952" id="CVE-2023-2952" type="cve" title="CVE-2023-2952"/>
      <reference href="https://bugzilla.redhat.com/2210824" id="2210824" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210829" id="2210829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210832" id="2210832" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2211406" id="2211406" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7015.html" id="ALSA-2023:7015" type="self" title="ALSA-2023:7015"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="wireshark" version="2.6.2" release="17.el8" epoch="1" arch="s390x" src="wireshark-2.6.2-17.el8.src.rpm">
          <filename>wireshark-2.6.2-17.el8.s390x.rpm</filename>
          <sum type="sha256">14ef465d44b308aba0abfc3ab1be3e42a965a66fcf5e20a50bdcbb5927d17391</sum>
        </package>
        <package name="wireshark-cli" version="2.6.2" release="17.el8" epoch="1" arch="s390x" src="wireshark-2.6.2-17.el8.src.rpm">
          <filename>wireshark-cli-2.6.2-17.el8.s390x.rpm</filename>
          <sum type="sha256">5b6279924de9a1600b6e323d7fcc71b700de052d379aaae0922c45540b91a3ee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7016</id>
    <title>Low: libpq security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:19:00"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libpq security update</summary>
    <description>The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. 

Security Fix(es):

* postgresql: Client memory disclosure when connecting with Kerberos to modified server (CVE-2022-41862)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7016" id="RHSA-2023:7016" type="rhsa" title="RHSA-2023:7016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41862" id="CVE-2022-41862" type="cve" title="CVE-2022-41862"/>
      <reference href="https://bugzilla.redhat.com/2165722" id="2165722" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7016.html" id="ALSA-2023:7016" type="self" title="ALSA-2023:7016"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="libpq" version="13.11" release="1.el8.alma.1" epoch="0" arch="s390x" src="libpq-13.11-1.el8.alma.1.src.rpm">
          <filename>libpq-13.11-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">90f5aa35b45385de396d8b4a8db1c9f19c9dafd03cacf0be03284f5d434d68e6</sum>
        </package>
        <package name="libpq-devel" version="13.11" release="1.el8.alma.1" epoch="0" arch="s390x" src="libpq-13.11-1.el8.alma.1.src.rpm">
          <filename>libpq-devel-13.11-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">ef34b3bd8a2c2b19acf8bfe56d21735b51df49e2b19d8a7f58e11dd43b46a366</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7022</id>
    <title>Moderate: tang security and bug fix update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:45"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>tang security and bug fix update</summary>
    <description>Tang is a server for binding data to network presence. It includes a daemon which provides cryptographic operations for binding to a remote service. The tang package provides the server side of the Network Bound Disk Encryption (NBDE) project.

Security Fix(es):

* tang: Race condition exists in the key generation and rotation functionality (CVE-2023-1672)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7022" id="RHSA-2023:7022" type="rhsa" title="RHSA-2023:7022"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1672" id="CVE-2023-1672" type="cve" title="CVE-2023-1672"/>
      <reference href="https://bugzilla.redhat.com/2180999" id="2180999" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7022.html" id="ALSA-2023:7022" type="self" title="ALSA-2023:7022"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="tang" version="7" release="8.el8" epoch="0" arch="s390x" src="tang-7-8.el8.src.rpm">
          <filename>tang-7-8.el8.s390x.rpm</filename>
          <sum type="sha256">2fae1965ac51f9e29730214f5456c17016b814d7f07eeeae5b4ce523f0b4d89b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7024</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:22:45"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: tarfile module directory traversal (CVE-2007-4559)
* python: file path truncation at \0 characters (CVE-2023-41105)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7024" id="RHSA-2023:7024" type="rhsa" title="RHSA-2023:7024"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2007-4559" id="CVE-2007-4559" type="cve" title="CVE-2007-4559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41105" id="CVE-2023-41105" type="cve" title="CVE-2023-41105"/>
      <reference href="https://bugzilla.redhat.com/2235795" id="2235795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/263261" id="263261" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7024.html" id="ALSA-2023:7024" type="self" title="ALSA-2023:7024"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="python3.11-tkinter" version="3.11.5" release="1.el8_9" epoch="0" arch="s390x" src="python3.11-3.11.5-1.el8_9.src.rpm">
          <filename>python3.11-tkinter-3.11.5-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">41eb1f632155df1b0d2d483aa2e980402538373516041e7614f0ea96ca768fe7</sum>
        </package>
        <package name="python3.11" version="3.11.5" release="1.el8_9" epoch="0" arch="s390x" src="python3.11-3.11.5-1.el8_9.src.rpm">
          <filename>python3.11-3.11.5-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">935178a98de42e67c55ea6bb9355fd39eb53f189c30335fb503f88a16739625e</sum>
        </package>
        <package name="python3.11-rpm-macros" version="3.11.5" release="1.el8_9" epoch="0" arch="noarch" src="python3.11-3.11.5-1.el8_9.src.rpm">
          <filename>python3.11-rpm-macros-3.11.5-1.el8_9.noarch.rpm</filename>
          <sum type="sha256">a43374393cc5fe31009fb017b71c7efce6fc5d77bae118e9c99c6e0e57af11b7</sum>
        </package>
        <package name="python3.11-libs" version="3.11.5" release="1.el8_9" epoch="0" arch="s390x" src="python3.11-3.11.5-1.el8_9.src.rpm">
          <filename>python3.11-libs-3.11.5-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">cb155d04a8877172512420d511ba489b9b5d0d33192889584fb86557b208dd0f</sum>
        </package>
        <package name="python3.11-devel" version="3.11.5" release="1.el8_9" epoch="0" arch="s390x" src="python3.11-3.11.5-1.el8_9.src.rpm">
          <filename>python3.11-devel-3.11.5-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">cf639d26416f7b44008a8bc02ffa0620ff2278a26d2c6b24aa50d5ee51e85ffb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7025</id>
    <title>Moderate: ruby:2.5 security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 09:46:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby:2.5 security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

* ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
* ruby: Buffer overrun in String-to-Float conversion (CVE-2022-28739)
* ruby: ReDoS vulnerability in URI (CVE-2023-28755)
* ruby: ReDoS vulnerability in Time (CVE-2023-28756)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7025" id="RHSA-2023:7025" type="rhsa" title="RHSA-2023:7025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33621" id="CVE-2021-33621" type="cve" title="CVE-2021-33621"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28739" id="CVE-2022-28739" type="cve" title="CVE-2022-28739"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28755" id="CVE-2023-28755" type="cve" title="CVE-2023-28755"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28756" id="CVE-2023-28756" type="cve" title="CVE-2023-28756"/>
      <reference href="https://bugzilla.redhat.com/2075687" id="2075687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2149706" id="2149706" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184059" id="2184059" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184061" id="2184061" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7025.html" id="ALSA-2023:7025" type="self" title="ALSA-2023:7025"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="ruby" stream="2.5" version="8090020231017131105" context="9edba152" arch="s390x"/>
        <package name="rubygem-openssl" version="2.1.2" release="111.module_el8.9.0+3635+c6f99506" epoch="0" arch="s390x" src="ruby-2.5.9-111.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygem-openssl-2.1.2-111.module_el8.9.0+3635+c6f99506.s390x.rpm</filename>
          <sum type="sha256">01cbf00a287542be76b9cb364ed30554c687d441b273c962c0402037322fb12f</sum>
        </package>
        <package name="rubygem-json" version="2.1.0" release="111.module_el8.9.0+3635+c6f99506" epoch="0" arch="s390x" src="ruby-2.5.9-111.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygem-json-2.1.0-111.module_el8.9.0+3635+c6f99506.s390x.rpm</filename>
          <sum type="sha256">07553bf94e4b5dbfbb936432dbd61e246685d49fe1216cde871a917c762e5d1a</sum>
        </package>
        <package name="ruby" version="2.5.9" release="111.module_el8.9.0+3635+c6f99506" epoch="0" arch="s390x" src="ruby-2.5.9-111.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>ruby-2.5.9-111.module_el8.9.0+3635+c6f99506.s390x.rpm</filename>
          <sum type="sha256">0b103e569b06af3a9238601c445cdb402dc5fa7c680631dd8112773df5ab0e8f</sum>
        </package>
        <package name="rubygem-test-unit" version="3.2.7" release="111.module_el8.9.0+3635+c6f99506" epoch="0" arch="noarch" src="ruby-2.5.9-111.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygem-test-unit-3.2.7-111.module_el8.9.0+3635+c6f99506.noarch.rpm</filename>
          <sum type="sha256">29d27ceb382459a52843f69c30a8b3d2cb12afce413095b77381d574ccb44c39</sum>
        </package>
        <package name="rubygem-xmlrpc" version="0.3.0" release="111.module_el8.9.0+3635+c6f99506" epoch="0" arch="noarch" src="ruby-2.5.9-111.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygem-xmlrpc-0.3.0-111.module_el8.9.0+3635+c6f99506.noarch.rpm</filename>
          <sum type="sha256">40f6257757a0f7e1cc6161624bea2bc16540be4a176fad6253cc4ff5124ead0e</sum>
        </package>
        <package name="rubygem-rdoc" version="6.0.1.1" release="111.module_el8.9.0+3635+c6f99506" epoch="0" arch="noarch" src="ruby-2.5.9-111.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygem-rdoc-6.0.1.1-111.module_el8.9.0+3635+c6f99506.noarch.rpm</filename>
          <sum type="sha256">543cbbe26bf7eced873650721b8fc29f04e3072ccabe7340ecde7d0889381e59</sum>
        </package>
        <package name="rubygems" version="2.7.6.3" release="111.module_el8.9.0+3635+c6f99506" epoch="0" arch="noarch" src="ruby-2.5.9-111.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygems-2.7.6.3-111.module_el8.9.0+3635+c6f99506.noarch.rpm</filename>
          <sum type="sha256">5b130fa4e47acad303fa0c35cb4b7e588faf59cf048b2b0a699c45cb695b6fd3</sum>
        </package>
        <package name="rubygem-rake" version="12.3.3" release="111.module_el8.9.0+3635+c6f99506" epoch="0" arch="noarch" src="ruby-2.5.9-111.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygem-rake-12.3.3-111.module_el8.9.0+3635+c6f99506.noarch.rpm</filename>
          <sum type="sha256">5cdedd315412204a8f8fef3fc202bf63cf7f135e2725e413a0462c8b84904b60</sum>
        </package>
        <package name="ruby-devel" version="2.5.9" release="111.module_el8.9.0+3635+c6f99506" epoch="0" arch="s390x" src="ruby-2.5.9-111.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>ruby-devel-2.5.9-111.module_el8.9.0+3635+c6f99506.s390x.rpm</filename>
          <sum type="sha256">5eab1ea01c812f2e942acb9f6c9e7904196dbb9a8e14f0f554b03e197b0503cb</sum>
        </package>
        <package name="ruby-irb" version="2.5.9" release="111.module_el8.9.0+3635+c6f99506" epoch="0" arch="noarch" src="ruby-2.5.9-111.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>ruby-irb-2.5.9-111.module_el8.9.0+3635+c6f99506.noarch.rpm</filename>
          <sum type="sha256">6b215da44ed238db71e3f3a5a002d3976a51d8d08d3c0d02d63c4c0ab1061709</sum>
        </package>
        <package name="rubygem-minitest" version="5.10.3" release="111.module_el8.9.0+3635+c6f99506" epoch="0" arch="noarch" src="ruby-2.5.9-111.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygem-minitest-5.10.3-111.module_el8.9.0+3635+c6f99506.noarch.rpm</filename>
          <sum type="sha256">6e15886869caa6be1eaa50c569112019fd6a37018efa1e096987693183581db5</sum>
        </package>
        <package name="ruby-libs" version="2.5.9" release="111.module_el8.9.0+3635+c6f99506" epoch="0" arch="s390x" src="ruby-2.5.9-111.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>ruby-libs-2.5.9-111.module_el8.9.0+3635+c6f99506.s390x.rpm</filename>
          <sum type="sha256">7bff68103de7dcb23e604bdb60744f9aa15c614203a01f9c19d793148415093a</sum>
        </package>
        <package name="ruby-doc" version="2.5.9" release="111.module_el8.9.0+3635+c6f99506" epoch="0" arch="noarch" src="ruby-2.5.9-111.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>ruby-doc-2.5.9-111.module_el8.9.0+3635+c6f99506.noarch.rpm</filename>
          <sum type="sha256">80511445bd11081b3d16a7b7a2640ef22b830bf6f71ee39c29c7fe636a04259e</sum>
        </package>
        <package name="rubygem-bson" version="4.3.0" release="2.module_el8.6.0+3170+4b08f9d4" epoch="0" arch="s390x" src="rubygem-bson-4.3.0-2.module_el8.6.0+3170+4b08f9d4.src.rpm">
          <filename>rubygem-bson-4.3.0-2.module_el8.6.0+3170+4b08f9d4.s390x.rpm</filename>
          <sum type="sha256">871397eff83a497bf29db2e02e81837d1648c1813afa6030e2bab44d3f0db282</sum>
        </package>
        <package name="rubygem-io-console" version="0.4.6" release="111.module_el8.9.0+3635+c6f99506" epoch="0" arch="s390x" src="ruby-2.5.9-111.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygem-io-console-0.4.6-111.module_el8.9.0+3635+c6f99506.s390x.rpm</filename>
          <sum type="sha256">8c2051e21efdde951fc63bad0118f5e9f880cf5b2756193ce4df8b0dc0583316</sum>
        </package>
        <package name="rubygem-pg-doc" version="1.0.0" release="3.module_el8.9.0+3635+c6f99506" epoch="0" arch="noarch" src="rubygem-pg-1.0.0-3.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygem-pg-doc-1.0.0-3.module_el8.9.0+3635+c6f99506.noarch.rpm</filename>
          <sum type="sha256">8d04b2fdb59f2b51995d4fc57a412831e5d4d1c9d80fea1bcd0a7f5beaa55ab7</sum>
        </package>
        <package name="rubygem-did_you_mean" version="1.2.0" release="111.module_el8.9.0+3635+c6f99506" epoch="0" arch="noarch" src="ruby-2.5.9-111.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygem-did_you_mean-1.2.0-111.module_el8.9.0+3635+c6f99506.noarch.rpm</filename>
          <sum type="sha256">c2f6ff61e39e1be0072a57506cd3b8e94c3f5f16f6f0156d248cce0f92b5b383</sum>
        </package>
        <package name="rubygem-pg" version="1.0.0" release="3.module_el8.9.0+3635+c6f99506" epoch="0" arch="s390x" src="rubygem-pg-1.0.0-3.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygem-pg-1.0.0-3.module_el8.9.0+3635+c6f99506.s390x.rpm</filename>
          <sum type="sha256">d52a51f8cfdbeb3099ce92946748481f426b77c9da23f77737fe3d4fcd1b245c</sum>
        </package>
        <package name="rubygems-devel" version="2.7.6.3" release="111.module_el8.9.0+3635+c6f99506" epoch="0" arch="noarch" src="ruby-2.5.9-111.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygems-devel-2.7.6.3-111.module_el8.9.0+3635+c6f99506.noarch.rpm</filename>
          <sum type="sha256">d54f7d85eb7330f0f3cd63928df9dc850c07aa129a84091f75ca277c1f052ac7</sum>
        </package>
        <package name="rubygem-bigdecimal" version="1.3.4" release="111.module_el8.9.0+3635+c6f99506" epoch="0" arch="s390x" src="ruby-2.5.9-111.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygem-bigdecimal-1.3.4-111.module_el8.9.0+3635+c6f99506.s390x.rpm</filename>
          <sum type="sha256">d6d02dddf68dbc43f3cb3d0922a90a1a3283bc07469d2e9f3bc7c08727bf3dec</sum>
        </package>
        <package name="rubygem-psych" version="3.0.2" release="111.module_el8.9.0+3635+c6f99506" epoch="0" arch="s390x" src="ruby-2.5.9-111.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygem-psych-3.0.2-111.module_el8.9.0+3635+c6f99506.s390x.rpm</filename>
          <sum type="sha256">dd26a982682685688a6bb3127eacd3ade79e21048c26c157f77bee0965d9f7ef</sum>
        </package>
        <package name="rubygem-mysql2" version="0.4.10" release="4.module_el8.6.0+3170+4b08f9d4" epoch="0" arch="s390x" src="rubygem-mysql2-0.4.10-4.module_el8.6.0+3170+4b08f9d4.src.rpm">
          <filename>rubygem-mysql2-0.4.10-4.module_el8.6.0+3170+4b08f9d4.s390x.rpm</filename>
          <sum type="sha256">e8ee63b6046ba22292c8ac7eb85440ace9fe11b17fef5bf5f590b754f4c7aadb</sum>
        </package>
        <package name="rubygem-net-telnet" version="0.1.1" release="111.module_el8.9.0+3635+c6f99506" epoch="0" arch="noarch" src="ruby-2.5.9-111.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygem-net-telnet-0.1.1-111.module_el8.9.0+3635+c6f99506.noarch.rpm</filename>
          <sum type="sha256">f4f173f4c99646cc2367ac6de5d44a5c8376d7658d575fe69168a238d297d474</sum>
        </package>
        <package name="rubygem-power_assert" version="1.1.1" release="111.module_el8.9.0+3635+c6f99506" epoch="0" arch="noarch" src="ruby-2.5.9-111.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygem-power_assert-1.1.1-111.module_el8.9.0+3635+c6f99506.noarch.rpm</filename>
          <sum type="sha256">f8ef951e406acd947f6c9ab64754a289ea14a2685ead504ac9e12e861197212d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7029</id>
    <title>Moderate: libX11 security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:22:41"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libX11 security update</summary>
    <description>The libX11 packages contain the core X11 protocol client library.

Security Fix(es):

* libX11: InitExt.c can overwrite unintended portions of the Display structure if the extension request leads to a buffer overflow (CVE-2023-3138)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7029" id="RHSA-2023:7029" type="rhsa" title="RHSA-2023:7029"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3138" id="CVE-2023-3138" type="cve" title="CVE-2023-3138"/>
      <reference href="https://bugzilla.redhat.com/2213748" id="2213748" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7029.html" id="ALSA-2023:7029" type="self" title="ALSA-2023:7029"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="libX11-common" version="1.6.8" release="6.el8" epoch="0" arch="noarch" src="libX11-1.6.8-6.el8.src.rpm">
          <filename>libX11-common-1.6.8-6.el8.noarch.rpm</filename>
          <sum type="sha256">366e8fffcaa8cdcaceb1a5b583d33dbad2fd2070b53fe77846b56f0759c1fa80</sum>
        </package>
        <package name="libX11" version="1.6.8" release="6.el8" epoch="0" arch="s390x" src="libX11-1.6.8-6.el8.src.rpm">
          <filename>libX11-1.6.8-6.el8.s390x.rpm</filename>
          <sum type="sha256">485e06213b59177cd6733e821fa967986f04a558eda72781bb40fdb5493e6338</sum>
        </package>
        <package name="libX11-devel" version="1.6.8" release="6.el8" epoch="0" arch="s390x" src="libX11-1.6.8-6.el8.src.rpm">
          <filename>libX11-devel-1.6.8-6.el8.s390x.rpm</filename>
          <sum type="sha256">bc35a849c0d7e4bb495308d1720d91e2109b5eeeb915a032c786545179d8aa77</sum>
        </package>
        <package name="libX11-xcb" version="1.6.8" release="6.el8" epoch="0" arch="s390x" src="libX11-1.6.8-6.el8.src.rpm">
          <filename>libX11-xcb-1.6.8-6.el8.s390x.rpm</filename>
          <sum type="sha256">eee94b08fab62ae6a78601be8aed27150897624a0c8f5843efb85b8471819d76</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7034</id>
    <title>Moderate: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 09:42:41"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: tarfile module directory traversal (CVE-2007-4559)
* python-requests: Unintended leak of Proxy-Authorization header (CVE-2023-32681)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7034" id="RHSA-2023:7034" type="rhsa" title="RHSA-2023:7034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2007-4559" id="CVE-2007-4559" type="cve" title="CVE-2007-4559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32681" id="CVE-2023-32681" type="cve" title="CVE-2023-32681"/>
      <reference href="https://bugzilla.redhat.com/2209469" id="2209469" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/263261" id="263261" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7034.html" id="ALSA-2023:7034" type="self" title="ALSA-2023:7034"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="python39" stream="3.9" version="8060020220421104152" context="b9465af8" arch="s390x"/>
        <package name="python39-pip-wheel" version="20.2.4" release="8.module_el8.9.0+3634+fb2a896c" epoch="0" arch="noarch" src="python3x-pip-20.2.4-8.module_el8.9.0+3634+fb2a896c.src.rpm">
          <filename>python39-pip-wheel-20.2.4-8.module_el8.9.0+3634+fb2a896c.noarch.rpm</filename>
          <sum type="sha256">0044a707588342d6133c31e05498c1bc768c30cf88c9fd3f67c210a6aa4a4ee4</sum>
        </package>
        <package name="python39-libs" version="3.9.18" release="1.module_el8.9.0+3672+853baa42" epoch="0" arch="s390x" src="python39-3.9.18-1.module_el8.9.0+3672+853baa42.src.rpm">
          <filename>python39-libs-3.9.18-1.module_el8.9.0+3672+853baa42.s390x.rpm</filename>
          <sum type="sha256">3277abc5773e5a3f5279898c039b4d19878d1c3c160db977125f8acf77229ad1</sum>
        </package>
        <package name="python39-devel" version="3.9.18" release="1.module_el8.9.0+3672+853baa42" epoch="0" arch="s390x" src="python39-3.9.18-1.module_el8.9.0+3672+853baa42.src.rpm">
          <filename>python39-devel-3.9.18-1.module_el8.9.0+3672+853baa42.s390x.rpm</filename>
          <sum type="sha256">53ea383b26d549565fbbb07988cd0fdd6d3c36b6e1c304b70e4d98b031c07d28</sum>
        </package>
        <package name="python39-rpm-macros" version="3.9.18" release="1.module_el8.9.0+3672+853baa42" epoch="0" arch="noarch" src="python39-3.9.18-1.module_el8.9.0+3672+853baa42.src.rpm">
          <filename>python39-rpm-macros-3.9.18-1.module_el8.9.0+3672+853baa42.noarch.rpm</filename>
          <sum type="sha256">55cb89397f99b88bec2b84243cd490f9802071306c7b26c01691f88acd4d8f02</sum>
        </package>
        <package name="python39-cryptography" version="3.3.1" release="2.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-cryptography-3.3.1-2.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-cryptography-3.3.1-2.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">56a1136df87128c9c969dff35385bd263b36300d3c30efa3c5110f2cec64c371</sum>
        </package>
        <package name="python39-numpy-f2py" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-f2py-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">56f4a39fc3b7cacfec741e84c3c59e67da9e3b2f122f09e59cac8a8020a4ba7c</sum>
        </package>
        <package name="python39-scipy" version="1.5.4" release="5.module_el8.9.0+3634+fb2a896c" epoch="0" arch="s390x" src="scipy-1.5.4-5.module_el8.9.0+3634+fb2a896c.src.rpm">
          <filename>python39-scipy-1.5.4-5.module_el8.9.0+3634+fb2a896c.s390x.rpm</filename>
          <sum type="sha256">68206ec5b6bf886e1266c848bf014248b598bea11cce32708352e16fceaa4475</sum>
        </package>
        <package name="python39-test" version="3.9.18" release="1.module_el8.9.0+3672+853baa42" epoch="0" arch="s390x" src="python39-3.9.18-1.module_el8.9.0+3672+853baa42.src.rpm">
          <filename>python39-test-3.9.18-1.module_el8.9.0+3672+853baa42.s390x.rpm</filename>
          <sum type="sha256">6b0c2a914b157f0f522f12069bea3bdc1847468bda9b9239d15ec28e5a018a1f</sum>
        </package>
        <package name="python39-psutil" version="5.8.0" release="4.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9300840b5b4e742063f5617bc74cc2b05b4f3d5bdcd113ee5b3a9745baf3d0dc</sum>
        </package>
        <package name="python39-pip" version="20.2.4" release="8.module_el8.9.0+3634+fb2a896c" epoch="0" arch="noarch" src="python3x-pip-20.2.4-8.module_el8.9.0+3634+fb2a896c.src.rpm">
          <filename>python39-pip-20.2.4-8.module_el8.9.0+3634+fb2a896c.noarch.rpm</filename>
          <sum type="sha256">9f3119fcb72559b27ec3f0c4c2a86ea65f1b57be0830bf36eb07db271163029c</sum>
        </package>
        <package name="python39-numpy" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9ffe33f6e51a25e79b88e45fa5cdca37a3b77d0868fe40e156f615224308810c</sum>
        </package>
        <package name="python39-psycopg2-tests" version="2.8.6" release="2.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-psycopg2-tests-2.8.6-2.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">aea9e9377b4ce6484c9cab9cc63b725b12a55d4895321eaa422328a4b79bb21b</sum>
        </package>
        <package name="python39-psycopg2" version="2.8.6" release="2.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">b7c35659538650d156ec7273186c4f59fa5fecab60c4ccfd3a93bbe67c0af914</sum>
        </package>
        <package name="python39-psycopg2-doc" version="2.8.6" release="2.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-2.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-psycopg2-doc-2.8.6-2.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">b973731de198689b345b74939539b99cd20047bf9b09cd68ab7b166eae5773fe</sum>
        </package>
        <package name="python39-requests" version="2.25.0" release="3.module_el8.9.0+3634+fb2a896c" epoch="0" arch="noarch" src="python-requests-2.25.0-3.module_el8.9.0+3634+fb2a896c.src.rpm">
          <filename>python39-requests-2.25.0-3.module_el8.9.0+3634+fb2a896c.noarch.rpm</filename>
          <sum type="sha256">d021b1b5bb6a395348b4764885ec17842861193b8e60c25abcf8e1ad7a047641</sum>
        </package>
        <package name="python39-tkinter" version="3.9.18" release="1.module_el8.9.0+3672+853baa42" epoch="0" arch="s390x" src="python39-3.9.18-1.module_el8.9.0+3672+853baa42.src.rpm">
          <filename>python39-tkinter-3.9.18-1.module_el8.9.0+3672+853baa42.s390x.rpm</filename>
          <sum type="sha256">d6cea443687fb509dfd53fe96403361fd6a2fa28310660a24a9eb503aa06589d</sum>
        </package>
        <package name="python39-mod_wsgi" version="4.7.1" release="7.module_el8.9.0+3634+fb2a896c" epoch="0" arch="s390x" src="mod_wsgi-4.7.1-7.module_el8.9.0+3634+fb2a896c.src.rpm">
          <filename>python39-mod_wsgi-4.7.1-7.module_el8.9.0+3634+fb2a896c.s390x.rpm</filename>
          <sum type="sha256">dc14410284d94a7140daaaefd4c18ea74368f0acc6515ea0f2332b7b14b61f38</sum>
        </package>
        <package name="python39-lxml" version="4.6.5" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">dc2ce0990738ea69e2b3641de1886825066554244cf58815971db30e321b56b2</sum>
        </package>
        <package name="python39-cffi" version="1.14.3" release="2.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">ec3acbe8ceecf82559556caacd8c41e2b40e69348f2e6893f0b7598aa36371fd</sum>
        </package>
        <package name="python39" version="3.9.18" release="1.module_el8.9.0+3672+853baa42" epoch="0" arch="s390x" src="python39-3.9.18-1.module_el8.9.0+3672+853baa42.src.rpm">
          <filename>python39-3.9.18-1.module_el8.9.0+3672+853baa42.s390x.rpm</filename>
          <sum type="sha256">f2845384c256f4659fb01298accf2b19baa6feb3fb230e006e976fd5e5fdc7ab</sum>
        </package>
        <package name="python39-pyyaml" version="5.4.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="PyYAML-5.4.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pyyaml-5.4.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">faa90d54ace8329c64942f01e18434bce14edf19cc3a534ae07de7bc301cd27f</sum>
        </package>
        <package name="python39-idle" version="3.9.18" release="1.module_el8.9.0+3672+853baa42" epoch="0" arch="s390x" src="python39-3.9.18-1.module_el8.9.0+3672+853baa42.src.rpm">
          <filename>python39-idle-3.9.18-1.module_el8.9.0+3672+853baa42.s390x.rpm</filename>
          <sum type="sha256">ff580b570c729ff0e57553955e096f7cf60fa0d2545a846e7a4cc66091c458fc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7038</id>
    <title>Moderate: flatpak security, bug fix, and enhancement update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:22:41"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>flatpak security, bug fix, and enhancement update</summary>
    <description>Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

The following packages have been upgraded to a later upstream version: flatpak (1.10.8). (BZ#2222103)

Security Fix(es):

* flatpak: TIOCLINUX can send commands outside sandbox if running on a virtual console (CVE-2023-28100)
* flatpak: Metadata with ANSI control codes can cause misleading terminal output (CVE-2023-28101)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7038" id="RHSA-2023:7038" type="rhsa" title="RHSA-2023:7038"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28100" id="CVE-2023-28100" type="cve" title="CVE-2023-28100"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28101" id="CVE-2023-28101" type="cve" title="CVE-2023-28101"/>
      <reference href="https://bugzilla.redhat.com/2179219" id="2179219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2179220" id="2179220" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7038.html" id="ALSA-2023:7038" type="self" title="ALSA-2023:7038"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="flatpak-libs" version="1.10.8" release="1.el8" epoch="0" arch="s390x" src="flatpak-1.10.8-1.el8.src.rpm">
          <filename>flatpak-libs-1.10.8-1.el8.s390x.rpm</filename>
          <sum type="sha256">2dc47c0d22ae304f5d0cbd3ba2c9f6d03b56f53544e93851d14575cc395455c3</sum>
        </package>
        <package name="flatpak-selinux" version="1.10.8" release="1.el8" epoch="0" arch="noarch" src="flatpak-1.10.8-1.el8.src.rpm">
          <filename>flatpak-selinux-1.10.8-1.el8.noarch.rpm</filename>
          <sum type="sha256">4a6db6de6306547611a6fb68e8ea023fa3321bca8e6d69e3f446fee107122255</sum>
        </package>
        <package name="flatpak-session-helper" version="1.10.8" release="1.el8" epoch="0" arch="s390x" src="flatpak-1.10.8-1.el8.src.rpm">
          <filename>flatpak-session-helper-1.10.8-1.el8.s390x.rpm</filename>
          <sum type="sha256">c8225e62fabf6f683a3225768d61c0f85734b03651a9c654663947649922c4b6</sum>
        </package>
        <package name="flatpak" version="1.10.8" release="1.el8" epoch="0" arch="s390x" src="flatpak-1.10.8-1.el8.src.rpm">
          <filename>flatpak-1.10.8-1.el8.s390x.rpm</filename>
          <sum type="sha256">dee42be2aa07bdebbe250aff0ebf80e7f07a88366ab07220a6eacbe90a7846c7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7042</id>
    <title>Moderate: python27:2.7 security and bug fix update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-27 11:46:27"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python27:2.7 security and bug fix update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL.

Security Fix(es):

* python-requests: Unintended leak of Proxy-Authorization header (CVE-2023-32681)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7042" id="RHSA-2023:7042" type="rhsa" title="RHSA-2023:7042"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32681" id="CVE-2023-32681" type="cve" title="CVE-2023-32681"/>
      <reference href="https://bugzilla.redhat.com/2209469" id="2209469" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7042.html" id="ALSA-2023:7042" type="self" title="ALSA-2023:7042"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="python27" stream="2.7" version="8090020231017201401" context="9edba152" arch="s390x"/>
        <package name="python2-tkinter" version="2.7.18" release="15.module_el8.9.0+3674+85657c95.alma.1" epoch="0" arch="s390x" src="python2-2.7.18-15.module_el8.9.0+3674+85657c95.alma.1.src.rpm">
          <filename>python2-tkinter-2.7.18-15.module_el8.9.0+3674+85657c95.alma.1.s390x.rpm</filename>
          <sum type="sha256">09d209d4f754508e93576a09e5e4d571a1373fe4b1e56fd5d54ff4a806b542d8</sum>
        </package>
        <package name="python2-psycopg2-debug" version="2.7.5" release="8.module_el8.9.0+3640+8d3927b5" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-8.module_el8.9.0+3640+8d3927b5.src.rpm">
          <filename>python2-psycopg2-debug-2.7.5-8.module_el8.9.0+3640+8d3927b5.s390x.rpm</filename>
          <sum type="sha256">0a34c099819cec6d40a06dda5655334e8dc1c8fa43d1b0e53040efa0bff5f26e</sum>
        </package>
        <package name="python2-scipy" version="1.0.0" release="22.module_el8.9.0+3640+8d3927b5" epoch="0" arch="s390x" src="scipy-1.0.0-22.module_el8.9.0+3640+8d3927b5.src.rpm">
          <filename>python2-scipy-1.0.0-22.module_el8.9.0+3640+8d3927b5.s390x.rpm</filename>
          <sum type="sha256">0a76f903f0eb33ade1824de74deba6b13e05719eb34510698ab467090b09ee13</sum>
        </package>
        <package name="python2-psycopg2-tests" version="2.7.5" release="8.module_el8.9.0+3640+8d3927b5" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-8.module_el8.9.0+3640+8d3927b5.src.rpm">
          <filename>python2-psycopg2-tests-2.7.5-8.module_el8.9.0+3640+8d3927b5.s390x.rpm</filename>
          <sum type="sha256">2fc36e2343456a1c7ad056369107a55fd92f3cf6b31eb4beb201b4d098f5c3d7</sum>
        </package>
        <package name="python2-Cython" version="0.28.1" release="7.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="Cython-0.28.1-7.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-Cython-0.28.1-7.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">33e5c6fee3819774cc5605ac9884d333321fd0e18a2e6ad15bd4cc626854bf92</sum>
        </package>
        <package name="python2-lxml" version="4.2.3" release="6.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-lxml-4.2.3-6.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-lxml-4.2.3-6.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">34d05166229eef26e630797e84fd32f0aa76104895186ba2de4852d1931449c2</sum>
        </package>
        <package name="python2-devel" version="2.7.18" release="15.module_el8.9.0+3674+85657c95.alma.1" epoch="0" arch="s390x" src="python2-2.7.18-15.module_el8.9.0+3674+85657c95.alma.1.src.rpm">
          <filename>python2-devel-2.7.18-15.module_el8.9.0+3674+85657c95.alma.1.s390x.rpm</filename>
          <sum type="sha256">49d0160e28b40bd4cd07f0890ec49e0e242a94af7930549b3e79ce3729c7a426</sum>
        </package>
        <package name="python2-virtualenv" version="15.1.0" release="22.module_el8.9.0+3674+85657c95" epoch="0" arch="noarch" src="python-virtualenv-15.1.0-22.module_el8.9.0+3674+85657c95.src.rpm">
          <filename>python2-virtualenv-15.1.0-22.module_el8.9.0+3674+85657c95.noarch.rpm</filename>
          <sum type="sha256">4da56b767c9099a0ccbb2a84af7b9968b7ad1e44432b8d3157092780fea3bb8a</sum>
        </package>
        <package name="python2-markupsafe" version="0.23" release="19.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-markupsafe-0.23-19.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-markupsafe-0.23-19.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">4df63f354ef866a6834b7ae6bbf00de4e90db40a23c0175d0a8e091f46c3831b</sum>
        </package>
        <package name="python2-numpy-f2py" version="1.14.2" release="16.module_el8.6.0+3162+01a09e5a" epoch="1" arch="s390x" src="numpy-1.14.2-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-numpy-f2py-1.14.2-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">5122909fad88771bdc7f253154548be55681207a76858df98d83aee4c019fb99</sum>
        </package>
        <package name="python2-tools" version="2.7.18" release="15.module_el8.9.0+3674+85657c95.alma.1" epoch="0" arch="s390x" src="python2-2.7.18-15.module_el8.9.0+3674+85657c95.alma.1.src.rpm">
          <filename>python2-tools-2.7.18-15.module_el8.9.0+3674+85657c95.alma.1.s390x.rpm</filename>
          <sum type="sha256">565a36acbde3f36a68a1a0d210da80a8870b5a02d2ca47d3f95dcb9f2189ade9</sum>
        </package>
        <package name="python2-libs" version="2.7.18" release="15.module_el8.9.0+3674+85657c95.alma.1" epoch="0" arch="s390x" src="python2-2.7.18-15.module_el8.9.0+3674+85657c95.alma.1.src.rpm">
          <filename>python2-libs-2.7.18-15.module_el8.9.0+3674+85657c95.alma.1.s390x.rpm</filename>
          <sum type="sha256">69b752bb495cb1cda91d1e15d7f148dbc0ce4bfe4d9d017fed5b1f787a834489</sum>
        </package>
        <package name="python2-pymongo" version="3.7.0" release="1.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">6b7bcb16061d074203f3da5d62159766e919e5fc57ef7c9df634c2d56dbe44e1</sum>
        </package>
        <package name="python2" version="2.7.18" release="15.module_el8.9.0+3674+85657c95.alma.1" epoch="0" arch="s390x" src="python2-2.7.18-15.module_el8.9.0+3674+85657c95.alma.1.src.rpm">
          <filename>python2-2.7.18-15.module_el8.9.0+3674+85657c95.alma.1.s390x.rpm</filename>
          <sum type="sha256">852e5584c8d58725831a7353ac1c340dce8f41f1c5c33164b2c39fa5f071d8b2</sum>
        </package>
        <package name="python2-numpy" version="1.14.2" release="16.module_el8.6.0+3162+01a09e5a" epoch="1" arch="s390x" src="numpy-1.14.2-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-numpy-1.14.2-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">852f2d82ccc6de54efa8bf6c6dcf9ede79257d3aa5144c12fc290d43e20b4ab1</sum>
        </package>
        <package name="python2-sqlalchemy" version="1.3.2" release="2.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-sqlalchemy-1.3.2-2.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-sqlalchemy-1.3.2-2.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">854347b4f4c344b9ee4f49435eb2f75b9be1a134ed76388c16d4affae402f809</sum>
        </package>
        <package name="python2-backports" version="1.0" release="16.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-backports-1.0-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-backports-1.0-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">8ce54e96fff1eff1c45e38503fc221bb6e8866180e9e558fe581fa8cc4059796</sum>
        </package>
        <package name="python2-coverage" version="4.5.1" release="5.module_el8.9.0+3640+8d3927b5" epoch="0" arch="s390x" src="python-coverage-4.5.1-5.module_el8.9.0+3640+8d3927b5.src.rpm">
          <filename>python2-coverage-4.5.1-5.module_el8.9.0+3640+8d3927b5.s390x.rpm</filename>
          <sum type="sha256">94669aaf45e096e5dbef1e4fcffbdb0dfb8b945d72ac1ef01075ce6ccb387237</sum>
        </package>
        <package name="python-psycopg2-doc" version="2.7.5" release="8.module_el8.9.0+3640+8d3927b5" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-8.module_el8.9.0+3640+8d3927b5.src.rpm">
          <filename>python-psycopg2-doc-2.7.5-8.module_el8.9.0+3640+8d3927b5.s390x.rpm</filename>
          <sum type="sha256">acfe9481a09a69104cc8e7557ad0d90648f0b763927185a4ae2add804e52599d</sum>
        </package>
        <package name="python2-pymongo-gridfs" version="3.7.0" release="1.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-pymongo-gridfs-3.7.0-1.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">b28d3022855edc1cc4a549f1d3ce67a23d2da958f852bbf7821b325e67895d64</sum>
        </package>
        <package name="python2-psycopg2" version="2.7.5" release="8.module_el8.9.0+3640+8d3927b5" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-8.module_el8.9.0+3640+8d3927b5.src.rpm">
          <filename>python2-psycopg2-2.7.5-8.module_el8.9.0+3640+8d3927b5.s390x.rpm</filename>
          <sum type="sha256">d40c219202979ee47721cd6f039e87ed461ba2f271daeb75196ad3ed95a9dd97</sum>
        </package>
        <package name="python2-bson" version="3.7.0" release="1.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-bson-3.7.0-1.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">de74cd7b4f4870f2bac803f8a8aeca7062cc342d4bf9533f9939bf03f306ebfb</sum>
        </package>
        <package name="python2-pytz" version="2017.2" release="13.module_el8.9.0+3640+8d3927b5" epoch="0" arch="noarch" src="pytz-2017.2-13.module_el8.9.0+3640+8d3927b5.src.rpm">
          <filename>python2-pytz-2017.2-13.module_el8.9.0+3640+8d3927b5.noarch.rpm</filename>
          <sum type="sha256">eb73dfb9bce40743d61bf81ead3f71bca6f602b4eb025fe7bd239aa54bb39a4f</sum>
        </package>
        <package name="python2-test" version="2.7.18" release="15.module_el8.9.0+3674+85657c95.alma.1" epoch="0" arch="s390x" src="python2-2.7.18-15.module_el8.9.0+3674+85657c95.alma.1.src.rpm">
          <filename>python2-test-2.7.18-15.module_el8.9.0+3674+85657c95.alma.1.s390x.rpm</filename>
          <sum type="sha256">f143b8ed3c1442c433214359a2ecebb3bb2e306c6aa24a5f36cd0e499940a699</sum>
        </package>
        <package name="python2-requests" version="2.20.0" release="4.module_el8.9.0+3640+8d3927b5" epoch="0" arch="noarch" src="python-requests-2.20.0-4.module_el8.9.0+3640+8d3927b5.src.rpm">
          <filename>python2-requests-2.20.0-4.module_el8.9.0+3640+8d3927b5.noarch.rpm</filename>
          <sum type="sha256">f4dd56efc38a8981ef15d6232c4c62d889a1480549e28a0cced2e49b7e3cfb04</sum>
        </package>
        <package name="python2-debug" version="2.7.18" release="15.module_el8.9.0+3674+85657c95.alma.1" epoch="0" arch="s390x" src="python2-2.7.18-15.module_el8.9.0+3674+85657c95.alma.1.src.rpm">
          <filename>python2-debug-2.7.18-15.module_el8.9.0+3674+85657c95.alma.1.s390x.rpm</filename>
          <sum type="sha256">f61c19dffd100b89c4b578a2d8065dc2e6e47c7cc55d2eef5a5c613cef6906ef</sum>
        </package>
        <package name="python2-pyyaml" version="3.12" release="16.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="PyYAML-3.12-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-pyyaml-3.12-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">fd83c9d2f395a877fc6cc657333bc13305e5d5ebe62c39ec0e2040e8e36542e7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7046</id>
    <title>Moderate: dnsmasq security and bug fix update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:19:02"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dnsmasq security and bug fix update</summary>
    <description>The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.

Security Fix(es):

* dnsmasq: default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 (CVE-2023-28450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7046" id="RHSA-2023:7046" type="rhsa" title="RHSA-2023:7046"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28450" id="CVE-2023-28450" type="cve" title="CVE-2023-28450"/>
      <reference href="https://bugzilla.redhat.com/2178948" id="2178948" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7046.html" id="ALSA-2023:7046" type="self" title="ALSA-2023:7046"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="dnsmasq-utils" version="2.79" release="31.el8" epoch="0" arch="s390x" src="dnsmasq-2.79-31.el8.src.rpm">
          <filename>dnsmasq-utils-2.79-31.el8.s390x.rpm</filename>
          <sum type="sha256">8e4cc178538c8e8d14ef970e5bb3b36fc9a8c076b99c48759e8b35745da1835a</sum>
        </package>
        <package name="dnsmasq" version="2.79" release="31.el8" epoch="0" arch="s390x" src="dnsmasq-2.79-31.el8.src.rpm">
          <filename>dnsmasq-2.79-31.el8.s390x.rpm</filename>
          <sum type="sha256">eff16f78273a0c156898a516024758049d521b472dc50e1fce27e8a4ec0804ed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7050</id>
    <title>Moderate: python38:3.8 and python38-devel:3.8 security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 09:43:58"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python38:3.8 and python38-devel:3.8 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. 

Security Fix(es):

* python: tarfile module directory traversal (CVE-2007-4559)
* python-requests: Unintended leak of Proxy-Authorization header (CVE-2023-32681)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7050" id="RHSA-2023:7050" type="rhsa" title="RHSA-2023:7050"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2007-4559" id="CVE-2007-4559" type="cve" title="CVE-2007-4559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32681" id="CVE-2023-32681" type="cve" title="CVE-2023-32681"/>
      <reference href="https://bugzilla.redhat.com/2209469" id="2209469" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/263261" id="263261" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7050.html" id="ALSA-2023:7050" type="self" title="ALSA-2023:7050"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="python38" stream="3.8" version="8090020231017130934" context="a51370e3" arch="s390x"/>
        <package name="python38-libs" version="3.8.17" release="2.module_el8.9.0+3633+e453b53a" epoch="0" arch="s390x" src="python38-3.8.17-2.module_el8.9.0+3633+e453b53a.src.rpm">
          <filename>python38-libs-3.8.17-2.module_el8.9.0+3633+e453b53a.s390x.rpm</filename>
          <sum type="sha256">0c9671810a1bd1ded62acc2e9cec234402dfde2c2a245dc2776a3d4a966a5c9a</sum>
        </package>
        <package name="python38-pytz" version="2019.3" release="4.module_el8.9.0+3633+e453b53a" epoch="0" arch="noarch" src="pytz-2019.3-4.module_el8.9.0+3633+e453b53a.src.rpm">
          <filename>python38-pytz-2019.3-4.module_el8.9.0+3633+e453b53a.noarch.rpm</filename>
          <sum type="sha256">1695804f711755102a8bf0ff93619ff144cb0a32b30750eb1abf03e09922c58b</sum>
        </package>
        <package name="python38-psycopg2" version="2.8.4" release="4.module_el8.7.0+3344+99a6a656" epoch="0" arch="s390x" src="python-psycopg2-2.8.4-4.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-psycopg2-2.8.4-4.module_el8.7.0+3344+99a6a656.s390x.rpm</filename>
          <sum type="sha256">30db40e718410952d3168ec995a3a3e6a88afa5543f3b1f2d2ee69ebfbacb49d</sum>
        </package>
        <package name="python38-numpy-doc" version="1.17.3" release="7.module_el8.9.0+3633+e453b53a" epoch="0" arch="noarch" src="numpy-1.17.3-7.module_el8.9.0+3633+e453b53a.src.rpm">
          <filename>python38-numpy-doc-1.17.3-7.module_el8.9.0+3633+e453b53a.noarch.rpm</filename>
          <sum type="sha256">3104b17eb89594e82dd1d8d51cc13ef05bf9194f11d239b324db8457561ba896</sum>
        </package>
        <package name="python38-devel" version="3.8.17" release="2.module_el8.9.0+3633+e453b53a" epoch="0" arch="s390x" src="python38-3.8.17-2.module_el8.9.0+3633+e453b53a.src.rpm">
          <filename>python38-devel-3.8.17-2.module_el8.9.0+3633+e453b53a.s390x.rpm</filename>
          <sum type="sha256">4d3219e7b8d4b2d5b1faab2f9d01de6e16c2abaa6a1b8d0833e60095690f574d</sum>
        </package>
        <package name="python38-scipy" version="1.3.1" release="5.module_el8.9.0+3633+e453b53a" epoch="0" arch="s390x" src="scipy-1.3.1-5.module_el8.9.0+3633+e453b53a.src.rpm">
          <filename>python38-scipy-1.3.1-5.module_el8.9.0+3633+e453b53a.s390x.rpm</filename>
          <sum type="sha256">5083d1b44258fdc451c8fda86f9fa342588cb5cb77d8a81c7ec3b5d1507456bb</sum>
        </package>
        <package name="python38-tkinter" version="3.8.17" release="2.module_el8.9.0+3633+e453b53a" epoch="0" arch="s390x" src="python38-3.8.17-2.module_el8.9.0+3633+e453b53a.src.rpm">
          <filename>python38-tkinter-3.8.17-2.module_el8.9.0+3633+e453b53a.s390x.rpm</filename>
          <sum type="sha256">550c789716a9a604bd31782e17d0d0670c7b45598767f58f93812d48440e4bd7</sum>
        </package>
        <package name="python38-numpy-f2py" version="1.17.3" release="7.module_el8.9.0+3633+e453b53a" epoch="0" arch="s390x" src="numpy-1.17.3-7.module_el8.9.0+3633+e453b53a.src.rpm">
          <filename>python38-numpy-f2py-1.17.3-7.module_el8.9.0+3633+e453b53a.s390x.rpm</filename>
          <sum type="sha256">5fb870a2cf2972968aa99efa70399662f02af6674b0e10882428a5487b72d24f</sum>
        </package>
        <package name="python38-jinja2" version="2.11.3" release="1.module_el8.7.0+3344+99a6a656" epoch="0" arch="noarch" src="python-jinja2-2.11.3-1.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-jinja2-2.11.3-1.module_el8.7.0+3344+99a6a656.noarch.rpm</filename>
          <sum type="sha256">65f05e5ed7e1f7c21b8cdb919d8ad743417c596227acb6b504d8495f6af8db4f</sum>
        </package>
        <package name="python38-pyyaml" version="5.4.1" release="1.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="PyYAML-5.4.1-1.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-pyyaml-5.4.1-1.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">70a32bae16b374e4ec238a9fd23d4a57f36df2786a18231fe0b431925278fc98</sum>
        </package>
        <package name="python38-psutil" version="5.6.4" release="4.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="python-psutil-5.6.4-4.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-psutil-5.6.4-4.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">7a32568dcb13525ef3a54999d5d6022761e68246dbc5327a8c52e8cea96ac30f</sum>
        </package>
        <package name="python38-mod_wsgi" version="4.6.8" release="5.module_el8.9.0+3633+e453b53a" epoch="0" arch="s390x" src="mod_wsgi-4.6.8-5.module_el8.9.0+3633+e453b53a.src.rpm">
          <filename>python38-mod_wsgi-4.6.8-5.module_el8.9.0+3633+e453b53a.s390x.rpm</filename>
          <sum type="sha256">8f3fc42baf02d5592fe27b17f83b2c0bd9c3ffda7e12636445a0a7b0601feaf3</sum>
        </package>
        <package name="python38-pip" version="19.3.1" release="7.module_el8.9.0+3633+e453b53a" epoch="0" arch="noarch" src="python3x-pip-19.3.1-7.module_el8.9.0+3633+e453b53a.src.rpm">
          <filename>python38-pip-19.3.1-7.module_el8.9.0+3633+e453b53a.noarch.rpm</filename>
          <sum type="sha256">9d6e38b92ae04b71388d84017c28a4702a2e657f699c26af03fd56bc10af2e8e</sum>
        </package>
        <package name="python38-debug" version="3.8.17" release="2.module_el8.9.0+3633+e453b53a" epoch="0" arch="s390x" src="python38-3.8.17-2.module_el8.9.0+3633+e453b53a.src.rpm">
          <filename>python38-debug-3.8.17-2.module_el8.9.0+3633+e453b53a.s390x.rpm</filename>
          <sum type="sha256">a36aba3ae24dffce4d364378cad42c57415a4d69b04a20fb319e773e2299cacb</sum>
        </package>
        <package name="python38-rpm-macros" version="3.8.17" release="2.module_el8.9.0+3633+e453b53a" epoch="0" arch="noarch" src="python38-3.8.17-2.module_el8.9.0+3633+e453b53a.src.rpm">
          <filename>python38-rpm-macros-3.8.17-2.module_el8.9.0+3633+e453b53a.noarch.rpm</filename>
          <sum type="sha256">a6356bb2159c0362f2f473fbdc5508a11c3930004cfba2f46ab773d220a9d2b1</sum>
        </package>
        <package name="python38-numpy" version="1.17.3" release="7.module_el8.9.0+3633+e453b53a" epoch="0" arch="s390x" src="numpy-1.17.3-7.module_el8.9.0+3633+e453b53a.src.rpm">
          <filename>python38-numpy-1.17.3-7.module_el8.9.0+3633+e453b53a.s390x.rpm</filename>
          <sum type="sha256">aef2896fec3354f6aa65f13e579d84c48575a0ff3f641c7d83b72fcb29f4a656</sum>
        </package>
        <package name="python38-idle" version="3.8.17" release="2.module_el8.9.0+3633+e453b53a" epoch="0" arch="s390x" src="python38-3.8.17-2.module_el8.9.0+3633+e453b53a.src.rpm">
          <filename>python38-idle-3.8.17-2.module_el8.9.0+3633+e453b53a.s390x.rpm</filename>
          <sum type="sha256">b2689f1a318b9df96be87eb00420e16a6511538492f79a598117d6fd50e851bf</sum>
        </package>
        <package name="python38-cffi" version="1.13.2" release="3.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="python-cffi-1.13.2-3.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-cffi-1.13.2-3.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">b34229e6288a56b9976d01b3f297bc8b4fedf6c1a14716687dc4632a24d5369a</sum>
        </package>
        <package name="python38-psycopg2-doc" version="2.8.4" release="4.module_el8.7.0+3344+99a6a656" epoch="0" arch="s390x" src="python-psycopg2-2.8.4-4.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-psycopg2-doc-2.8.4-4.module_el8.7.0+3344+99a6a656.s390x.rpm</filename>
          <sum type="sha256">baf86e5160816eb2e8f2bf04d47041e6b3e44b64e3f596897a65d41ad3a6dbc4</sum>
        </package>
        <package name="python38-cryptography" version="2.8" release="3.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="python-cryptography-2.8-3.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-cryptography-2.8-3.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">c11ed086ba644d0143cd534d4990e790f907a66482da70752528a45f14289f10</sum>
        </package>
        <package name="python38-psycopg2-tests" version="2.8.4" release="4.module_el8.7.0+3344+99a6a656" epoch="0" arch="s390x" src="python-psycopg2-2.8.4-4.module_el8.7.0+3344+99a6a656.src.rpm">
          <filename>python38-psycopg2-tests-2.8.4-4.module_el8.7.0+3344+99a6a656.s390x.rpm</filename>
          <sum type="sha256">c1e089d3030080f30316251830f59bc6fcd22b63ea830a68e88121af77b3ad41</sum>
        </package>
        <package name="python38-Cython" version="0.29.14" release="4.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="Cython-0.29.14-4.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-Cython-0.29.14-4.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">c8e257796e097667f73bdfb94f0b28a681d5cdf71fdc1b96f1a39d0159912c44</sum>
        </package>
        <package name="python38-requests" version="2.22.0" release="10.module_el8.9.0+3633+e453b53a" epoch="0" arch="noarch" src="python-requests-2.22.0-10.module_el8.9.0+3633+e453b53a.src.rpm">
          <filename>python38-requests-2.22.0-10.module_el8.9.0+3633+e453b53a.noarch.rpm</filename>
          <sum type="sha256">cacc2395966603b950ddb9ebeddab8fa254bc15a64fd426a13bfcd386ef9cfdd</sum>
        </package>
        <package name="python38" version="3.8.17" release="2.module_el8.9.0+3633+e453b53a" epoch="0" arch="s390x" src="python38-3.8.17-2.module_el8.9.0+3633+e453b53a.src.rpm">
          <filename>python38-3.8.17-2.module_el8.9.0+3633+e453b53a.s390x.rpm</filename>
          <sum type="sha256">d7021bb188e952b01640225a9c0610541d33c7a0d431aaa5bb3a1e3a846f8c09</sum>
        </package>
        <package name="python38-markupsafe" version="1.1.1" release="6.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="python-markupsafe-1.1.1-6.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-markupsafe-1.1.1-6.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">dde3e871e78ef455929f983e9dc8bd23504f64efac25ca963276ea0f06947c46</sum>
        </package>
        <package name="python38-pip-wheel" version="19.3.1" release="7.module_el8.9.0+3633+e453b53a" epoch="0" arch="noarch" src="python3x-pip-19.3.1-7.module_el8.9.0+3633+e453b53a.src.rpm">
          <filename>python38-pip-wheel-19.3.1-7.module_el8.9.0+3633+e453b53a.noarch.rpm</filename>
          <sum type="sha256">e3daea578a1c2fd9ea849b2e61422fc2c83793cf951f7070ad6d252d64f9dbc3</sum>
        </package>
        <package name="python38-lxml" version="4.4.1" release="7.module_el8.6.0+3163+f4472775" epoch="0" arch="s390x" src="python-lxml-4.4.1-7.module_el8.6.0+3163+f4472775.src.rpm">
          <filename>python38-lxml-4.4.1-7.module_el8.6.0+3163+f4472775.s390x.rpm</filename>
          <sum type="sha256">f5fb51b73bf02fc264e24d5940eadc2644c978ae7ce30f8ee844b11f6e4cd4df</sum>
        </package>
        <package name="python38-test" version="3.8.17" release="2.module_el8.9.0+3633+e453b53a" epoch="0" arch="s390x" src="python38-3.8.17-2.module_el8.9.0+3633+e453b53a.src.rpm">
          <filename>python38-test-3.8.17-2.module_el8.9.0+3633+e453b53a.s390x.rpm</filename>
          <sum type="sha256">f7d14f95a886fcf258cbffc4f0465be32b6142f1d12c225b9c86a1cc8168a14f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7052</id>
    <title>Moderate: libreswan security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:47"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libreswan security update</summary>
    <description>Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).

Security Fix(es):

* libreswan: Invalid IKEv2 REKEY proposal causes restart (CVE-2023-38710)
* libreswan: Invalid IKEv1 Quick Mode ID causes restart (CVE-2023-38711)
* libreswan: Invalid IKEv1 repeat IKE SA delete causes crash and restart (CVE-2023-38712)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7052" id="RHSA-2023:7052" type="rhsa" title="RHSA-2023:7052"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38710" id="CVE-2023-38710" type="cve" title="CVE-2023-38710"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38711" id="CVE-2023-38711" type="cve" title="CVE-2023-38711"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38712" id="CVE-2023-38712" type="cve" title="CVE-2023-38712"/>
      <reference href="https://bugzilla.redhat.com/2215952" id="2215952" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225368" id="2225368" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225369" id="2225369" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7052.html" id="ALSA-2023:7052" type="self" title="ALSA-2023:7052"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="libreswan" version="4.12" release="2.el8" epoch="0" arch="s390x" src="libreswan-4.12-2.el8.src.rpm">
          <filename>libreswan-4.12-2.el8.s390x.rpm</filename>
          <sum type="sha256">55946a1b2261968713656ecb45b642fd4f921495b823020c32c841134e6fee76</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7053</id>
    <title>Moderate: ghostscript security and bug fix update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:19:27"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ghostscript security and bug fix update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: buffer overflow in base/sbcp.c leading to data corruption (CVE-2023-28879)
* ghostscript: Out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in DoS (CVE-2023-38559)
* ghostscript: Incomplete fix for CVE-2020-16305 (CVE-2023-4042)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7053" id="RHSA-2023:7053" type="rhsa" title="RHSA-2023:7053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28879" id="CVE-2023-28879" type="cve" title="CVE-2023-28879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38559" id="CVE-2023-38559" type="cve" title="CVE-2023-38559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4042" id="CVE-2023-4042" type="cve" title="CVE-2023-4042"/>
      <reference href="https://bugzilla.redhat.com/2184585" id="2184585" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224367" id="2224367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228151" id="2228151" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7053.html" id="ALSA-2023:7053" type="self" title="ALSA-2023:7053"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="libgs" version="9.27" release="11.el8" epoch="0" arch="s390x" src="ghostscript-9.27-11.el8.src.rpm">
          <filename>libgs-9.27-11.el8.s390x.rpm</filename>
          <sum type="sha256">1df1795d290552e2d1c9bad84632da89e21cccfde541608898df005265719f6a</sum>
        </package>
        <package name="ghostscript-x11" version="9.27" release="11.el8" epoch="0" arch="s390x" src="ghostscript-9.27-11.el8.src.rpm">
          <filename>ghostscript-x11-9.27-11.el8.s390x.rpm</filename>
          <sum type="sha256">ec6f2c3d290a1700a6e9f064cab976d5974419a5e96c99d2c91eb761c5804f92</sum>
        </package>
        <package name="ghostscript" version="9.27" release="11.el8" epoch="0" arch="s390x" src="ghostscript-9.27-11.el8.src.rpm">
          <filename>ghostscript-9.27-11.el8.s390x.rpm</filename>
          <sum type="sha256">fc30f977522c46797dde475dc5f18a52c7570218f262683fc6be9a0ad92c02d0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7055</id>
    <title>Important: webkit2gtk3 security and bug fix update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:19:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security and bug fix update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: arbitrary code execution (CVE-2023-32393)
* webkitgtk: bypass Same Origin Policy (CVE-2023-38572)
* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-38592)
* webkitgtk: arbitrary code execution (CVE-2023-38594)
* webkitgtk: arbitrary code execution (CVE-2023-38595)
* webkitgtk: arbitrary code execution (CVE-2023-38597)
* webkitgtk: arbitrary code execution (CVE-2023-38600)
* webkitgtk: arbitrary code execution (CVE-2023-38611)
* webkitgtk: Memory corruption issue when processing web content (CVE-2022-32885)
* webkitgtk: Same Origin Policy bypass via crafted web content (CVE-2023-27932)
* webkitgtk: Website may be able to track sensitive user information (CVE-2023-27954)
* webkitgtk: use after free vulnerability (CVE-2023-28198)
* webkitgtk: content security policy blacklist failure (CVE-2023-32370)
* webkitgtk: disclose sensitive information (CVE-2023-38133)
* webkitgtk: track sensitive user information (CVE-2023-38599)
* webkitgtk: processing web content may lead to arbitrary code execution (CVE-2023-39434)
* webkitgtk: arbitrary javascript code execution (CVE-2023-40397)
* webkitgtk: attacker with JavaScript execution may be able to execute arbitrary code (CVE-2023-40451)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7055" id="RHSA-2023:7055" type="rhsa" title="RHSA-2023:7055"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32885" id="CVE-2022-32885" type="cve" title="CVE-2022-32885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27932" id="CVE-2023-27932" type="cve" title="CVE-2023-27932"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27954" id="CVE-2023-27954" type="cve" title="CVE-2023-27954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28198" id="CVE-2023-28198" type="cve" title="CVE-2023-28198"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32370" id="CVE-2023-32370" type="cve" title="CVE-2023-32370"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32393" id="CVE-2023-32393" type="cve" title="CVE-2023-32393"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38133" id="CVE-2023-38133" type="cve" title="CVE-2023-38133"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38572" id="CVE-2023-38572" type="cve" title="CVE-2023-38572"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38592" id="CVE-2023-38592" type="cve" title="CVE-2023-38592"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38594" id="CVE-2023-38594" type="cve" title="CVE-2023-38594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38595" id="CVE-2023-38595" type="cve" title="CVE-2023-38595"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38597" id="CVE-2023-38597" type="cve" title="CVE-2023-38597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38599" id="CVE-2023-38599" type="cve" title="CVE-2023-38599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38600" id="CVE-2023-38600" type="cve" title="CVE-2023-38600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38611" id="CVE-2023-38611" type="cve" title="CVE-2023-38611"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39434" id="CVE-2023-39434" type="cve" title="CVE-2023-39434"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40397" id="CVE-2023-40397" type="cve" title="CVE-2023-40397"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40451" id="CVE-2023-40451" type="cve" title="CVE-2023-40451"/>
      <reference href="https://bugzilla.redhat.com/2224608" id="2224608" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231015" id="2231015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231017" id="2231017" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231018" id="2231018" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231019" id="2231019" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231020" id="2231020" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231021" id="2231021" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231022" id="2231022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231028" id="2231028" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231043" id="2231043" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236842" id="2236842" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236843" id="2236843" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236844" id="2236844" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238943" id="2238943" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238944" id="2238944" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238945" id="2238945" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241405" id="2241405" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241409" id="2241409" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7055.html" id="ALSA-2023:7055" type="self" title="ALSA-2023:7055"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="webkit2gtk3-jsc-devel" version="2.40.5" release="1.el8" epoch="0" arch="s390x" src="webkit2gtk3-2.40.5-1.el8.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.40.5-1.el8.s390x.rpm</filename>
          <sum type="sha256">1be4a972ead17fb2bbfc992c686819e51aeac2f3bb9a2a9c8f71e76a8557a633</sum>
        </package>
        <package name="webkit2gtk3" version="2.40.5" release="1.el8" epoch="0" arch="s390x" src="webkit2gtk3-2.40.5-1.el8.src.rpm">
          <filename>webkit2gtk3-2.40.5-1.el8.s390x.rpm</filename>
          <sum type="sha256">4c59c5b51ae7cd4903e7245c2166e7c4bc8422a03c0bb776678474df49620856</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.40.5" release="1.el8" epoch="0" arch="s390x" src="webkit2gtk3-2.40.5-1.el8.src.rpm">
          <filename>webkit2gtk3-jsc-2.40.5-1.el8.s390x.rpm</filename>
          <sum type="sha256">4ea99306f3cda389c2bd06edaef4d06ba55c03e188d681bc121844778621b02d</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.40.5" release="1.el8" epoch="0" arch="s390x" src="webkit2gtk3-2.40.5-1.el8.src.rpm">
          <filename>webkit2gtk3-devel-2.40.5-1.el8.s390x.rpm</filename>
          <sum type="sha256">d9fcedd57cda58b2144f0cc2f2eca903a3e29d1137730b19379296bc9ab1952f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7057</id>
    <title>Moderate: yajl security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:47"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>yajl security update</summary>
    <description>Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator.

Security Fix(es):

* yajl: Memory leak in yajl_tree_parse function (CVE-2023-33460)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7057" id="RHSA-2023:7057" type="rhsa" title="RHSA-2023:7057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33460" id="CVE-2023-33460" type="cve" title="CVE-2023-33460"/>
      <reference href="https://bugzilla.redhat.com/2221249" id="2221249" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7057.html" id="ALSA-2023:7057" type="self" title="ALSA-2023:7057"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="yajl" version="2.1.0" release="12.el8" epoch="0" arch="s390x" src="yajl-2.1.0-12.el8.src.rpm">
          <filename>yajl-2.1.0-12.el8.s390x.rpm</filename>
          <sum type="sha256">29d2c9015e7712b60609dfe37a032f53abc037aac037ea90f72f9943c72a8658</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7065</id>
    <title>Moderate: tomcat security and bug fix update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 09:44:02"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>tomcat security and bug fix update</summary>
    <description>Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.

Security Fix(es):

* Apache Commons FileUpload: FileUpload DoS with excessive parts (CVE-2023-24998)
* tomcat: not including the secure attribute causes information disclosure (CVE-2023-28708)
* tomcat: Fix for CVE-2023-24998 was incomplete (CVE-2023-28709)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7065" id="RHSA-2023:7065" type="rhsa" title="RHSA-2023:7065"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24998" id="CVE-2023-24998" type="cve" title="CVE-2023-24998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28708" id="CVE-2023-28708" type="cve" title="CVE-2023-28708"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28709" id="CVE-2023-28709" type="cve" title="CVE-2023-28709"/>
      <reference href="https://bugzilla.redhat.com/2172298" id="2172298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2180856" id="2180856" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210321" id="2210321" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7065.html" id="ALSA-2023:7065" type="self" title="ALSA-2023:7065"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="tomcat-lib" version="9.0.62" release="27.el8_9" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.src.rpm">
          <filename>tomcat-lib-9.0.62-27.el8_9.noarch.rpm</filename>
          <sum type="sha256">14b6359e629ec0849d2e580cd5321327faeb3c5eba74aa6be3e6b3247c70cadc</sum>
        </package>
        <package name="tomcat-el-3.0-api" version="9.0.62" release="27.el8_9" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.src.rpm">
          <filename>tomcat-el-3.0-api-9.0.62-27.el8_9.noarch.rpm</filename>
          <sum type="sha256">44a03972b4eaf642d1e6e8715d0b790837f88e785f0e4ac7cbe5bc2a36372624</sum>
        </package>
        <package name="tomcat" version="9.0.62" release="27.el8_9" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.src.rpm">
          <filename>tomcat-9.0.62-27.el8_9.noarch.rpm</filename>
          <sum type="sha256">497dd0ada9de55fd97e3e63b9fc18d7f05df5c2f66cad55dd4ec16cd7f9d8c3f</sum>
        </package>
        <package name="tomcat-servlet-4.0-api" version="9.0.62" release="27.el8_9" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.src.rpm">
          <filename>tomcat-servlet-4.0-api-9.0.62-27.el8_9.noarch.rpm</filename>
          <sum type="sha256">530bba12ea89b738e59e8698717224404aeb5c4f48b227c3fa05378a50932f5c</sum>
        </package>
        <package name="tomcat-webapps" version="9.0.62" release="27.el8_9" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.src.rpm">
          <filename>tomcat-webapps-9.0.62-27.el8_9.noarch.rpm</filename>
          <sum type="sha256">715195428b36c15412c1050a47ae3b4621babe060a2aff2ebc5f79720135296e</sum>
        </package>
        <package name="tomcat-jsp-2.3-api" version="9.0.62" release="27.el8_9" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.src.rpm">
          <filename>tomcat-jsp-2.3-api-9.0.62-27.el8_9.noarch.rpm</filename>
          <sum type="sha256">bbec5023ab1d444d7de8137e98a64a8c756ee35ea5b9864c1aaed30d14dc6c85</sum>
        </package>
        <package name="tomcat-admin-webapps" version="9.0.62" release="27.el8_9" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.src.rpm">
          <filename>tomcat-admin-webapps-9.0.62-27.el8_9.noarch.rpm</filename>
          <sum type="sha256">cf4d515a1d184c362ae1e3c8826823c704e86aab1b88ba5385264a416652a391</sum>
        </package>
        <package name="tomcat-docs-webapp" version="9.0.62" release="27.el8_9" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.src.rpm">
          <filename>tomcat-docs-webapp-9.0.62-27.el8_9.noarch.rpm</filename>
          <sum type="sha256">fa165651d08d2d36c0ce3382941f52c8353e0b8085a11b4a356fae4dc728b5e4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7083</id>
    <title>Moderate: emacs security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-22 13:51:22"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>emacs security update</summary>
    <description>GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

* emacs: command execution via shell metacharacters (CVE-2022-48337)
* emacs: command injection vulnerability in htmlfontify.el (CVE-2022-48339)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7083" id="RHSA-2023:7083" type="rhsa" title="RHSA-2023:7083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48337" id="CVE-2022-48337" type="cve" title="CVE-2022-48337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48339" id="CVE-2022-48339" type="cve" title="CVE-2022-48339"/>
      <reference href="https://bugzilla.redhat.com/2171987" id="2171987" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2171989" id="2171989" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7083.html" id="ALSA-2023:7083" type="self" title="ALSA-2023:7083"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="emacs" version="26.1" release="11.el8" epoch="1" arch="s390x" src="emacs-26.1-11.el8.src.rpm">
          <filename>emacs-26.1-11.el8.s390x.rpm</filename>
          <sum type="sha256">11b677b6d74d0e1f39ea498d09357eb11325a48459cb057273912a872d415508</sum>
        </package>
        <package name="emacs-lucid" version="26.1" release="11.el8" epoch="1" arch="s390x" src="emacs-26.1-11.el8.src.rpm">
          <filename>emacs-lucid-26.1-11.el8.s390x.rpm</filename>
          <sum type="sha256">3d500ec9d16fbc2138f00e3cfe98608bcd1f3c51fdc035c314426cf1aa087ae1</sum>
        </package>
        <package name="emacs-nox" version="26.1" release="11.el8" epoch="1" arch="s390x" src="emacs-26.1-11.el8.src.rpm">
          <filename>emacs-nox-26.1-11.el8.s390x.rpm</filename>
          <sum type="sha256">65df1556fdf3811debee5eb580e67188c29be076ba394e4073777eff9d25bbe8</sum>
        </package>
        <package name="emacs-common" version="26.1" release="11.el8" epoch="1" arch="s390x" src="emacs-26.1-11.el8.src.rpm">
          <filename>emacs-common-26.1-11.el8.s390x.rpm</filename>
          <sum type="sha256">b65ce9527a4f8fd1a6fe22a766f21b7802749417eb0e61878f6b3cdccd39e3ac</sum>
        </package>
        <package name="emacs-terminal" version="26.1" release="11.el8" epoch="1" arch="noarch" src="emacs-26.1-11.el8.src.rpm">
          <filename>emacs-terminal-26.1-11.el8.noarch.rpm</filename>
          <sum type="sha256">edc883dfc02496a420f8f40a848dfb1949ee6ece77215b8d25741bbe0fbe922a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7139</id>
    <title>Moderate: samba security, bug fix, and enhancement update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:50"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security, bug fix, and enhancement update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.18.6). (BZ#2190417)

Security Fix(es):

* samba: out-of-bounds read in winbind AUTH_CRAP (CVE-2022-2127)
* samba: infinite loop in mdssvc RPC service for spotlight (CVE-2023-34966)
* samba: type confusion in mdssvc RPC service for spotlight (CVE-2023-34967)
* samba: spotlight server-side share path disclosure (CVE-2023-34968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7139" id="RHSA-2023:7139" type="rhsa" title="RHSA-2023:7139"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2127" id="CVE-2022-2127" type="cve" title="CVE-2022-2127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34966" id="CVE-2023-34966" type="cve" title="CVE-2023-34966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34967" id="CVE-2023-34967" type="cve" title="CVE-2023-34967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34968" id="CVE-2023-34968" type="cve" title="CVE-2023-34968"/>
      <reference href="https://bugzilla.redhat.com/2222791" id="2222791" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222793" id="2222793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222794" id="2222794" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222795" id="2222795" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7139.html" id="ALSA-2023:7139" type="self" title="ALSA-2023:7139"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="samba-vfs-iouring" version="4.18.6" release="1.el8" epoch="0" arch="s390x" src="samba-4.18.6-1.el8.src.rpm">
          <filename>samba-vfs-iouring-4.18.6-1.el8.s390x.rpm</filename>
          <sum type="sha256">85577a3282c25e0d1c1754300c3f2ff6569b3e0c4df7abc0d7ca618dcdb01c67</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7151</id>
    <title>Moderate: python3 security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:20:00"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: tarfile module directory traversal (CVE-2007-4559)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7151" id="RHSA-2023:7151" type="rhsa" title="RHSA-2023:7151"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2007-4559" id="CVE-2007-4559" type="cve" title="CVE-2007-4559"/>
      <reference href="https://bugzilla.redhat.com/263261" id="263261" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7151.html" id="ALSA-2023:7151" type="self" title="ALSA-2023:7151"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="python3-tkinter" version="3.6.8" release="56.el8_9.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-56.el8_9.alma.1.src.rpm">
          <filename>python3-tkinter-3.6.8-56.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">2a1f36143055ce26110f3b5e7173833b5531470fba43d0ec0683154b8be88457</sum>
        </package>
        <package name="platform-python-debug" version="3.6.8" release="56.el8_9.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-56.el8_9.alma.1.src.rpm">
          <filename>platform-python-debug-3.6.8-56.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">3c58a9aa0fc94436f5a4a2e79a0f14cdcc16c05a049635bcf56c23d73093a573</sum>
        </package>
        <package name="platform-python-devel" version="3.6.8" release="56.el8_9.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-56.el8_9.alma.1.src.rpm">
          <filename>platform-python-devel-3.6.8-56.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">6a3409944accac160e6074e1c08d4d01df3751b86f9adcec34925c1d359ad45a</sum>
        </package>
        <package name="python3-idle" version="3.6.8" release="56.el8_9.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-56.el8_9.alma.1.src.rpm">
          <filename>python3-idle-3.6.8-56.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">e4af079c568eccad705ce04008ea6a1e036c69d23c26f281b6229fc08bbfe673</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7165</id>
    <title>Moderate: cups security and bug fix update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 08:36:34"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>cups security and bug fix update</summary>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.

Security Fix(es):

* cups: heap buffer overflow may lead to DoS (CVE-2023-32324)
* cups: use-after-free in cupsdAcceptClient() in scheduler/client.c (CVE-2023-34241)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7165" id="RHSA-2023:7165" type="rhsa" title="RHSA-2023:7165"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32324" id="CVE-2023-32324" type="cve" title="CVE-2023-32324"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34241" id="CVE-2023-34241" type="cve" title="CVE-2023-34241"/>
      <reference href="https://bugzilla.redhat.com/2209603" id="2209603" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2214914" id="2214914" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7165.html" id="ALSA-2023:7165" type="self" title="ALSA-2023:7165"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="cups-ipptool" version="2.2.6" release="54.el8_9" epoch="1" arch="s390x" src="cups-2.2.6-54.el8_9.src.rpm">
          <filename>cups-ipptool-2.2.6-54.el8_9.s390x.rpm</filename>
          <sum type="sha256">2874781b377408f521b04588774720fa16ef5aebffeec47593a00c55ad941239</sum>
        </package>
        <package name="cups-lpd" version="2.2.6" release="54.el8_9" epoch="1" arch="s390x" src="cups-2.2.6-54.el8_9.src.rpm">
          <filename>cups-lpd-2.2.6-54.el8_9.s390x.rpm</filename>
          <sum type="sha256">34bf7ed4ae797b059c2050bed494ae544021ca7eeaace6d44556143e906d1d79</sum>
        </package>
        <package name="cups-filesystem" version="2.2.6" release="54.el8_9" epoch="1" arch="noarch" src="cups-2.2.6-54.el8_9.src.rpm">
          <filename>cups-filesystem-2.2.6-54.el8_9.noarch.rpm</filename>
          <sum type="sha256">60c3c7304997a1b0260d96b289b2476480194c33103b7b40aa6928907a3f0c1f</sum>
        </package>
        <package name="cups-devel" version="2.2.6" release="54.el8_9" epoch="1" arch="s390x" src="cups-2.2.6-54.el8_9.src.rpm">
          <filename>cups-devel-2.2.6-54.el8_9.s390x.rpm</filename>
          <sum type="sha256">71820bc1f4ab2192fa2a10cb78af6837ffafcf5283be88b7f1d2235c97b5a7e9</sum>
        </package>
        <package name="cups" version="2.2.6" release="54.el8_9" epoch="1" arch="s390x" src="cups-2.2.6-54.el8_9.src.rpm">
          <filename>cups-2.2.6-54.el8_9.s390x.rpm</filename>
          <sum type="sha256">d2cb3bdda2f729dec4f8f076736b7a7e8bbe665e9faf265555a1d5bf0c6f5348</sum>
        </package>
        <package name="cups-client" version="2.2.6" release="54.el8_9" epoch="1" arch="s390x" src="cups-2.2.6-54.el8_9.src.rpm">
          <filename>cups-client-2.2.6-54.el8_9.s390x.rpm</filename>
          <sum type="sha256">fed46eae5fc674366b6b5214c73236fb41164683bf894e1da4871c1c3ab57d83</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7176</id>
    <title>Moderate: python-pip security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:22:23"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-pip security update</summary>
    <description>pip is a package management system used to install and manage software packages written in Python. Many packages can be found in the Python Package Index (PyPI). pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python". 

Security Fix(es):

* python: tarfile module directory traversal (CVE-2007-4559)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7176" id="RHSA-2023:7176" type="rhsa" title="RHSA-2023:7176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2007-4559" id="CVE-2007-4559" type="cve" title="CVE-2007-4559"/>
      <reference href="https://bugzilla.redhat.com/263261" id="263261" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7176.html" id="ALSA-2023:7176" type="self" title="ALSA-2023:7176"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="python3-pip" version="9.0.3" release="23.el8" epoch="0" arch="noarch" src="python-pip-9.0.3-23.el8.src.rpm">
          <filename>python3-pip-9.0.3-23.el8.noarch.rpm</filename>
          <sum type="sha256">6849746e0dcd9b341c7b29d1607508dedb3c8a5d49a818a2846dea6b16eb9893</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7177</id>
    <title>Moderate: bind security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 08:41:54"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: flooding with UPDATE requests may lead to DoS (CVE-2022-3094)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7177" id="RHSA-2023:7177" type="rhsa" title="RHSA-2023:7177"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3094" id="CVE-2022-3094" type="cve" title="CVE-2022-3094"/>
      <reference href="https://bugzilla.redhat.com/2164032" id="2164032" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7177.html" id="ALSA-2023:7177" type="self" title="ALSA-2023:7177"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="bind-lite-devel" version="9.11.36" release="11.el8_9" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.src.rpm">
          <filename>bind-lite-devel-9.11.36-11.el8_9.s390x.rpm</filename>
          <sum type="sha256">03d6e551b217f2e371a27301fdbe3295da546491b2b37a8fcbd93e88567b6736</sum>
        </package>
        <package name="bind-libs" version="9.11.36" release="11.el8_9" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.src.rpm">
          <filename>bind-libs-9.11.36-11.el8_9.s390x.rpm</filename>
          <sum type="sha256">30ca5b7f1db30842df1771e8bc4172955fe3911640a5af88412aea228b559bc2</sum>
        </package>
        <package name="bind-pkcs11-libs" version="9.11.36" release="11.el8_9" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.src.rpm">
          <filename>bind-pkcs11-libs-9.11.36-11.el8_9.s390x.rpm</filename>
          <sum type="sha256">3a5b99219e517397ce5f4404585ed4939c2418f23ef98eb44f72df628d166865</sum>
        </package>
        <package name="bind-license" version="9.11.36" release="11.el8_9" epoch="32" arch="noarch" src="bind-9.11.36-11.el8_9.src.rpm">
          <filename>bind-license-9.11.36-11.el8_9.noarch.rpm</filename>
          <sum type="sha256">4eb4d07e03d5d044ca3b471e6076a18b272214a4130c1976074d03aa1f5ef47e</sum>
        </package>
        <package name="bind-chroot" version="9.11.36" release="11.el8_9" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.src.rpm">
          <filename>bind-chroot-9.11.36-11.el8_9.s390x.rpm</filename>
          <sum type="sha256">5832435bf53c72787c4cc9e07378da52d1a97f5fda36b8747664a77cb16d0b02</sum>
        </package>
        <package name="bind-sdb-chroot" version="9.11.36" release="11.el8_9" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.src.rpm">
          <filename>bind-sdb-chroot-9.11.36-11.el8_9.s390x.rpm</filename>
          <sum type="sha256">6d29b47b432bf107496354c04edd1becca158766282dd42c213d70ca85b43e0d</sum>
        </package>
        <package name="python3-bind" version="9.11.36" release="11.el8_9" epoch="32" arch="noarch" src="bind-9.11.36-11.el8_9.src.rpm">
          <filename>python3-bind-9.11.36-11.el8_9.noarch.rpm</filename>
          <sum type="sha256">6d5cb663e9257982f890e577515e563f986908efc0ccfe7c10fff5de54aa90b9</sum>
        </package>
        <package name="bind-pkcs11-devel" version="9.11.36" release="11.el8_9" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.src.rpm">
          <filename>bind-pkcs11-devel-9.11.36-11.el8_9.s390x.rpm</filename>
          <sum type="sha256">7405efb79f740cd372874bb6025ea4ecbea4d312b5a08ef8dd73ffb057d84bb5</sum>
        </package>
        <package name="bind-sdb" version="9.11.36" release="11.el8_9" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.src.rpm">
          <filename>bind-sdb-9.11.36-11.el8_9.s390x.rpm</filename>
          <sum type="sha256">95cd4c02368e1a7dd3884c57b313af654bbbd5c31a2278c0560266699287f4ae</sum>
        </package>
        <package name="bind-devel" version="9.11.36" release="11.el8_9" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.src.rpm">
          <filename>bind-devel-9.11.36-11.el8_9.s390x.rpm</filename>
          <sum type="sha256">9ccad161eabfde91e32a38f234f303c0b63711aa03f473724a585ab10514b49c</sum>
        </package>
        <package name="bind-utils" version="9.11.36" release="11.el8_9" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.src.rpm">
          <filename>bind-utils-9.11.36-11.el8_9.s390x.rpm</filename>
          <sum type="sha256">bd1d20adbd49bb42f235ad2c339d5189db3aa1b4aee6f8b530c627ad3f915ffe</sum>
        </package>
        <package name="bind-libs-lite" version="9.11.36" release="11.el8_9" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.src.rpm">
          <filename>bind-libs-lite-9.11.36-11.el8_9.s390x.rpm</filename>
          <sum type="sha256">cde6fcec755fe7a473c672a6d3e7f36da6002bd78c34085ecf06c5bf6a09f10b</sum>
        </package>
        <package name="bind-pkcs11" version="9.11.36" release="11.el8_9" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.src.rpm">
          <filename>bind-pkcs11-9.11.36-11.el8_9.s390x.rpm</filename>
          <sum type="sha256">ce7a8088a781a537de5f8ce27bcb80389846c2584f866dbd9ab9d9f8452be898</sum>
        </package>
        <package name="bind" version="9.11.36" release="11.el8_9" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.src.rpm">
          <filename>bind-9.11.36-11.el8_9.s390x.rpm</filename>
          <sum type="sha256">feb3b4b2c073d2cea5c4cbfa14ce2debc41c816e9065638c10ec15e3d175445f</sum>
        </package>
        <package name="bind-pkcs11-utils" version="9.11.36" release="11.el8_9" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.src.rpm">
          <filename>bind-pkcs11-utils-9.11.36-11.el8_9.s390x.rpm</filename>
          <sum type="sha256">ff6392d9a4a61012c3ea92118ff29d71e32a85ee2bf165e6c7bf35535a027841</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7190</id>
    <title>Moderate: avahi security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:19:12"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>avahi security update</summary>
    <description>Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

* avahi: avahi-daemon can be crashed via DBus (CVE-2023-1981)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7190" id="RHSA-2023:7190" type="rhsa" title="RHSA-2023:7190"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1981" id="CVE-2023-1981" type="cve" title="CVE-2023-1981"/>
      <reference href="https://bugzilla.redhat.com/2185911" id="2185911" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7190.html" id="ALSA-2023:7190" type="self" title="ALSA-2023:7190"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="avahi-ui-gtk3" version="0.7" release="21.el8" epoch="0" arch="s390x" src="avahi-0.7-21.el8.src.rpm">
          <filename>avahi-ui-gtk3-0.7-21.el8.s390x.rpm</filename>
          <sum type="sha256">446221e78b57bcc4c18728c805bc4ad5eba5ae73324611f4581066c080605974</sum>
        </package>
        <package name="avahi-tools" version="0.7" release="21.el8" epoch="0" arch="s390x" src="avahi-0.7-21.el8.src.rpm">
          <filename>avahi-tools-0.7-21.el8.s390x.rpm</filename>
          <sum type="sha256">77452730536fd860e639a6f942d785b97802785e61fa4a49dd766c2bdfa06948</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7202</id>
    <title>Moderate: container-tools:4.0 security and bug fix update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-27 11:53:08"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>container-tools:4.0 security and bug fix update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* could not find symbol `criu_set_lsm_mount_context` in `libcriu.so` (BZ#2242871)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7202" id="RHSA-2023:7202" type="rhsa" title="RHSA-2023:7202"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29406" id="CVE-2023-29406" type="cve" title="CVE-2023-29406"/>
      <reference href="https://bugzilla.redhat.com/2222167" id="2222167" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7202.html" id="ALSA-2023:7202" type="self" title="ALSA-2023:7202"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="container-tools" stream="4.0" version="8090020231017095551" context="20125149" arch="s390x"/>
        <package name="podman-catatonit" version="4.0.2" release="24.module_el8.9.0+3687+dcd7ef8f" epoch="2" arch="s390x" src="podman-4.0.2-24.module_el8.9.0+3687+dcd7ef8f.src.rpm">
          <filename>podman-catatonit-4.0.2-24.module_el8.9.0+3687+dcd7ef8f.s390x.rpm</filename>
          <sum type="sha256">064d76c8190f92e41c60653287270ce7d39f92172644ec58765e69794284301f</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.5" release="2.module_el8.8.0+3468+16b86c82" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.5-2.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.5-2.module_el8.8.0+3468+16b86c82.s390x.rpm</filename>
          <sum type="sha256">1e162c539720ce081534f6fb7d539a7332ff986a28465e81ca5532262dc0b96e</sum>
        </package>
        <package name="buildah" version="1.24.6" release="7.module_el8.9.0+3627+db8ec155" epoch="1" arch="s390x" src="buildah-1.24.6-7.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>buildah-1.24.6-7.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">2212f05af7f42d74bbb1be8bfe81d9d18a0ed02036561861b15eefb3d2f51e3d</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="1.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="libslirp-4.4.0-1.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>libslirp-devel-4.4.0-1.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">23a930ac511e216078f3ebd78a7940a7f4a6b6d16fe2d3c7f7c04c5dd9050b3b</sum>
        </package>
        <package name="podman-docker" version="4.0.2" release="24.module_el8.9.0+3627+db8ec155" epoch="2" arch="noarch" src="podman-4.0.2-24.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>podman-docker-4.0.2-24.module_el8.9.0+3627+db8ec155.noarch.rpm</filename>
          <sum type="sha256">2fd308704d36c3f5ab53b0bd230a78bfadca3a43b75202e05b08681b1e0f83e7</sum>
        </package>
        <package name="criu-devel" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>criu-devel-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">3b5df64c4e5adb160d2985d7477aa84f2df350f8b8651dee3d1a73cb22e4ff2b</sum>
        </package>
        <package name="runc" version="1.1.5" release="2.module_el8.9.0+3687+dcd7ef8f" epoch="1" arch="s390x" src="runc-1.1.5-2.module_el8.9.0+3687+dcd7ef8f.src.rpm">
          <filename>runc-1.1.5-2.module_el8.9.0+3687+dcd7ef8f.s390x.rpm</filename>
          <sum type="sha256">3cd8eb226e443275353bd8ad7d31d499f2044f66a1177cabc742125dcfee7118</sum>
        </package>
        <package name="python3-podman" version="4.0.0" release="2.module_el8.9.0+3627+db8ec155" epoch="0" arch="noarch" src="python-podman-4.0.0-2.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>python3-podman-4.0.0-2.module_el8.9.0+3627+db8ec155.noarch.rpm</filename>
          <sum type="sha256">4a27742746229fff2355b72070587cb7db657cf3d6d3aeb092b3bc5111e8cbb6</sum>
        </package>
        <package name="cockpit-podman" version="46" release="1.module_el8.7.0+3344+5bcd850f" epoch="0" arch="noarch" src="cockpit-podman-46-1.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>cockpit-podman-46-1.module_el8.7.0+3344+5bcd850f.noarch.rpm</filename>
          <sum type="sha256">4befd0793ef210df16649c866d5c1c4e69991cc174ecf348a5fbe591aa93b387</sum>
        </package>
        <package name="slirp4netns" version="1.1.8" release="3.module_el8.9.0+3627+db8ec155" epoch="0" arch="s390x" src="slirp4netns-1.1.8-3.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>slirp4netns-1.1.8-3.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">502d4654a521453555bfb5a5277a8a9750897dd2b8e99332778cdafca7829e59</sum>
        </package>
        <package name="containers-common" version="1" release="38.module_el8.9.0+3627+db8ec155" epoch="2" arch="s390x" src="containers-common-1-38.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>containers-common-1-38.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">59743e519719ebda4b03e9224b0027f9f0b94172bd75944acd94345533910cab</sum>
        </package>
        <package name="crit" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>crit-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">63e66b7937f70ee985aabe920c4d8c1e590159f72b4b79a311e986f58bc147e1</sum>
        </package>
        <package name="buildah-tests" version="1.24.6" release="7.module_el8.9.0+3687+dcd7ef8f" epoch="1" arch="s390x" src="buildah-1.24.6-7.module_el8.9.0+3687+dcd7ef8f.src.rpm">
          <filename>buildah-tests-1.24.6-7.module_el8.9.0+3687+dcd7ef8f.s390x.rpm</filename>
          <sum type="sha256">65279d54fa59abd25a0bc4fc3d7ac952f42818ca428422333f16e6cb54260ee1</sum>
        </package>
        <package name="udica" version="0.2.6" release="4.module_el8.9.0+3627+db8ec155" epoch="0" arch="noarch" src="udica-0.2.6-4.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>udica-0.2.6-4.module_el8.9.0+3627+db8ec155.noarch.rpm</filename>
          <sum type="sha256">6a7a865e0c91be7e1c5cbbe01c6eb5a9a723db86526d9b178828dd5a6155863a</sum>
        </package>
        <package name="python3-criu" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>python3-criu-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">6b152daf504ff66ecb343dfbca61a7adb1ddceb7d77ba0af696194d2d2d0db43</sum>
        </package>
        <package name="container-selinux" version="2.205.0" release="3.module_el8.9.0+3687+dcd7ef8f" epoch="2" arch="noarch" src="container-selinux-2.205.0-3.module_el8.9.0+3687+dcd7ef8f.src.rpm">
          <filename>container-selinux-2.205.0-3.module_el8.9.0+3687+dcd7ef8f.noarch.rpm</filename>
          <sum type="sha256">7041cfe69b77caa064e026863bd099794de9bb4965bad64293fdf6032c991e31</sum>
        </package>
        <package name="fuse-overlayfs" version="1.9" release="2.module_el8.9.0+3627+db8ec155" epoch="0" arch="s390x" src="fuse-overlayfs-1.9-2.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>fuse-overlayfs-1.9-2.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">769fd619e20112145f23e5c5e36c0c5dbf24116ffe3d85022ae3168f6ab40f80</sum>
        </package>
        <package name="podman" version="4.0.2" release="24.module_el8.9.0+3687+dcd7ef8f" epoch="2" arch="s390x" src="podman-4.0.2-24.module_el8.9.0+3687+dcd7ef8f.src.rpm">
          <filename>podman-4.0.2-24.module_el8.9.0+3687+dcd7ef8f.s390x.rpm</filename>
          <sum type="sha256">9574ffc8f1aa9383561be07fecc24b9ac3f3311f1b1ad5d9905232735e6bd429</sum>
        </package>
        <package name="podman-plugins" version="4.0.2" release="24.module_el8.9.0+3627+db8ec155" epoch="2" arch="s390x" src="podman-4.0.2-24.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>podman-plugins-4.0.2-24.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">9583b10a44d689917fd6e3ac1c310f4c1dd35fd9699e1ae257348400fbac1f94</sum>
        </package>
        <package name="containernetworking-plugins" version="1.1.1" release="5.module_el8.9.0+3627+db8ec155" epoch="1" arch="s390x" src="containernetworking-plugins-1.1.1-5.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>containernetworking-plugins-1.1.1-5.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">9594b139358a2cd638a8e698c040ebdaedda5a6af716ccffa228f44321c9d41d</sum>
        </package>
        <package name="netavark" version="1.0.1" release="38.module_el8.9.0+3627+db8ec155" epoch="2" arch="s390x" src="containers-common-1-38.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>netavark-1.0.1-38.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">96369473b0af8c0668bbaab115f37a3eaaf018ddd042d90b4cd1891954dc0bda</sum>
        </package>
        <package name="conmon" version="2.1.4" release="2.module_el8.9.0+3687+dcd7ef8f" epoch="2" arch="s390x" src="conmon-2.1.4-2.module_el8.9.0+3687+dcd7ef8f.src.rpm">
          <filename>conmon-2.1.4-2.module_el8.9.0+3687+dcd7ef8f.s390x.rpm</filename>
          <sum type="sha256">a243410e8da3e228dbeef571c31bce2256062f5786cf4dde6e7ab51c1edf7279</sum>
        </package>
        <package name="crun" version="1.8.7" release="1.module_el8.9.0+3683+33eb0feb" epoch="0" arch="s390x" src="crun-1.8.7-1.module_el8.9.0+3683+33eb0feb.src.rpm">
          <filename>crun-1.8.7-1.module_el8.9.0+3683+33eb0feb.s390x.rpm</filename>
          <sum type="sha256">a5bead3eccd97d3324391d9bbb99d8e8cae5e3e408b641a7d8a26b935b19393e</sum>
        </package>
        <package name="podman-gvproxy" version="4.0.2" release="24.module_el8.9.0+3687+dcd7ef8f" epoch="2" arch="s390x" src="podman-4.0.2-24.module_el8.9.0+3687+dcd7ef8f.src.rpm">
          <filename>podman-gvproxy-4.0.2-24.module_el8.9.0+3687+dcd7ef8f.s390x.rpm</filename>
          <sum type="sha256">b2f5b40d9c33dee971173cdd8d6df2a19f3d49d07919961f2447b9bfa529e5b3</sum>
        </package>
        <package name="aardvark-dns" version="1.0.1" release="38.module_el8.9.0+3627+db8ec155" epoch="2" arch="s390x" src="containers-common-1-38.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>aardvark-dns-1.0.1-38.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">b74f5f3d7125aab41b62a1440e4a9d6db11ac82b22312437f944e9a2563ad3d8</sum>
        </package>
        <package name="criu" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>criu-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">c08a42b3160aaaca1d8eb6f81df59b8ea0a45448fd676479d2cae70b46600d46</sum>
        </package>
        <package name="skopeo-tests" version="1.6.2" release="9.module_el8.9.0+3687+dcd7ef8f.alma.1" epoch="2" arch="s390x" src="skopeo-1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1.src.rpm">
          <filename>skopeo-tests-1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1.s390x.rpm</filename>
          <sum type="sha256">c3048fb21bbedc943eabb1fbea0d5c4def3420fd8224a33bc1856450528c6386</sum>
        </package>
        <package name="podman-remote" version="4.0.2" release="24.module_el8.9.0+3687+dcd7ef8f" epoch="2" arch="s390x" src="podman-4.0.2-24.module_el8.9.0+3687+dcd7ef8f.src.rpm">
          <filename>podman-remote-4.0.2-24.module_el8.9.0+3687+dcd7ef8f.s390x.rpm</filename>
          <sum type="sha256">cd40cd7a37dcf5bd5f5b3770a4c0957ae678503a262ca06cf3d4934695531b73</sum>
        </package>
        <package name="skopeo" version="1.6.2" release="9.module_el8.9.0+3687+dcd7ef8f.alma.1" epoch="2" arch="s390x" src="skopeo-1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1.src.rpm">
          <filename>skopeo-1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1.s390x.rpm</filename>
          <sum type="sha256">d0a6c50012cdf498e00901aafa12f85eb3cf1aa26e009b5fd3cf546ae380c625</sum>
        </package>
        <package name="toolbox" version="0.0.99.4" release="5.module_el8.9.0+3627+db8ec155" epoch="0" arch="s390x" src="toolbox-0.0.99.4-5.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>toolbox-0.0.99.4-5.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">dea080dc9abeebb066d991b64b5a8f7d667befa81b5ae983cb3b3acca30d626f</sum>
        </package>
        <package name="criu-libs" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>criu-libs-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">e4c16247d9bcf785747fb00cd48e60e73f98ce6fcb5202032c264dfb343a7bce</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.4" release="5.module_el8.9.0+3627+db8ec155" epoch="0" arch="s390x" src="toolbox-0.0.99.4-5.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>toolbox-tests-0.0.99.4-5.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">e9c564f21054028335b29a43cc179070a0218effbcadd66b0d4d56f9e188fbeb</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="1.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="libslirp-4.4.0-1.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>libslirp-4.4.0-1.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">f2c8aa7fab8501dbdf33f68a74cb5600af266839424a6d637732ac248a58edc7</sum>
        </package>
        <package name="podman-tests" version="4.0.2" release="24.module_el8.9.0+3687+dcd7ef8f" epoch="2" arch="s390x" src="podman-4.0.2-24.module_el8.9.0+3687+dcd7ef8f.src.rpm">
          <filename>podman-tests-4.0.2-24.module_el8.9.0+3687+dcd7ef8f.s390x.rpm</filename>
          <sum type="sha256">f6a47fd4c124a5d489d2a1169eaba61076485835031cc2b89411ef8de36a7786</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7205</id>
    <title>Important: nodejs:20 security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-27 11:37:41"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:20 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
* nodejs: permission model improperly protects against path traversal (CVE-2023-39331)
* nodejs: path traversal through path stored in Uint8Array (CVE-2023-39332)
* nodejs: integrity checks according to policies can be circumvented (CVE-2023-38552)
* nodejs: code injection via WebAssembly export names (CVE-2023-39333)
* node-undici: cookie leakage (CVE-2023-45143)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7205" id="RHSA-2023:7205" type="rhsa" title="RHSA-2023:7205"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38552" id="CVE-2023-38552" type="cve" title="CVE-2023-38552"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39331" id="CVE-2023-39331" type="cve" title="CVE-2023-39331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39332" id="CVE-2023-39332" type="cve" title="CVE-2023-39332"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39333" id="CVE-2023-39333" type="cve" title="CVE-2023-39333"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45143" id="CVE-2023-45143" type="cve" title="CVE-2023-45143"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244104" id="2244104" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244413" id="2244413" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244414" id="2244414" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244415" id="2244415" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244418" id="2244418" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7205.html" id="ALSA-2023:7205" type="self" title="ALSA-2023:7205"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="nodejs" stream="20" version="8090020231115121850" context="9edba152" arch="s390x"/>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.9.0+3675+0258a6d9" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.9.0+3675+0258a6d9.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.9.0+3675+0258a6d9.noarch.rpm</filename>
          <sum type="sha256">1a4d287d654bab634a2f004f9f98ac1d2e464e44717b935e6d08824838fcf7b0</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el8.9.0+3684+11b9e959" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.9.0+3684+11b9e959.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el8.9.0+3684+11b9e959.noarch.rpm</filename>
          <sum type="sha256">2737beb0b9ef67ff6403ed0e4f69f5ab715d85eb5860974b3755cefb24e3b7f9</sum>
        </package>
        <package name="nodejs-devel" version="20.8.1" release="1.module_el8.9.0+3675+0258a6d9" epoch="1" arch="s390x" src="nodejs-20.8.1-1.module_el8.9.0+3675+0258a6d9.src.rpm">
          <filename>nodejs-devel-20.8.1-1.module_el8.9.0+3675+0258a6d9.s390x.rpm</filename>
          <sum type="sha256">506b061673134077bcf5b3abeb54776ffe4a9add0aa592d602bca35a61d656e1</sum>
        </package>
        <package name="npm" version="10.1.0" release="1.20.8.1.1.module_el8.9.0+3675+0258a6d9" epoch="1" arch="s390x" src="nodejs-20.8.1-1.module_el8.9.0+3675+0258a6d9.src.rpm">
          <filename>npm-10.1.0-1.20.8.1.1.module_el8.9.0+3675+0258a6d9.s390x.rpm</filename>
          <sum type="sha256">5cff3e7b54de09bcd62b5a2fcf1b1589e0ca75626b260e2fceda4f054d8b8055</sum>
        </package>
        <package name="nodejs" version="20.8.1" release="1.module_el8.9.0+3675+0258a6d9" epoch="1" arch="s390x" src="nodejs-20.8.1-1.module_el8.9.0+3675+0258a6d9.src.rpm">
          <filename>nodejs-20.8.1-1.module_el8.9.0+3675+0258a6d9.s390x.rpm</filename>
          <sum type="sha256">6a28cd666d2352454b267cc716860735c7f73064b47d9e576875b4927a2caa6a</sum>
        </package>
        <package name="nodejs-docs" version="20.8.1" release="1.module_el8.9.0+3675+0258a6d9" epoch="1" arch="noarch" src="nodejs-20.8.1-1.module_el8.9.0+3675+0258a6d9.src.rpm">
          <filename>nodejs-docs-20.8.1-1.module_el8.9.0+3675+0258a6d9.noarch.rpm</filename>
          <sum type="sha256">a9b20be25f7c0e3413002ed9db020b3cd4bdfec08411bf35e7289293b03aec7b</sum>
        </package>
        <package name="nodejs-full-i18n" version="20.8.1" release="1.module_el8.9.0+3675+0258a6d9" epoch="1" arch="s390x" src="nodejs-20.8.1-1.module_el8.9.0+3675+0258a6d9.src.rpm">
          <filename>nodejs-full-i18n-20.8.1-1.module_el8.9.0+3675+0258a6d9.s390x.rpm</filename>
          <sum type="sha256">b3a5c20c974cb369f6c76386dbf05297af294c981abb3d23a4245f32ec993a7e</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el8.9.0+3684+11b9e959" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.9.0+3684+11b9e959.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el8.9.0+3684+11b9e959.noarch.rpm</filename>
          <sum type="sha256">b9f7128be10cd497d323808f86402c91a970afde6884b8967695e20fa4060629</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7213</id>
    <title>Critical: squid:4 security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:19:42"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>squid:4 security update</summary>
    <description>Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

* squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)
* squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7213" id="RHSA-2023:7213" type="rhsa" title="RHSA-2023:7213"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46846" id="CVE-2023-46846" type="cve" title="CVE-2023-46846"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46847" id="CVE-2023-46847" type="cve" title="CVE-2023-46847"/>
      <reference href="https://bugzilla.redhat.com/2245910" id="2245910" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245916" id="2245916" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7213.html" id="ALSA-2023:7213" type="self" title="ALSA-2023:7213"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="squid" stream="4" version="8060020220707110313" context="9edba152" arch="s390x"/>
        <package name="squid" version="4.15" release="7.module_el8.9.0+3680+f9142978.1.alma.1" epoch="7" arch="s390x" src="squid-4.15-7.module_el8.9.0+3680+f9142978.1.alma.1.src.rpm">
          <filename>squid-4.15-7.module_el8.9.0+3680+f9142978.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">10a8a56f875bafdc32ad84578022d4fe3546e43a79bac5a366669f30d99d52cb</sum>
        </package>
        <package name="libecap" version="1.0.1" release="2.module_el8.6.0+3048+383bc947" epoch="0" arch="s390x" src="libecap-1.0.1-2.module_el8.6.0+3048+383bc947.src.rpm">
          <filename>libecap-1.0.1-2.module_el8.6.0+3048+383bc947.s390x.rpm</filename>
          <sum type="sha256">6f8eb1f500a9dca1949f5f05aedf6b97764817d9f17284be3612eec04618f4e1</sum>
        </package>
        <package name="libecap-devel" version="1.0.1" release="2.module_el8.6.0+3048+383bc947" epoch="0" arch="s390x" src="libecap-1.0.1-2.module_el8.6.0+3048+383bc947.src.rpm">
          <filename>libecap-devel-1.0.1-2.module_el8.6.0+3048+383bc947.s390x.rpm</filename>
          <sum type="sha256">96f15e87a90682f6ec87bc4ed7c8edae439f414cd0382f1865dcf76ac3a7807d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7254</id>
    <title>Moderate: dotnet8.0 security update</title>
    <issued date="2023-11-15 00:00:00"/>
    <updated date="2023-11-23 10:21:31"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

Security Fix(es):

* dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)
* dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7254" id="RHSA-2023:7254" type="rhsa" title="RHSA-2023:7254"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36049" id="CVE-2023-36049" type="cve" title="CVE-2023-36049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36558" id="CVE-2023-36558" type="cve" title="CVE-2023-36558"/>
      <reference href="https://bugzilla.redhat.com/2247750" id="2247750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248883" id="2248883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7254.html" id="ALSA-2023:7254" type="self" title="ALSA-2023:7254"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="dotnet-host" version="8.0.0" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.100-2.el8_9.src.rpm">
          <filename>dotnet-host-8.0.0-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">2a10fd0724ff05738731ab2004b5b891b3af4839fef9bc9dd15d07f75863255f</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.0" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.100-2.el8_9.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.0-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">43d9c4ad6d4c431170ebccca0995743c4a9b7eb771ac39a86f5eeb1af592ce3c</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.100" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.100-2.el8_9.src.rpm">
          <filename>dotnet-templates-8.0-8.0.100-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">4a732b322502b39d17ad2dd9ef3cccac50635f4f6d12a33ee9b5640dd484118b</sum>
        </package>
        <package name="dotnet" version="8.0.100" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.100-2.el8_9.src.rpm">
          <filename>dotnet-8.0.100-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">4e10520b05bacf13f20abbca07330b48959ef96d86ddd6e385974ded477dbd0c</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.0" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.100-2.el8_9.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.0-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">5f34dc9677892e383410bdcfc0e2700b9f50d47c3ca1b143a6de1d5612807f63</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="8.0.100" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.100-2.el8_9.src.rpm">
          <filename>netstandard-targeting-pack-2.1-8.0.100-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">6d594da69fa4dd889dbb94345bbb12d1a6ae9b2a1d8ba4898d60cd95caa07f47</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.100" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.100-2.el8_9.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.100-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">74ff5f99350068e798bd012bd1011abf10311edf9c8d6eb9cfa08a96022228da</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.0" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.100-2.el8_9.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.0-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">8adb4b0a1e3cf64e7ed3a35a26c04db4e674c16c085a359f12d7911b6f00c3b4</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.0" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.100-2.el8_9.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.0-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">ba4ac223d452bb3f6b71c8c8a73a7c65c94cf3c5d4560e9a9b4575344a897b5f</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.0" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.100-2.el8_9.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.0-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">ea97a0f4d4b43104cfb67a9556945b7b29d36fd645841f4020f49262611d6e90</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.0" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.100-2.el8_9.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.0-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">fc6ca1e4a736660f8bab44e301238b40fdefbc65e567bb1d8052648134d0f39d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7256</id>
    <title>Moderate: dotnet7.0 security update</title>
    <issued date="2023-11-15 00:00:00"/>
    <updated date="2023-11-23 10:20:58"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.114 and .NET Runtime 7.0.14.

Security Fix(es):

* dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)
* dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7256" id="RHSA-2023:7256" type="rhsa" title="RHSA-2023:7256"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36049" id="CVE-2023-36049" type="cve" title="CVE-2023-36049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36558" id="CVE-2023-36558" type="cve" title="CVE-2023-36558"/>
      <reference href="https://bugzilla.redhat.com/2247750" id="2247750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248883" id="2248883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7256.html" id="ALSA-2023:7256" type="self" title="ALSA-2023:7256"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="aspnetcore-runtime-7.0" version="7.0.14" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.114-1.el8_9.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.14-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">125f914301e3c5b1f0b398d7533ade6212d796c0a12e995de5c38667ae549f5d</sum>
        </package>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.14" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.114-1.el8_9.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.14-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">1373a8d949e02549a40b434693a770b988a4d13bb53a4f54aee0a78f6bc80032</sum>
        </package>
        <package name="dotnet-templates-7.0" version="7.0.114" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.114-1.el8_9.src.rpm">
          <filename>dotnet-templates-7.0-7.0.114-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">3e2e9205eaafef1f197480ad1066c81e7fc7794de60ecc755b6e4a7940dc0a38</sum>
        </package>
        <package name="dotnet-runtime-7.0" version="7.0.14" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.114-1.el8_9.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.14-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">63ae043f356aacbd89e04d0203f19fd0dced3143bed82e85e6fe3213de36d086</sum>
        </package>
        <package name="dotnet-hostfxr-7.0" version="7.0.14" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.114-1.el8_9.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.14-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">6cc93c6b59eafffcef959cae958146c99e8d931574b9a73c4c27bb5e988e4310</sum>
        </package>
        <package name="dotnet-apphost-pack-7.0" version="7.0.14" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.114-1.el8_9.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.14-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">b90eb356c7ae49a5bf6f78f5845261503ec17bfa116e855b9b6c1e7c84634fcd</sum>
        </package>
        <package name="dotnet-sdk-7.0" version="7.0.114" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.114-1.el8_9.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.114-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">c6c21f887ca58ed67633645f2e1e7eeb52d4f647aba21a6e429cd0f7c2ed3bd3</sum>
        </package>
        <package name="dotnet-targeting-pack-7.0" version="7.0.14" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.114-1.el8_9.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.14-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">d52a3a585d22af1913b62a36dcd109e2861661730bb9398f93be1fe6b5f8666c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7258</id>
    <title>Moderate: dotnet6.0 security update</title>
    <issued date="2023-11-15 00:00:00"/>
    <updated date="2023-11-23 10:20:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.125 and .NET Runtime 6.0.25.

Security Fix(es):

* dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)
* dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7258" id="RHSA-2023:7258" type="rhsa" title="RHSA-2023:7258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36049" id="CVE-2023-36049" type="cve" title="CVE-2023-36049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36558" id="CVE-2023-36558" type="cve" title="CVE-2023-36558"/>
      <reference href="https://bugzilla.redhat.com/2247750" id="2247750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248883" id="2248883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7258.html" id="ALSA-2023:7258" type="self" title="ALSA-2023:7258"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="dotnet-targeting-pack-6.0" version="6.0.25" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.125-1.el8_9.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.25-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">52b858ed46d7726d758ca1b1b181e90704463f9168693f53ce0e4b107a8c1921</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.25" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.125-1.el8_9.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.25-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">5fb3241608baa899779f9aa20e8c1c0622e10400bc717d73b0304f4b8c0e4b4f</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.25" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.125-1.el8_9.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.25-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">7f467a9d7a7ef133d4c2c9a29bd0ae91789727073bec4b608944af4d400b32ab</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.125" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.125-1.el8_9.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.125-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">832d8224455bcbfa87b99b4f79121bcfc6b034a47a7f8586df5f26793cf1055d</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.25" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.125-1.el8_9.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.25-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">91355cc43fa8b51fa478e22f0cefd8708ec657787aa58cf20931967e04c6a087</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.25" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.125-1.el8_9.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.25-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">b479046a9ab37137622c1dcf69b89226974c6145ca1a2037657d9e1d502915ad</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.125" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.125-1.el8_9.src.rpm">
          <filename>dotnet-templates-6.0-6.0.125-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">e76b229f97f3c9bed84e618aed73c7c8ae074f29343e9d5ad7d1de4d08680441</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.25" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.125-1.el8_9.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.25-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">fd92df46c5cccca319562f3c603d69d431cbae0baa4aa2cf54e31e54701b9c44</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7467</id>
    <title>Moderate: samba security update</title>
    <issued date="2023-11-22 00:00:00"/>
    <updated date="2023-11-24 10:04:13"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: smbd allows client access to unix domain sockets on the file system as root (CVE-2023-3961)
* samba: SMB clients can truncate files with read-only permissions (CVE-2023-4091)
* samba: "rpcecho" development server allows denial of service via sleep() call on AD DC (CVE-2023-42669)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7467" id="RHSA-2023:7467" type="rhsa" title="RHSA-2023:7467"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3961" id="CVE-2023-3961" type="cve" title="CVE-2023-3961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4091" id="CVE-2023-4091" type="cve" title="CVE-2023-4091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42669" id="CVE-2023-42669" type="cve" title="CVE-2023-42669"/>
      <reference href="https://bugzilla.redhat.com/2241881" id="2241881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241882" id="2241882" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241884" id="2241884" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7467.html" id="ALSA-2023:7467" type="self" title="ALSA-2023:7467"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="samba-vfs-iouring" version="4.18.6" release="2.el8_9.alma.1" epoch="0" arch="s390x" src="samba-4.18.6-2.el8_9.alma.1.src.rpm">
          <filename>samba-vfs-iouring-4.18.6-2.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">384e50604d6155dc13c108eeec26ce4a374751475f84bd750fb52ddf761020c9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7500</id>
    <title>Important: thunderbird security update</title>
    <issued date="2023-11-27 00:00:00"/>
    <updated date="2023-11-29 17:38:00"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.5.0.

Security Fix(es):

* Mozilla: Out-of-bound memory access in WebGL2 blitFramebuffer (CVE-2023-6204)
* Mozilla: Use-after-free in MessagePort::Entangled (CVE-2023-6205)
* Mozilla: Clickjacking permission prompts using the fullscreen transition (CVE-2023-6206)
* Mozilla: Use-after-free in ReadableByteStreamQueueEntry::Buffer (CVE-2023-6207)
* Mozilla: Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5 (CVE-2023-6212)
* Mozilla: Using Selection API would copy contents into X11 primary selection. (CVE-2023-6208)
* Mozilla: Incorrect parsing of relative URLs starting with "///" (CVE-2023-6209)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7500" id="RHSA-2023:7500" type="rhsa" title="RHSA-2023:7500"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6204" id="CVE-2023-6204" type="cve" title="CVE-2023-6204"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6205" id="CVE-2023-6205" type="cve" title="CVE-2023-6205"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6206" id="CVE-2023-6206" type="cve" title="CVE-2023-6206"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6207" id="CVE-2023-6207" type="cve" title="CVE-2023-6207"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6208" id="CVE-2023-6208" type="cve" title="CVE-2023-6208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6209" id="CVE-2023-6209" type="cve" title="CVE-2023-6209"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6212" id="CVE-2023-6212" type="cve" title="CVE-2023-6212"/>
      <reference href="https://bugzilla.redhat.com/2250896" id="2250896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250897" id="2250897" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250898" id="2250898" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250899" id="2250899" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250900" id="2250900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250901" id="2250901" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250902" id="2250902" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7500.html" id="ALSA-2023:7500" type="self" title="ALSA-2023:7500"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="thunderbird" version="115.5.0" release="1.el8_9.alma.1" epoch="0" arch="s390x" src="thunderbird-115.5.0-1.el8_9.alma.1.src.rpm">
          <filename>thunderbird-115.5.0-1.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">91198d8ab3e720f03d6a55030d464ac2ccf93bf2c93fc4b8d978ae4fbdbc2e8c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7508</id>
    <title>Important: firefox security update</title>
    <issued date="2023-11-27 00:00:00"/>
    <updated date="2023-11-29 17:25:43"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.5.0 ESR.

Security Fix(es):

* Mozilla: Out-of-bound memory access in WebGL2 blitFramebuffer (CVE-2023-6204)
* Mozilla: Use-after-free in MessagePort::Entangled (CVE-2023-6205)
* Mozilla: Clickjacking permission prompts using the fullscreen transition (CVE-2023-6206)
* Mozilla: Use-after-free in ReadableByteStreamQueueEntry::Buffer (CVE-2023-6207)
* Mozilla: Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5 (CVE-2023-6212)
* Mozilla: Using Selection API would copy contents into X11 primary selection. (CVE-2023-6208)
* Mozilla: Incorrect parsing of relative URLs starting with "///" (CVE-2023-6209)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7508" id="RHSA-2023:7508" type="rhsa" title="RHSA-2023:7508"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6204" id="CVE-2023-6204" type="cve" title="CVE-2023-6204"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6205" id="CVE-2023-6205" type="cve" title="CVE-2023-6205"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6206" id="CVE-2023-6206" type="cve" title="CVE-2023-6206"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6207" id="CVE-2023-6207" type="cve" title="CVE-2023-6207"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6208" id="CVE-2023-6208" type="cve" title="CVE-2023-6208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6209" id="CVE-2023-6209" type="cve" title="CVE-2023-6209"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6212" id="CVE-2023-6212" type="cve" title="CVE-2023-6212"/>
      <reference href="https://bugzilla.redhat.com/2250896" id="2250896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250897" id="2250897" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250898" id="2250898" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250899" id="2250899" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250900" id="2250900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250901" id="2250901" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250902" id="2250902" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7508.html" id="ALSA-2023:7508" type="self" title="ALSA-2023:7508"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="firefox" version="115.5.0" release="1.el8_9.alma.1" epoch="0" arch="s390x" src="firefox-115.5.0-1.el8_9.alma.1.src.rpm">
          <filename>firefox-115.5.0-1.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">f7b189f25bd23897da1a31bd9f781ab68707adb9a329288aaa6e9e88dbf3c6be</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7581</id>
    <title>Important: postgresql:13 security update</title>
    <issued date="2023-11-29 00:00:00"/>
    <updated date="2023-12-04 16:37:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:13 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: Buffer overrun from integer overflow in array modification (CVE-2023-5869)
* postgresql: Memory disclosure in aggregate function calls (CVE-2023-5868)
* postgresql: extension script @substitutions@ within quoting allow SQL injection (CVE-2023-39417)
* postgresql: Role pg_signal_backend can signal certain superuser processes. (CVE-2023-5870)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7581" id="RHSA-2023:7581" type="rhsa" title="RHSA-2023:7581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39417" id="CVE-2023-39417" type="cve" title="CVE-2023-39417"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5868" id="CVE-2023-5868" type="cve" title="CVE-2023-5868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5869" id="CVE-2023-5869" type="cve" title="CVE-2023-5869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5870" id="CVE-2023-5870" type="cve" title="CVE-2023-5870"/>
      <reference href="https://bugzilla.redhat.com/2228111" id="2228111" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247168" id="2247168" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247169" id="2247169" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247170" id="2247170" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7581.html" id="ALSA-2023:7581" type="self" title="ALSA-2023:7581"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="postgresql" stream="13" version="8090020231204145155" context="9edba152" arch="s390x"/>
        <package name="postgresql-docs" version="13.13" release="1.module_el8.9.0+3692+8714f643" epoch="0" arch="s390x" src="postgresql-13.13-1.module_el8.9.0+3692+8714f643.src.rpm">
          <filename>postgresql-docs-13.13-1.module_el8.9.0+3692+8714f643.s390x.rpm</filename>
          <sum type="sha256">083973e15d8db301535ffd8cbde77774aedd7ae892902a90556f34a718bedc86</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.13" release="1.module_el8.9.0+3692+8714f643" epoch="0" arch="s390x" src="postgresql-13.13-1.module_el8.9.0+3692+8714f643.src.rpm">
          <filename>postgresql-upgrade-devel-13.13-1.module_el8.9.0+3692+8714f643.s390x.rpm</filename>
          <sum type="sha256">104ff4bf242bc5acb6b6e7434add7e78a70082224dbbe326a3e1fa4ebb8bf372</sum>
        </package>
        <package name="postgresql-server" version="13.13" release="1.module_el8.9.0+3692+8714f643" epoch="0" arch="s390x" src="postgresql-13.13-1.module_el8.9.0+3692+8714f643.src.rpm">
          <filename>postgresql-server-13.13-1.module_el8.9.0+3692+8714f643.s390x.rpm</filename>
          <sum type="sha256">13a55a3d8359dbf7a40ee13d74f2e68c9464df9d1462803884ec33adf1032f74</sum>
        </package>
        <package name="postgresql-static" version="13.13" release="1.module_el8.9.0+3692+8714f643" epoch="0" arch="s390x" src="postgresql-13.13-1.module_el8.9.0+3692+8714f643.src.rpm">
          <filename>postgresql-static-13.13-1.module_el8.9.0+3692+8714f643.s390x.rpm</filename>
          <sum type="sha256">34491d3e44dbf1d923f2639fa9db82c9760157d07d328541c8cf7fde18570dc3</sum>
        </package>
        <package name="postgresql-upgrade" version="13.13" release="1.module_el8.9.0+3692+8714f643" epoch="0" arch="s390x" src="postgresql-13.13-1.module_el8.9.0+3692+8714f643.src.rpm">
          <filename>postgresql-upgrade-13.13-1.module_el8.9.0+3692+8714f643.s390x.rpm</filename>
          <sum type="sha256">344c005e8b27b7ab721f433f0bd31c669151ed72cb4a8aa33ec95d0cdde08a5a</sum>
        </package>
        <package name="postgresql-server-devel" version="13.13" release="1.module_el8.9.0+3692+8714f643" epoch="0" arch="s390x" src="postgresql-13.13-1.module_el8.9.0+3692+8714f643.src.rpm">
          <filename>postgresql-server-devel-13.13-1.module_el8.9.0+3692+8714f643.s390x.rpm</filename>
          <sum type="sha256">573809ab47c5ac4c6b2374e5180bae60fd5699e190bef7eb171542261f458219</sum>
        </package>
        <package name="postgresql-plpython3" version="13.13" release="1.module_el8.9.0+3692+8714f643" epoch="0" arch="s390x" src="postgresql-13.13-1.module_el8.9.0+3692+8714f643.src.rpm">
          <filename>postgresql-plpython3-13.13-1.module_el8.9.0+3692+8714f643.s390x.rpm</filename>
          <sum type="sha256">5a047304f837105b3943c5b9358933ed0b71a88be90d835d845d211d4bc98460</sum>
        </package>
        <package name="postgresql-test" version="13.13" release="1.module_el8.9.0+3692+8714f643" epoch="0" arch="s390x" src="postgresql-13.13-1.module_el8.9.0+3692+8714f643.src.rpm">
          <filename>postgresql-test-13.13-1.module_el8.9.0+3692+8714f643.s390x.rpm</filename>
          <sum type="sha256">64d3e6880c82227cfb4c8abeb7f729dfc00488a164e5f4e660fde3bd029dbae3</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="13.13" release="1.module_el8.9.0+3692+8714f643" epoch="0" arch="noarch" src="postgresql-13.13-1.module_el8.9.0+3692+8714f643.src.rpm">
          <filename>postgresql-test-rpm-macros-13.13-1.module_el8.9.0+3692+8714f643.noarch.rpm</filename>
          <sum type="sha256">78f9d1409f26bf817945e5f2b8d1df172f198119fce206f5ec5bde931444d63f</sum>
        </package>
        <package name="pgaudit" version="1.5.0" release="1.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="pgaudit-1.5.0-1.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>pgaudit-1.5.0-1.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">a29cba50326b3c78b1cff9ad076eff7837022e71f02d7ec9e918aed69a9c3f35</sum>
        </package>
        <package name="postgres-decoderbufs" version="0.10.0" release="2.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">b11226898b888f8213eefe941cece0f636a08ccce2ceaa8bee2a38e6058ed4f3</sum>
        </package>
        <package name="pg_repack" version="1.4.6" release="3.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="pg_repack-1.4.6-3.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>pg_repack-1.4.6-3.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">c1b386540b304a4de3ff8d840ec35dc9d67ecd1827aa06cd695f06060e8d2ea7</sum>
        </package>
        <package name="postgresql-contrib" version="13.13" release="1.module_el8.9.0+3692+8714f643" epoch="0" arch="s390x" src="postgresql-13.13-1.module_el8.9.0+3692+8714f643.src.rpm">
          <filename>postgresql-contrib-13.13-1.module_el8.9.0+3692+8714f643.s390x.rpm</filename>
          <sum type="sha256">cccc64c4f68500c5e9e1215324f54d5f602c54bfcb9a7c9b289161a878582899</sum>
        </package>
        <package name="postgresql-pltcl" version="13.13" release="1.module_el8.9.0+3692+8714f643" epoch="0" arch="s390x" src="postgresql-13.13-1.module_el8.9.0+3692+8714f643.src.rpm">
          <filename>postgresql-pltcl-13.13-1.module_el8.9.0+3692+8714f643.s390x.rpm</filename>
          <sum type="sha256">cfb8dda224fbeed0535b87f63d0592024f6d5de4084a1dfd6d18a5e65fc1882c</sum>
        </package>
        <package name="postgresql" version="13.13" release="1.module_el8.9.0+3692+8714f643" epoch="0" arch="s390x" src="postgresql-13.13-1.module_el8.9.0+3692+8714f643.src.rpm">
          <filename>postgresql-13.13-1.module_el8.9.0+3692+8714f643.s390x.rpm</filename>
          <sum type="sha256">dd78cb8312e1b126253da2950f6e297301d77d5c654f4010677dea6427b09793</sum>
        </package>
        <package name="postgresql-plperl" version="13.13" release="1.module_el8.9.0+3692+8714f643" epoch="0" arch="s390x" src="postgresql-13.13-1.module_el8.9.0+3692+8714f643.src.rpm">
          <filename>postgresql-plperl-13.13-1.module_el8.9.0+3692+8714f643.s390x.rpm</filename>
          <sum type="sha256">e43f4bd04e70b0b967e26ca5c1eda6843372c41021e3ffef0275d24d6a24e18b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7668</id>
    <title>Important: squid:4 security update</title>
    <issued date="2023-12-06 00:00:00"/>
    <updated date="2023-12-14 08:59:00"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>squid:4 security update</summary>
    <description>Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

* squid: DoS against HTTP and HTTPS (CVE-2023-5824)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7668" id="RHSA-2023:7668" type="rhsa" title="RHSA-2023:7668"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5824" id="CVE-2023-5824" type="cve" title="CVE-2023-5824"/>
      <reference href="https://bugzilla.redhat.com/2245914" id="2245914" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7668.html" id="ALSA-2023:7668" type="self" title="ALSA-2023:7668"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="squid" stream="4" version="8090020231213144526" context="9edba152" arch="s390x"/>
        <package name="libecap" version="1.0.1" release="2.module_el8.6.0+3048+383bc947" epoch="0" arch="s390x" src="libecap-1.0.1-2.module_el8.6.0+3048+383bc947.src.rpm">
          <filename>libecap-1.0.1-2.module_el8.6.0+3048+383bc947.s390x.rpm</filename>
          <sum type="sha256">6f8eb1f500a9dca1949f5f05aedf6b97764817d9f17284be3612eec04618f4e1</sum>
        </package>
        <package name="libecap-devel" version="1.0.1" release="2.module_el8.6.0+3048+383bc947" epoch="0" arch="s390x" src="libecap-1.0.1-2.module_el8.6.0+3048+383bc947.src.rpm">
          <filename>libecap-devel-1.0.1-2.module_el8.6.0+3048+383bc947.s390x.rpm</filename>
          <sum type="sha256">96f15e87a90682f6ec87bc4ed7c8edae439f414cd0382f1865dcf76ac3a7807d</sum>
        </package>
        <package name="squid" version="4.15" release="7.module_el8.9.0+3696+b881db49.3" epoch="7" arch="s390x" src="squid-4.15-7.module_el8.9.0+3696+b881db49.3.src.rpm">
          <filename>squid-4.15-7.module_el8.9.0+3696+b881db49.3.s390x.rpm</filename>
          <sum type="sha256">9ae9ed11a46a2c50864febab1200f42b9f298c466223d8ae4025b5d2d0cd197c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7714</id>
    <title>Important: postgresql:12 security update</title>
    <issued date="2023-12-11 00:00:00"/>
    <updated date="2023-12-22 09:40:19"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:12 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: Buffer overrun from integer overflow in array modification (CVE-2023-5869)
* postgresql: Memory disclosure in aggregate function calls (CVE-2023-5868)
* postgresql: extension script @substitutions@ within quoting allow SQL injection (CVE-2023-39417)
* postgresql: Role pg_signal_backend can signal certain superuser processes. (CVE-2023-5870)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7714" id="RHSA-2023:7714" type="rhsa" title="RHSA-2023:7714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39417" id="CVE-2023-39417" type="cve" title="CVE-2023-39417"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5868" id="CVE-2023-5868" type="cve" title="CVE-2023-5868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5869" id="CVE-2023-5869" type="cve" title="CVE-2023-5869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5870" id="CVE-2023-5870" type="cve" title="CVE-2023-5870"/>
      <reference href="https://bugzilla.redhat.com/2228111" id="2228111" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247168" id="2247168" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247169" id="2247169" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247170" id="2247170" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7714.html" id="ALSA-2023:7714" type="self" title="ALSA-2023:7714"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="postgresql" stream="12" version="8090020231221120948" context="9edba152" arch="s390x"/>
        <package name="postgresql-plpython3" version="12.17" release="1.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="postgresql-12.17-1.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>postgresql-plpython3-12.17-1.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">1aa4244463c4ca3a85448258330181951852f6cfb2a3b63135b1ba934c400f74</sum>
        </package>
        <package name="postgresql-pltcl" version="12.17" release="1.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="postgresql-12.17-1.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>postgresql-pltcl-12.17-1.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">1cd8da014b7f17c9921fdc5b70f7d6be9f3311c54debbf9aa2d1c7908b7b18b5</sum>
        </package>
        <package name="pg_repack" version="1.4.6" release="3.module_el8.6.0+3094+eb237fb8" epoch="0" arch="s390x" src="pg_repack-1.4.6-3.module_el8.6.0+3094+eb237fb8.src.rpm">
          <filename>pg_repack-1.4.6-3.module_el8.6.0+3094+eb237fb8.s390x.rpm</filename>
          <sum type="sha256">3173a22fefa8d2ea6d0e0a71673c633cd0c0ee550eb4d9620076c269f6532d94</sum>
        </package>
        <package name="postgres-decoderbufs" version="0.10.0" release="2.module_el8.6.0+3094+eb237fb8" epoch="0" arch="s390x" src="postgres-decoderbufs-0.10.0-2.module_el8.6.0+3094+eb237fb8.src.rpm">
          <filename>postgres-decoderbufs-0.10.0-2.module_el8.6.0+3094+eb237fb8.s390x.rpm</filename>
          <sum type="sha256">39539f821d88e471de98cf0a89ec70e2f70c39805aee9d7d6cdbb1cb6bbbc101</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="12.17" release="1.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="postgresql-12.17-1.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>postgresql-upgrade-devel-12.17-1.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">458ca51eb7ee8349a8ec3ed5aec35292f29b6078c2b61d1a90e41ac8760de443</sum>
        </package>
        <package name="postgresql-contrib" version="12.17" release="1.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="postgresql-12.17-1.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>postgresql-contrib-12.17-1.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">4651b4eb595a77c1561d02256ff27a0e4edf366051d9cb089e903df7bdc1fb11</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="12.17" release="1.module_el8.9.0+3704+f1f917ce" epoch="0" arch="noarch" src="postgresql-12.17-1.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>postgresql-test-rpm-macros-12.17-1.module_el8.9.0+3704+f1f917ce.noarch.rpm</filename>
          <sum type="sha256">569c14b48b77718459d8f9e844398182796500453f26de36b66758bf9148651a</sum>
        </package>
        <package name="postgresql" version="12.17" release="1.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="postgresql-12.17-1.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>postgresql-12.17-1.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">6347608c9cbc8898110faa1be5c2ba793e773d3b40dae640273fdc772e0dd2fa</sum>
        </package>
        <package name="postgresql-docs" version="12.17" release="1.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="postgresql-12.17-1.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>postgresql-docs-12.17-1.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">76d58ea77f96f676c7d98332f905a93111005c6eba5e1eb88082842b525d976a</sum>
        </package>
        <package name="postgresql-static" version="12.17" release="1.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="postgresql-12.17-1.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>postgresql-static-12.17-1.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">901e4fa8bf2b7712f8b638c5ed49b5646fe33fa2f951969a37a767904b59b91a</sum>
        </package>
        <package name="postgresql-test" version="12.17" release="1.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="postgresql-12.17-1.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>postgresql-test-12.17-1.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">9c6b04fa5914b07107bbd5599829050ed692d0dd81b455ff327afe4b1b1c5cf9</sum>
        </package>
        <package name="postgresql-server" version="12.17" release="1.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="postgresql-12.17-1.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>postgresql-server-12.17-1.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">a944985ee4916b66432bcf524d600cab73a02cb89c3d85601d4aded6ad267982</sum>
        </package>
        <package name="postgresql-plperl" version="12.17" release="1.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="postgresql-12.17-1.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>postgresql-plperl-12.17-1.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">ab3c195b6f7b87f3c2105331b054f80cd1bb5be97a92a4bbc105a5d3743a4595</sum>
        </package>
        <package name="postgresql-server-devel" version="12.17" release="1.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="postgresql-12.17-1.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>postgresql-server-devel-12.17-1.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">e02f879a438d4e92205b98421ed0890a1cb85ab5d41e4cdfae6757b0ed7f9a5f</sum>
        </package>
        <package name="postgresql-upgrade" version="12.17" release="1.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="postgresql-12.17-1.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>postgresql-upgrade-12.17-1.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">e58a72bb329f34596c17eda5eaa2558dcf14c2ea5a69e68078b558572b000570</sum>
        </package>
        <package name="pgaudit" version="1.4.0" release="5.module_el8.6.0+3094+eb237fb8" epoch="0" arch="s390x" src="pgaudit-1.4.0-5.module_el8.6.0+3094+eb237fb8.src.rpm">
          <filename>pgaudit-1.4.0-5.module_el8.6.0+3094+eb237fb8.s390x.rpm</filename>
          <sum type="sha256">ebe8d0086c062c5f70bc02c543c76de308bbcc91aecac318050e04c0ee330f84</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7716</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2023-12-11 00:00:00"/>
    <updated date="2023-12-14 08:49:16"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: Arbitrary Remote Code Execution (CVE-2023-42917)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7716" id="RHSA-2023:7716" type="rhsa" title="RHSA-2023:7716"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42917" id="CVE-2023-42917" type="cve" title="CVE-2023-42917"/>
      <reference href="https://bugzilla.redhat.com/2253058" id="2253058" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7716.html" id="ALSA-2023:7716" type="self" title="ALSA-2023:7716"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="webkit2gtk3-jsc" version="2.40.5" release="1.el8_9.1.alma.1" epoch="0" arch="s390x" src="webkit2gtk3-2.40.5-1.el8_9.1.alma.1.src.rpm">
          <filename>webkit2gtk3-jsc-2.40.5-1.el8_9.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">3c941065b43c0a05c46cdef8bf49e9a8ce56a9df7910f119a26c5337caf4966d</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.40.5" release="1.el8_9.1.alma.1" epoch="0" arch="s390x" src="webkit2gtk3-2.40.5-1.el8_9.1.alma.1.src.rpm">
          <filename>webkit2gtk3-devel-2.40.5-1.el8_9.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">53e0edecab3faa551313da4cd7845758624e166065c0d4997bf352e4033be874</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.40.5" release="1.el8_9.1.alma.1" epoch="0" arch="s390x" src="webkit2gtk3-2.40.5-1.el8_9.1.alma.1.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.40.5-1.el8_9.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">9cd9f4c391986f8265a7ba97af861c2e2fe711366626ffd14c67e67492df8267</sum>
        </package>
        <package name="webkit2gtk3" version="2.40.5" release="1.el8_9.1.alma.1" epoch="0" arch="s390x" src="webkit2gtk3-2.40.5-1.el8_9.1.alma.1.src.rpm">
          <filename>webkit2gtk3-2.40.5-1.el8_9.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">caa5138a96cf96d7eea20906aad51e0f2f5dd052993d89867bad837d59858e16</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7732</id>
    <title>Important: tracker-miners security update</title>
    <issued date="2023-12-12 00:00:00"/>
    <updated date="2023-12-14 09:39:20"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tracker-miners security update</summary>
    <description>Tracker is a powerful desktop-neutral first class object database, tag/metadata database and search tool. This package contains various miners and metadata extractors for tracker.

Security Fix(es):

* tracker-miners: sandbox escape (CVE-2023-5557)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7732" id="RHSA-2023:7732" type="rhsa" title="RHSA-2023:7732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5557" id="CVE-2023-5557" type="cve" title="CVE-2023-5557"/>
      <reference href="https://bugzilla.redhat.com/2243096" id="2243096" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7732.html" id="ALSA-2023:7732" type="self" title="ALSA-2023:7732"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="tracker-miners" version="2.1.5" release="2.el8_9.1" epoch="0" arch="s390x" src="tracker-miners-2.1.5-2.el8_9.1.src.rpm">
          <filename>tracker-miners-2.1.5-2.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">a2f9613a1834221a232f74e87d3c5d81c8c373a5d847013c9fb4d781022c88a5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7790</id>
    <title>Important: postgresql:10 security update</title>
    <issued date="2023-12-13 00:00:00"/>
    <updated date="2023-12-22 09:34:58"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:10 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: Buffer overrun from integer overflow in array modification (CVE-2023-5869)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7790" id="RHSA-2023:7790" type="rhsa" title="RHSA-2023:7790"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5869" id="CVE-2023-5869" type="cve" title="CVE-2023-5869"/>
      <reference href="https://bugzilla.redhat.com/2247169" id="2247169" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7790.html" id="ALSA-2023:7790" type="self" title="ALSA-2023:7790"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="postgresql" stream="10" version="8090020231221114310" context="9edba152" arch="s390x"/>
        <package name="postgresql-test" version="10.23" release="3.module_el8.9.0+3703+a01fd377" epoch="0" arch="s390x" src="postgresql-10.23-3.module_el8.9.0+3703+a01fd377.src.rpm">
          <filename>postgresql-test-10.23-3.module_el8.9.0+3703+a01fd377.s390x.rpm</filename>
          <sum type="sha256">0dc67640982e7dadd59a3308d2feaafa14c6e70a890022bddc7ffeda9b8da1ec</sum>
        </package>
        <package name="postgresql-server-devel" version="10.23" release="3.module_el8.9.0+3703+a01fd377" epoch="0" arch="s390x" src="postgresql-10.23-3.module_el8.9.0+3703+a01fd377.src.rpm">
          <filename>postgresql-server-devel-10.23-3.module_el8.9.0+3703+a01fd377.s390x.rpm</filename>
          <sum type="sha256">10e15dcae93d8830e770fe73052f5f899bd4b39e668dd26ab9822dc31711fdf5</sum>
        </package>
        <package name="postgresql-upgrade" version="10.23" release="3.module_el8.9.0+3703+a01fd377" epoch="0" arch="s390x" src="postgresql-10.23-3.module_el8.9.0+3703+a01fd377.src.rpm">
          <filename>postgresql-upgrade-10.23-3.module_el8.9.0+3703+a01fd377.s390x.rpm</filename>
          <sum type="sha256">53fcc3397821f04307bcb3fd84fb6954e808ad40723b92f0f7dc8ab32653bfc7</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="10.23" release="3.module_el8.9.0+3703+a01fd377" epoch="0" arch="s390x" src="postgresql-10.23-3.module_el8.9.0+3703+a01fd377.src.rpm">
          <filename>postgresql-upgrade-devel-10.23-3.module_el8.9.0+3703+a01fd377.s390x.rpm</filename>
          <sum type="sha256">54a952868ea3a794659117939fe7fcaf98885f351f51d6eccfdf9011126be82e</sum>
        </package>
        <package name="postgresql-server" version="10.23" release="3.module_el8.9.0+3703+a01fd377" epoch="0" arch="s390x" src="postgresql-10.23-3.module_el8.9.0+3703+a01fd377.src.rpm">
          <filename>postgresql-server-10.23-3.module_el8.9.0+3703+a01fd377.s390x.rpm</filename>
          <sum type="sha256">6014d84acbc13f49dea1c05a199d354242402ee023b3db21f783df42f5999a4a</sum>
        </package>
        <package name="postgresql-docs" version="10.23" release="3.module_el8.9.0+3703+a01fd377" epoch="0" arch="s390x" src="postgresql-10.23-3.module_el8.9.0+3703+a01fd377.src.rpm">
          <filename>postgresql-docs-10.23-3.module_el8.9.0+3703+a01fd377.s390x.rpm</filename>
          <sum type="sha256">77977d3e8a3435bb025c78e88d1e4bd202d34422c2946efbeaf36e571f75d0a4</sum>
        </package>
        <package name="postgresql-contrib" version="10.23" release="3.module_el8.9.0+3703+a01fd377" epoch="0" arch="s390x" src="postgresql-10.23-3.module_el8.9.0+3703+a01fd377.src.rpm">
          <filename>postgresql-contrib-10.23-3.module_el8.9.0+3703+a01fd377.s390x.rpm</filename>
          <sum type="sha256">9384862bcea36cc716a5dd68b668aaa040a3eccb9d6d97a1bda957d923f782db</sum>
        </package>
        <package name="postgresql" version="10.23" release="3.module_el8.9.0+3703+a01fd377" epoch="0" arch="s390x" src="postgresql-10.23-3.module_el8.9.0+3703+a01fd377.src.rpm">
          <filename>postgresql-10.23-3.module_el8.9.0+3703+a01fd377.s390x.rpm</filename>
          <sum type="sha256">9a1b72afaaed7dd0b78c2f273983230813116da556198a82f33e2a5cb2474a2b</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="10.23" release="3.module_el8.9.0+3703+a01fd377" epoch="0" arch="s390x" src="postgresql-10.23-3.module_el8.9.0+3703+a01fd377.src.rpm">
          <filename>postgresql-test-rpm-macros-10.23-3.module_el8.9.0+3703+a01fd377.s390x.rpm</filename>
          <sum type="sha256">9b9203749fd507d2ec6406b01a4f3e368feeaf3ba8ed691c8672dad897189b02</sum>
        </package>
        <package name="postgresql-static" version="10.23" release="3.module_el8.9.0+3703+a01fd377" epoch="0" arch="s390x" src="postgresql-10.23-3.module_el8.9.0+3703+a01fd377.src.rpm">
          <filename>postgresql-static-10.23-3.module_el8.9.0+3703+a01fd377.s390x.rpm</filename>
          <sum type="sha256">abde53ec17b2e167c6b0ed7e6d8033175301c435d72c29518f31023d8063c4fd</sum>
        </package>
        <package name="postgresql-plpython3" version="10.23" release="3.module_el8.9.0+3703+a01fd377" epoch="0" arch="s390x" src="postgresql-10.23-3.module_el8.9.0+3703+a01fd377.src.rpm">
          <filename>postgresql-plpython3-10.23-3.module_el8.9.0+3703+a01fd377.s390x.rpm</filename>
          <sum type="sha256">b8db73d1870706df7a408622bef640cf05e89344d7526f1cab747079952c7d63</sum>
        </package>
        <package name="postgresql-pltcl" version="10.23" release="3.module_el8.9.0+3703+a01fd377" epoch="0" arch="s390x" src="postgresql-10.23-3.module_el8.9.0+3703+a01fd377.src.rpm">
          <filename>postgresql-pltcl-10.23-3.module_el8.9.0+3703+a01fd377.s390x.rpm</filename>
          <sum type="sha256">c076eff3c7eadd96f0d31c5507af1b5d0cc2f7093451f1e288386645eff6ead1</sum>
        </package>
        <package name="postgresql-plperl" version="10.23" release="3.module_el8.9.0+3703+a01fd377" epoch="0" arch="s390x" src="postgresql-10.23-3.module_el8.9.0+3703+a01fd377.src.rpm">
          <filename>postgresql-plperl-10.23-3.module_el8.9.0+3703+a01fd377.s390x.rpm</filename>
          <sum type="sha256">f74288e0e118d2b7a415c005902ae571c9703e790f44df51d822d6bb2afe829f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7836</id>
    <title>Moderate: avahi security update</title>
    <issued date="2023-12-14 00:00:00"/>
    <updated date="2023-12-15 09:22:25"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>avahi security update</summary>
    <description>Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

* avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket (CVE-2021-3468)
* avahi: Reachable assertion in avahi_dns_packet_append_record (CVE-2023-38469)
* avahi: Reachable assertion in avahi_escape_label (CVE-2023-38470)
* avahi: Reachable assertion in dbus_set_host_name (CVE-2023-38471)
* avahi: Reachable assertion in avahi_rdata_parse (CVE-2023-38472)
* avahi: Reachable assertion in avahi_alternative_host_name (CVE-2023-38473)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7836" id="RHSA-2023:7836" type="rhsa" title="RHSA-2023:7836"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3468" id="CVE-2021-3468" type="cve" title="CVE-2021-3468"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38469" id="CVE-2023-38469" type="cve" title="CVE-2023-38469"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38470" id="CVE-2023-38470" type="cve" title="CVE-2023-38470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38471" id="CVE-2023-38471" type="cve" title="CVE-2023-38471"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38472" id="CVE-2023-38472" type="cve" title="CVE-2023-38472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38473" id="CVE-2023-38473" type="cve" title="CVE-2023-38473"/>
      <reference href="https://bugzilla.redhat.com/1939614" id="1939614" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191687" id="2191687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191690" id="2191690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191691" id="2191691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191692" id="2191692" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191694" id="2191694" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7836.html" id="ALSA-2023:7836" type="self" title="ALSA-2023:7836"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="avahi-tools" version="0.7" release="21.el8_9.1" epoch="0" arch="s390x" src="avahi-0.7-21.el8_9.1.src.rpm">
          <filename>avahi-tools-0.7-21.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">8304a2a7aeafc600bf9b70d2589cc265acd20dd275d10d7e21088906b14a2c53</sum>
        </package>
        <package name="avahi-ui-gtk3" version="0.7" release="21.el8_9.1" epoch="0" arch="s390x" src="avahi-0.7-21.el8_9.1.src.rpm">
          <filename>avahi-ui-gtk3-0.7-21.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">ccb993b6c64ae19c6aa28c732f254272308bc8b54a9be6c29bc80458de57b79d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7841</id>
    <title>Important: gstreamer1-plugins-bad-free security update</title>
    <issued date="2023-12-14 00:00:00"/>
    <updated date="2023-12-15 09:13:52"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-bad-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

* gstreamer: MXF demuxer use-after-free vulnerability (CVE-2023-44446)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7841" id="RHSA-2023:7841" type="rhsa" title="RHSA-2023:7841"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44446" id="CVE-2023-44446" type="cve" title="CVE-2023-44446"/>
      <reference href="https://bugzilla.redhat.com/2250249" id="2250249" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7841.html" id="ALSA-2023:7841" type="self" title="ALSA-2023:7841"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="gstreamer1-plugins-bad-free" version="1.16.1" release="2.el8_9.alma.1" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.16.1-2.el8_9.alma.1.src.rpm">
          <filename>gstreamer1-plugins-bad-free-1.16.1-2.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">9edf7a8a4871c96225e64cd6adc731e58637ac6914f22ca87d2a8a0ad3ee1626</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7884</id>
    <title>Important: postgresql:15 security update</title>
    <issued date="2023-12-20 00:00:00"/>
    <updated date="2023-12-25 09:42:53"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:15 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: Buffer overrun from integer overflow in array modification (CVE-2023-5869)
* postgresql: Memory disclosure in aggregate function calls (CVE-2023-5868)
* postgresql: extension script @substitutions@ within quoting allow SQL injection (CVE-2023-39417)
* postgresql: Role pg_signal_backend can signal certain superuser processes. (CVE-2023-5870)
* postgresql: MERGE fails to enforce UPDATE or SELECT row security policies (CVE-2023-39418)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7884" id="RHSA-2023:7884" type="rhsa" title="RHSA-2023:7884"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39417" id="CVE-2023-39417" type="cve" title="CVE-2023-39417"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39418" id="CVE-2023-39418" type="cve" title="CVE-2023-39418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5868" id="CVE-2023-5868" type="cve" title="CVE-2023-5868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5869" id="CVE-2023-5869" type="cve" title="CVE-2023-5869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5870" id="CVE-2023-5870" type="cve" title="CVE-2023-5870"/>
      <reference href="https://bugzilla.redhat.com/2228111" id="2228111" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228112" id="2228112" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247168" id="2247168" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247169" id="2247169" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247170" id="2247170" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7884.html" id="ALSA-2023:7884" type="self" title="ALSA-2023:7884"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="postgresql" stream="15" version="8090020231222112325" context="9edba152" arch="s390x"/>
        <package name="postgresql-private-devel" version="15.5" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>postgresql-private-devel-15.5-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">03e04318155fc3a9bcde155f58667ba679872fafa4d6ac890261f1066e413e76</sum>
        </package>
        <package name="postgres-decoderbufs" version="1.9.7" release="1.Final.module_el8.8.0+3487+43ec1b9f" epoch="0" arch="s390x" src="postgres-decoderbufs-1.9.7-1.Final.module_el8.8.0+3487+43ec1b9f.src.rpm">
          <filename>postgres-decoderbufs-1.9.7-1.Final.module_el8.8.0+3487+43ec1b9f.s390x.rpm</filename>
          <sum type="sha256">055fe6bbecc74f7919f9ec57e1e42bb9eb94476114d930ec210f1efc3108b92d</sum>
        </package>
        <package name="pg_repack" version="1.4.8" release="1.module_el8.8.0+3487+43ec1b9f" epoch="0" arch="s390x" src="pg_repack-1.4.8-1.module_el8.8.0+3487+43ec1b9f.src.rpm">
          <filename>pg_repack-1.4.8-1.module_el8.8.0+3487+43ec1b9f.s390x.rpm</filename>
          <sum type="sha256">081ea0091971a8aa105bd973398a6bd2618e4c4774ddba96fcc6732fea454d53</sum>
        </package>
        <package name="postgresql-contrib" version="15.5" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>postgresql-contrib-15.5-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">0a2b45ddad9d4ac49baf2421dbb03d453d25ba370b0fb25fda384a5398ac2eaa</sum>
        </package>
        <package name="postgresql-docs" version="15.5" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>postgresql-docs-15.5-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">0b1eba3709a47d752dd0380c7f6bb5d8dbeb9117b82b064810a26fad2365fc0f</sum>
        </package>
        <package name="pgaudit" version="1.7.0" release="1.module_el8.8.0+3487+43ec1b9f" epoch="0" arch="s390x" src="pgaudit-1.7.0-1.module_el8.8.0+3487+43ec1b9f.src.rpm">
          <filename>pgaudit-1.7.0-1.module_el8.8.0+3487+43ec1b9f.s390x.rpm</filename>
          <sum type="sha256">12cd22b7d2193b09d54d32baa05dd1b7085110c0332c6a91154d9bebffb96c95</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="15.5" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>postgresql-upgrade-devel-15.5-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">27aad33afa33c72229c2677494421bf7a04fdf25965c57644b04c316cdd2ea77</sum>
        </package>
        <package name="postgresql-plpython3" version="15.5" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>postgresql-plpython3-15.5-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">61a3bc5243a06aa1b730c118ee11ba677738264dc31163e2f9b6aeeac07802a0</sum>
        </package>
        <package name="postgresql-server" version="15.5" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>postgresql-server-15.5-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">6430980e5255909edd64389867518477472c419590fe5c2887a7c299ddbf9428</sum>
        </package>
        <package name="postgresql-static" version="15.5" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>postgresql-static-15.5-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">64d396845d38c8f756f1b65699514c97ad42526249693f1216fa26227382cf36</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="15.5" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="noarch" src="postgresql-15.5-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>postgresql-test-rpm-macros-15.5-1.module_el8.9.0+3706+885c732e.noarch.rpm</filename>
          <sum type="sha256">69bb827132438c2af2d064ce837e0fead74f65efa22ae79c034539f78be07b9a</sum>
        </package>
        <package name="postgresql-plperl" version="15.5" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>postgresql-plperl-15.5-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">7c7a653faee2e7f8e9bdacdfc1c6447266f221bb4d2604633edbc474711e45c8</sum>
        </package>
        <package name="postgresql-upgrade" version="15.5" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>postgresql-upgrade-15.5-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">82a4bc6ac3c163bb22054ec200b3f5fcd97eeb5c4fbc8f924e36fbf3c2c35a79</sum>
        </package>
        <package name="postgresql-test" version="15.5" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>postgresql-test-15.5-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">83a5286a4da83e51ea6234b2f15e179f6737d6a6b467f51abfe20445861d397d</sum>
        </package>
        <package name="postgresql-pltcl" version="15.5" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>postgresql-pltcl-15.5-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">b89fcb16310eaea2b141f0b79c88345e0252af5872bad54e654b02cf1cae4393</sum>
        </package>
        <package name="postgresql-server-devel" version="15.5" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>postgresql-server-devel-15.5-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">c29946004be895aee05a972c23e94cd5d047d456179906ef7f307f4a192737ea</sum>
        </package>
        <package name="postgresql" version="15.5" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>postgresql-15.5-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">d70fe448c11cedf8118396463968f10f2dcd328e4f222b31dda5d889848b72fa</sum>
        </package>
        <package name="postgresql-private-libs" version="15.5" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="postgresql-15.5-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>postgresql-private-libs-15.5-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">e4262f06a2213bd746f380b1db3a3287bbc94e607ff02f7fd261a4dd5fb45236</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0003</id>
    <title>Important: thunderbird security update</title>
    <issued date="2024-01-02 00:00:00"/>
    <updated date="2024-01-04 14:33:50"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.6.0.

Security Fix(es):

* Mozilla: Heap-buffer-overflow affecting WebGL &lt;code&gt;DrawElementsInstanced&lt;/code&gt; method with Mesa VM driver (CVE-2023-6856)
* Mozilla: Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6 (CVE-2023-6864)
* Mozilla: S/MIME signature accepted despite mismatching message date (CVE-2023-50761)
* Mozilla: Truncated signed text was shown with a valid OpenPGP signature (CVE-2023-50762)
* Mozilla: Symlinks may resolve to smaller than expected buffers (CVE-2023-6857)
* Mozilla: Heap buffer overflow in &lt;code&gt;nsTextFragment&lt;/code&gt; (CVE-2023-6858)
* Mozilla: Use-after-free in PR_GetIdentitiesLayer (CVE-2023-6859)
* Mozilla: Potential sandbox escape due to &lt;code&gt;VideoBridge&lt;/code&gt; lack of texture validation (CVE-2023-6860)
* Mozilla: Heap buffer overflow affected &lt;code&gt;nsWindow::PickerOpen(void)&lt;/code&gt; in headless mode (CVE-2023-6861)
* Mozilla: Use-after-free in &lt;code&gt;nsDNSService&lt;/code&gt; (CVE-2023-6862)
* Mozilla: Undefined behavior in &lt;code&gt;ShutdownObserver()&lt;/code&gt; (CVE-2023-6863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0003" id="RHSA-2024:0003" type="rhsa" title="RHSA-2024:0003"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50761" id="CVE-2023-50761" type="cve" title="CVE-2023-50761"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50762" id="CVE-2023-50762" type="cve" title="CVE-2023-50762"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6856" id="CVE-2023-6856" type="cve" title="CVE-2023-6856"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6857" id="CVE-2023-6857" type="cve" title="CVE-2023-6857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6858" id="CVE-2023-6858" type="cve" title="CVE-2023-6858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6859" id="CVE-2023-6859" type="cve" title="CVE-2023-6859"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6860" id="CVE-2023-6860" type="cve" title="CVE-2023-6860"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6861" id="CVE-2023-6861" type="cve" title="CVE-2023-6861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6862" id="CVE-2023-6862" type="cve" title="CVE-2023-6862"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6863" id="CVE-2023-6863" type="cve" title="CVE-2023-6863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6864" id="CVE-2023-6864" type="cve" title="CVE-2023-6864"/>
      <reference href="https://bugzilla.redhat.com/2255360" id="2255360" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255362" id="2255362" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255363" id="2255363" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255364" id="2255364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255365" id="2255365" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255367" id="2255367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255368" id="2255368" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255369" id="2255369" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255370" id="2255370" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255378" id="2255378" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255379" id="2255379" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0003.html" id="ALSA-2024:0003" type="self" title="ALSA-2024:0003"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="thunderbird" version="115.6.0" release="1.el8_9.alma" epoch="0" arch="s390x" src="thunderbird-115.6.0-1.el8_9.alma.src.rpm">
          <filename>thunderbird-115.6.0-1.el8_9.alma.s390x.rpm</filename>
          <sum type="sha256">945cbb209ae31ad5efd3c063ffa1ded75197f1a14aef568a1b9f973ba9d51d26</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0012</id>
    <title>Important: firefox security update</title>
    <issued date="2024-01-02 00:00:00"/>
    <updated date="2024-01-04 14:29:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.6.0 ESR.

Security Fix(es):

* Mozilla: Heap-buffer-overflow affecting WebGL &lt;code&gt;DrawElementsInstanced&lt;/code&gt; method with Mesa VM driver (CVE-2023-6856)
* Mozilla: Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6 (CVE-2023-6864)
* Mozilla: Potential exposure of uninitialized data in &lt;code&gt;EncryptingOutputStream&lt;/code&gt; (CVE-2023-6865)
* Mozilla: Symlinks may resolve to smaller than expected buffers (CVE-2023-6857)
* Mozilla: Heap buffer overflow in &lt;code&gt;nsTextFragment&lt;/code&gt; (CVE-2023-6858)
* Mozilla: Use-after-free in PR_GetIdentitiesLayer (CVE-2023-6859)
* Mozilla: Potential sandbox escape due to &lt;code&gt;VideoBridge&lt;/code&gt; lack of texture validation (CVE-2023-6860)
* Mozilla: Heap buffer overflow affected &lt;code&gt;nsWindow::PickerOpen(void)&lt;/code&gt; in headless mode (CVE-2023-6861)
* Mozilla: Use-after-free in &lt;code&gt;nsDNSService&lt;/code&gt; (CVE-2023-6862)
* Mozilla: Clickjacking permission prompts using the popup transition (CVE-2023-6867)
* Mozilla: Undefined behavior in &lt;code&gt;ShutdownObserver()&lt;/code&gt; (CVE-2023-6863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0012" id="RHSA-2024:0012" type="rhsa" title="RHSA-2024:0012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6856" id="CVE-2023-6856" type="cve" title="CVE-2023-6856"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6857" id="CVE-2023-6857" type="cve" title="CVE-2023-6857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6858" id="CVE-2023-6858" type="cve" title="CVE-2023-6858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6859" id="CVE-2023-6859" type="cve" title="CVE-2023-6859"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6860" id="CVE-2023-6860" type="cve" title="CVE-2023-6860"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6861" id="CVE-2023-6861" type="cve" title="CVE-2023-6861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6862" id="CVE-2023-6862" type="cve" title="CVE-2023-6862"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6863" id="CVE-2023-6863" type="cve" title="CVE-2023-6863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6864" id="CVE-2023-6864" type="cve" title="CVE-2023-6864"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6865" id="CVE-2023-6865" type="cve" title="CVE-2023-6865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6867" id="CVE-2023-6867" type="cve" title="CVE-2023-6867"/>
      <reference href="https://bugzilla.redhat.com/2255360" id="2255360" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255361" id="2255361" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255362" id="2255362" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255363" id="2255363" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255364" id="2255364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255365" id="2255365" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255366" id="2255366" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255367" id="2255367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255368" id="2255368" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255369" id="2255369" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255370" id="2255370" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0012.html" id="ALSA-2024:0012" type="self" title="ALSA-2024:0012"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="firefox" version="115.6.0" release="1.el8_9.alma" epoch="0" arch="s390x" src="firefox-115.6.0-1.el8_9.alma.src.rpm">
          <filename>firefox-115.6.0-1.el8_9.alma.s390x.rpm</filename>
          <sum type="sha256">ca25974d6f14535518ceef6af1e395aafa2a8d95c3ca3453d2417f1d0573674b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0018</id>
    <title>Important: tigervnc security update</title>
    <issued date="2024-01-02 00:00:00"/>
    <updated date="2024-01-04 14:24:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

Security Fix(es):

* xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377)
* xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0018" id="RHSA-2024:0018" type="rhsa" title="RHSA-2024:0018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6377" id="CVE-2023-6377" type="cve" title="CVE-2023-6377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6478" id="CVE-2023-6478" type="cve" title="CVE-2023-6478"/>
      <reference href="https://bugzilla.redhat.com/2253291" id="2253291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253298" id="2253298" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0018.html" id="ALSA-2024:0018" type="self" title="ALSA-2024:0018"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="tigervnc-icons" version="1.13.1" release="2.el8_9.4.alma.1" epoch="0" arch="noarch" src="tigervnc-1.13.1-2.el8_9.4.alma.1.src.rpm">
          <filename>tigervnc-icons-1.13.1-2.el8_9.4.alma.1.noarch.rpm</filename>
          <sum type="sha256">248685d3f55185b73ff28293031e387b74ab0265a8495b5bf0a6239b84045182</sum>
        </package>
        <package name="tigervnc-selinux" version="1.13.1" release="2.el8_9.4.alma.1" epoch="0" arch="noarch" src="tigervnc-1.13.1-2.el8_9.4.alma.1.src.rpm">
          <filename>tigervnc-selinux-1.13.1-2.el8_9.4.alma.1.noarch.rpm</filename>
          <sum type="sha256">30ef58f7373cb16f2591a107d83f54689d0c76fe54bf2e2696232c759c2aaeba</sum>
        </package>
        <package name="tigervnc" version="1.13.1" release="2.el8_9.4.alma.1" epoch="0" arch="s390x" src="tigervnc-1.13.1-2.el8_9.4.alma.1.src.rpm">
          <filename>tigervnc-1.13.1-2.el8_9.4.alma.1.s390x.rpm</filename>
          <sum type="sha256">443559787fa5dbd445a9d4d1b7bcafd31018b2565e30f99d7d112c6cae555e3e</sum>
        </package>
        <package name="tigervnc-server-module" version="1.13.1" release="2.el8_9.4.alma.1" epoch="0" arch="s390x" src="tigervnc-1.13.1-2.el8_9.4.alma.1.src.rpm">
          <filename>tigervnc-server-module-1.13.1-2.el8_9.4.alma.1.s390x.rpm</filename>
          <sum type="sha256">7f008e99b0366ff16c7747bf97953cc96903e365f9a1f903c18879eebcc59872</sum>
        </package>
        <package name="tigervnc-server" version="1.13.1" release="2.el8_9.4.alma.1" epoch="0" arch="s390x" src="tigervnc-1.13.1-2.el8_9.4.alma.1.src.rpm">
          <filename>tigervnc-server-1.13.1-2.el8_9.4.alma.1.s390x.rpm</filename>
          <sum type="sha256">b72596691cfc2239573adc7c3e78c163b8d89f0c6ee21284e75b2caaf065b568</sum>
        </package>
        <package name="tigervnc-license" version="1.13.1" release="2.el8_9.4.alma.1" epoch="0" arch="noarch" src="tigervnc-1.13.1-2.el8_9.4.alma.1.src.rpm">
          <filename>tigervnc-license-1.13.1-2.el8_9.4.alma.1.noarch.rpm</filename>
          <sum type="sha256">d1b88b82a2301c43f08f89caf27f4a1553b0de32d78a82579153dd969c7da383</sum>
        </package>
        <package name="tigervnc-server-minimal" version="1.13.1" release="2.el8_9.4.alma.1" epoch="0" arch="s390x" src="tigervnc-1.13.1-2.el8_9.4.alma.1.src.rpm">
          <filename>tigervnc-server-minimal-1.13.1-2.el8_9.4.alma.1.s390x.rpm</filename>
          <sum type="sha256">f0972475aeb1fe490d0188fcae2e1882cbc5f831fad9c46347cf7ec4c94d72fd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0046</id>
    <title>Important: squid:4 security update</title>
    <issued date="2024-01-03 00:00:00"/>
    <updated date="2024-01-08 14:59:53"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>squid:4 security update</summary>
    <description>Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

* squid: Denial of Service in SSL Certificate validation (CVE-2023-46724)
* squid: NULL pointer dereference in the gopher protocol code (CVE-2023-46728)
* squid: Buffer over-read in the HTTP Message processing feature (CVE-2023-49285)
* squid: Incorrect Check of Function Return Value In Helper Process management (CVE-2023-49286)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0046" id="RHSA-2024:0046" type="rhsa" title="RHSA-2024:0046"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46724" id="CVE-2023-46724" type="cve" title="CVE-2023-46724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46728" id="CVE-2023-46728" type="cve" title="CVE-2023-46728"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-49285" id="CVE-2023-49285" type="cve" title="CVE-2023-49285"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-49286" id="CVE-2023-49286" type="cve" title="CVE-2023-49286"/>
      <reference href="https://bugzilla.redhat.com/2247567" id="2247567" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248521" id="2248521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2252923" id="2252923" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2252926" id="2252926" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0046.html" id="ALSA-2024:0046" type="self" title="ALSA-2024:0046"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="squid" stream="4" version="8060020220707110313" context="9edba152" arch="s390x"/>
        <package name="squid" version="4.15" release="7.module_el8.9.0+3708+6acaac63.5" epoch="7" arch="s390x" src="squid-4.15-7.module_el8.9.0+3708+6acaac63.5.src.rpm">
          <filename>squid-4.15-7.module_el8.9.0+3708+6acaac63.5.s390x.rpm</filename>
          <sum type="sha256">241d24ba106d31ce121fae6b40e9120d349b5f6bc1c6ee4395d5039baa54cdfa</sum>
        </package>
        <package name="libecap" version="1.0.1" release="2.module_el8.6.0+3048+383bc947" epoch="0" arch="s390x" src="libecap-1.0.1-2.module_el8.6.0+3048+383bc947.src.rpm">
          <filename>libecap-1.0.1-2.module_el8.6.0+3048+383bc947.s390x.rpm</filename>
          <sum type="sha256">6f8eb1f500a9dca1949f5f05aedf6b97764817d9f17284be3612eec04618f4e1</sum>
        </package>
        <package name="libecap-devel" version="1.0.1" release="2.module_el8.6.0+3048+383bc947" epoch="0" arch="s390x" src="libecap-1.0.1-2.module_el8.6.0+3048+383bc947.src.rpm">
          <filename>libecap-devel-1.0.1-2.module_el8.6.0+3048+383bc947.s390x.rpm</filename>
          <sum type="sha256">96f15e87a90682f6ec87bc4ed7c8edae439f414cd0382f1865dcf76ac3a7807d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0105</id>
    <title>Moderate: nss security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-12 12:11:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nss security update</summary>
    <description>Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.

Security Fix(es):

* nss: timing attack against RSA decryption (CVE-2023-5388)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0105" id="RHSA-2024:0105" type="rhsa" title="RHSA-2024:0105"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5388" id="CVE-2023-5388" type="cve" title="CVE-2023-5388"/>
      <reference href="https://bugzilla.redhat.com/2243644" id="2243644" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0105.html" id="ALSA-2024:0105" type="self" title="ALSA-2024:0105"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="nss-sysinit" version="3.90.0" release="4.el8_9" epoch="0" arch="s390x" src="nss-3.90.0-4.el8_9.src.rpm">
          <filename>nss-sysinit-3.90.0-4.el8_9.s390x.rpm</filename>
          <sum type="sha256">0bd7c8deb260867be6497f7b7f9e500a824ab24339e4fa98646cd227f6c174b8</sum>
        </package>
        <package name="nss-softokn-devel" version="3.90.0" release="4.el8_9" epoch="0" arch="s390x" src="nss-3.90.0-4.el8_9.src.rpm">
          <filename>nss-softokn-devel-3.90.0-4.el8_9.s390x.rpm</filename>
          <sum type="sha256">22466f99442f2c641cbfc200ea44765fcf8fa038905c53b627d38f38fd5511b3</sum>
        </package>
        <package name="nss-softokn-freebl" version="3.90.0" release="4.el8_9" epoch="0" arch="s390x" src="nss-3.90.0-4.el8_9.src.rpm">
          <filename>nss-softokn-freebl-3.90.0-4.el8_9.s390x.rpm</filename>
          <sum type="sha256">35d42094066f49507f42ed1162d7980978640d7edaaeea36c783e9c603e13b30</sum>
        </package>
        <package name="nss-util-devel" version="3.90.0" release="4.el8_9" epoch="0" arch="s390x" src="nss-3.90.0-4.el8_9.src.rpm">
          <filename>nss-util-devel-3.90.0-4.el8_9.s390x.rpm</filename>
          <sum type="sha256">5eaffec4ecc8b67bb45c83419dba45cfbadc365e944b0578db974365f1897cd4</sum>
        </package>
        <package name="nss-softokn-freebl-devel" version="3.90.0" release="4.el8_9" epoch="0" arch="s390x" src="nss-3.90.0-4.el8_9.src.rpm">
          <filename>nss-softokn-freebl-devel-3.90.0-4.el8_9.s390x.rpm</filename>
          <sum type="sha256">7360eec3328a48f255735498a65cc1627e589176912880050f170eff03e079a2</sum>
        </package>
        <package name="nss-tools" version="3.90.0" release="4.el8_9" epoch="0" arch="s390x" src="nss-3.90.0-4.el8_9.src.rpm">
          <filename>nss-tools-3.90.0-4.el8_9.s390x.rpm</filename>
          <sum type="sha256">79e0cabf3772e4e22c825ea733cb7703a464bfc0395c4591f931b4f6f82d4c9f</sum>
        </package>
        <package name="nss-devel" version="3.90.0" release="4.el8_9" epoch="0" arch="s390x" src="nss-3.90.0-4.el8_9.src.rpm">
          <filename>nss-devel-3.90.0-4.el8_9.s390x.rpm</filename>
          <sum type="sha256">a58974bd30ad21f1f3776bcb3625991801d2c9182b5d6ca0fbe472cc71374713</sum>
        </package>
        <package name="nss-util" version="3.90.0" release="4.el8_9" epoch="0" arch="s390x" src="nss-3.90.0-4.el8_9.src.rpm">
          <filename>nss-util-3.90.0-4.el8_9.s390x.rpm</filename>
          <sum type="sha256">cdbed6b179a6df19fc6d9f4abd970cfc1d994eefa0a63137901c0f95a3dfcd3b</sum>
        </package>
        <package name="nss-softokn" version="3.90.0" release="4.el8_9" epoch="0" arch="s390x" src="nss-3.90.0-4.el8_9.src.rpm">
          <filename>nss-softokn-3.90.0-4.el8_9.s390x.rpm</filename>
          <sum type="sha256">d496213dfde874efe2916152886fcd503ba5f565116eb354bfa1a2fd09ef73cc</sum>
        </package>
        <package name="nss" version="3.90.0" release="4.el8_9" epoch="0" arch="s390x" src="nss-3.90.0-4.el8_9.src.rpm">
          <filename>nss-3.90.0-4.el8_9.s390x.rpm</filename>
          <sum type="sha256">ef7704546e6fdd32be2f864bad4828da87445a00837e03849b11d8257c85c964</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0114</id>
    <title>Moderate: python3 security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-16 20:00:17"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: use after free in heappushpop() of heapq module (CVE-2022-48560)
* python: DoS when processing malformed Apple Property List files in binary format (CVE-2022-48564)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0114" id="RHSA-2024:0114" type="rhsa" title="RHSA-2024:0114"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48560" id="CVE-2022-48560" type="cve" title="CVE-2022-48560"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48564" id="CVE-2022-48564" type="cve" title="CVE-2022-48564"/>
      <reference href="https://bugzilla.redhat.com/2249750" id="2249750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2249755" id="2249755" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0114.html" id="ALSA-2024:0114" type="self" title="ALSA-2024:0114"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="platform-python-devel" version="3.6.8" release="56.el8_9.2.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-56.el8_9.2.alma.1.src.rpm">
          <filename>platform-python-devel-3.6.8-56.el8_9.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">120e53532e20fe019fede9a1d282e78f7573026559ed4e157fbcb14c5b8a111d</sum>
        </package>
        <package name="python3-idle" version="3.6.8" release="56.el8_9.2.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-56.el8_9.2.alma.1.src.rpm">
          <filename>python3-idle-3.6.8-56.el8_9.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">3614d10e9d996ea650887522c60b9ab5c226658b7993d106fede21136d005cd6</sum>
        </package>
        <package name="python3-tkinter" version="3.6.8" release="56.el8_9.2.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-56.el8_9.2.alma.1.src.rpm">
          <filename>python3-tkinter-3.6.8-56.el8_9.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">3957fa0d8e44b1ab297053a1ae37b561a8cc8774051fc093b4c2675b5740bf5c</sum>
        </package>
        <package name="platform-python-debug" version="3.6.8" release="56.el8_9.2.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-56.el8_9.2.alma.1.src.rpm">
          <filename>platform-python-debug-3.6.8-56.el8_9.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">92f5f04b5ab10a5b9345a2bc414886524aa5d81883c0ec3274fd281af6896bbf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0119</id>
    <title>Moderate: libxml2 security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-12 11:58:46"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

* libxml2: crafted xml can cause global buffer overflow (CVE-2023-39615)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0119" id="RHSA-2024:0119" type="rhsa" title="RHSA-2024:0119"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39615" id="CVE-2023-39615" type="cve" title="CVE-2023-39615"/>
      <reference href="https://bugzilla.redhat.com/2235864" id="2235864" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0119.html" id="ALSA-2024:0119" type="self" title="ALSA-2024:0119"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="libxml2-devel" version="2.9.7" release="18.el8_9" epoch="0" arch="s390x" src="libxml2-2.9.7-18.el8_9.src.rpm">
          <filename>libxml2-devel-2.9.7-18.el8_9.s390x.rpm</filename>
          <sum type="sha256">fb50a38703388c6d10d547d17b6796365d8ae3a0c4cb24bbc9bf1231003bf5e5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0121</id>
    <title>Moderate: container-tools:4.0 security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-16 17:09:36"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>container-tools:4.0 security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879)
* golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)
* golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)
* golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)
* golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409)
* golang: html/template:  improper handling of HTML-like comments within script contexts (CVE-2023-39318)
* golang: html/template: improper handling of special tags within script contexts (CVE-2023-39319)
* golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321)
* golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0121" id="RHSA-2024:0121" type="rhsa" title="RHSA-2024:0121"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27664" id="CVE-2022-27664" type="cve" title="CVE-2022-27664"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2879" id="CVE-2022-2879" type="cve" title="CVE-2022-2879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2880" id="CVE-2022-2880" type="cve" title="CVE-2022-2880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41715" id="CVE-2022-41715" type="cve" title="CVE-2022-41715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29409" id="CVE-2023-29409" type="cve" title="CVE-2023-29409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39318" id="CVE-2023-39318" type="cve" title="CVE-2023-39318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39319" id="CVE-2023-39319" type="cve" title="CVE-2023-39319"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39321" id="CVE-2023-39321" type="cve" title="CVE-2023-39321"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39322" id="CVE-2023-39322" type="cve" title="CVE-2023-39322"/>
      <reference href="https://bugzilla.redhat.com/2124669" id="2124669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2132867" id="2132867" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2132868" id="2132868" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2132872" id="2132872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228743" id="2228743" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237773" id="2237773" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237776" id="2237776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237777" id="2237777" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237778" id="2237778" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0121.html" id="ALSA-2024:0121" type="self" title="ALSA-2024:0121"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="container-tools" stream="4.0" version="8090020231017095551" context="20125149" arch="s390x"/>
        <package name="podman-plugins" version="4.0.2" release="25.module_el8.9.0+3711+04fcca5e.alma.1" epoch="2" arch="s390x" src="podman-4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1.src.rpm">
          <filename>podman-plugins-4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1.s390x.rpm</filename>
          <sum type="sha256">1c82e3e7afa79946eb9ebcc950f47f3ae2587dc8cb50fd7175c3192e43b27871</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.5" release="2.module_el8.8.0+3468+16b86c82" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.5-2.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.5-2.module_el8.8.0+3468+16b86c82.s390x.rpm</filename>
          <sum type="sha256">1e162c539720ce081534f6fb7d539a7332ff986a28465e81ca5532262dc0b96e</sum>
        </package>
        <package name="buildah" version="1.24.6" release="7.module_el8.9.0+3627+db8ec155" epoch="1" arch="s390x" src="buildah-1.24.6-7.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>buildah-1.24.6-7.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">2212f05af7f42d74bbb1be8bfe81d9d18a0ed02036561861b15eefb3d2f51e3d</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="1.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="libslirp-4.4.0-1.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>libslirp-devel-4.4.0-1.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">23a930ac511e216078f3ebd78a7940a7f4a6b6d16fe2d3c7f7c04c5dd9050b3b</sum>
        </package>
        <package name="podman-tests" version="4.0.2" release="25.module_el8.9.0+3711+04fcca5e.alma.1" epoch="2" arch="s390x" src="podman-4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1.src.rpm">
          <filename>podman-tests-4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1.s390x.rpm</filename>
          <sum type="sha256">329008892c0d197b57a6241b849be38fd42c5ea2edc9883842568f07a3a1c9e4</sum>
        </package>
        <package name="podman-docker" version="4.0.2" release="25.module_el8.9.0+3711+04fcca5e.alma.1" epoch="2" arch="noarch" src="podman-4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1.src.rpm">
          <filename>podman-docker-4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1.noarch.rpm</filename>
          <sum type="sha256">35be534ba7cd3a89807811749db8a174c2e49b244c3743df86e384349591c524</sum>
        </package>
        <package name="podman-catatonit" version="4.0.2" release="25.module_el8.9.0+3711+04fcca5e.alma.1" epoch="2" arch="s390x" src="podman-4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1.src.rpm">
          <filename>podman-catatonit-4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1.s390x.rpm</filename>
          <sum type="sha256">3803b49772f6edf70f2039287d1f4845c41d777941aec6491ec0e099b1d648c1</sum>
        </package>
        <package name="criu-devel" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>criu-devel-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">3b5df64c4e5adb160d2985d7477aa84f2df350f8b8651dee3d1a73cb22e4ff2b</sum>
        </package>
        <package name="runc" version="1.1.5" release="2.module_el8.9.0+3687+dcd7ef8f" epoch="1" arch="s390x" src="runc-1.1.5-2.module_el8.9.0+3687+dcd7ef8f.src.rpm">
          <filename>runc-1.1.5-2.module_el8.9.0+3687+dcd7ef8f.s390x.rpm</filename>
          <sum type="sha256">3cd8eb226e443275353bd8ad7d31d499f2044f66a1177cabc742125dcfee7118</sum>
        </package>
        <package name="python3-podman" version="4.0.0" release="2.module_el8.9.0+3627+db8ec155" epoch="0" arch="noarch" src="python-podman-4.0.0-2.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>python3-podman-4.0.0-2.module_el8.9.0+3627+db8ec155.noarch.rpm</filename>
          <sum type="sha256">4a27742746229fff2355b72070587cb7db657cf3d6d3aeb092b3bc5111e8cbb6</sum>
        </package>
        <package name="cockpit-podman" version="46" release="1.module_el8.7.0+3344+5bcd850f" epoch="0" arch="noarch" src="cockpit-podman-46-1.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>cockpit-podman-46-1.module_el8.7.0+3344+5bcd850f.noarch.rpm</filename>
          <sum type="sha256">4befd0793ef210df16649c866d5c1c4e69991cc174ecf348a5fbe591aa93b387</sum>
        </package>
        <package name="slirp4netns" version="1.1.8" release="3.module_el8.9.0+3627+db8ec155" epoch="0" arch="s390x" src="slirp4netns-1.1.8-3.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>slirp4netns-1.1.8-3.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">502d4654a521453555bfb5a5277a8a9750897dd2b8e99332778cdafca7829e59</sum>
        </package>
        <package name="containers-common" version="1" release="38.module_el8.9.0+3627+db8ec155" epoch="2" arch="s390x" src="containers-common-1-38.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>containers-common-1-38.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">59743e519719ebda4b03e9224b0027f9f0b94172bd75944acd94345533910cab</sum>
        </package>
        <package name="crit" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>crit-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">63e66b7937f70ee985aabe920c4d8c1e590159f72b4b79a311e986f58bc147e1</sum>
        </package>
        <package name="buildah-tests" version="1.24.6" release="7.module_el8.9.0+3687+dcd7ef8f" epoch="1" arch="s390x" src="buildah-1.24.6-7.module_el8.9.0+3687+dcd7ef8f.src.rpm">
          <filename>buildah-tests-1.24.6-7.module_el8.9.0+3687+dcd7ef8f.s390x.rpm</filename>
          <sum type="sha256">65279d54fa59abd25a0bc4fc3d7ac952f42818ca428422333f16e6cb54260ee1</sum>
        </package>
        <package name="udica" version="0.2.6" release="4.module_el8.9.0+3627+db8ec155" epoch="0" arch="noarch" src="udica-0.2.6-4.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>udica-0.2.6-4.module_el8.9.0+3627+db8ec155.noarch.rpm</filename>
          <sum type="sha256">6a7a865e0c91be7e1c5cbbe01c6eb5a9a723db86526d9b178828dd5a6155863a</sum>
        </package>
        <package name="python3-criu" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>python3-criu-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">6b152daf504ff66ecb343dfbca61a7adb1ddceb7d77ba0af696194d2d2d0db43</sum>
        </package>
        <package name="fuse-overlayfs" version="1.9" release="2.module_el8.9.0+3627+db8ec155" epoch="0" arch="s390x" src="fuse-overlayfs-1.9-2.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>fuse-overlayfs-1.9-2.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">769fd619e20112145f23e5c5e36c0c5dbf24116ffe3d85022ae3168f6ab40f80</sum>
        </package>
        <package name="podman-remote" version="4.0.2" release="25.module_el8.9.0+3711+04fcca5e.alma.1" epoch="2" arch="s390x" src="podman-4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1.src.rpm">
          <filename>podman-remote-4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1.s390x.rpm</filename>
          <sum type="sha256">862ca3efbe7dabbed8ee528ea01b95e6bda7dec7687678a3f6bd56ecfe356dc5</sum>
        </package>
        <package name="netavark" version="1.0.1" release="38.module_el8.9.0+3627+db8ec155" epoch="2" arch="s390x" src="containers-common-1-38.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>netavark-1.0.1-38.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">96369473b0af8c0668bbaab115f37a3eaaf018ddd042d90b4cd1891954dc0bda</sum>
        </package>
        <package name="podman-gvproxy" version="4.0.2" release="25.module_el8.9.0+3711+04fcca5e.alma.1" epoch="2" arch="s390x" src="podman-4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1.src.rpm">
          <filename>podman-gvproxy-4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1.s390x.rpm</filename>
          <sum type="sha256">a090a4c0a7a79eba6a130e646117e6e9c452625043193adf525418f1e2c19cdd</sum>
        </package>
        <package name="conmon" version="2.1.4" release="2.module_el8.9.0+3687+dcd7ef8f" epoch="2" arch="s390x" src="conmon-2.1.4-2.module_el8.9.0+3687+dcd7ef8f.src.rpm">
          <filename>conmon-2.1.4-2.module_el8.9.0+3687+dcd7ef8f.s390x.rpm</filename>
          <sum type="sha256">a243410e8da3e228dbeef571c31bce2256062f5786cf4dde6e7ab51c1edf7279</sum>
        </package>
        <package name="crun" version="1.8.7" release="1.module_el8.9.0+3683+33eb0feb" epoch="0" arch="s390x" src="crun-1.8.7-1.module_el8.9.0+3683+33eb0feb.src.rpm">
          <filename>crun-1.8.7-1.module_el8.9.0+3683+33eb0feb.s390x.rpm</filename>
          <sum type="sha256">a5bead3eccd97d3324391d9bbb99d8e8cae5e3e408b641a7d8a26b935b19393e</sum>
        </package>
        <package name="container-selinux" version="2.205.0" release="3.module_el8.9.0+3627+db8ec155" epoch="2" arch="noarch" src="container-selinux-2.205.0-3.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>container-selinux-2.205.0-3.module_el8.9.0+3627+db8ec155.noarch.rpm</filename>
          <sum type="sha256">a79efe804a83f4463008df090115d03d27f7a89b56063410939fa11c6025c398</sum>
        </package>
        <package name="aardvark-dns" version="1.0.1" release="38.module_el8.9.0+3627+db8ec155" epoch="2" arch="s390x" src="containers-common-1-38.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>aardvark-dns-1.0.1-38.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">b74f5f3d7125aab41b62a1440e4a9d6db11ac82b22312437f944e9a2563ad3d8</sum>
        </package>
        <package name="podman" version="4.0.2" release="25.module_el8.9.0+3711+04fcca5e.alma.1" epoch="2" arch="s390x" src="podman-4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1.src.rpm">
          <filename>podman-4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1.s390x.rpm</filename>
          <sum type="sha256">bfccb2ac8fbbec166d9de5fdc19a6a9ff57d045282992758ba7b7553858c6c47</sum>
        </package>
        <package name="criu" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>criu-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">c08a42b3160aaaca1d8eb6f81df59b8ea0a45448fd676479d2cae70b46600d46</sum>
        </package>
        <package name="skopeo-tests" version="1.6.2" release="9.module_el8.9.0+3687+dcd7ef8f.alma.1" epoch="2" arch="s390x" src="skopeo-1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1.src.rpm">
          <filename>skopeo-tests-1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1.s390x.rpm</filename>
          <sum type="sha256">c3048fb21bbedc943eabb1fbea0d5c4def3420fd8224a33bc1856450528c6386</sum>
        </package>
        <package name="skopeo" version="1.6.2" release="9.module_el8.9.0+3687+dcd7ef8f.alma.1" epoch="2" arch="s390x" src="skopeo-1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1.src.rpm">
          <filename>skopeo-1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1.s390x.rpm</filename>
          <sum type="sha256">d0a6c50012cdf498e00901aafa12f85eb3cf1aa26e009b5fd3cf546ae380c625</sum>
        </package>
        <package name="containernetworking-plugins" version="1.1.1" release="6.module_el8.9.0+3711+04fcca5e" epoch="1" arch="s390x" src="containernetworking-plugins-1.1.1-6.module_el8.9.0+3711+04fcca5e.src.rpm">
          <filename>containernetworking-plugins-1.1.1-6.module_el8.9.0+3711+04fcca5e.s390x.rpm</filename>
          <sum type="sha256">dc50c895f185c1e7e731dd743a506eae294ea586f3f57362d8d39e88ae985dab</sum>
        </package>
        <package name="toolbox" version="0.0.99.4" release="5.module_el8.9.0+3627+db8ec155" epoch="0" arch="s390x" src="toolbox-0.0.99.4-5.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>toolbox-0.0.99.4-5.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">dea080dc9abeebb066d991b64b5a8f7d667befa81b5ae983cb3b3acca30d626f</sum>
        </package>
        <package name="criu-libs" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>criu-libs-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">e4c16247d9bcf785747fb00cd48e60e73f98ce6fcb5202032c264dfb343a7bce</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.4" release="5.module_el8.9.0+3627+db8ec155" epoch="0" arch="s390x" src="toolbox-0.0.99.4-5.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>toolbox-tests-0.0.99.4-5.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">e9c564f21054028335b29a43cc179070a0218effbcadd66b0d4d56f9e188fbeb</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="1.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="libslirp-4.4.0-1.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>libslirp-4.4.0-1.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">f2c8aa7fab8501dbdf33f68a74cb5600af266839424a6d637732ac248a58edc7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0125</id>
    <title>Moderate: tomcat security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-16 16:57:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>tomcat security update</summary>
    <description>Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.

Security Fix(es):

* tomcat: Open Redirect vulnerability in FORM authentication (CVE-2023-41080)
* tomcat: FileUpload: DoS due to accumulation of temporary files on Windows (CVE-2023-42794)
* tomcat: improper cleaning of recycled objects could lead to information leak (CVE-2023-42795)
* tomcat: incorrectly parsed http trailer headers can cause request smuggling (CVE-2023-45648)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0125" id="RHSA-2024:0125" type="rhsa" title="RHSA-2024:0125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41080" id="CVE-2023-41080" type="cve" title="CVE-2023-41080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42794" id="CVE-2023-42794" type="cve" title="CVE-2023-42794"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42795" id="CVE-2023-42795" type="cve" title="CVE-2023-42795"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45648" id="CVE-2023-45648" type="cve" title="CVE-2023-45648"/>
      <reference href="https://bugzilla.redhat.com/2235370" id="2235370" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243749" id="2243749" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243751" id="2243751" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243752" id="2243752" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0125.html" id="ALSA-2024:0125" type="self" title="ALSA-2024:0125"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="tomcat-admin-webapps" version="9.0.62" release="27.el8_9.2" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.2.src.rpm">
          <filename>tomcat-admin-webapps-9.0.62-27.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">4864161da1a1e22f61f224538fc8791dfed985459a4cd3ded58d11dc92be7cfb</sum>
        </package>
        <package name="tomcat-lib" version="9.0.62" release="27.el8_9.2" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.2.src.rpm">
          <filename>tomcat-lib-9.0.62-27.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">4e38599441facea74812da226baec5e41790fd0be146166e743a14722ac8bd5b</sum>
        </package>
        <package name="tomcat-el-3.0-api" version="9.0.62" release="27.el8_9.2" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.2.src.rpm">
          <filename>tomcat-el-3.0-api-9.0.62-27.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">5bf4e47c1b1e27726775a221aeaad8588ae45513ae8e3ec5c7096165693c62e2</sum>
        </package>
        <package name="tomcat-jsp-2.3-api" version="9.0.62" release="27.el8_9.2" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.2.src.rpm">
          <filename>tomcat-jsp-2.3-api-9.0.62-27.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">76816ea8850ce8cecc705e0f244aac10d368f7d2a8e8752ea59e08707e7b3f9a</sum>
        </package>
        <package name="tomcat-docs-webapp" version="9.0.62" release="27.el8_9.2" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.2.src.rpm">
          <filename>tomcat-docs-webapp-9.0.62-27.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">7cd7b369ac83ea89a4f9ab948f1ca6d3a749b2ce8f507c71bd4fd047a5bb3b44</sum>
        </package>
        <package name="tomcat" version="9.0.62" release="27.el8_9.2" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.2.src.rpm">
          <filename>tomcat-9.0.62-27.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">857203d0d079a2219ce71224f3a7031231cf237e4f8fa4f9e06b341b54fbdbe3</sum>
        </package>
        <package name="tomcat-webapps" version="9.0.62" release="27.el8_9.2" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.2.src.rpm">
          <filename>tomcat-webapps-9.0.62-27.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">a426eee8877b85279e1680e27222c0e0580f3dea2d10829d0035af6d22f12092</sum>
        </package>
        <package name="tomcat-servlet-4.0-api" version="9.0.62" release="27.el8_9.2" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.2.src.rpm">
          <filename>tomcat-servlet-4.0-api-9.0.62-27.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">e358468d18397d19787fab8b6d30ffc9f8f5dced081ad13bb68a5b0fd2ac798f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0130</id>
    <title>Moderate: frr security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-16 16:44:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>frr security update</summary>
    <description>FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. 

Security Fix(es):

* ffr: Flowspec overflow in bgpd/bgp_flowspec.c (CVE-2023-38406)
* ffr: Out of bounds read in bgpd/bgp_label.c (CVE-2023-38407)
* frr: crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message (CVE-2023-47234)
* frr: crash from malformed EOR-containing BGP UPDATE message (CVE-2023-47235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0130" id="RHSA-2024:0130" type="rhsa" title="RHSA-2024:0130"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38406" id="CVE-2023-38406" type="cve" title="CVE-2023-38406"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38407" id="CVE-2023-38407" type="cve" title="CVE-2023-38407"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-47234" id="CVE-2023-47234" type="cve" title="CVE-2023-47234"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-47235" id="CVE-2023-47235" type="cve" title="CVE-2023-47235"/>
      <reference href="https://bugzilla.redhat.com/2248207" id="2248207" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248208" id="2248208" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248526" id="2248526" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248528" id="2248528" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0130.html" id="ALSA-2024:0130" type="self" title="ALSA-2024:0130"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="frr" version="7.5.1" release="13.el8_9.3.alma.1" epoch="0" arch="s390x" src="frr-7.5.1-13.el8_9.3.alma.1.src.rpm">
          <filename>frr-7.5.1-13.el8_9.3.alma.1.s390x.rpm</filename>
          <sum type="sha256">bd66a457727c082ab4dc04052205f98ea99420ca21b6064e8eaeb3a7d5534615</sum>
        </package>
        <package name="frr-selinux" version="7.5.1" release="13.el8_9.3.alma.1" epoch="0" arch="noarch" src="frr-7.5.1-13.el8_9.3.alma.1.src.rpm">
          <filename>frr-selinux-7.5.1-13.el8_9.3.alma.1.noarch.rpm</filename>
          <sum type="sha256">c97bf7f415118eb98568f3362220c1265a232c748fbda34dd4680b4757a0c67d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0131</id>
    <title>Moderate: pixman security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 20:31:00"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>pixman security update</summary>
    <description>Pixman is a pixel manipulation library for the X Window System and Cairo.

Security Fix(es):

* pixman: Integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (CVE-2022-44638)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0131" id="RHSA-2024:0131" type="rhsa" title="RHSA-2024:0131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-44638" id="CVE-2022-44638" type="cve" title="CVE-2022-44638"/>
      <reference href="https://bugzilla.redhat.com/2139988" id="2139988" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0131.html" id="ALSA-2024:0131" type="self" title="ALSA-2024:0131"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="pixman-devel" version="0.38.4" release="3.el8_9" epoch="0" arch="s390x" src="pixman-0.38.4-3.el8_9.src.rpm">
          <filename>pixman-devel-0.38.4-3.el8_9.s390x.rpm</filename>
          <sum type="sha256">b01cbff875a92a617afd7b47781cf50db332d30b7a71b35329cca716565d980c</sum>
        </package>
        <package name="pixman" version="0.38.4" release="3.el8_9" epoch="0" arch="s390x" src="pixman-0.38.4-3.el8_9.src.rpm">
          <filename>pixman-0.38.4-3.el8_9.s390x.rpm</filename>
          <sum type="sha256">d76df5fc88d8aeb65b0f3007c9930df125f86f97be099cf80dc8035cc9ffdcf8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0133</id>
    <title>Moderate: fence-agents security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-16 16:32:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. 

Security Fix(es):

* python-certifi: Removal of e-Tugra root certificate (CVE-2023-37920)
* python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0133" id="RHSA-2024:0133" type="rhsa" title="RHSA-2024:0133"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37920" id="CVE-2023-37920" type="cve" title="CVE-2023-37920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43804" id="CVE-2023-43804" type="cve" title="CVE-2023-43804"/>
      <reference href="https://bugzilla.redhat.com/2226586" id="2226586" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2242493" id="2242493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0133.html" id="ALSA-2024:0133" type="self" title="ALSA-2024:0133"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="fence-agents-brocade" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-brocade-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">0408cf4b94d8295a565fe430026acec547044fe20dd5023e91e6f36f79d61695</sum>
        </package>
        <package name="fence-agents-redfish" version="4.2.1" release="121.el8_9.2" epoch="0" arch="s390x" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-redfish-4.2.1-121.el8_9.2.s390x.rpm</filename>
          <sum type="sha256">0ff724d84474bf6571bb88e9e571dfa397e3cbcde143fbe2aed763c86b4f9664</sum>
        </package>
        <package name="fence-agents-ibm-vpc" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-ibm-vpc-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">179e4f7a09d26f3a35e8856797d114067d416a6f106cc596ff3dafca28b40844</sum>
        </package>
        <package name="fence-agents-zvm" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-zvm-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">18353da3e67927a86700fe33e87ca2f57528b87a59adec0061228d0ca4bf49d7</sum>
        </package>
        <package name="fence-agents-wti" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-wti-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">21b089d6d3ea1323f1a668a45536c2b55a594f2a79b7e2ebb9cdc38e2d0689fa</sum>
        </package>
        <package name="fence-agents-vmware-rest" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-vmware-rest-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">2220d31b3d14a9f3609101721ff465985595328c8ca26d8aa956214070b2efd1</sum>
        </package>
        <package name="fence-agents-ilo-moonshot" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-ilo-moonshot-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">33a46866828d83c9d1ed79ed518411484c78471bad06a9b432044d68478f6eb0</sum>
        </package>
        <package name="fence-agents-apc-snmp" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-apc-snmp-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">39ab1b0f227ba8516186f5d02aea513d1f3ae93b24639c5691d8606891145a49</sum>
        </package>
        <package name="fence-agents-emerson" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-emerson-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">3dc67a88a550fc5faa896a030321ff2768794ea54f11a91cac2854ba8744665f</sum>
        </package>
        <package name="fence-agents-eps" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-eps-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">44f059cee0db690265e5139c18c635de17e879d8d223e17cda340ac55ea93bee</sum>
        </package>
        <package name="fence-agents-ipdu" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-ipdu-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">4794889f3aebbaf4483d9924cf1c272717fb2b6dd277326f5def6c9fb96e7062</sum>
        </package>
        <package name="fence-agents-amt-ws" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-amt-ws-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">4cb073536d1eef6ef01bbd1edb7ea8dea388326f35c3587c63d101333ff8e027</sum>
        </package>
        <package name="fence-agents-kdump" version="4.2.1" release="121.el8_9.2" epoch="0" arch="s390x" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-kdump-4.2.1-121.el8_9.2.s390x.rpm</filename>
          <sum type="sha256">558ff4da05267a2b2e0e0ba6422071a3e5398beb0d85b0f669ce96937b840f95</sum>
        </package>
        <package name="fence-agents-hpblade" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-hpblade-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">5a902f1fad79634eacb3c224afe39dfaa0c7bdc701721df8f068017dcc711917</sum>
        </package>
        <package name="fence-agents-common" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-common-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">623f6f46de0fd3c297cb4072f61334fde220db18acaa95f279578697f3a316b8</sum>
        </package>
        <package name="fence-agents-cisco-mds" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-cisco-mds-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">72da4081ae069d2adb44e39ef14dfec6f590860036eca3460eb76058558bdba0</sum>
        </package>
        <package name="fence-agents-ibm-powervs" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-ibm-powervs-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">78ace60f20ef1c3d2e0885b78277bc63f110ec0ea57ed82c8e1fa693c4e9289b</sum>
        </package>
        <package name="fence-agents-heuristics-ping" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-heuristics-ping-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">7ad00c35a520d29f8859350a0656f41a2a48c7463142fa8c7535b61ebe06282d</sum>
        </package>
        <package name="fence-agents-scsi" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-scsi-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">951effb1ead5bba561d9e43799d3bc9afdc190a1f02abdbff526e77628a01c6a</sum>
        </package>
        <package name="fence-agents-sbd" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-sbd-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">96e477172df7ff8585c4384a6d8d5972bf519c4c409c1695509efe19028e0628</sum>
        </package>
        <package name="fence-agents-ilo2" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-ilo2-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">a9ffcca4596fece1426d8a5716dd283dd2b07b8a56c7eecb4755a3f33a26b283</sum>
        </package>
        <package name="fence-agents-ipmilan" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-ipmilan-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">b54b4e4f55702dcd97c5c0ce8e6f0d6805775d5fcda04a4ce056258b13a89337</sum>
        </package>
        <package name="fence-agents-ibmblade" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-ibmblade-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">b5ebbfc1c4cab3b31aa088bfdaad335803f8f608e26a8996d11681aeebd373ee</sum>
        </package>
        <package name="fence-agents-kubevirt" version="4.2.1" release="121.el8_9.2" epoch="0" arch="s390x" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-kubevirt-4.2.1-121.el8_9.2.s390x.rpm</filename>
          <sum type="sha256">c3378074a9922965b0a8b3506a63558ee50fa720873411be1084181317bad7cc</sum>
        </package>
        <package name="fence-agents-rsb" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-rsb-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">c44acb00734599721259ee0e03e73f8eef3dcb7ce75ace68cde2d89d1dc2744f</sum>
        </package>
        <package name="fence-agents-ilo-ssh" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-ilo-ssh-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">cdc461db6a3fa803dd69052bfa054511fee1c6428516bea8147d9644281c6d8b</sum>
        </package>
        <package name="fence-agents-intelmodular" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-intelmodular-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">d31a80c83ce3da6d6b393c3689461055f6a9f4bac3efa2aecdcc2ff61a8025af</sum>
        </package>
        <package name="fence-agents-apc" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-apc-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">dbcfec0936325015a26d96026c1f7fec5af2a155863d6e24b4634a2b73ea693d</sum>
        </package>
        <package name="fence-agents-all" version="4.2.1" release="121.el8_9.2" epoch="0" arch="s390x" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-all-4.2.1-121.el8_9.2.s390x.rpm</filename>
          <sum type="sha256">dce367625dd3391ccd16e4380efbbe9d60c62573eeefb55b719030c0fcfd649f</sum>
        </package>
        <package name="fence-agents-lpar" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-lpar-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">e12292f28caf641d8dcf70ee795168e02599ac3568aac9626dc7d78f1dc4bb2b</sum>
        </package>
        <package name="fence-agents-ifmib" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-ifmib-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">e4d823b4b562b4cc9ae71c8ead68e7dacfe827285473d2d57c05b44226fdd74a</sum>
        </package>
        <package name="fence-agents-eaton-snmp" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-eaton-snmp-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">e553d61d4cfcc9909aa7916d3de6621d64cab5daa9866c072501c0afff20ce6e</sum>
        </package>
        <package name="fence-agents-mpath" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-mpath-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">e763801d693201190607af6211a087549435ec26f6e39a20c71df51237cacc46</sum>
        </package>
        <package name="fence-agents-ilo-mp" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-ilo-mp-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">e8a6f7e3c0fe7f563ae62194d961947eac42df8423bfed7f890586747d665dab</sum>
        </package>
        <package name="fence-agents-bladecenter" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-bladecenter-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">eabf38326855ab2a3ee09211f32b3447d3648327cd8995a7c9aa4e940cc9bea2</sum>
        </package>
        <package name="fence-agents-virsh" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-virsh-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">ef3abaf009e07cb278f31b2a04c413c92b1f33e3b40ce28baf34645db3d6a2ed</sum>
        </package>
        <package name="fence-agents-rsa" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-rsa-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">f100f84d8f8b86359678845f084196d606c942e0b8ba4b7217d901f14e5618e7</sum>
        </package>
        <package name="fence-agents-compute" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-compute-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">f51eb39e62cc8cdc54ccc2a7d50dacbd8d38a186e95231fe8f080bbf4916ee45</sum>
        </package>
        <package name="fence-agents-vmware-soap" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-vmware-soap-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">fabbacca388776cc50f2d80791b2b81f7d9fbe183d87e061229e870d07eb1762</sum>
        </package>
        <package name="fence-agents-rhevm" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-rhevm-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">fc7364f66bd54dfbc89d687a7aa37c456d5c72bce79e4cf9cfabd68873c0c4eb</sum>
        </package>
        <package name="fence-agents-drac5" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-drac5-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">ff179a72a2d6c4e108738c55f8ef3ff652a2c8df9080eb55c489538020220235</sum>
        </package>
        <package name="fence-agents-cisco-ucs" version="4.2.1" release="121.el8_9.2" epoch="0" arch="noarch" src="fence-agents-4.2.1-121.el8_9.2.src.rpm">
          <filename>fence-agents-cisco-ucs-4.2.1-121.el8_9.2.noarch.rpm</filename>
          <sum type="sha256">ffccd80652dbf20750c3aec78406ee88beafb480a8448e3713678bb6b6afaa5d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0143</id>
    <title>Moderate: idm:DL1 security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-16 16:19:17"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>idm:DL1 security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. 

Security Fix(es):

* Kerberos: delegation constrain bypass in S4U2Proxy (CVE-2020-17049)
* ipa: Invalid CSRF protection (CVE-2023-5455)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0143" id="RHSA-2024:0143" type="rhsa" title="RHSA-2024:0143"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-17049" id="CVE-2020-17049" type="cve" title="CVE-2020-17049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5455" id="CVE-2023-5455" type="cve" title="CVE-2023-5455"/>
      <reference href="https://bugzilla.redhat.com/2025721" id="2025721" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2242828" id="2242828" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0143.html" id="ALSA-2024:0143" type="self" title="ALSA-2024:0143"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="idm" stream="DL1" version="8060020221025151251" context="93c20af6" arch="s390x"/>
        <package name="ipa-server-dns" version="4.9.12" release="11.module_el8.9.0+3715+e4197dc9.alma.1" epoch="0" arch="noarch" src="ipa-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.src.rpm">
          <filename>ipa-server-dns-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.noarch.rpm</filename>
          <sum type="sha256">02aacab3782c9a9c5ba6abdae55a7c36a9dd3a1070f797a7a2d54f10d43d9360</sum>
        </package>
        <package name="ipa-client" version="4.9.12" release="11.module_el8.9.0+3715+e4197dc9.alma.1" epoch="0" arch="s390x" src="ipa-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.src.rpm">
          <filename>ipa-client-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.s390x.rpm</filename>
          <sum type="sha256">0c601061a5dc676ea9eddecd73f28e77e81e098a94a8979ff8f13fd77358fdad</sum>
        </package>
        <package name="ipa-client-common" version="4.9.12" release="11.module_el8.9.0+3715+e4197dc9.alma.1" epoch="0" arch="noarch" src="ipa-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.src.rpm">
          <filename>ipa-client-common-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.noarch.rpm</filename>
          <sum type="sha256">120ad61b4b5d233e5d11c3b3207a924cd384898ab3906404a47eb5a7c4e2b4d0</sum>
        </package>
        <package name="python3-kdcproxy" version="0.4" release="5.module_el8.9.0+3682+f63caf3e" epoch="0" arch="noarch" src="python-kdcproxy-0.4-5.module_el8.9.0+3682+f63caf3e.src.rpm">
          <filename>python3-kdcproxy-0.4-5.module_el8.9.0+3682+f63caf3e.noarch.rpm</filename>
          <sum type="sha256">137e6f0001b74c3f951113e7671782fff79d3d7e1053f7086c3dc5284031f66e</sum>
        </package>
        <package name="ipa-healthcheck" version="0.12" release="3.module_el8.9.0+3651+d05ea4c5" epoch="0" arch="noarch" src="ipa-healthcheck-0.12-3.module_el8.9.0+3651+d05ea4c5.src.rpm">
          <filename>ipa-healthcheck-0.12-3.module_el8.9.0+3651+d05ea4c5.noarch.rpm</filename>
          <sum type="sha256">256f632b4bbfcf825ee03e258b1f1cd9f232c910107bcb967a25bb28d768e27f</sum>
        </package>
        <package name="python3-ipalib" version="4.9.12" release="11.module_el8.9.0+3715+e4197dc9.alma.1" epoch="0" arch="noarch" src="ipa-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.src.rpm">
          <filename>python3-ipalib-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.noarch.rpm</filename>
          <sum type="sha256">329e7e4a2458c4473548a957349d086286c96671a54dc16920e6720d50a60117</sum>
        </package>
        <package name="ipa-common" version="4.9.12" release="11.module_el8.9.0+3715+e4197dc9.alma.1" epoch="0" arch="noarch" src="ipa-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.src.rpm">
          <filename>ipa-common-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.noarch.rpm</filename>
          <sum type="sha256">3d07743c7c1a6123b7dbcbbcc148af93702b0a315e3b3bd04bb8cb4409c6e6c6</sum>
        </package>
        <package name="python3-jwcrypto" version="0.5.0" release="1.1.module_el8.7.0+3349+cfeff52e" epoch="0" arch="noarch" src="python-jwcrypto-0.5.0-1.1.module_el8.7.0+3349+cfeff52e.src.rpm">
          <filename>python3-jwcrypto-0.5.0-1.1.module_el8.7.0+3349+cfeff52e.noarch.rpm</filename>
          <sum type="sha256">42fb4e8b412042e16b9a08a0136e9ff56b8d75a1a0faaa070d1a2fc9b0446296</sum>
        </package>
        <package name="ipa-server" version="4.9.12" release="11.module_el8.9.0+3715+e4197dc9.alma.1" epoch="0" arch="s390x" src="ipa-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.src.rpm">
          <filename>ipa-server-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.s390x.rpm</filename>
          <sum type="sha256">51b483c1524cf4c315490d22a2877f840ea37e9e75c3cb062426edbdc95de515</sum>
        </package>
        <package name="python3-pyusb" version="1.0.0" release="9.1.module_el8.7.0+3349+cfeff52e" epoch="0" arch="noarch" src="pyusb-1.0.0-9.1.module_el8.7.0+3349+cfeff52e.src.rpm">
          <filename>python3-pyusb-1.0.0-9.1.module_el8.7.0+3349+cfeff52e.noarch.rpm</filename>
          <sum type="sha256">5f45866e2459f1c9a0b969263baab4ffed264d2998456658cafd554de6300cfa</sum>
        </package>
        <package name="python3-yubico" version="1.3.2" release="9.1.module_el8.7.0+3349+cfeff52e" epoch="0" arch="noarch" src="python-yubico-1.3.2-9.1.module_el8.7.0+3349+cfeff52e.src.rpm">
          <filename>python3-yubico-1.3.2-9.1.module_el8.7.0+3349+cfeff52e.noarch.rpm</filename>
          <sum type="sha256">68b28b3fb94f5026730feca1a1c3feb64c06ad5601a7cf8befb4e704510edd73</sum>
        </package>
        <package name="ipa-healthcheck-core" version="0.12" release="3.module_el8.9.0+3651+d05ea4c5" epoch="0" arch="noarch" src="ipa-healthcheck-0.12-3.module_el8.9.0+3651+d05ea4c5.src.rpm">
          <filename>ipa-healthcheck-core-0.12-3.module_el8.9.0+3651+d05ea4c5.noarch.rpm</filename>
          <sum type="sha256">6e29224e5e6a92366a33c093fa580ef7885db16383aaca82fa62f0491d7e06e0</sum>
        </package>
        <package name="opendnssec" version="2.1.7" release="1.module_el8.6.0+3031+2f24dc92" epoch="0" arch="s390x" src="opendnssec-2.1.7-1.module_el8.6.0+3031+2f24dc92.src.rpm">
          <filename>opendnssec-2.1.7-1.module_el8.6.0+3031+2f24dc92.s390x.rpm</filename>
          <sum type="sha256">70507943973619cb0dcbeacad47947e0edfc24e6bd7cf67323083e2fcb0ea086</sum>
        </package>
        <package name="ipa-server-trust-ad" version="4.9.12" release="11.module_el8.9.0+3715+e4197dc9.alma.1" epoch="0" arch="s390x" src="ipa-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.src.rpm">
          <filename>ipa-server-trust-ad-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.s390x.rpm</filename>
          <sum type="sha256">70728b01304070b6b8c5f1e18a63076f7457b872c45267dc5cdf990610b715be</sum>
        </package>
        <package name="python3-ipatests" version="4.9.12" release="11.module_el8.9.0+3715+e4197dc9.alma.1" epoch="0" arch="noarch" src="ipa-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.src.rpm">
          <filename>python3-ipatests-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.noarch.rpm</filename>
          <sum type="sha256">87fba45c77cb2e826d01920ed9fea96835b5b1e8966f977ddc9cd1f7ba26fcef</sum>
        </package>
        <package name="python3-ipaserver" version="4.9.12" release="11.module_el8.9.0+3715+e4197dc9.alma.1" epoch="0" arch="noarch" src="ipa-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.src.rpm">
          <filename>python3-ipaserver-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.noarch.rpm</filename>
          <sum type="sha256">882ffe6d9ba3813642ca4978846b8e583ae34c541a50ec6af58b9976d53112de</sum>
        </package>
        <package name="ipa-server-common" version="4.9.12" release="11.module_el8.9.0+3715+e4197dc9.alma.1" epoch="0" arch="noarch" src="ipa-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.src.rpm">
          <filename>ipa-server-common-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.noarch.rpm</filename>
          <sum type="sha256">91b6ea49ef7fa0c00067782b007724717d05791704c1ce020f7a3b899f1eb8f8</sum>
        </package>
        <package name="ipa-client-epn" version="4.9.12" release="11.module_el8.9.0+3715+e4197dc9.alma.1" epoch="0" arch="s390x" src="ipa-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.src.rpm">
          <filename>ipa-client-epn-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.s390x.rpm</filename>
          <sum type="sha256">957e603bdd1e2109aebb11c14e0c43356af65c29922ea8474fda093bddd6c343</sum>
        </package>
        <package name="python3-ipaclient" version="4.9.12" release="11.module_el8.9.0+3715+e4197dc9.alma.1" epoch="0" arch="noarch" src="ipa-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.src.rpm">
          <filename>python3-ipaclient-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.noarch.rpm</filename>
          <sum type="sha256">9599a002c615d04e2922f389a1861c6203d9143ca0f1d3a524412324effce02f</sum>
        </package>
        <package name="softhsm-devel" version="2.6.0" release="5.module_el8.6.0+3031+2f24dc92" epoch="0" arch="s390x" src="softhsm-2.6.0-5.module_el8.6.0+3031+2f24dc92.src.rpm">
          <filename>softhsm-devel-2.6.0-5.module_el8.6.0+3031+2f24dc92.s390x.rpm</filename>
          <sum type="sha256">99b0ac3696d5de6fbbd0e2bb5882b9a36feef44b0fcb4f42dd82963f3077f8ab</sum>
        </package>
        <package name="bind-dyndb-ldap" version="11.6" release="4.module_el8.6.0+3339+9b5fdd22" epoch="0" arch="s390x" src="bind-dyndb-ldap-11.6-4.module_el8.6.0+3339+9b5fdd22.src.rpm">
          <filename>bind-dyndb-ldap-11.6-4.module_el8.6.0+3339+9b5fdd22.s390x.rpm</filename>
          <sum type="sha256">a817713d7704d250c4aa0d8ce2a497506a6717e6714d704b0893d006f3956dd0</sum>
        </package>
        <package name="softhsm" version="2.6.0" release="5.module_el8.6.0+3031+2f24dc92" epoch="0" arch="s390x" src="softhsm-2.6.0-5.module_el8.6.0+3031+2f24dc92.src.rpm">
          <filename>softhsm-2.6.0-5.module_el8.6.0+3031+2f24dc92.s390x.rpm</filename>
          <sum type="sha256">ad706f5e338373e1c6880dce46ce69f7e82ebf416e464ec0abc5c316b27306a1</sum>
        </package>
        <package name="ipa-selinux" version="4.9.12" release="11.module_el8.9.0+3715+e4197dc9.alma.1" epoch="0" arch="noarch" src="ipa-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.src.rpm">
          <filename>ipa-selinux-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.noarch.rpm</filename>
          <sum type="sha256">b5a23b37b43aa936797449f55043f112caf79270e0dcc8de1c792462e3968277</sum>
        </package>
        <package name="ipa-client-samba" version="4.9.12" release="11.module_el8.9.0+3715+e4197dc9.alma.1" epoch="0" arch="s390x" src="ipa-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.src.rpm">
          <filename>ipa-client-samba-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.s390x.rpm</filename>
          <sum type="sha256">c7843a78948c28bc3d10d398d02f0ba73f407acd6affcdb91f95848b724bc93a</sum>
        </package>
        <package name="slapi-nis" version="0.60.0" release="4.module_el8.9.0+3682+f63caf3e.alma.1" epoch="0" arch="s390x" src="slapi-nis-0.60.0-4.module_el8.9.0+3682+f63caf3e.alma.1.src.rpm">
          <filename>slapi-nis-0.60.0-4.module_el8.9.0+3682+f63caf3e.alma.1.s390x.rpm</filename>
          <sum type="sha256">e283b0e8ad5b99af68c893d6be3fbbf4c283e9b3b845a7fb6ff96e5c75475639</sum>
        </package>
        <package name="ipa-python-compat" version="4.9.12" release="11.module_el8.9.0+3715+e4197dc9.alma.1" epoch="0" arch="noarch" src="ipa-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.src.rpm">
          <filename>ipa-python-compat-4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1.noarch.rpm</filename>
          <sum type="sha256">e80d123b9e451e541f8c87e0f9e1a64626e44cc0b17ace078ccf7948d0a52086</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0150</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 20:16:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.101 and .NET Runtime 8.0.1.

Security Fix(es):

* dotnet: Information Disclosure: MD.SqlClient(MDS) &amp; System.data.SQLClient (SDS) (CVE-2024-0056)
* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)
* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0150" id="RHSA-2024:0150" type="rhsa" title="RHSA-2024:0150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0056" id="CVE-2024-0056" type="cve" title="CVE-2024-0056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0057" id="CVE-2024-0057" type="cve" title="CVE-2024-0057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21319" id="CVE-2024-21319" type="cve" title="CVE-2024-21319"/>
      <reference href="https://bugzilla.redhat.com/2255384" id="2255384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255386" id="2255386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257566" id="2257566" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0150.html" id="ALSA-2024:0150" type="self" title="ALSA-2024:0150"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="dotnet-runtime-8.0" version="8.0.1" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.101-1.el8_9.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.1-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">1190e5e70004a13b5563db438ce38d653765a733310f5beca4965e36f6c93c1c</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.1" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.101-1.el8_9.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.1-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">185e893d5203959fbc2b800e59c10a5e9a4793ea86844ef38bc3a0d8a27852aa</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.1" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.101-1.el8_9.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.1-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">188f4888d809c38911daf86da7bff08ecf92ce07577595786e1183213b12f415</sum>
        </package>
        <package name="dotnet" version="8.0.101" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.101-1.el8_9.src.rpm">
          <filename>dotnet-8.0.101-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">3fbde1086f3aaec720fe65263bf22e2fec4fa478ae5e185649cf0b65c9ce2514</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.101" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.101-1.el8_9.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.101-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">4c7a5019b21bcb4757591d49fd343453195ff223bd84cec580a2dd1a0509bdf4</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.1" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.101-1.el8_9.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.1-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">63a5250f2d48642994150ab0292117e19dae4b87e64a989727e540f3710a4a5f</sum>
        </package>
        <package name="dotnet-host" version="8.0.1" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.101-1.el8_9.src.rpm">
          <filename>dotnet-host-8.0.1-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">70e6219b01e298b0c30de3ceba53558d4ac2b173f95183619b7ce871dd37ac71</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.101" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.101-1.el8_9.src.rpm">
          <filename>dotnet-templates-8.0-8.0.101-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">78ecc2117dd5c9516bea86b88e153fd5ed8a4dc3e6b7e8968288abb2e6b7ef7a</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="8.0.101" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.101-1.el8_9.src.rpm">
          <filename>netstandard-targeting-pack-2.1-8.0.101-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">aa775c63386ae18bcedd374477a1f392ed64769bc72f02fdafa2964d69353f14</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.1" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.101-1.el8_9.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.1-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">b3d45c035666e069d3a5e0f379bfec6f008bed241fc3eb4449347c235d52cc93</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.1" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.101-1.el8_9.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.1-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">d3e16f50eabfeb4c9e618a533f78ee63c363fcef251dc5a736935a35b2702daa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0155</id>
    <title>Moderate: gnutls security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 19:42:21"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls security update</summary>
    <description>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

* gnutls: timing side-channel in the RSA-PSK authentication (CVE-2023-5981)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0155" id="RHSA-2024:0155" type="rhsa" title="RHSA-2024:0155"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5981" id="CVE-2023-5981" type="cve" title="CVE-2023-5981"/>
      <reference href="https://bugzilla.redhat.com/2248445" id="2248445" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0155.html" id="ALSA-2024:0155" type="self" title="ALSA-2024:0155"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="gnutls-devel" version="3.6.16" release="8.el8_9" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_9.src.rpm">
          <filename>gnutls-devel-3.6.16-8.el8_9.s390x.rpm</filename>
          <sum type="sha256">1e7f1ad93fa1147ab1358befec7a2616a2eb25094c1d9b524814bf303fa42bf0</sum>
        </package>
        <package name="gnutls-utils" version="3.6.16" release="8.el8_9" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_9.src.rpm">
          <filename>gnutls-utils-3.6.16-8.el8_9.s390x.rpm</filename>
          <sum type="sha256">c0cc30a7c5836bfc814ac0695070cf02081fc1bbb247b58cd658909d97da8a84</sum>
        </package>
        <package name="gnutls-c++" version="3.6.16" release="8.el8_9" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_9.src.rpm">
          <filename>gnutls-c++-3.6.16-8.el8_9.s390x.rpm</filename>
          <sum type="sha256">d41ce10367d7cfe50f34161de9d3a0c49aa879a216755c28f3638fd740b75dc0</sum>
        </package>
        <package name="gnutls-dane" version="3.6.16" release="8.el8_9" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_9.src.rpm">
          <filename>gnutls-dane-3.6.16-8.el8_9.s390x.rpm</filename>
          <sum type="sha256">d71f13eb64ad83e1b5b6c72d99360bdf532e6cf4d9d99aef4ee14bad37421949</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0157</id>
    <title>Important: .NET 7.0 security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 19:02:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.115 and .NET Runtime 7.0.15.

Security Fix(es):

* dotnet: Information Disclosure: MD.SqlClient(MDS) &amp; System.data.SQLClient (SDS) (CVE-2024-0056)
* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)
* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0157" id="RHSA-2024:0157" type="rhsa" title="RHSA-2024:0157"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0056" id="CVE-2024-0056" type="cve" title="CVE-2024-0056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0057" id="CVE-2024-0057" type="cve" title="CVE-2024-0057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21319" id="CVE-2024-21319" type="cve" title="CVE-2024-21319"/>
      <reference href="https://bugzilla.redhat.com/2255384" id="2255384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255386" id="2255386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257566" id="2257566" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0157.html" id="ALSA-2024:0157" type="self" title="ALSA-2024:0157"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="dotnet-sdk-7.0" version="7.0.115" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.115-1.el8_9.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.115-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">010dde634b19b87139cba923f2d4589bad6c7920d64a61104aa969663c71eede</sum>
        </package>
        <package name="dotnet-templates-7.0" version="7.0.115" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.115-1.el8_9.src.rpm">
          <filename>dotnet-templates-7.0-7.0.115-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">05e634fa4db3fd48801793c5d700ccce2424ce70d51d678743f09f4d29885edb</sum>
        </package>
        <package name="aspnetcore-runtime-7.0" version="7.0.15" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.115-1.el8_9.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.15-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">490132c72d76b543de820a0e4e6305e1a8e821a883be22ab09d0830363a6a54c</sum>
        </package>
        <package name="dotnet-apphost-pack-7.0" version="7.0.15" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.115-1.el8_9.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.15-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">730ea3f221369ee74c4fb7db8c4ed69d6adefd34e75fe557aa07be08546de0fd</sum>
        </package>
        <package name="dotnet-targeting-pack-7.0" version="7.0.15" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.115-1.el8_9.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.15-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">9a071bc584cc13b247954a1eeb77dc52c08af03f70ccfd18cffafc3a43b56ab9</sum>
        </package>
        <package name="dotnet-runtime-7.0" version="7.0.15" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.115-1.el8_9.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.15-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">a12a4afb721b3ed14d1587a71e441bc8fc0cc40a06c6e9786e46f4b1534e89b9</sum>
        </package>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.15" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.115-1.el8_9.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.15-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">ac1cb46ec1ed22cdf05d48af5975589562b41c0aa19781c77e81f34d51ebc563</sum>
        </package>
        <package name="dotnet-hostfxr-7.0" version="7.0.15" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.115-1.el8_9.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.15-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">da4a03b14727f99c49f3f5e062678c8cfb4353c0da8ff3b76e92eb78fb510036</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0158</id>
    <title>Important: .NET 6.0 security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 18:37:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.126 and .NET Runtime 6.0.26.

Security Fix(es):

* dotnet: Information Disclosure: MD.SqlClient(MDS) &amp; System.data.SQLClient (SDS) (CVE-2024-0056)
* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)
* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0158" id="RHSA-2024:0158" type="rhsa" title="RHSA-2024:0158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0056" id="CVE-2024-0056" type="cve" title="CVE-2024-0056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0057" id="CVE-2024-0057" type="cve" title="CVE-2024-0057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21319" id="CVE-2024-21319" type="cve" title="CVE-2024-21319"/>
      <reference href="https://bugzilla.redhat.com/2255384" id="2255384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255386" id="2255386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257566" id="2257566" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0158.html" id="ALSA-2024:0158" type="self" title="ALSA-2024:0158"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="dotnet-targeting-pack-6.0" version="6.0.26" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.126-1.el8_9.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.26-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">1b862a6da728c2c3eb5081e7a31b184ce8545378a7d5af7485958e9e5c891ebe</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.26" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.126-1.el8_9.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.26-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">22ed3f122ec06550558adcc5040232c89168c6d6193a23ada454ebb837a71edb</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.126" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.126-1.el8_9.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.126-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">23c76a6d1e069d30f915394e7571de1c12bcfeb53ad6852f0040a3f639a12a77</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.26" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.126-1.el8_9.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.26-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">28bdf531ad0135f3f66d9710397be7f47bb15324e531f0b4f3d7228dd73f0b6d</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.126" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.126-1.el8_9.src.rpm">
          <filename>dotnet-templates-6.0-6.0.126-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">75d7aad9290874144b96760d5daad9f59d320f016929f9a6e4aebc7f65b975c4</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.26" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.126-1.el8_9.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.26-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">8f52a946273f0bc8a25a9057b3003e8907530bd959e2c5e62cf94bb137cae0d2</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.26" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.126-1.el8_9.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.26-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">8f81e049f64f9d896dfaef7e3d641eed4f167a2c0bafef5c71a5043a3434ae11</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.26" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.126-1.el8_9.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.26-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">fbf0de997391219bda96fe80c3c82227e64111b097c19b1f9474ea11bd1c910a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0248</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2024-01-17 00:00:00"/>
    <updated date="2024-01-20 11:28:21"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918)
* OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952)
* OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919)
* OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921)
* OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0248" id="RHSA-2024:0248" type="rhsa" title="RHSA-2024:0248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20918" id="CVE-2024-20918" type="cve" title="CVE-2024-20918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20919" id="CVE-2024-20919" type="cve" title="CVE-2024-20919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20921" id="CVE-2024-20921" type="cve" title="CVE-2024-20921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20945" id="CVE-2024-20945" type="cve" title="CVE-2024-20945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20952" id="CVE-2024-20952" type="cve" title="CVE-2024-20952"/>
      <reference href="https://bugzilla.redhat.com/2257728" id="2257728" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257837" id="2257837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257853" id="2257853" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257859" id="2257859" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257874" id="2257874" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0248.html" id="ALSA-2024:0248" type="self" title="ALSA-2024:0248"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="java-21-openjdk-javadoc-zip" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-zip-21.0.2.0.13-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">0ea6c60c793f88ec7d0ebbd713637f7d537594c2a82954f06cafa2d56ef4cb10</sum>
        </package>
        <package name="java-21-openjdk-headless" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-21.0.2.0.13-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">3117fa4c0a838d00feb2ea1fbdcc934c32dc964ed13b2a8c6aeeeeb824dfdcfc</sum>
        </package>
        <package name="java-21-openjdk-src" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-src-21.0.2.0.13-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">3bb093fc8bb5bb7a88475bec34fa902adba8869b54e7cbe6b9c58eb8bee419b4</sum>
        </package>
        <package name="java-21-openjdk-static-libs" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-21.0.2.0.13-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">4dfc580f5a4d533042ef36061efda73c6330cf5ee46dadb0eb939b88406e3416</sum>
        </package>
        <package name="java-21-openjdk" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-21.0.2.0.13-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">85e46bc9329d881c5e6d9b2c89da894808213565e62c1319fbf8d55e8eb1ea6e</sum>
        </package>
        <package name="java-21-openjdk-demo" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-21.0.2.0.13-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">8e704c82bbbe8043e667cc7dac4982af79b7125008ed2b0a7cf80f7fd645ec8c</sum>
        </package>
        <package name="java-21-openjdk-jmods" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-21.0.2.0.13-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">a3fba1cd450ac18d9f7099fdb0d8edce97836423498b0bc4c26243eb6f14abbb</sum>
        </package>
        <package name="java-21-openjdk-javadoc" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-21.0.2.0.13-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">b54413b2b0bb7fd46749bb824af6903de44117be58b1c8088989826044c2e05c</sum>
        </package>
        <package name="java-21-openjdk-devel" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-21.0.2.0.13-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">db66f5f4d5e8ef425516cb18cec6cf10ab1637a4bf34388e0faf2548f9224f74</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0253</id>
    <title>Moderate: sqlite security update</title>
    <issued date="2024-01-15 00:00:00"/>
    <updated date="2024-01-16 19:17:21"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>sqlite security update</summary>
    <description>SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server.

Security Fix(es):

* sqlite: heap-buffer-overflow at sessionfuzz (CVE-2023-7104)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0253" id="RHSA-2024:0253" type="rhsa" title="RHSA-2024:0253"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-7104" id="CVE-2023-7104" type="cve" title="CVE-2023-7104"/>
      <reference href="https://bugzilla.redhat.com/2256194" id="2256194" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0253.html" id="ALSA-2024:0253" type="self" title="ALSA-2024:0253"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="lemon" version="3.26.0" release="19.el8_9" epoch="0" arch="s390x" src="sqlite-3.26.0-19.el8_9.src.rpm">
          <filename>lemon-3.26.0-19.el8_9.s390x.rpm</filename>
          <sum type="sha256">eddbbe55523c2ed0508aa977044449c990519faaa6517243784667586b68ea99</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0256</id>
    <title>Moderate: python3 security update</title>
    <issued date="2024-01-15 00:00:00"/>
    <updated date="2024-01-16 18:53:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0256" id="RHSA-2024:0256" type="rhsa" title="RHSA-2024:0256"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27043" id="CVE-2023-27043" type="cve" title="CVE-2023-27043"/>
      <reference href="https://bugzilla.redhat.com/2196183" id="2196183" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0256.html" id="ALSA-2024:0256" type="self" title="ALSA-2024:0256"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="python3-idle" version="3.6.8" release="56.el8_9.3.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-56.el8_9.3.alma.1.src.rpm">
          <filename>python3-idle-3.6.8-56.el8_9.3.alma.1.s390x.rpm</filename>
          <sum type="sha256">1d98513ff382095cc50c1325f40e0bcf0969372d8f9436695c4bbfcc0bd41a5a</sum>
        </package>
        <package name="python3-tkinter" version="3.6.8" release="56.el8_9.3.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-56.el8_9.3.alma.1.src.rpm">
          <filename>python3-tkinter-3.6.8-56.el8_9.3.alma.1.s390x.rpm</filename>
          <sum type="sha256">3c63235ebeaadbfec73a3ca016ae3b4a7e20305c55dfb8635032bea8360d9fce</sum>
        </package>
        <package name="platform-python-devel" version="3.6.8" release="56.el8_9.3.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-56.el8_9.3.alma.1.src.rpm">
          <filename>platform-python-devel-3.6.8-56.el8_9.3.alma.1.s390x.rpm</filename>
          <sum type="sha256">5af7d3958d61bbf63dd2705e86e8cbaba378eb55424b0553766f1e403ec76a02</sum>
        </package>
        <package name="platform-python-debug" version="3.6.8" release="56.el8_9.3.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-56.el8_9.3.alma.1.src.rpm">
          <filename>platform-python-debug-3.6.8-56.el8_9.3.alma.1.s390x.rpm</filename>
          <sum type="sha256">6734228d7033ee557998037fe99ae39676ee9cb0c8f2d86471421db140197605</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0265</id>
    <title>Important: java-1.8.0-openjdk security and bug fix update</title>
    <issued date="2024-01-17 00:00:00"/>
    <updated date="2024-03-05 10:02:30"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-1.8.0-openjdk security and bug fix update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918)
* OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952)
* OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919)
* OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921)
* OpenJDK: arbitrary Java code execution in Nashorn (8314284) (CVE-2024-20926)
* OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* In the previous release in October 2023 (8u392), the RPMs on AlmaLinux 8 were changed to use Provides for java, jre, java-headless, jre-headless, java-devel and java-sdk which included the full RPM version. This prevented the Provides being used to resolve a dependency on Java 1.8.0 (for example, "Requires: java-headless 1:1.8.0"). This change has now been reverted to the old "1:1.8.0" value. (AlmaLinux-19636, AlmaLinux-19637)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0265" id="RHSA-2024:0265" type="rhsa" title="RHSA-2024:0265"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20918" id="CVE-2024-20918" type="cve" title="CVE-2024-20918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20919" id="CVE-2024-20919" type="cve" title="CVE-2024-20919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20921" id="CVE-2024-20921" type="cve" title="CVE-2024-20921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20926" id="CVE-2024-20926" type="cve" title="CVE-2024-20926"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20945" id="CVE-2024-20945" type="cve" title="CVE-2024-20945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20952" id="CVE-2024-20952" type="cve" title="CVE-2024-20952"/>
      <reference href="https://bugzilla.redhat.com/2257728" id="2257728" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257837" id="2257837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257850" id="2257850" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257853" id="2257853" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257859" id="2257859" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257874" id="2257874" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0265.html" id="ALSA-2024:0265" type="self" title="ALSA-2024:0265"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="java-1.8.0-openjdk-accessibility" version="1.8.0.402.b06" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-1.8.0.402.b06-2.el8.s390x.rpm</filename>
          <sum type="sha256">0268d695d61ad1750decbdc2d8426cdeb121d15d5d267103c6d661f8bb039557</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.402.b06" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.402.b06-2.el8.s390x.rpm</filename>
          <sum type="sha256">2968b5feb2812db4434259802f7850bc39985771530807d3b22668e064ba74c9</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.402.b06" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.402.b06-2.el8.s390x.rpm</filename>
          <sum type="sha256">35e329b63850c115de74396720318bf31e29f2aef8ffaa6db0420e87783b5508</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.402.b06" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.402.b06-2.el8.s390x.rpm</filename>
          <sum type="sha256">441df673ecb03bc48b0756518eae291222ec00db9345b426b1f0c783ab7fb1b6</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.402.b06" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.402.b06-2.el8.s390x.rpm</filename>
          <sum type="sha256">7cb72daa9b14df658dfc81e32f0cdc5523a2a5775d81c89483eb9dc7e6a30339</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.402.b06" release="2.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.402.b06-2.el8.noarch.rpm</filename>
          <sum type="sha256">8943584930053bdc4e6c270811243cc4e7fd84b4a2ced0a15eb30c0fa6651997</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.402.b06" release="2.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.402.b06-2.el8.noarch.rpm</filename>
          <sum type="sha256">964c76cc76f2de14ae9ab294b84262545eb9f1302481f40df0a91ba0850ad8b9</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.402.b06" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.402.b06-2.el8.s390x.rpm</filename>
          <sum type="sha256">ba4b63f73ffe51b49080c34cc3dd6226463c07a32b0d0bb3a5be6b1e07f5cdcd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0539</id>
    <title>Important: tomcat security update</title>
    <issued date="2024-01-29 00:00:00"/>
    <updated date="2024-01-29 17:07:10"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tomcat security update</summary>
    <description>Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.

Security Fix(es):

* tomcat: HTTP request smuggling via malformed trailer headers (CVE-2023-46589)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0539" id="RHSA-2024:0539" type="rhsa" title="RHSA-2024:0539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46589" id="CVE-2023-46589" type="cve" title="CVE-2023-46589"/>
      <reference href="https://bugzilla.redhat.com/2252050" id="2252050" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0539.html" id="ALSA-2024:0539" type="self" title="ALSA-2024:0539"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="tomcat" version="9.0.62" release="27.el8_9.3" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.3.src.rpm">
          <filename>tomcat-9.0.62-27.el8_9.3.noarch.rpm</filename>
          <sum type="sha256">40a035c45bcc078e2a3771cfe9a3e3cd6f0d3f90456e3a6f8e6df6730c345a83</sum>
        </package>
        <package name="tomcat-webapps" version="9.0.62" release="27.el8_9.3" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.3.src.rpm">
          <filename>tomcat-webapps-9.0.62-27.el8_9.3.noarch.rpm</filename>
          <sum type="sha256">52520e77f8a73d8bf8bd747190f8300ad49c64c4cce82418f60657a7392b0f2b</sum>
        </package>
        <package name="tomcat-admin-webapps" version="9.0.62" release="27.el8_9.3" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.3.src.rpm">
          <filename>tomcat-admin-webapps-9.0.62-27.el8_9.3.noarch.rpm</filename>
          <sum type="sha256">747e3526bccf1f55f873d9cdfe9407e9bf22bba7f6d5edee69515418792cc9b6</sum>
        </package>
        <package name="tomcat-servlet-4.0-api" version="9.0.62" release="27.el8_9.3" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.3.src.rpm">
          <filename>tomcat-servlet-4.0-api-9.0.62-27.el8_9.3.noarch.rpm</filename>
          <sum type="sha256">7c8a9375e858fc156e141be28eb128584ff7c22449b74022eacc0f270ced3412</sum>
        </package>
        <package name="tomcat-jsp-2.3-api" version="9.0.62" release="27.el8_9.3" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.3.src.rpm">
          <filename>tomcat-jsp-2.3-api-9.0.62-27.el8_9.3.noarch.rpm</filename>
          <sum type="sha256">a5aeec14a265a6cb059f83c6993d65e44e89c846422c37765c75d3f24ba882e1</sum>
        </package>
        <package name="tomcat-lib" version="9.0.62" release="27.el8_9.3" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.3.src.rpm">
          <filename>tomcat-lib-9.0.62-27.el8_9.3.noarch.rpm</filename>
          <sum type="sha256">a5bee018d59b8ae797962cfaa870615064b6f641173b368e73987a4c80a115cf</sum>
        </package>
        <package name="tomcat-docs-webapp" version="9.0.62" release="27.el8_9.3" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.3.src.rpm">
          <filename>tomcat-docs-webapp-9.0.62-27.el8_9.3.noarch.rpm</filename>
          <sum type="sha256">ea658c3eb549ac700f067652a067f20629d55bf41d80e5989e5488665d3af7ce</sum>
        </package>
        <package name="tomcat-el-3.0-api" version="9.0.62" release="27.el8_9.3" epoch="1" arch="noarch" src="tomcat-9.0.62-27.el8_9.3.src.rpm">
          <filename>tomcat-el-3.0-api-9.0.62-27.el8_9.3.noarch.rpm</filename>
          <sum type="sha256">ffe139a0d6fa847d864039f3cf82727b9412e19bb130c1c64697ebd2e71b871d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0606</id>
    <title>Moderate: openssh security update</title>
    <issued date="2024-01-30 00:00:00"/>
    <updated date="2024-01-31 10:16:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssh security update</summary>
    <description>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

* ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795)
* openssh: potential command injection via shell metacharacters (CVE-2023-51385)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0606" id="RHSA-2024:0606" type="rhsa" title="RHSA-2024:0606"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-48795" id="CVE-2023-48795" type="cve" title="CVE-2023-48795"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51385" id="CVE-2023-51385" type="cve" title="CVE-2023-51385"/>
      <reference href="https://bugzilla.redhat.com/2254210" id="2254210" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255271" id="2255271" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0606.html" id="ALSA-2024:0606" type="self" title="ALSA-2024:0606"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="openssh-askpass" version="8.0p1" release="19.el8_9.2" epoch="0" arch="s390x" src="openssh-8.0p1-19.el8_9.2.src.rpm">
          <filename>openssh-askpass-8.0p1-19.el8_9.2.s390x.rpm</filename>
          <sum type="sha256">e2469a8a10496196e335b0449ebda83cffc9f4b27799585c6c5f5d158fbf380d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0607</id>
    <title>Important: tigervnc security update</title>
    <issued date="2024-01-30 00:00:00"/>
    <updated date="2024-01-31 10:10:59"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

Security Fix(es):

* xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816)
* xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229)
* xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885)
* xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0607" id="RHSA-2024:0607" type="rhsa" title="RHSA-2024:0607"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6816" id="CVE-2023-6816" type="cve" title="CVE-2023-6816"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0229" id="CVE-2024-0229" type="cve" title="CVE-2024-0229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21885" id="CVE-2024-21885" type="cve" title="CVE-2024-21885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21886" id="CVE-2024-21886" type="cve" title="CVE-2024-21886"/>
      <reference href="https://bugzilla.redhat.com/2256540" id="2256540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256542" id="2256542" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256690" id="2256690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257691" id="2257691" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0607.html" id="ALSA-2024:0607" type="self" title="ALSA-2024:0607"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="tigervnc-server-minimal" version="1.13.1" release="2.el8_9.7.alma.1" epoch="0" arch="s390x" src="tigervnc-1.13.1-2.el8_9.7.alma.1.src.rpm">
          <filename>tigervnc-server-minimal-1.13.1-2.el8_9.7.alma.1.s390x.rpm</filename>
          <sum type="sha256">27bcff896d7a5ed1c9098d86b4a66cdfb511f0e4f0e03f8eb3a2f87911065134</sum>
        </package>
        <package name="tigervnc-server-module" version="1.13.1" release="2.el8_9.7.alma.1" epoch="0" arch="s390x" src="tigervnc-1.13.1-2.el8_9.7.alma.1.src.rpm">
          <filename>tigervnc-server-module-1.13.1-2.el8_9.7.alma.1.s390x.rpm</filename>
          <sum type="sha256">447164193aa0b1ff98c32e62b804ab2a7e498df259c6761b3d0f72e0da225779</sum>
        </package>
        <package name="tigervnc-server" version="1.13.1" release="2.el8_9.7.alma.1" epoch="0" arch="s390x" src="tigervnc-1.13.1-2.el8_9.7.alma.1.src.rpm">
          <filename>tigervnc-server-1.13.1-2.el8_9.7.alma.1.s390x.rpm</filename>
          <sum type="sha256">49a80d15b0f7cdd36bf8c4c2f6d01b01e142190b9fa8c91f9a2556b804ac837c</sum>
        </package>
        <package name="tigervnc-icons" version="1.13.1" release="2.el8_9.7.alma.1" epoch="0" arch="noarch" src="tigervnc-1.13.1-2.el8_9.7.alma.1.src.rpm">
          <filename>tigervnc-icons-1.13.1-2.el8_9.7.alma.1.noarch.rpm</filename>
          <sum type="sha256">690135ab868a3f2ec8c9779a5b3c12c453e96dc806febe6416dbeefc2d7120c1</sum>
        </package>
        <package name="tigervnc" version="1.13.1" release="2.el8_9.7.alma.1" epoch="0" arch="s390x" src="tigervnc-1.13.1-2.el8_9.7.alma.1.src.rpm">
          <filename>tigervnc-1.13.1-2.el8_9.7.alma.1.s390x.rpm</filename>
          <sum type="sha256">7daaf6efc093341c70768e61361f56250eb73b9d5d08c29253243eaf24788126</sum>
        </package>
        <package name="tigervnc-license" version="1.13.1" release="2.el8_9.7.alma.1" epoch="0" arch="noarch" src="tigervnc-1.13.1-2.el8_9.7.alma.1.src.rpm">
          <filename>tigervnc-license-1.13.1-2.el8_9.7.alma.1.noarch.rpm</filename>
          <sum type="sha256">8bff591ce0c81224114bbf3bbbad1bb8064af6afabfaf3bad3c7e7dd1b40ab76</sum>
        </package>
        <package name="tigervnc-selinux" version="1.13.1" release="2.el8_9.7.alma.1" epoch="0" arch="noarch" src="tigervnc-1.13.1-2.el8_9.7.alma.1.src.rpm">
          <filename>tigervnc-selinux-1.13.1-2.el8_9.7.alma.1.noarch.rpm</filename>
          <sum type="sha256">aadc517b4dd07c9e83ab5d3db642178b0041b682a19db2fac97a43a383fe2b64</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0608</id>
    <title>Important: firefox security update</title>
    <issued date="2024-01-30 00:00:00"/>
    <updated date="2024-02-01 09:58:53"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.7.0 ESR.

Security Fix(es):

* Mozilla: Out of bounds write in ANGLE (CVE-2024-0741)
* Mozilla: Failure to update user input timestamp (CVE-2024-0742)
* Mozilla: Crash when listing printers on Linux (CVE-2024-0746)
* Mozilla: Bypass of Content Security Policy when directive unsafe-inline was set (CVE-2024-0747)
* Mozilla: Phishing site popup could show local origin in address bar (CVE-2024-0749)
* Mozilla: Potential permissions request bypass via clickjacking (CVE-2024-0750)
* Mozilla: Privilege escalation through devtools (CVE-2024-0751)
* Mozilla: HSTS policy on subdomain could bypass policy of upper domain (CVE-2024-0753)
* Mozilla: Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7 (CVE-2024-0755)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0608" id="RHSA-2024:0608" type="rhsa" title="RHSA-2024:0608"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0741" id="CVE-2024-0741" type="cve" title="CVE-2024-0741"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0742" id="CVE-2024-0742" type="cve" title="CVE-2024-0742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0746" id="CVE-2024-0746" type="cve" title="CVE-2024-0746"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0747" id="CVE-2024-0747" type="cve" title="CVE-2024-0747"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0749" id="CVE-2024-0749" type="cve" title="CVE-2024-0749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0750" id="CVE-2024-0750" type="cve" title="CVE-2024-0750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0751" id="CVE-2024-0751" type="cve" title="CVE-2024-0751"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0753" id="CVE-2024-0753" type="cve" title="CVE-2024-0753"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0755" id="CVE-2024-0755" type="cve" title="CVE-2024-0755"/>
      <reference href="https://bugzilla.redhat.com/2259926" id="2259926" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259927" id="2259927" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259928" id="2259928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259929" id="2259929" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259930" id="2259930" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259931" id="2259931" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259932" id="2259932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259933" id="2259933" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259934" id="2259934" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0608.html" id="ALSA-2024:0608" type="self" title="ALSA-2024:0608"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="firefox" version="115.7.0" release="1.el8_9.alma.1" epoch="0" arch="s390x" src="firefox-115.7.0-1.el8_9.alma.1.src.rpm">
          <filename>firefox-115.7.0-1.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">a3438086ed03b305db937a89ecad4ad400e44279a579661c3807e2fb1e93dc73</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0609</id>
    <title>Important: thunderbird security update</title>
    <issued date="2024-01-30 00:00:00"/>
    <updated date="2024-02-01 09:44:40"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.7.0.

Security Fix(es):

* Mozilla: Out of bounds write in ANGLE (CVE-2024-0741)
* Mozilla: Failure to update user input timestamp (CVE-2024-0742)
* Mozilla: Crash when listing printers on Linux (CVE-2024-0746)
* Mozilla: Bypass of Content Security Policy when directive unsafe-inline was set (CVE-2024-0747)
* Mozilla: Phishing site popup could show local origin in address bar (CVE-2024-0749)
* Mozilla: Potential permissions request bypass via clickjacking (CVE-2024-0750)
* Mozilla: Privilege escalation through devtools (CVE-2024-0751)
* Mozilla: HSTS policy on subdomain could bypass policy of upper domain (CVE-2024-0753)
* Mozilla: Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7 (CVE-2024-0755)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0609" id="RHSA-2024:0609" type="rhsa" title="RHSA-2024:0609"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0741" id="CVE-2024-0741" type="cve" title="CVE-2024-0741"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0742" id="CVE-2024-0742" type="cve" title="CVE-2024-0742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0746" id="CVE-2024-0746" type="cve" title="CVE-2024-0746"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0747" id="CVE-2024-0747" type="cve" title="CVE-2024-0747"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0749" id="CVE-2024-0749" type="cve" title="CVE-2024-0749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0750" id="CVE-2024-0750" type="cve" title="CVE-2024-0750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0751" id="CVE-2024-0751" type="cve" title="CVE-2024-0751"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0753" id="CVE-2024-0753" type="cve" title="CVE-2024-0753"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0755" id="CVE-2024-0755" type="cve" title="CVE-2024-0755"/>
      <reference href="https://bugzilla.redhat.com/2259926" id="2259926" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259927" id="2259927" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259928" id="2259928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259929" id="2259929" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259930" id="2259930" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259931" id="2259931" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259932" id="2259932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259933" id="2259933" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259934" id="2259934" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0609.html" id="ALSA-2024:0609" type="self" title="ALSA-2024:0609"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="thunderbird" version="115.7.0" release="1.el8_9.alma.1" epoch="0" arch="s390x" src="thunderbird-115.7.0-1.el8_9.alma.1.src.rpm">
          <filename>thunderbird-115.7.0-1.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">d7da4891df32b6e6f8df5e082d351caf17d221236c167a91169f2694879432df</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0627</id>
    <title>Moderate: gnutls security update</title>
    <issued date="2024-01-31 00:00:00"/>
    <updated date="2024-02-01 09:14:28"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls security update</summary>
    <description>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

Security Fix(es):

* gnutls: incomplete fix for CVE-2023-5981 (CVE-2024-0553)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0627" id="RHSA-2024:0627" type="rhsa" title="RHSA-2024:0627"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0553" id="CVE-2024-0553" type="cve" title="CVE-2024-0553"/>
      <reference href="https://bugzilla.redhat.com/2258412" id="2258412" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0627.html" id="ALSA-2024:0627" type="self" title="ALSA-2024:0627"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="gnutls-devel" version="3.6.16" release="8.el8_9.1" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_9.1.src.rpm">
          <filename>gnutls-devel-3.6.16-8.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">500121d3ebba3affdd218733038e888640c93fd19bcbe49ec98eecf18cce38e7</sum>
        </package>
        <package name="gnutls-c++" version="3.6.16" release="8.el8_9.1" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_9.1.src.rpm">
          <filename>gnutls-c++-3.6.16-8.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">77a4495f9386e91dcf6ada18be8c70d61e4a31d6d277bb43c1843678de56e817</sum>
        </package>
        <package name="gnutls-utils" version="3.6.16" release="8.el8_9.1" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_9.1.src.rpm">
          <filename>gnutls-utils-3.6.16-8.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">ebba9b31eb09c53080fd05d7e2a415d909f296de5e7c3f74549b63891a777f9c</sum>
        </package>
        <package name="gnutls-dane" version="3.6.16" release="8.el8_9.1" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_9.1.src.rpm">
          <filename>gnutls-dane-3.6.16-8.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">f05d12086579111148b9f5ea8565282d2b79a0cae8ec43fbd0a54b94037e7ae7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0628</id>
    <title>Moderate: libssh security update</title>
    <issued date="2024-01-31 00:00:00"/>
    <updated date="2024-02-01 09:02:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libssh security update</summary>
    <description>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.

Security Fix(es):

* ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0628" id="RHSA-2024:0628" type="rhsa" title="RHSA-2024:0628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-48795" id="CVE-2023-48795" type="cve" title="CVE-2023-48795"/>
      <reference href="https://bugzilla.redhat.com/2254210" id="2254210" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0628.html" id="ALSA-2024:0628" type="self" title="ALSA-2024:0628"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="libssh-devel" version="0.9.6" release="13.el8_9" epoch="0" arch="s390x" src="libssh-0.9.6-13.el8_9.src.rpm">
          <filename>libssh-devel-0.9.6-13.el8_9.s390x.rpm</filename>
          <sum type="sha256">ba1ac8ba670ba30bd7ce03ae53bf17c8c0f06d6eb7bc3bad9dc8fde2a849c828</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0647</id>
    <title>Moderate: rpm security update</title>
    <issued date="2024-02-01 00:00:00"/>
    <updated date="2024-02-01 17:31:55"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>rpm security update</summary>
    <description>The RPM Package Manager (RPM) is a command-line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages.

Security Fix(es):

* rpm: TOCTOU race in checks for unsafe symlinks (CVE-2021-35937)
* rpm: races with chown/chmod/capabilities calls during installation (CVE-2021-35938)
* rpm: checks for unsafe symlinks are not performed for intermediary directories (CVE-2021-35939)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0647" id="RHSA-2024:0647" type="rhsa" title="RHSA-2024:0647"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35937" id="CVE-2021-35937" type="cve" title="CVE-2021-35937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35938" id="CVE-2021-35938" type="cve" title="CVE-2021-35938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-35939" id="CVE-2021-35939" type="cve" title="CVE-2021-35939"/>
      <reference href="https://bugzilla.redhat.com/1964114" id="1964114" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1964125" id="1964125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1964129" id="1964129" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0647.html" id="ALSA-2024:0647" type="self" title="ALSA-2024:0647"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="rpm-plugin-fapolicyd" version="4.14.3" release="28.el8_9" epoch="0" arch="s390x" src="rpm-4.14.3-28.el8_9.src.rpm">
          <filename>rpm-plugin-fapolicyd-4.14.3-28.el8_9.s390x.rpm</filename>
          <sum type="sha256">6ea136940bf272bdeb759ab22a1dd6b1ec9ff31844217b34ff90495ec427242c</sum>
        </package>
        <package name="rpm-build" version="4.14.3" release="28.el8_9" epoch="0" arch="s390x" src="rpm-4.14.3-28.el8_9.src.rpm">
          <filename>rpm-build-4.14.3-28.el8_9.s390x.rpm</filename>
          <sum type="sha256">d70473a816105f5da769faedd9ec32261c1fc215e1bd83045de935e970f92543</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0748</id>
    <title>Important: container-tools:4.0 security update</title>
    <issued date="2024-02-08 00:00:00"/>
    <updated date="2024-02-12 10:53:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>container-tools:4.0 security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* runc: file descriptor leak ("Leaky Vessels") (CVE-2024-21626)

A AlmaLinux Security Bulletin which addresses further details about the Leaky Vessels flaw is available in the References section.

* golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326)
* golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0748" id="RHSA-2024:0748" type="rhsa" title="RHSA-2024:0748"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39326" id="CVE-2023-39326" type="cve" title="CVE-2023-39326"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45287" id="CVE-2023-45287" type="cve" title="CVE-2023-45287"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21626" id="CVE-2024-21626" type="cve" title="CVE-2024-21626"/>
      <reference href="https://bugzilla.redhat.com/2253193" id="2253193" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253330" id="2253330" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258725" id="2258725" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0748.html" id="ALSA-2024:0748" type="self" title="ALSA-2024:0748"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="container-tools" stream="4.0" version="8090020231017095551" context="20125149" arch="s390x"/>
        <package name="podman-tests" version="4.0.2" release="26.module_el8.9.0+3722+7fd8ab2b.alma.1" epoch="2" arch="s390x" src="podman-4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1.src.rpm">
          <filename>podman-tests-4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1.s390x.rpm</filename>
          <sum type="sha256">1c4e43d0df40b97bd97d21727ac82d2b7aa7880eeeb563840395e49b25119c59</sum>
        </package>
        <package name="podman" version="4.0.2" release="26.module_el8.9.0+3722+7fd8ab2b.alma.1" epoch="2" arch="s390x" src="podman-4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1.src.rpm">
          <filename>podman-4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1.s390x.rpm</filename>
          <sum type="sha256">1de74a3c88afbe3b47000d1085b40977ee3c79190b0b47ddbec7834eed28e0de</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.5" release="2.module_el8.8.0+3468+16b86c82" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.5-2.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.5-2.module_el8.8.0+3468+16b86c82.s390x.rpm</filename>
          <sum type="sha256">1e162c539720ce081534f6fb7d539a7332ff986a28465e81ca5532262dc0b96e</sum>
        </package>
        <package name="podman-catatonit" version="4.0.2" release="26.module_el8.9.0+3722+7fd8ab2b.alma.1" epoch="2" arch="s390x" src="podman-4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1.src.rpm">
          <filename>podman-catatonit-4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1.s390x.rpm</filename>
          <sum type="sha256">220b00fa9ea2902611b4a83efeb104326bdb18b21b47dbc660cb0e23f0dbafae</sum>
        </package>
        <package name="buildah" version="1.24.6" release="7.module_el8.9.0+3627+db8ec155" epoch="1" arch="s390x" src="buildah-1.24.6-7.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>buildah-1.24.6-7.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">2212f05af7f42d74bbb1be8bfe81d9d18a0ed02036561861b15eefb3d2f51e3d</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="1.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="libslirp-4.4.0-1.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>libslirp-devel-4.4.0-1.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">23a930ac511e216078f3ebd78a7940a7f4a6b6d16fe2d3c7f7c04c5dd9050b3b</sum>
        </package>
        <package name="criu-devel" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>criu-devel-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">3b5df64c4e5adb160d2985d7477aa84f2df350f8b8651dee3d1a73cb22e4ff2b</sum>
        </package>
        <package name="podman-gvproxy" version="4.0.2" release="26.module_el8.9.0+3722+7fd8ab2b.alma.1" epoch="2" arch="s390x" src="podman-4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1.src.rpm">
          <filename>podman-gvproxy-4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1.s390x.rpm</filename>
          <sum type="sha256">42337ea08e38b5cd59ee8d75e7e87a3aed54acdca8e83b6fa0e84c3456e08aaa</sum>
        </package>
        <package name="python3-podman" version="4.0.0" release="2.module_el8.9.0+3711+04fcca5e" epoch="0" arch="noarch" src="python-podman-4.0.0-2.module_el8.9.0+3711+04fcca5e.src.rpm">
          <filename>python3-podman-4.0.0-2.module_el8.9.0+3711+04fcca5e.noarch.rpm</filename>
          <sum type="sha256">43dabc749866daadeaa00d57d0814f606a130c8e68fe83ed95bfa945a4cf004e</sum>
        </package>
        <package name="runc" version="1.1.12" release="1.module_el8.9.0+3722+7fd8ab2b" epoch="1" arch="s390x" src="runc-1.1.12-1.module_el8.9.0+3722+7fd8ab2b.src.rpm">
          <filename>runc-1.1.12-1.module_el8.9.0+3722+7fd8ab2b.s390x.rpm</filename>
          <sum type="sha256">4ad0afea4d1fa2d56d70ae79cfeb7e2139b42c007a1c74434c69341dce152285</sum>
        </package>
        <package name="cockpit-podman" version="46" release="1.module_el8.7.0+3344+5bcd850f" epoch="0" arch="noarch" src="cockpit-podman-46-1.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>cockpit-podman-46-1.module_el8.7.0+3344+5bcd850f.noarch.rpm</filename>
          <sum type="sha256">4befd0793ef210df16649c866d5c1c4e69991cc174ecf348a5fbe591aa93b387</sum>
        </package>
        <package name="slirp4netns" version="1.1.8" release="3.module_el8.9.0+3627+db8ec155" epoch="0" arch="s390x" src="slirp4netns-1.1.8-3.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>slirp4netns-1.1.8-3.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">502d4654a521453555bfb5a5277a8a9750897dd2b8e99332778cdafca7829e59</sum>
        </package>
        <package name="containers-common" version="1" release="38.module_el8.9.0+3627+db8ec155" epoch="2" arch="s390x" src="containers-common-1-38.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>containers-common-1-38.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">59743e519719ebda4b03e9224b0027f9f0b94172bd75944acd94345533910cab</sum>
        </package>
        <package name="crit" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>crit-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">63e66b7937f70ee985aabe920c4d8c1e590159f72b4b79a311e986f58bc147e1</sum>
        </package>
        <package name="buildah-tests" version="1.24.6" release="7.module_el8.9.0+3687+dcd7ef8f" epoch="1" arch="s390x" src="buildah-1.24.6-7.module_el8.9.0+3687+dcd7ef8f.src.rpm">
          <filename>buildah-tests-1.24.6-7.module_el8.9.0+3687+dcd7ef8f.s390x.rpm</filename>
          <sum type="sha256">65279d54fa59abd25a0bc4fc3d7ac952f42818ca428422333f16e6cb54260ee1</sum>
        </package>
        <package name="udica" version="0.2.6" release="4.module_el8.9.0+3627+db8ec155" epoch="0" arch="noarch" src="udica-0.2.6-4.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>udica-0.2.6-4.module_el8.9.0+3627+db8ec155.noarch.rpm</filename>
          <sum type="sha256">6a7a865e0c91be7e1c5cbbe01c6eb5a9a723db86526d9b178828dd5a6155863a</sum>
        </package>
        <package name="python3-criu" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>python3-criu-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">6b152daf504ff66ecb343dfbca61a7adb1ddceb7d77ba0af696194d2d2d0db43</sum>
        </package>
        <package name="fuse-overlayfs" version="1.9" release="2.module_el8.9.0+3627+db8ec155" epoch="0" arch="s390x" src="fuse-overlayfs-1.9-2.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>fuse-overlayfs-1.9-2.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">769fd619e20112145f23e5c5e36c0c5dbf24116ffe3d85022ae3168f6ab40f80</sum>
        </package>
        <package name="skopeo-tests" version="1.6.2" release="9.module_el8.9.0+3711+04fcca5e.alma.1" epoch="2" arch="s390x" src="skopeo-1.6.2-9.module_el8.9.0+3711+04fcca5e.alma.1.src.rpm">
          <filename>skopeo-tests-1.6.2-9.module_el8.9.0+3711+04fcca5e.alma.1.s390x.rpm</filename>
          <sum type="sha256">8098875d2e632c13086387ba6d4ff5ce5a8f0432e6d0011ff94bed46d896188b</sum>
        </package>
        <package name="skopeo" version="1.6.2" release="9.module_el8.9.0+3711+04fcca5e.alma.1" epoch="2" arch="s390x" src="skopeo-1.6.2-9.module_el8.9.0+3711+04fcca5e.alma.1.src.rpm">
          <filename>skopeo-1.6.2-9.module_el8.9.0+3711+04fcca5e.alma.1.s390x.rpm</filename>
          <sum type="sha256">83e70dba3ed8a068e6efca3969c6e143359c72881a95881ba4004d09539053f7</sum>
        </package>
        <package name="netavark" version="1.0.1" release="38.module_el8.9.0+3627+db8ec155" epoch="2" arch="s390x" src="containers-common-1-38.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>netavark-1.0.1-38.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">96369473b0af8c0668bbaab115f37a3eaaf018ddd042d90b4cd1891954dc0bda</sum>
        </package>
        <package name="conmon" version="2.1.4" release="2.module_el8.9.0+3687+dcd7ef8f" epoch="2" arch="s390x" src="conmon-2.1.4-2.module_el8.9.0+3687+dcd7ef8f.src.rpm">
          <filename>conmon-2.1.4-2.module_el8.9.0+3687+dcd7ef8f.s390x.rpm</filename>
          <sum type="sha256">a243410e8da3e228dbeef571c31bce2256062f5786cf4dde6e7ab51c1edf7279</sum>
        </package>
        <package name="crun" version="1.8.7" release="1.module_el8.9.0+3683+33eb0feb" epoch="0" arch="s390x" src="crun-1.8.7-1.module_el8.9.0+3683+33eb0feb.src.rpm">
          <filename>crun-1.8.7-1.module_el8.9.0+3683+33eb0feb.s390x.rpm</filename>
          <sum type="sha256">a5bead3eccd97d3324391d9bbb99d8e8cae5e3e408b641a7d8a26b935b19393e</sum>
        </package>
        <package name="container-selinux" version="2.205.0" release="3.module_el8.9.0+3627+db8ec155" epoch="2" arch="noarch" src="container-selinux-2.205.0-3.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>container-selinux-2.205.0-3.module_el8.9.0+3627+db8ec155.noarch.rpm</filename>
          <sum type="sha256">a79efe804a83f4463008df090115d03d27f7a89b56063410939fa11c6025c398</sum>
        </package>
        <package name="podman-remote" version="4.0.2" release="26.module_el8.9.0+3722+7fd8ab2b.alma.1" epoch="2" arch="s390x" src="podman-4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1.src.rpm">
          <filename>podman-remote-4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1.s390x.rpm</filename>
          <sum type="sha256">b4eb56386ecee4c4aaabeeef107c67cc685954661d59bd1251a88dcdf94bedeb</sum>
        </package>
        <package name="aardvark-dns" version="1.0.1" release="38.module_el8.9.0+3627+db8ec155" epoch="2" arch="s390x" src="containers-common-1-38.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>aardvark-dns-1.0.1-38.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">b74f5f3d7125aab41b62a1440e4a9d6db11ac82b22312437f944e9a2563ad3d8</sum>
        </package>
        <package name="criu" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>criu-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">c08a42b3160aaaca1d8eb6f81df59b8ea0a45448fd676479d2cae70b46600d46</sum>
        </package>
        <package name="podman-plugins" version="4.0.2" release="26.module_el8.9.0+3722+7fd8ab2b.alma.1" epoch="2" arch="s390x" src="podman-4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1.src.rpm">
          <filename>podman-plugins-4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1.s390x.rpm</filename>
          <sum type="sha256">c65a4ed3bdf212ec594e5aaa93cb583729a8ca9b3360e3a09784e3962547720d</sum>
        </package>
        <package name="containernetworking-plugins" version="1.1.1" release="6.module_el8.9.0+3711+04fcca5e" epoch="1" arch="s390x" src="containernetworking-plugins-1.1.1-6.module_el8.9.0+3711+04fcca5e.src.rpm">
          <filename>containernetworking-plugins-1.1.1-6.module_el8.9.0+3711+04fcca5e.s390x.rpm</filename>
          <sum type="sha256">dc50c895f185c1e7e731dd743a506eae294ea586f3f57362d8d39e88ae985dab</sum>
        </package>
        <package name="toolbox" version="0.0.99.4" release="5.module_el8.9.0+3627+db8ec155" epoch="0" arch="s390x" src="toolbox-0.0.99.4-5.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>toolbox-0.0.99.4-5.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">dea080dc9abeebb066d991b64b5a8f7d667befa81b5ae983cb3b3acca30d626f</sum>
        </package>
        <package name="criu-libs" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>criu-libs-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">e4c16247d9bcf785747fb00cd48e60e73f98ce6fcb5202032c264dfb343a7bce</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.4" release="5.module_el8.9.0+3627+db8ec155" epoch="0" arch="s390x" src="toolbox-0.0.99.4-5.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>toolbox-tests-0.0.99.4-5.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">e9c564f21054028335b29a43cc179070a0218effbcadd66b0d4d56f9e188fbeb</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="1.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="libslirp-4.4.0-1.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>libslirp-4.4.0-1.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">f2c8aa7fab8501dbdf33f68a74cb5600af266839424a6d637732ac248a58edc7</sum>
        </package>
        <package name="podman-docker" version="4.0.2" release="26.module_el8.9.0+3722+7fd8ab2b.alma.1" epoch="2" arch="noarch" src="podman-4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1.src.rpm">
          <filename>podman-docker-4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1.noarch.rpm</filename>
          <sum type="sha256">f551926a1fb3711d9a724178301343a112b2e63eec3d98adf2a901bb41606a4d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0752</id>
    <title>Important: container-tools:rhel8 security update</title>
    <issued date="2024-02-08 00:00:00"/>
    <updated date="2024-02-12 09:52:44"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>container-tools:rhel8 security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* runc: file descriptor leak (CVE-2024-21626)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0752" id="RHSA-2024:0752" type="rhsa" title="RHSA-2024:0752"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21626" id="CVE-2024-21626" type="cve" title="CVE-2024-21626"/>
      <reference href="https://bugzilla.redhat.com/2258725" id="2258725" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0752.html" id="ALSA-2024:0752" type="self" title="ALSA-2024:0752"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="container-tools" stream="rhel8" version="8090020231018100244" context="20125149" arch="s390x"/>
        <package name="skopeo-tests" version="1.13.3" release="3.module_el8.9.0+3717+81096349" epoch="2" arch="s390x" src="skopeo-1.13.3-3.module_el8.9.0+3717+81096349.src.rpm">
          <filename>skopeo-tests-1.13.3-3.module_el8.9.0+3717+81096349.s390x.rpm</filename>
          <sum type="sha256">049d36590b2452f5aea35c0578ac82209e9520dc0296a443e1bec295b218bf31</sum>
        </package>
        <package name="crun" version="1.8.7" release="1.module_el8.9.0+3643+9234dc3b" epoch="0" arch="s390x" src="crun-1.8.7-1.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>crun-1.8.7-1.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">0c7ca1a17f578d9f13aa6a06266ba01976e82bce2b8bbedc36c663a6bd0f4d2d</sum>
        </package>
        <package name="podman-gvproxy" version="4.6.1" release="8.module_el8.9.0+3717+81096349" epoch="3" arch="s390x" src="podman-4.6.1-8.module_el8.9.0+3717+81096349.src.rpm">
          <filename>podman-gvproxy-4.6.1-8.module_el8.9.0+3717+81096349.s390x.rpm</filename>
          <sum type="sha256">16cce29ab6d1a6f5a4d60213bb7dd3ae71a16db16507462886210d7f8cb27927</sum>
        </package>
        <package name="conmon" version="2.1.8" release="1.module_el8.9.0+3643+9234dc3b" epoch="3" arch="s390x" src="conmon-2.1.8-1.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>conmon-2.1.8-1.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">17bbcf221a9a6d29fa50b8f589ef96664baf4247819692a9a2de4edc353282aa</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="1.module_el8.8.0+3615+3543c705" epoch="0" arch="s390x" src="libslirp-4.4.0-1.module_el8.8.0+3615+3543c705.src.rpm">
          <filename>libslirp-4.4.0-1.module_el8.8.0+3615+3543c705.s390x.rpm</filename>
          <sum type="sha256">26dbf69e6f53dc63a9e4cc2da4b96e267a65b7fccd7b92775d7641f8ccf215e1</sum>
        </package>
        <package name="cockpit-podman" version="75" release="1.module_el8.9.0+3643+9234dc3b" epoch="0" arch="noarch" src="cockpit-podman-75-1.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>cockpit-podman-75-1.module_el8.9.0+3643+9234dc3b.noarch.rpm</filename>
          <sum type="sha256">3ae90cff135ddbea6c044f08f9c866530630268244c5b9c22c2b80da8163f85c</sum>
        </package>
        <package name="udica" version="0.2.6" release="20.module_el8.8.0+3615+3543c705" epoch="0" arch="noarch" src="udica-0.2.6-20.module_el8.8.0+3615+3543c705.src.rpm">
          <filename>udica-0.2.6-20.module_el8.8.0+3615+3543c705.noarch.rpm</filename>
          <sum type="sha256">3c6eca5d4da56513a3c6905e61d4117684d6e67c2cfa6362f19dc36321ca9301</sum>
        </package>
        <package name="criu-devel" version="3.18" release="4.module_el8.9.0+3643+9234dc3b" epoch="0" arch="s390x" src="criu-3.18-4.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>criu-devel-3.18-4.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">3cefbafc355b9914ca58f711c72db5c09d7bc7d6c9a5db23cddf65010e6b9e86</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="1.module_el8.8.0+3615+3543c705" epoch="0" arch="s390x" src="libslirp-4.4.0-1.module_el8.8.0+3615+3543c705.src.rpm">
          <filename>libslirp-devel-4.4.0-1.module_el8.8.0+3615+3543c705.s390x.rpm</filename>
          <sum type="sha256">43f3367becc9258121351339da9138dcd3aecc8c00061abb4f912ecbf5af85df</sum>
        </package>
        <package name="podman-docker" version="4.6.1" release="8.module_el8.9.0+3717+81096349" epoch="3" arch="noarch" src="podman-4.6.1-8.module_el8.9.0+3717+81096349.src.rpm">
          <filename>podman-docker-4.6.1-8.module_el8.9.0+3717+81096349.noarch.rpm</filename>
          <sum type="sha256">5b74d56faf22dcf3c0f844b16690f257cdbb01fa981d3c5564c47f84513137f8</sum>
        </package>
        <package name="netavark" version="1.7.0" release="2.module_el8.9.0+3717+81096349" epoch="2" arch="s390x" src="netavark-1.7.0-2.module_el8.9.0+3717+81096349.src.rpm">
          <filename>netavark-1.7.0-2.module_el8.9.0+3717+81096349.s390x.rpm</filename>
          <sum type="sha256">5ba9a823bb6d25b2f716cedf689f0e56c0c1bb11ee4c5a3c1aeb1ed845be96e1</sum>
        </package>
        <package name="python3-criu" version="3.18" release="4.module_el8.9.0+3643+9234dc3b" epoch="0" arch="s390x" src="criu-3.18-4.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>python3-criu-3.18-4.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">603cace748355416972f35ae9066b87fe822f483dfc2d93884628794c44997d1</sum>
        </package>
        <package name="containers-common" version="1" release="71.module_el8.9.0+3717+81096349" epoch="2" arch="s390x" src="containers-common-1-71.module_el8.9.0+3717+81096349.src.rpm">
          <filename>containers-common-1-71.module_el8.9.0+3717+81096349.s390x.rpm</filename>
          <sum type="sha256">6c7f9618a1832a053c633e85bf88f668a6fb0d0c44edf8ad3c612bbb5b7fa936</sum>
        </package>
        <package name="aardvark-dns" version="1.7.0" release="1.module_el8.9.0+3657+d86e192f" epoch="2" arch="s390x" src="aardvark-dns-1.7.0-1.module_el8.9.0+3657+d86e192f.src.rpm">
          <filename>aardvark-dns-1.7.0-1.module_el8.9.0+3657+d86e192f.s390x.rpm</filename>
          <sum type="sha256">70aa732bf836db90d4cf9a8c4242c53fd4cc0044d379b2f2e1bd2caaec49876b</sum>
        </package>
        <package name="runc" version="1.1.12" release="1.module_el8.9.0+3717+81096349" epoch="1" arch="s390x" src="runc-1.1.12-1.module_el8.9.0+3717+81096349.src.rpm">
          <filename>runc-1.1.12-1.module_el8.9.0+3717+81096349.s390x.rpm</filename>
          <sum type="sha256">71bd2b9412ead10e01659001c24c5566c28ff059bde2caa34990c770cca06493</sum>
        </package>
        <package name="toolbox" version="0.0.99.4" release="5.module_el8.9.0+3643+9234dc3b" epoch="0" arch="s390x" src="toolbox-0.0.99.4-5.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>toolbox-0.0.99.4-5.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">7f722cacf86c8a62afae98d6082b4de7f54289bd1c9a7fbde6083fc183e05596</sum>
        </package>
        <package name="podman" version="4.6.1" release="8.module_el8.9.0+3717+81096349" epoch="3" arch="s390x" src="podman-4.6.1-8.module_el8.9.0+3717+81096349.src.rpm">
          <filename>podman-4.6.1-8.module_el8.9.0+3717+81096349.s390x.rpm</filename>
          <sum type="sha256">8b655875e4946558e3a7f3bc6fa17067e2a75ce789b5b3951f7b18a78d613d62</sum>
        </package>
        <package name="podman-tests" version="4.6.1" release="8.module_el8.9.0+3717+81096349" epoch="3" arch="s390x" src="podman-4.6.1-8.module_el8.9.0+3717+81096349.src.rpm">
          <filename>podman-tests-4.6.1-8.module_el8.9.0+3717+81096349.s390x.rpm</filename>
          <sum type="sha256">99bda1ebb60868bcf25ac13fc0d0ca1bee115b892ceeee0acc6134c03b229d02</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.9" release="1.module_el8.9.0+3643+9234dc3b" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.9-1.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.9-1.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">9cb153e3a53c22560cf4f3e9d8b2ac18538e00739b2ccc048444bed08c786b2a</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.4" release="5.module_el8.9.0+3643+9234dc3b" epoch="0" arch="s390x" src="toolbox-0.0.99.4-5.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>toolbox-tests-0.0.99.4-5.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">9d0ab2a03159997a4b44762dafaf15d9ca002f85757942cbd60917de360b55b4</sum>
        </package>
        <package name="podman-catatonit" version="4.6.1" release="8.module_el8.9.0+3717+81096349" epoch="3" arch="s390x" src="podman-4.6.1-8.module_el8.9.0+3717+81096349.src.rpm">
          <filename>podman-catatonit-4.6.1-8.module_el8.9.0+3717+81096349.s390x.rpm</filename>
          <sum type="sha256">a5c7f44b8a1e15f401a7664176428c78b85df110a70c72c078d599cd09cb6a46</sum>
        </package>
        <package name="buildah" version="1.31.3" release="3.module_el8.9.0+3717+81096349" epoch="1" arch="s390x" src="buildah-1.31.3-3.module_el8.9.0+3717+81096349.src.rpm">
          <filename>buildah-1.31.3-3.module_el8.9.0+3717+81096349.s390x.rpm</filename>
          <sum type="sha256">ac471a4629c5f605fc879c1ab779c9556d963e2d26992f157cfbd2aaf3715c3d</sum>
        </package>
        <package name="criu-libs" version="3.18" release="4.module_el8.9.0+3643+9234dc3b" epoch="0" arch="s390x" src="criu-3.18-4.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>criu-libs-3.18-4.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">ae82eca0706c9d945a6d28628dc08af90966d8dd56c9609e11639606844ba90e</sum>
        </package>
        <package name="containernetworking-plugins" version="1.3.0" release="8.module_el8.9.0+3717+81096349" epoch="1" arch="s390x" src="containernetworking-plugins-1.3.0-8.module_el8.9.0+3717+81096349.src.rpm">
          <filename>containernetworking-plugins-1.3.0-8.module_el8.9.0+3717+81096349.s390x.rpm</filename>
          <sum type="sha256">b2d3ffc016f9dab31e54f187a3fc6eeca9a811b2db7a061f795db8e738092a2f</sum>
        </package>
        <package name="python3-podman" version="4.6.0" release="2.module_el8.9.0+3717+81096349" epoch="0" arch="noarch" src="python-podman-4.6.0-2.module_el8.9.0+3717+81096349.src.rpm">
          <filename>python3-podman-4.6.0-2.module_el8.9.0+3717+81096349.noarch.rpm</filename>
          <sum type="sha256">b8821733ce3ae3443ab203d988633ad405bf6f108f16e3f51de1ad3945237435</sum>
        </package>
        <package name="container-selinux" version="2.221.0" release="1.module_el8.9.0+3643+9234dc3b" epoch="2" arch="noarch" src="container-selinux-2.221.0-1.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>container-selinux-2.221.0-1.module_el8.9.0+3643+9234dc3b.noarch.rpm</filename>
          <sum type="sha256">b995544a6519b352c72fc28716ba3c7c69dab864e5328056d5ea5b21ced2185a</sum>
        </package>
        <package name="slirp4netns" version="1.2.1" release="1.module_el8.9.0+3643+9234dc3b" epoch="0" arch="s390x" src="slirp4netns-1.2.1-1.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>slirp4netns-1.2.1-1.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">bad736abd2bcb68bb98f52ef0c3d460fa0db0730c49a4dca98b820964c0838fa</sum>
        </package>
        <package name="fuse-overlayfs" version="1.12" release="1.module_el8.9.0+3643+9234dc3b" epoch="0" arch="s390x" src="fuse-overlayfs-1.12-1.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>fuse-overlayfs-1.12-1.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">bfd8e44217b967b18fafebcf536754d9f13628dd8328d62104ef5434c5572cd6</sum>
        </package>
        <package name="podman-remote" version="4.6.1" release="8.module_el8.9.0+3717+81096349" epoch="3" arch="s390x" src="podman-4.6.1-8.module_el8.9.0+3717+81096349.src.rpm">
          <filename>podman-remote-4.6.1-8.module_el8.9.0+3717+81096349.s390x.rpm</filename>
          <sum type="sha256">c8a41bd0df0130166ffc8c35e0113043ae972ba3fc2d818a79820d879454f157</sum>
        </package>
        <package name="podman-plugins" version="4.6.1" release="8.module_el8.9.0+3717+81096349" epoch="3" arch="s390x" src="podman-4.6.1-8.module_el8.9.0+3717+81096349.src.rpm">
          <filename>podman-plugins-4.6.1-8.module_el8.9.0+3717+81096349.s390x.rpm</filename>
          <sum type="sha256">eb692cd1a5f317f85a6ffff9c65b7a000bbb8c5bd87e7ea426c042959960decd</sum>
        </package>
        <package name="skopeo" version="1.13.3" release="3.module_el8.9.0+3717+81096349" epoch="2" arch="s390x" src="skopeo-1.13.3-3.module_el8.9.0+3717+81096349.src.rpm">
          <filename>skopeo-1.13.3-3.module_el8.9.0+3717+81096349.s390x.rpm</filename>
          <sum type="sha256">f5f1628ceec4dbd312049a3c853fdfa1eec3fd7ae821dddf4108778cc80bd26b</sum>
        </package>
        <package name="criu" version="3.18" release="4.module_el8.9.0+3643+9234dc3b" epoch="0" arch="s390x" src="criu-3.18-4.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>criu-3.18-4.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">fbd024ef6932bb2dd95b208e75fc68f16b512136eea6920d39e9ff55216f24b6</sum>
        </package>
        <package name="buildah-tests" version="1.31.3" release="3.module_el8.9.0+3717+81096349" epoch="1" arch="s390x" src="buildah-1.31.3-3.module_el8.9.0+3717+81096349.src.rpm">
          <filename>buildah-tests-1.31.3-3.module_el8.9.0+3717+81096349.s390x.rpm</filename>
          <sum type="sha256">fd93e92be1d9b4fec6d9c78e3d0c76d8b2cd7e29eefcca766af4a8f5d475eb06</sum>
        </package>
        <package name="crit" version="3.18" release="4.module_el8.9.0+3643+9234dc3b" epoch="0" arch="s390x" src="criu-3.18-4.module_el8.9.0+3643+9234dc3b.src.rpm">
          <filename>crit-3.18-4.module_el8.9.0+3643+9234dc3b.s390x.rpm</filename>
          <sum type="sha256">fe7e61b434de6925a0923e1b84f6aa96f955e23b7bc4b0e16e7f311fe7580170</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0768</id>
    <title>Moderate: libmaxminddb security update</title>
    <issued date="2024-02-12 00:00:00"/>
    <updated date="2024-02-12 10:04:42"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libmaxminddb security update</summary>
    <description>The libmaxminddb package contains the MaxMind DB library.

Security Fix(es):

* libmaxminddb: improper initialization in dump_entry_data_list() in maxminddb.c (CVE-2020-28241)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0768" id="RHSA-2024:0768" type="rhsa" title="RHSA-2024:0768"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-28241" id="CVE-2020-28241" type="cve" title="CVE-2020-28241"/>
      <reference href="https://bugzilla.redhat.com/1895379" id="1895379" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0768.html" id="ALSA-2024:0768" type="self" title="ALSA-2024:0768"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="libmaxminddb" version="1.2.0" release="10.el8_9.1" epoch="0" arch="s390x" src="libmaxminddb-1.2.0-10.el8_9.1.src.rpm">
          <filename>libmaxminddb-1.2.0-10.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">9cfcd311c53d3572974d3be5b13be48984d307280feb9c33bf621d3c56be7354</sum>
        </package>
        <package name="libmaxminddb-devel" version="1.2.0" release="10.el8_9.1" epoch="0" arch="s390x" src="libmaxminddb-1.2.0-10.el8_9.1.src.rpm">
          <filename>libmaxminddb-devel-1.2.0-10.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">d548fd2a44cc6fe66328349be64e3e99d43d32fc36acdd898684e56956bc3615</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0769</id>
    <title>Moderate: tcpdump security update</title>
    <issued date="2024-02-12 00:00:00"/>
    <updated date="2024-02-12 12:35:42"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>tcpdump security update</summary>
    <description>The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.

Security Fix(es):

* tcpslice: use-after-free in extract_slice() (CVE-2021-41043)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0769" id="RHSA-2024:0769" type="rhsa" title="RHSA-2024:0769"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-41043" id="CVE-2021-41043" type="cve" title="CVE-2021-41043"/>
      <reference href="https://bugzilla.redhat.com/2040392" id="2040392" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0769.html" id="ALSA-2024:0769" type="self" title="ALSA-2024:0769"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="tcpdump" version="4.9.3" release="3.el8_9.1.alma.1" epoch="14" arch="s390x" src="tcpdump-4.9.3-3.el8_9.1.alma.1.src.rpm">
          <filename>tcpdump-4.9.3-3.el8_9.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">082bd763bfe48770e1481ab36ab85febf6e02b44f05c10883beac3a977aa5a9b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0786</id>
    <title>Moderate: nss security update</title>
    <issued date="2024-02-12 00:00:00"/>
    <updated date="2024-02-14 10:42:14"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nss security update</summary>
    <description>Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.

Security Fix(es):

* nss: vulnerable to Minerva side-channel information leak (CVE-2023-6135)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0786" id="RHSA-2024:0786" type="rhsa" title="RHSA-2024:0786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6135" id="CVE-2023-6135" type="cve" title="CVE-2023-6135"/>
      <reference href="https://bugzilla.redhat.com/2249906" id="2249906" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0786.html" id="ALSA-2024:0786" type="self" title="ALSA-2024:0786"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="nss-util-devel" version="3.90.0" release="6.el8_9" epoch="0" arch="s390x" src="nss-3.90.0-6.el8_9.src.rpm">
          <filename>nss-util-devel-3.90.0-6.el8_9.s390x.rpm</filename>
          <sum type="sha256">1610a03099f335d7f8ed2e97f7dd476935e71acb8f065ed4c8bcfadf80233b47</sum>
        </package>
        <package name="nss-softokn-devel" version="3.90.0" release="6.el8_9" epoch="0" arch="s390x" src="nss-3.90.0-6.el8_9.src.rpm">
          <filename>nss-softokn-devel-3.90.0-6.el8_9.s390x.rpm</filename>
          <sum type="sha256">3d169c80f66820130c34eef9a1eceac875d5c50b68da8ff747224a40bfbc4574</sum>
        </package>
        <package name="nss-softokn-freebl-devel" version="3.90.0" release="6.el8_9" epoch="0" arch="s390x" src="nss-3.90.0-6.el8_9.src.rpm">
          <filename>nss-softokn-freebl-devel-3.90.0-6.el8_9.s390x.rpm</filename>
          <sum type="sha256">5b59c78493149f1f24ae40720f5a301741bc90170accd343b8c28e904ed2e2d9</sum>
        </package>
        <package name="nss-util" version="3.90.0" release="6.el8_9" epoch="0" arch="s390x" src="nss-3.90.0-6.el8_9.src.rpm">
          <filename>nss-util-3.90.0-6.el8_9.s390x.rpm</filename>
          <sum type="sha256">67d888fc736986a5836771ab354bccc4c7ab0af17f2d238cebca430281a38483</sum>
        </package>
        <package name="nss-tools" version="3.90.0" release="6.el8_9" epoch="0" arch="s390x" src="nss-3.90.0-6.el8_9.src.rpm">
          <filename>nss-tools-3.90.0-6.el8_9.s390x.rpm</filename>
          <sum type="sha256">86f7ec11227afd0400e930b4458669ec29647e9c77f7d70a3117bb1a57b093b6</sum>
        </package>
        <package name="nss" version="3.90.0" release="6.el8_9" epoch="0" arch="s390x" src="nss-3.90.0-6.el8_9.src.rpm">
          <filename>nss-3.90.0-6.el8_9.s390x.rpm</filename>
          <sum type="sha256">9d28324fffbb943ddb6366bf3bfac350cd7a5d4b7ffe0fe2f15bfe19e0342426</sum>
        </package>
        <package name="nss-softokn" version="3.90.0" release="6.el8_9" epoch="0" arch="s390x" src="nss-3.90.0-6.el8_9.src.rpm">
          <filename>nss-softokn-3.90.0-6.el8_9.s390x.rpm</filename>
          <sum type="sha256">b96e96aaff2921d569e542b7fd467c00393662e62a32ca193b3d32cff919885d</sum>
        </package>
        <package name="nss-softokn-freebl" version="3.90.0" release="6.el8_9" epoch="0" arch="s390x" src="nss-3.90.0-6.el8_9.src.rpm">
          <filename>nss-softokn-freebl-3.90.0-6.el8_9.s390x.rpm</filename>
          <sum type="sha256">bc1689f6f34b1c26ac4f1b6143ff78d9fb76f90d52dcb0a0b070d41003bef9f8</sum>
        </package>
        <package name="nss-sysinit" version="3.90.0" release="6.el8_9" epoch="0" arch="s390x" src="nss-3.90.0-6.el8_9.src.rpm">
          <filename>nss-sysinit-3.90.0-6.el8_9.s390x.rpm</filename>
          <sum type="sha256">e51f348039ce93ecb374888d56516a6dd044385ee9d651d76a15541c6b1bbf81</sum>
        </package>
        <package name="nss-devel" version="3.90.0" release="6.el8_9" epoch="0" arch="s390x" src="nss-3.90.0-6.el8_9.src.rpm">
          <filename>nss-devel-3.90.0-6.el8_9.s390x.rpm</filename>
          <sum type="sha256">eb3105969dd47d0c2845446f951b9de65fc08b35b5a31bb801426e32757404db</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0806</id>
    <title>Important: dotnet7.0 security update</title>
    <issued date="2024-02-13 00:00:00"/>
    <updated date="2024-02-15 10:05:08"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.116 and .NET Runtime 7.0.16.

Security Fix(es):

* dotnet: Denial of Service in SignalR server (CVE-2024-21386)
* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0806" id="RHSA-2024:0806" type="rhsa" title="RHSA-2024:0806"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21386" id="CVE-2024-21386" type="cve" title="CVE-2024-21386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21404" id="CVE-2024-21404" type="cve" title="CVE-2024-21404"/>
      <reference href="https://bugzilla.redhat.com/2263085" id="2263085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263086" id="2263086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0806.html" id="ALSA-2024:0806" type="self" title="ALSA-2024:0806"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="dotnet-runtime-7.0" version="7.0.16" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.116-1.el8_9.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.16-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">13b2c5ef9cc03747e2d7d52374a399f626d983c6e09c87d755545336bd9c7603</sum>
        </package>
        <package name="dotnet-apphost-pack-7.0" version="7.0.16" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.116-1.el8_9.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.16-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">677518920795e623f9fc38d6278c9200036340235c48b1d31d72351886f518a4</sum>
        </package>
        <package name="dotnet-targeting-pack-7.0" version="7.0.16" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.116-1.el8_9.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.16-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">6c188aee788980efd5d67c04130321a160ced396c9251c873ec38eb447820ba2</sum>
        </package>
        <package name="dotnet-templates-7.0" version="7.0.116" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.116-1.el8_9.src.rpm">
          <filename>dotnet-templates-7.0-7.0.116-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">b815c7726aff4d03a05ce6b4d00924ecb97c58b38c5c6ffca745091ff752b9a1</sum>
        </package>
        <package name="aspnetcore-runtime-7.0" version="7.0.16" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.116-1.el8_9.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.16-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">ca08bafc24132f75823fceebaf002a2603976c2d999a7d63712dfbdce3f70006</sum>
        </package>
        <package name="dotnet-sdk-7.0" version="7.0.116" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.116-1.el8_9.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.116-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">e663684c1467cb2290e49526f10363eb196749c289cf7fdc6669c1300445eb49</sum>
        </package>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.16" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.116-1.el8_9.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.16-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">f5be42bbde7950074a90d51956bece434e71523eeb1e048956e7e632ca2e929c</sum>
        </package>
        <package name="dotnet-hostfxr-7.0" version="7.0.16" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.116-1.el8_9.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.16-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">fc20e68ac24fa162172df4d5357d0247f31f79b5079f7ee6996c22fcbc08fd1d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0808</id>
    <title>Important: dotnet6.0 security update</title>
    <issued date="2024-02-13 00:00:00"/>
    <updated date="2024-02-15 09:08:21"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.127 and .NET Runtime 6.0.27.

Security Fix(es):

* dotnet: Denial of Service in SignalR server (CVE-2024-21386)
* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0808" id="RHSA-2024:0808" type="rhsa" title="RHSA-2024:0808"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21386" id="CVE-2024-21386" type="cve" title="CVE-2024-21386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21404" id="CVE-2024-21404" type="cve" title="CVE-2024-21404"/>
      <reference href="https://bugzilla.redhat.com/2263085" id="2263085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263086" id="2263086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0808.html" id="ALSA-2024:0808" type="self" title="ALSA-2024:0808"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.27" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.127-1.el8_9.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.27-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">4a2d0ec1eea79f1ad3164c3158ca6748d5463051473622de17e01c1815716628</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.27" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.127-1.el8_9.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.27-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">878e8dfaf64ed08601d9efe2da536b5f795e53d61843136a653bab736a0f885c</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.27" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.127-1.el8_9.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.27-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">88410416c89e04c3632771e0a8a4bf404710e2ca1f3f7f265a0f2e7a81f2b171</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.127" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.127-1.el8_9.src.rpm">
          <filename>dotnet-templates-6.0-6.0.127-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">8a2107c1301a95c5a521bc43504f00178a035b8e7636668a9c2cf586105aaff2</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.127" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.127-1.el8_9.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.127-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">99432e3010000eab22df3d9e8f2aee3fb3b4ce0cacf0b73ce4973e117f44efeb</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.27" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.127-1.el8_9.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.27-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">dafc12ceb22bbfbc51db97dbb71d5cdd7bcec4a048807f48e04ed74103d6488e</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.27" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.127-1.el8_9.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.27-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">f104180b9c7a224fc8745e35e5fd1a60593d0afdf4983fd17a575fea7c0186eb</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.27" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.127-1.el8_9.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.27-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">fea1be3096c204732e775a021f39d8ce360f7d2e8aac1898c985968e9e79273a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0827</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-02-15 00:00:00"/>
    <updated date="2024-02-16 10:14:32"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.102 and .NET Runtime 8.0.2.

Security Fix(es):

* dotnet: Denial of Service in SignalR server (CVE-2024-21386)
* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0827" id="RHSA-2024:0827" type="rhsa" title="RHSA-2024:0827"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21386" id="CVE-2024-21386" type="cve" title="CVE-2024-21386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21404" id="CVE-2024-21404" type="cve" title="CVE-2024-21404"/>
      <reference href="https://bugzilla.redhat.com/2263085" id="2263085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263086" id="2263086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0827.html" id="ALSA-2024:0827" type="self" title="ALSA-2024:0827"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="dotnet-templates-8.0" version="8.0.102" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el8_9.src.rpm">
          <filename>dotnet-templates-8.0-8.0.102-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">44c5ad496bd92e8176c5cfd5dabb1522c7c515e5d89ce470f30e275898466b53</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.2" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el8_9.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.2-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">55253b88043f8a2ea28faf1d27fc094b47186152b9d37210a1a5c0e708044172</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.2" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el8_9.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.2-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">6dfa297509cb769a5f31383e8d6c2032e9dc6d9c9312ebcee1f26561bd9e0fa3</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.2" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el8_9.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.2-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">75ece8dc83b0034a9f31714d1ec6dccc6399637eae6db4bd679eaf2f49a85e0a</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="8.0.102" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el8_9.src.rpm">
          <filename>netstandard-targeting-pack-2.1-8.0.102-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">842616ad5a8afae1f0f395f6b3d687877d3fcb35b1fa2fa69c056a4265370c8c</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.2" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el8_9.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.2-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">8e48e6dbf58cb83e789e73a3a92465f860d2e8c416d883ffe88b568e1677d3db</sum>
        </package>
        <package name="dotnet" version="8.0.102" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el8_9.src.rpm">
          <filename>dotnet-8.0.102-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">a185fad5e7437103ff6ac2b40c57c7123c6f37de4f240bd8b2131524526d98b6</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.102" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el8_9.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.102-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">a73ed5f8eaaeb07729e524f25d42accfb2a834aca3aeaa7c54e26c0a16c69de2</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.2" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el8_9.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.2-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">ae81def92b9f5e6a51fe12b1e70b4e5022eb5172c0f86426b1ff7571fe6846ee</sum>
        </package>
        <package name="dotnet-host" version="8.0.2" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el8_9.src.rpm">
          <filename>dotnet-host-8.0.2-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">cfacd41a6d09368191de93049e3a9801996aff75381ec63fe0dda127ad24d042</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.2" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el8_9.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.2-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">e4beed7c0e37052df2ae4f9e8ec25f89261d6dd01cf54cfe6ebea9237a39b737</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0861</id>
    <title>Important: gimp:2.8 security update</title>
    <issued date="2024-02-19 00:00:00"/>
    <updated date="2024-02-22 20:14:15"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gimp:2.8 security update</summary>
    <description>The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.

Security Fix(es):

* gimp: PSD buffer overflow RCE (CVE-2023-44442)
* gimp: psp off-by-one RCE (CVE-2023-44444)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0861" id="RHSA-2024:0861" type="rhsa" title="RHSA-2024:0861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44442" id="CVE-2023-44442" type="cve" title="CVE-2023-44442"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44444" id="CVE-2023-44444" type="cve" title="CVE-2023-44444"/>
      <reference href="https://bugzilla.redhat.com/2249942" id="2249942" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2249946" id="2249946" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0861.html" id="ALSA-2024:0861" type="self" title="ALSA-2024:0861"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="gimp" stream="2.8" version="8000020191210085034" context="77fc8825" arch="s390x"/>
        <package name="pygtk2-devel" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="s390x" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-devel-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">42ea8b58abfff83cebc7a09a7f6f264b168a95782decbb03b4fcfef37fd7c062</sum>
        </package>
        <package name="pygtk2" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="s390x" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">43c790ef899908821a64cfad4af33097d1a9d9351a75d63d45e4363e0d91eec8</sum>
        </package>
        <package name="gimp" version="2.8.22" release="25.module_el8.9.0+3725+d1441900" epoch="2" arch="s390x" src="gimp-2.8.22-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>gimp-2.8.22-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">44472702d5f9198e4850dfa17fbe850864ef2f71800ac04e225d36424aacffba</sum>
        </package>
        <package name="pygobject2-codegen" version="2.28.7" release="4.module_el8.6.0+3053+ee77682c" epoch="0" arch="s390x" src="pygobject2-2.28.7-4.module_el8.6.0+3053+ee77682c.src.rpm">
          <filename>pygobject2-codegen-2.28.7-4.module_el8.6.0+3053+ee77682c.s390x.rpm</filename>
          <sum type="sha256">654c3fec6c0981ed3d27af8ce61db63f7ad42622d5a16c8f382efcecaad984f2</sum>
        </package>
        <package name="pygobject2" version="2.28.7" release="4.module_el8.6.0+3053+ee77682c" epoch="0" arch="s390x" src="pygobject2-2.28.7-4.module_el8.6.0+3053+ee77682c.src.rpm">
          <filename>pygobject2-2.28.7-4.module_el8.6.0+3053+ee77682c.s390x.rpm</filename>
          <sum type="sha256">66aa615a3f122df9dbe58f3f53af6323a433f4aa82c097b72f2f74909717d127</sum>
        </package>
        <package name="gimp-libs" version="2.8.22" release="25.module_el8.9.0+3725+d1441900" epoch="2" arch="s390x" src="gimp-2.8.22-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>gimp-libs-2.8.22-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">750ce6ac84250481690ddda7321ab85d4503da447fcd215d4464f4cc0af6ecc8</sum>
        </package>
        <package name="pygtk2-codegen" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="s390x" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-codegen-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">91402fea22feef9d15400358a93ae5d2ff0b95b332edfbae2245ac5846848476</sum>
        </package>
        <package name="python2-cairo" version="1.16.3" release="6.module_el8.6.0+3053+ee77682c" epoch="0" arch="s390x" src="python2-pycairo-1.16.3-6.module_el8.6.0+3053+ee77682c.src.rpm">
          <filename>python2-cairo-1.16.3-6.module_el8.6.0+3053+ee77682c.s390x.rpm</filename>
          <sum type="sha256">bbb48bf204fd327311765e437bb9240af682b2956dd132b14b994638cae39813</sum>
        </package>
        <package name="pygtk2-doc" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="noarch" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-doc-2.24.0-25.module_el8.9.0+3725+d1441900.noarch.rpm</filename>
          <sum type="sha256">bec32577bca5233d67a34af1ef0ae0d1ca15f8896607b22d94cc18d8d4c93d70</sum>
        </package>
        <package name="python2-cairo-devel" version="1.16.3" release="6.module_el8.6.0+3053+ee77682c" epoch="0" arch="s390x" src="python2-pycairo-1.16.3-6.module_el8.6.0+3053+ee77682c.src.rpm">
          <filename>python2-cairo-devel-1.16.3-6.module_el8.6.0+3053+ee77682c.s390x.rpm</filename>
          <sum type="sha256">c20cfc05e65aa0ef0f53c053760397008d28e98485a92233b9bdda498ea477ac</sum>
        </package>
        <package name="gimp-devel-tools" version="2.8.22" release="25.module_el8.9.0+3725+d1441900" epoch="2" arch="s390x" src="gimp-2.8.22-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>gimp-devel-tools-2.8.22-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">c59244c101ad464aa4e215a47e104f02aa7ae2a4827d2981a30ae7466a7ff72a</sum>
        </package>
        <package name="pygobject2-doc" version="2.28.7" release="4.module_el8.6.0+3053+ee77682c" epoch="0" arch="s390x" src="pygobject2-2.28.7-4.module_el8.6.0+3053+ee77682c.src.rpm">
          <filename>pygobject2-doc-2.28.7-4.module_el8.6.0+3053+ee77682c.s390x.rpm</filename>
          <sum type="sha256">e537c96016fe47c0ba5f78f97838185e8b5bce691951bea2efb1a000da3025be</sum>
        </package>
        <package name="pygobject2-devel" version="2.28.7" release="4.module_el8.6.0+3053+ee77682c" epoch="0" arch="s390x" src="pygobject2-2.28.7-4.module_el8.6.0+3053+ee77682c.src.rpm">
          <filename>pygobject2-devel-2.28.7-4.module_el8.6.0+3053+ee77682c.s390x.rpm</filename>
          <sum type="sha256">ef3de81facf1f86c7cc1b8e5fda35805b7a1163b5dbe650c94fe642ff9946a54</sum>
        </package>
        <package name="gimp-devel" version="2.8.22" release="25.module_el8.9.0+3725+d1441900" epoch="2" arch="s390x" src="gimp-2.8.22-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>gimp-devel-2.8.22-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">f536e685fb88d2b6846ae5f60bd83c09e90ec9a6cbd6338d1573d871915a126b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0887</id>
    <title>Moderate: go-toolset:rhel8 security update</title>
    <issued date="2024-02-20 00:00:00"/>
    <updated date="2024-02-22 20:03:21"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>go-toolset:rhel8 security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. 

Security Fix(es):

* golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326)
* golang: cmd/go: Protocol Fallback when fetching modules (CVE-2023-45285)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0887" id="RHSA-2024:0887" type="rhsa" title="RHSA-2024:0887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39326" id="CVE-2023-39326" type="cve" title="CVE-2023-39326"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45285" id="CVE-2023-45285" type="cve" title="CVE-2023-45285"/>
      <reference href="https://bugzilla.redhat.com/2253323" id="2253323" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253330" id="2253330" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0887.html" id="ALSA-2024:0887" type="self" title="ALSA-2024:0887"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="go-toolset" stream="rhel8" version="8090020240221114844" context="9edba152" arch="s390x"/>
        <package name="golang-src" version="1.20.12" release="2.module_el8.9.0+3728+f1d47c6f" epoch="0" arch="noarch" src="golang-1.20.12-2.module_el8.9.0+3728+f1d47c6f.src.rpm">
          <filename>golang-src-1.20.12-2.module_el8.9.0+3728+f1d47c6f.noarch.rpm</filename>
          <sum type="sha256">4b2529a8fec201a8b0eb862980a7b8cbebad1b79b2dd3767c1f59278fda99ad6</sum>
        </package>
        <package name="golang-docs" version="1.20.12" release="2.module_el8.9.0+3728+f1d47c6f" epoch="0" arch="noarch" src="golang-1.20.12-2.module_el8.9.0+3728+f1d47c6f.src.rpm">
          <filename>golang-docs-1.20.12-2.module_el8.9.0+3728+f1d47c6f.noarch.rpm</filename>
          <sum type="sha256">55beb2cc2b7eea7d42de72537d232bab18d6494e3819125ebdf7b0ab2aa5957f</sum>
        </package>
        <package name="golang-tests" version="1.20.12" release="2.module_el8.9.0+3728+f1d47c6f" epoch="0" arch="noarch" src="golang-1.20.12-2.module_el8.9.0+3728+f1d47c6f.src.rpm">
          <filename>golang-tests-1.20.12-2.module_el8.9.0+3728+f1d47c6f.noarch.rpm</filename>
          <sum type="sha256">6abcd2e55053affff3fd5cec68dc037431d1826d7fef90626ad7b7ab1daf90db</sum>
        </package>
        <package name="golang" version="1.20.12" release="2.module_el8.9.0+3728+f1d47c6f" epoch="0" arch="s390x" src="golang-1.20.12-2.module_el8.9.0+3728+f1d47c6f.src.rpm">
          <filename>golang-1.20.12-2.module_el8.9.0+3728+f1d47c6f.s390x.rpm</filename>
          <sum type="sha256">7260bc2ae83e3a4ca3c3f665ec8dae377b326fbb58cc509954dbf6bafbc44b3e</sum>
        </package>
        <package name="go-toolset" version="1.20.12" release="1.module_el8.9.0+3728+f1d47c6f" epoch="0" arch="s390x" src="go-toolset-1.20.12-1.module_el8.9.0+3728+f1d47c6f.src.rpm">
          <filename>go-toolset-1.20.12-1.module_el8.9.0+3728+f1d47c6f.s390x.rpm</filename>
          <sum type="sha256">7faca76560a577de35bc3154a7837075efd9c8d65ac26e99d125c851bf194b8d</sum>
        </package>
        <package name="golang-misc" version="1.20.12" release="2.module_el8.9.0+3728+f1d47c6f" epoch="0" arch="noarch" src="golang-1.20.12-2.module_el8.9.0+3728+f1d47c6f.src.rpm">
          <filename>golang-misc-1.20.12-2.module_el8.9.0+3728+f1d47c6f.noarch.rpm</filename>
          <sum type="sha256">99b16ffb898703debec3c40606698f6a6a8111c7151fc892e33beb8d28d06667</sum>
        </package>
        <package name="golang-bin" version="1.20.12" release="2.module_el8.9.0+3728+f1d47c6f" epoch="0" arch="s390x" src="golang-1.20.12-2.module_el8.9.0+3728+f1d47c6f.src.rpm">
          <filename>golang-bin-1.20.12-2.module_el8.9.0+3728+f1d47c6f.s390x.rpm</filename>
          <sum type="sha256">e858a1dd7612cfba0be9637a037275c75136f5e2159f4478f011685e85ca434e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0888</id>
    <title>Low: edk2 security update</title>
    <issued date="2024-02-20 00:00:00"/>
    <updated date="2024-02-22 19:52:37"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>edk2 security update</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. 

Security Fix(es):

* openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0888" id="RHSA-2024:0888" type="rhsa" title="RHSA-2024:0888"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3446" id="CVE-2023-3446" type="cve" title="CVE-2023-3446"/>
      <reference href="https://bugzilla.redhat.com/2224962" id="2224962" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0888.html" id="ALSA-2024:0888" type="self" title="ALSA-2024:0888"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="edk2-ovmf" version="20220126gitbb1bba3d77" release="6.el8_9.3" epoch="0" arch="noarch" src="edk2-20220126gitbb1bba3d77-6.el8_9.3.src.rpm">
          <filename>edk2-ovmf-20220126gitbb1bba3d77-6.el8_9.3.noarch.rpm</filename>
          <sum type="sha256">252350e47c9a33e7c02c73e31f667935061a09496b7add2200546999c028ed10</sum>
        </package>
        <package name="edk2-aarch64" version="20220126gitbb1bba3d77" release="6.el8_9.3" epoch="0" arch="noarch" src="edk2-20220126gitbb1bba3d77-6.el8_9.3.src.rpm">
          <filename>edk2-aarch64-20220126gitbb1bba3d77-6.el8_9.3.noarch.rpm</filename>
          <sum type="sha256">614a1f9dd86cba18d98d43351c80471118ca5b54d7345cd888f64f328573926b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0889</id>
    <title>Moderate: oniguruma security update</title>
    <issued date="2024-02-20 00:00:00"/>
    <updated date="2024-02-22 19:31:36"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>oniguruma security update</summary>
    <description>Oniguruma is a regular expressions library that supports a variety of character encodings. 

Security Fix(es):

* oniguruma: Use-after-free in onig_new_deluxe() in regext.c (CVE-2019-13224)
* oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c (CVE-2019-16163)
* oniguruma: integer overflow in search_in_range function in regexec.c leads to out-of-bounds read (CVE-2019-19012)
* oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c (CVE-2019-19203)
* oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c (CVE-2019-19204)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0889" id="RHSA-2024:0889" type="rhsa" title="RHSA-2024:0889"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-13224" id="CVE-2019-13224" type="cve" title="CVE-2019-13224"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-16163" id="CVE-2019-16163" type="cve" title="CVE-2019-16163"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-19012" id="CVE-2019-19012" type="cve" title="CVE-2019-19012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-19203" id="CVE-2019-19203" type="cve" title="CVE-2019-19203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-19204" id="CVE-2019-19204" type="cve" title="CVE-2019-19204"/>
      <reference href="https://bugzilla.redhat.com/1728970" id="1728970" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1768997" id="1768997" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1802051" id="1802051" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1802061" id="1802061" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1802068" id="1802068" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0889.html" id="ALSA-2024:0889" type="self" title="ALSA-2024:0889"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="oniguruma" version="6.8.2" release="2.1.el8_9" epoch="0" arch="s390x" src="oniguruma-6.8.2-2.1.el8_9.src.rpm">
          <filename>oniguruma-6.8.2-2.1.el8_9.s390x.rpm</filename>
          <sum type="sha256">767741fec9d655be5714e68e8a8fdf766d570cb71beadb91d8db0af00290e7b8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0893</id>
    <title>Important: python-pillow security update</title>
    <issued date="2024-02-20 00:00:00"/>
    <updated date="2024-02-22 19:23:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python-pillow security update</summary>
    <description>The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities.

Security Fix(es):

* pillow: Arbitrary Code Execution via the environment parameter (CVE-2023-50447)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0893" id="RHSA-2024:0893" type="rhsa" title="RHSA-2024:0893"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50447" id="CVE-2023-50447" type="cve" title="CVE-2023-50447"/>
      <reference href="https://bugzilla.redhat.com/2259479" id="2259479" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0893.html" id="ALSA-2024:0893" type="self" title="ALSA-2024:0893"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="python3-pillow" version="5.1.1" release="18.el8_9.1.alma.1" epoch="0" arch="s390x" src="python-pillow-5.1.1-18.el8_9.1.alma.1.src.rpm">
          <filename>python3-pillow-5.1.1-18.el8_9.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">58e5bafacc7cbd7a291843f0369e27b2d029afd084be8afbc62c29bd3f0dd668</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0894</id>
    <title>Moderate: mysql:8.0 security update</title>
    <issued date="2024-02-20 00:00:00"/>
    <updated date="2024-02-28 16:26:23"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql:8.0 security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

* mysql: InnoDB unspecified vulnerability (CPU Apr 2023) (CVE-2023-21911)
* mysql: Server: DDL unspecified vulnerability (CPU Apr 2023) (CVE-2023-21919, CVE-2023-21929, CVE-2023-21933)
* mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21920, CVE-2023-21935, CVE-2023-21945, CVE-2023-21946, CVE-2023-21976, CVE-2023-21977, CVE-2023-21982)
* mysql: Server: Components Services unspecified vulnerability (CPU Apr 2023) (CVE-2023-21940, CVE-2023-21947, CVE-2023-21962)
* mysql: Server: Partition unspecified vulnerability (CPU Apr 2023) (CVE-2023-21953, CVE-2023-21955)
* mysql: Server: JSON unspecified vulnerability (CPU Apr 2023) (CVE-2023-21966)
* mysql: Server: DML unspecified vulnerability (CPU Apr 2023) (CVE-2023-21972)
* mysql: Client programs unspecified vulnerability (CPU Apr 2023) (CVE-2023-21980)
* mysql: Server: Replication unspecified vulnerability (CPU Jul 2023) (CVE-2023-22005, CVE-2023-22007, CVE-2023-22057)
* mysql: InnoDB unspecified vulnerability (CPU Jul 2023) (CVE-2023-22008)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2023) (CVE-2023-22032, CVE-2023-22059, CVE-2023-22064, CVE-2023-22065, CVE-2023-22070, CVE-2023-22078, CVE-2023-22079, CVE-2023-22092, CVE-2023-22103, CVE-2023-22110, CVE-2023-22112)
* mysql: InnoDB unspecified vulnerability (CPU Jul 2023) (CVE-2023-22033)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2023) (CVE-2023-22046, CVE-2023-22054, CVE-2023-22056)
* mysql: Client programs unspecified vulnerability (CPU Jul 2023) (CVE-2023-22053)
* mysql: Server: DDL unspecified vulnerability (CPU Jul 2023) (CVE-2023-22058)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2023) (CVE-2023-22066, CVE-2023-22068, CVE-2023-22084, CVE-2023-22097, CVE-2023-22104, CVE-2023-22114)
* mysql: Server: UDF unspecified vulnerability (CPU Oct 2023) (CVE-2023-22111)
* mysql: Server: DML unspecified vulnerability (CPU Oct 2023) (CVE-2023-22115)
* mysql: Server: RAPID unspecified vulnerability (CPU Jan 2024) (CVE-2024-20960)
* mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2024) (CVE-2024-20963)
* mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2024) (CVE-2024-20964)
* mysql: Server: Replication unspecified vulnerability (CPU Jan 2024) (CVE-2024-20967)
* mysql: Server: Options unspecified vulnerability (CPU Jan 2024) (CVE-2024-20968)
* mysql: Server: DDL unspecified vulnerability (CPU Jan 2024) (CVE-2024-20969)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2024) (CVE-2024-20961, CVE-2024-20962, CVE-2024-20965, CVE-2024-20966, CVE-2024-20970, CVE-2024-20971, CVE-2024-20972, CVE-2024-20973, CVE-2024-20974, CVE-2024-20976, CVE-2024-20977, CVE-2024-20978, CVE-2024-20982)
* mysql: Server: DDL unspecified vulnerability (CPU Jan 2024) (CVE-2024-20981)
* mysql: Server: DML unspecified vulnerability (CPU Jan 2024) (CVE-2024-20983)
* mysql: Server : Security : Firewall unspecified vulnerability (CPU Jan 2024) (CVE-2024-20984)
* mysql: Server: UDF unspecified vulnerability (CPU Jan 2024) (CVE-2024-20985)
* zstd: mysql: buffer overrun in util.c (CVE-2022-4899)
* mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2023) (CVE-2023-22038)
* mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2023) (CVE-2023-22048)
* mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2023) (CVE-2023-22113)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Fix for MySQL bug #33630199 in 8.0.32 introduces regression when --set-gtid-purged=OFF (AlmaLinux-22452)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0894" id="RHSA-2024:0894" type="rhsa" title="RHSA-2024:0894"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4899" id="CVE-2022-4899" type="cve" title="CVE-2022-4899"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21911" id="CVE-2023-21911" type="cve" title="CVE-2023-21911"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21919" id="CVE-2023-21919" type="cve" title="CVE-2023-21919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21920" id="CVE-2023-21920" type="cve" title="CVE-2023-21920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21929" id="CVE-2023-21929" type="cve" title="CVE-2023-21929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21933" id="CVE-2023-21933" type="cve" title="CVE-2023-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21935" id="CVE-2023-21935" type="cve" title="CVE-2023-21935"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21940" id="CVE-2023-21940" type="cve" title="CVE-2023-21940"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21945" id="CVE-2023-21945" type="cve" title="CVE-2023-21945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21946" id="CVE-2023-21946" type="cve" title="CVE-2023-21946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21947" id="CVE-2023-21947" type="cve" title="CVE-2023-21947"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21953" id="CVE-2023-21953" type="cve" title="CVE-2023-21953"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21955" id="CVE-2023-21955" type="cve" title="CVE-2023-21955"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21962" id="CVE-2023-21962" type="cve" title="CVE-2023-21962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21966" id="CVE-2023-21966" type="cve" title="CVE-2023-21966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21972" id="CVE-2023-21972" type="cve" title="CVE-2023-21972"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21976" id="CVE-2023-21976" type="cve" title="CVE-2023-21976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21977" id="CVE-2023-21977" type="cve" title="CVE-2023-21977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21980" id="CVE-2023-21980" type="cve" title="CVE-2023-21980"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21982" id="CVE-2023-21982" type="cve" title="CVE-2023-21982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22005" id="CVE-2023-22005" type="cve" title="CVE-2023-22005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22007" id="CVE-2023-22007" type="cve" title="CVE-2023-22007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22008" id="CVE-2023-22008" type="cve" title="CVE-2023-22008"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22032" id="CVE-2023-22032" type="cve" title="CVE-2023-22032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22033" id="CVE-2023-22033" type="cve" title="CVE-2023-22033"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22038" id="CVE-2023-22038" type="cve" title="CVE-2023-22038"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22046" id="CVE-2023-22046" type="cve" title="CVE-2023-22046"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22048" id="CVE-2023-22048" type="cve" title="CVE-2023-22048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22053" id="CVE-2023-22053" type="cve" title="CVE-2023-22053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22054" id="CVE-2023-22054" type="cve" title="CVE-2023-22054"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22056" id="CVE-2023-22056" type="cve" title="CVE-2023-22056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22057" id="CVE-2023-22057" type="cve" title="CVE-2023-22057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22058" id="CVE-2023-22058" type="cve" title="CVE-2023-22058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22059" id="CVE-2023-22059" type="cve" title="CVE-2023-22059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22064" id="CVE-2023-22064" type="cve" title="CVE-2023-22064"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22065" id="CVE-2023-22065" type="cve" title="CVE-2023-22065"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22066" id="CVE-2023-22066" type="cve" title="CVE-2023-22066"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22068" id="CVE-2023-22068" type="cve" title="CVE-2023-22068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22070" id="CVE-2023-22070" type="cve" title="CVE-2023-22070"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22078" id="CVE-2023-22078" type="cve" title="CVE-2023-22078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22079" id="CVE-2023-22079" type="cve" title="CVE-2023-22079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22084" id="CVE-2023-22084" type="cve" title="CVE-2023-22084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22092" id="CVE-2023-22092" type="cve" title="CVE-2023-22092"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22097" id="CVE-2023-22097" type="cve" title="CVE-2023-22097"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22103" id="CVE-2023-22103" type="cve" title="CVE-2023-22103"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22104" id="CVE-2023-22104" type="cve" title="CVE-2023-22104"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22110" id="CVE-2023-22110" type="cve" title="CVE-2023-22110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22111" id="CVE-2023-22111" type="cve" title="CVE-2023-22111"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22112" id="CVE-2023-22112" type="cve" title="CVE-2023-22112"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22113" id="CVE-2023-22113" type="cve" title="CVE-2023-22113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22114" id="CVE-2023-22114" type="cve" title="CVE-2023-22114"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22115" id="CVE-2023-22115" type="cve" title="CVE-2023-22115"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20960" id="CVE-2024-20960" type="cve" title="CVE-2024-20960"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20961" id="CVE-2024-20961" type="cve" title="CVE-2024-20961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20962" id="CVE-2024-20962" type="cve" title="CVE-2024-20962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20963" id="CVE-2024-20963" type="cve" title="CVE-2024-20963"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20964" id="CVE-2024-20964" type="cve" title="CVE-2024-20964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20965" id="CVE-2024-20965" type="cve" title="CVE-2024-20965"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20966" id="CVE-2024-20966" type="cve" title="CVE-2024-20966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20967" id="CVE-2024-20967" type="cve" title="CVE-2024-20967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20968" id="CVE-2024-20968" type="cve" title="CVE-2024-20968"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20969" id="CVE-2024-20969" type="cve" title="CVE-2024-20969"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20970" id="CVE-2024-20970" type="cve" title="CVE-2024-20970"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20971" id="CVE-2024-20971" type="cve" title="CVE-2024-20971"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20972" id="CVE-2024-20972" type="cve" title="CVE-2024-20972"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20973" id="CVE-2024-20973" type="cve" title="CVE-2024-20973"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20974" id="CVE-2024-20974" type="cve" title="CVE-2024-20974"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20976" id="CVE-2024-20976" type="cve" title="CVE-2024-20976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20977" id="CVE-2024-20977" type="cve" title="CVE-2024-20977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20978" id="CVE-2024-20978" type="cve" title="CVE-2024-20978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20981" id="CVE-2024-20981" type="cve" title="CVE-2024-20981"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20982" id="CVE-2024-20982" type="cve" title="CVE-2024-20982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20983" id="CVE-2024-20983" type="cve" title="CVE-2024-20983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20984" id="CVE-2024-20984" type="cve" title="CVE-2024-20984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20985" id="CVE-2024-20985" type="cve" title="CVE-2024-20985"/>
      <reference href="https://bugzilla.redhat.com/2179864" id="2179864" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188109" id="2188109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188113" id="2188113" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188115" id="2188115" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188116" id="2188116" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188117" id="2188117" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188118" id="2188118" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188119" id="2188119" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188120" id="2188120" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188121" id="2188121" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188122" id="2188122" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188123" id="2188123" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188124" id="2188124" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188125" id="2188125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188127" id="2188127" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188128" id="2188128" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188129" id="2188129" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188130" id="2188130" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188131" id="2188131" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188132" id="2188132" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224211" id="2224211" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224212" id="2224212" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224213" id="2224213" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224214" id="2224214" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224215" id="2224215" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224216" id="2224216" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224217" id="2224217" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224218" id="2224218" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224219" id="2224219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224220" id="2224220" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224221" id="2224221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224222" id="2224222" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245014" id="2245014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245015" id="2245015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245016" id="2245016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245017" id="2245017" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245018" id="2245018" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245019" id="2245019" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245020" id="2245020" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245021" id="2245021" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245022" id="2245022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245023" id="2245023" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245024" id="2245024" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245026" id="2245026" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245027" id="2245027" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245028" id="2245028" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245029" id="2245029" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245030" id="2245030" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245031" id="2245031" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245032" id="2245032" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245033" id="2245033" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245034" id="2245034" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258771" id="2258771" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258772" id="2258772" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258773" id="2258773" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258774" id="2258774" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258775" id="2258775" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258776" id="2258776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258777" id="2258777" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258778" id="2258778" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258779" id="2258779" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258780" id="2258780" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258781" id="2258781" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258782" id="2258782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258783" id="2258783" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258784" id="2258784" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258785" id="2258785" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258787" id="2258787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258788" id="2258788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258789" id="2258789" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258790" id="2258790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258791" id="2258791" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258792" id="2258792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258793" id="2258793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258794" id="2258794" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0894.html" id="ALSA-2024:0894" type="self" title="ALSA-2024:0894"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="mysql-test" version="8.0.36" release="1.module_el8.9.0+3735+82bd6c11" epoch="0" arch="s390x" src="mysql-8.0.36-1.module_el8.9.0+3735+82bd6c11.src.rpm">
          <filename>mysql-test-8.0.36-1.module_el8.9.0+3735+82bd6c11.s390x.rpm</filename>
          <sum type="sha256">04c0d00c6e19bf35ab0bb4686cd1be92f9a2bbb1a7f36548bb58e19c5f0b2636</sum>
        </package>
        <package name="mecab-ipadic" version="2.7.0.20070801" release="16.module_el8.6.0+3340+d764b636" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-16.module_el8.6.0+3340+d764b636.src.rpm">
          <filename>mecab-ipadic-2.7.0.20070801-16.module_el8.6.0+3340+d764b636.s390x.rpm</filename>
          <sum type="sha256">2ecc38dc395cc34bd5a62791f2bb828e7a3970a378a406e6c5a92945d1c69856</sum>
        </package>
        <package name="mysql-errmsg" version="8.0.36" release="1.module_el8.9.0+3735+82bd6c11" epoch="0" arch="s390x" src="mysql-8.0.36-1.module_el8.9.0+3735+82bd6c11.src.rpm">
          <filename>mysql-errmsg-8.0.36-1.module_el8.9.0+3735+82bd6c11.s390x.rpm</filename>
          <sum type="sha256">4bfc6a189938f24e52c78e18d9384c2c52745e885e7cc859e3f40897e28c19fc</sum>
        </package>
        <package name="mysql-common" version="8.0.36" release="1.module_el8.9.0+3735+82bd6c11" epoch="0" arch="s390x" src="mysql-8.0.36-1.module_el8.9.0+3735+82bd6c11.src.rpm">
          <filename>mysql-common-8.0.36-1.module_el8.9.0+3735+82bd6c11.s390x.rpm</filename>
          <sum type="sha256">5434c5c4a4d75966f3a7795f7c5bd8f73a3dbe9855a1b8de7e0ce93e8173b3bb</sum>
        </package>
        <package name="mysql" version="8.0.36" release="1.module_el8.9.0+3735+82bd6c11" epoch="0" arch="s390x" src="mysql-8.0.36-1.module_el8.9.0+3735+82bd6c11.src.rpm">
          <filename>mysql-8.0.36-1.module_el8.9.0+3735+82bd6c11.s390x.rpm</filename>
          <sum type="sha256">79ba3446fe4960d663dce6a5379e6d23f2f48b3bf069e19076a2eaaabbe6e71b</sum>
        </package>
        <package name="mecab-ipadic-EUCJP" version="2.7.0.20070801" release="16.module_el8.6.0+3340+d764b636" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-16.module_el8.6.0+3340+d764b636.src.rpm">
          <filename>mecab-ipadic-EUCJP-2.7.0.20070801-16.module_el8.6.0+3340+d764b636.s390x.rpm</filename>
          <sum type="sha256">85ab51ff2897e18fb0fa62f38a21f7f77c1037510fcb24f6fc7f9580966833ff</sum>
        </package>
        <package name="mecab-devel" version="0.996" release="2.module_el8.6.0+3340+d764b636" epoch="0" arch="s390x" src="mecab-0.996-2.module_el8.6.0+3340+d764b636.src.rpm">
          <filename>mecab-devel-0.996-2.module_el8.6.0+3340+d764b636.s390x.rpm</filename>
          <sum type="sha256">95fbafd6a495d411511dcfabd6b0f0746e44e7a7bcc70330024e0022229ee5d3</sum>
        </package>
        <package name="mecab" version="0.996" release="2.module_el8.6.0+3340+d764b636" epoch="0" arch="s390x" src="mecab-0.996-2.module_el8.6.0+3340+d764b636.src.rpm">
          <filename>mecab-0.996-2.module_el8.6.0+3340+d764b636.s390x.rpm</filename>
          <sum type="sha256">ac9101824269dda084c450648ac939c4c8fc017d05d6f1a13bf138bda748fa52</sum>
        </package>
        <package name="mysql-devel" version="8.0.36" release="1.module_el8.9.0+3735+82bd6c11" epoch="0" arch="s390x" src="mysql-8.0.36-1.module_el8.9.0+3735+82bd6c11.src.rpm">
          <filename>mysql-devel-8.0.36-1.module_el8.9.0+3735+82bd6c11.s390x.rpm</filename>
          <sum type="sha256">b7a5215bfdadeb9e888a2126b27658d5139774c9a3c366f9ecca34fa84a2e804</sum>
        </package>
        <package name="mysql-server" version="8.0.36" release="1.module_el8.9.0+3735+82bd6c11" epoch="0" arch="s390x" src="mysql-8.0.36-1.module_el8.9.0+3735+82bd6c11.src.rpm">
          <filename>mysql-server-8.0.36-1.module_el8.9.0+3735+82bd6c11.s390x.rpm</filename>
          <sum type="sha256">e885f6940993fd5302bf4c716d89a1ef39209a4a63e4c5a2f8c2bbd9221a008a</sum>
        </package>
        <package name="mysql-libs" version="8.0.36" release="1.module_el8.9.0+3735+82bd6c11" epoch="0" arch="s390x" src="mysql-8.0.36-1.module_el8.9.0+3735+82bd6c11.src.rpm">
          <filename>mysql-libs-8.0.36-1.module_el8.9.0+3735+82bd6c11.s390x.rpm</filename>
          <sum type="sha256">f61e4c68ef0bfdf712a603764c4c1bfd59b24b56da6b47cb02bba66b0236fd09</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0955</id>
    <title>Important: firefox security update</title>
    <issued date="2024-02-26 00:00:00"/>
    <updated date="2024-02-28 15:49:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.8.0 ESR.

Security Fix(es):

* Mozilla: Out-of-bounds memory read in networking channels (CVE-2024-1546)
* Mozilla: Alert dialog could have been spoofed on another site (CVE-2024-1547)
* Mozilla: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8 (CVE-2024-1553)
* Mozilla: Fullscreen Notification could have been hidden by select element (CVE-2024-1548)
* Mozilla: Custom cursor could obscure the permission dialog (CVE-2024-1549)
* Mozilla: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants (CVE-2024-1550)
* Mozilla: Multipart HTTP Responses would accept the Set-Cookie header in response parts (CVE-2024-1551)
* Mozilla: Incorrect code generation on 32-bit ARM devices (CVE-2024-1552)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0955" id="RHSA-2024:0955" type="rhsa" title="RHSA-2024:0955"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1546" id="CVE-2024-1546" type="cve" title="CVE-2024-1546"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1547" id="CVE-2024-1547" type="cve" title="CVE-2024-1547"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1548" id="CVE-2024-1548" type="cve" title="CVE-2024-1548"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1549" id="CVE-2024-1549" type="cve" title="CVE-2024-1549"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1550" id="CVE-2024-1550" type="cve" title="CVE-2024-1550"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1551" id="CVE-2024-1551" type="cve" title="CVE-2024-1551"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1552" id="CVE-2024-1552" type="cve" title="CVE-2024-1552"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1553" id="CVE-2024-1553" type="cve" title="CVE-2024-1553"/>
      <reference href="https://bugzilla.redhat.com/2265349" id="2265349" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265350" id="2265350" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265351" id="2265351" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265352" id="2265352" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265353" id="2265353" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265354" id="2265354" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265355" id="2265355" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265356" id="2265356" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0955.html" id="ALSA-2024:0955" type="self" title="ALSA-2024:0955"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="firefox" version="115.8.0" release="1.el8_9.alma" epoch="0" arch="s390x" src="firefox-115.8.0-1.el8_9.alma.src.rpm">
          <filename>firefox-115.8.0-1.el8_9.alma.s390x.rpm</filename>
          <sum type="sha256">6df6ac0879ffa6ec9fc76037ae575745af6158c408be6385948405facc02ba70</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0956</id>
    <title>Important: postgresql:10 security update</title>
    <issued date="2024-02-26 00:00:00"/>
    <updated date="2024-02-28 15:41:58"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:10 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0956" id="RHSA-2024:0956" type="rhsa" title="RHSA-2024:0956"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0985" id="CVE-2024-0985" type="cve" title="CVE-2024-0985"/>
      <reference href="https://bugzilla.redhat.com/2263384" id="2263384" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0956.html" id="ALSA-2024:0956" type="self" title="ALSA-2024:0956"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="postgresql" stream="10" version="8090020240227081132" context="9edba152" arch="s390x"/>
        <package name="postgresql-upgrade" version="10.23" release="4.module_el8.9.0+3736+952d0ed7.alma.1" epoch="0" arch="s390x" src="postgresql-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.src.rpm">
          <filename>postgresql-upgrade-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.s390x.rpm</filename>
          <sum type="sha256">14752c70ed5a3c8a71d062dee047d73e067c101be8a3aa02ee78be5925ad2851</sum>
        </package>
        <package name="postgresql-server-devel" version="10.23" release="4.module_el8.9.0+3736+952d0ed7.alma.1" epoch="0" arch="s390x" src="postgresql-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.src.rpm">
          <filename>postgresql-server-devel-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.s390x.rpm</filename>
          <sum type="sha256">1f331a7e02c75da8c84eb41fc55b89cd9a12975b2888abf18adf0678d9559eea</sum>
        </package>
        <package name="postgresql" version="10.23" release="4.module_el8.9.0+3736+952d0ed7.alma.1" epoch="0" arch="s390x" src="postgresql-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.src.rpm">
          <filename>postgresql-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.s390x.rpm</filename>
          <sum type="sha256">326e2d859af7534a0fd7b8f94797b192df7febb84e39826b7b0abb3c225e4fba</sum>
        </package>
        <package name="postgresql-pltcl" version="10.23" release="4.module_el8.9.0+3736+952d0ed7.alma.1" epoch="0" arch="s390x" src="postgresql-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.src.rpm">
          <filename>postgresql-pltcl-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.s390x.rpm</filename>
          <sum type="sha256">45f938fe3a878d6b9e43d76a2e559c4013dd00dba75156c39764f1f4040beff1</sum>
        </package>
        <package name="postgresql-static" version="10.23" release="4.module_el8.9.0+3736+952d0ed7.alma.1" epoch="0" arch="s390x" src="postgresql-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.src.rpm">
          <filename>postgresql-static-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.s390x.rpm</filename>
          <sum type="sha256">4a0b6a10627b78ffe24abd0d2898c26ea20a42ca0d5b2de44520f6017dceb162</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="10.23" release="4.module_el8.9.0+3736+952d0ed7.alma.1" epoch="0" arch="s390x" src="postgresql-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.src.rpm">
          <filename>postgresql-test-rpm-macros-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.s390x.rpm</filename>
          <sum type="sha256">4c3d2570d7176435e2b018aafe0bda4b0431bc0e77dd5b24a04f0560b7aeff96</sum>
        </package>
        <package name="postgresql-docs" version="10.23" release="4.module_el8.9.0+3736+952d0ed7.alma.1" epoch="0" arch="s390x" src="postgresql-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.src.rpm">
          <filename>postgresql-docs-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.s390x.rpm</filename>
          <sum type="sha256">751ae13fb2f652755d416ca6678889df5a80125ea62a727ea3da461ccd1ee10c</sum>
        </package>
        <package name="postgresql-test" version="10.23" release="4.module_el8.9.0+3736+952d0ed7.alma.1" epoch="0" arch="s390x" src="postgresql-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.src.rpm">
          <filename>postgresql-test-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.s390x.rpm</filename>
          <sum type="sha256">b5f80141bbbfe4512c69304d41453154b8c98f085754aa1f0e5241a4a2357a32</sum>
        </package>
        <package name="postgresql-plperl" version="10.23" release="4.module_el8.9.0+3736+952d0ed7.alma.1" epoch="0" arch="s390x" src="postgresql-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.src.rpm">
          <filename>postgresql-plperl-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.s390x.rpm</filename>
          <sum type="sha256">c76484da40badc1eafef358936cb06af9cb146fdca4efccdbdeffe5c16577167</sum>
        </package>
        <package name="postgresql-plpython3" version="10.23" release="4.module_el8.9.0+3736+952d0ed7.alma.1" epoch="0" arch="s390x" src="postgresql-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.src.rpm">
          <filename>postgresql-plpython3-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.s390x.rpm</filename>
          <sum type="sha256">cdda2da2fb3dac618beae9ba519a4e53a88ac8f4b81aac48ff066c4c29f1a71c</sum>
        </package>
        <package name="postgresql-contrib" version="10.23" release="4.module_el8.9.0+3736+952d0ed7.alma.1" epoch="0" arch="s390x" src="postgresql-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.src.rpm">
          <filename>postgresql-contrib-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.s390x.rpm</filename>
          <sum type="sha256">ea342f8baa6f32280189a5ea0f02e315eec739f516ad51ca9f52d79a63498aa6</sum>
        </package>
        <package name="postgresql-server" version="10.23" release="4.module_el8.9.0+3736+952d0ed7.alma.1" epoch="0" arch="s390x" src="postgresql-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.src.rpm">
          <filename>postgresql-server-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.s390x.rpm</filename>
          <sum type="sha256">eca99b84a05585e48d25b9f8e7e1553fc4cff3296eb8b11448e2154115fc25d0</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="10.23" release="4.module_el8.9.0+3736+952d0ed7.alma.1" epoch="0" arch="s390x" src="postgresql-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.src.rpm">
          <filename>postgresql-upgrade-devel-10.23-4.module_el8.9.0+3736+952d0ed7.alma.1.s390x.rpm</filename>
          <sum type="sha256">f938cdd1e6e29dcd57f8f1158f02b6f529d97122f318010277ccaa2bd7b69e08</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0964</id>
    <title>Important: thunderbird security update</title>
    <issued date="2024-02-26 00:00:00"/>
    <updated date="2024-02-28 15:29:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.8.0.

Security Fix(es):

* Mozilla: Out-of-bounds memory read in networking channels (CVE-2024-1546)
* Mozilla: Alert dialog could have been spoofed on another site (CVE-2024-1547)
* Mozilla: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8 (CVE-2024-1553)
* Mozilla: Fullscreen Notification could have been hidden by select element (CVE-2024-1548)
* Mozilla: Custom cursor could obscure the permission dialog (CVE-2024-1549)
* Mozilla: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants (CVE-2024-1550)
* Mozilla: Multipart HTTP Responses would accept the Set-Cookie header in response parts (CVE-2024-1551)
* Mozilla: Incorrect code generation on 32-bit ARM devices (CVE-2024-1552)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0964" id="RHSA-2024:0964" type="rhsa" title="RHSA-2024:0964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1546" id="CVE-2024-1546" type="cve" title="CVE-2024-1546"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1547" id="CVE-2024-1547" type="cve" title="CVE-2024-1547"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1548" id="CVE-2024-1548" type="cve" title="CVE-2024-1548"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1549" id="CVE-2024-1549" type="cve" title="CVE-2024-1549"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1550" id="CVE-2024-1550" type="cve" title="CVE-2024-1550"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1551" id="CVE-2024-1551" type="cve" title="CVE-2024-1551"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1552" id="CVE-2024-1552" type="cve" title="CVE-2024-1552"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1553" id="CVE-2024-1553" type="cve" title="CVE-2024-1553"/>
      <reference href="https://bugzilla.redhat.com/2265349" id="2265349" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265350" id="2265350" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265351" id="2265351" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265352" id="2265352" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265353" id="2265353" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265354" id="2265354" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265355" id="2265355" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265356" id="2265356" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0964.html" id="ALSA-2024:0964" type="self" title="ALSA-2024:0964"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="thunderbird" version="115.8.0" release="1.el8_9.alma" epoch="0" arch="s390x" src="thunderbird-115.8.0-1.el8_9.alma.src.rpm">
          <filename>thunderbird-115.8.0-1.el8_9.alma.s390x.rpm</filename>
          <sum type="sha256">aca35657bcb9705478c28fa058fc8f9644184ef560f1044ffbdcd6d3d34a023f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0965</id>
    <title>Important: unbound security update</title>
    <issued date="2024-02-26 00:00:00"/>
    <updated date="2024-02-28 15:24:25"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. 

Security Fix(es):

* bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
* bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0965" id="RHSA-2024:0965" type="rhsa" title="RHSA-2024:0965"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50387" id="CVE-2023-50387" type="cve" title="CVE-2023-50387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50868" id="CVE-2023-50868" type="cve" title="CVE-2023-50868"/>
      <reference href="https://bugzilla.redhat.com/2263914" id="2263914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263917" id="2263917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0965.html" id="ALSA-2024:0965" type="self" title="ALSA-2024:0965"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="unbound-devel" version="1.16.2" release="5.el8_9.2" epoch="0" arch="s390x" src="unbound-1.16.2-5.el8_9.2.src.rpm">
          <filename>unbound-devel-1.16.2-5.el8_9.2.s390x.rpm</filename>
          <sum type="sha256">04e9758c9dcbe4ee7caaa094d0ba972d4212e52e0338ef195f54af45760d6f63</sum>
        </package>
        <package name="unbound" version="1.16.2" release="5.el8_9.2" epoch="0" arch="s390x" src="unbound-1.16.2-5.el8_9.2.src.rpm">
          <filename>unbound-1.16.2-5.el8_9.2.s390x.rpm</filename>
          <sum type="sha256">7be8dfecffb88d121d7a44564eeee1e0e36129704cb6f2331438daf1c933958c</sum>
        </package>
        <package name="unbound-libs" version="1.16.2" release="5.el8_9.2" epoch="0" arch="s390x" src="unbound-1.16.2-5.el8_9.2.src.rpm">
          <filename>unbound-libs-1.16.2-5.el8_9.2.s390x.rpm</filename>
          <sum type="sha256">d530500dbfd12f01fdc768d4274e45d83cd85ee9f1f80848bd36b1afefec91a3</sum>
        </package>
        <package name="python3-unbound" version="1.16.2" release="5.el8_9.2" epoch="0" arch="s390x" src="unbound-1.16.2-5.el8_9.2.src.rpm">
          <filename>python3-unbound-1.16.2-5.el8_9.2.s390x.rpm</filename>
          <sum type="sha256">e27bcfa1ce2b93475124d427992f1dd87463a2c2fbb640bf19222dfcff5fecbb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0973</id>
    <title>Important: postgresql:15 security update</title>
    <issued date="2024-02-26 00:00:00"/>
    <updated date="2024-02-28 15:04:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:15 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0973" id="RHSA-2024:0973" type="rhsa" title="RHSA-2024:0973"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0985" id="CVE-2024-0985" type="cve" title="CVE-2024-0985"/>
      <reference href="https://bugzilla.redhat.com/2263384" id="2263384" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0973.html" id="ALSA-2024:0973" type="self" title="ALSA-2024:0973"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="postgresql" stream="15" version="8090020240227081357" context="9edba152" arch="s390x"/>
        <package name="postgres-decoderbufs" version="1.9.7" release="1.Final.module_el8.8.0+3487+43ec1b9f" epoch="0" arch="s390x" src="postgres-decoderbufs-1.9.7-1.Final.module_el8.8.0+3487+43ec1b9f.src.rpm">
          <filename>postgres-decoderbufs-1.9.7-1.Final.module_el8.8.0+3487+43ec1b9f.s390x.rpm</filename>
          <sum type="sha256">055fe6bbecc74f7919f9ec57e1e42bb9eb94476114d930ec210f1efc3108b92d</sum>
        </package>
        <package name="pg_repack" version="1.4.8" release="1.module_el8.8.0+3487+43ec1b9f" epoch="0" arch="s390x" src="pg_repack-1.4.8-1.module_el8.8.0+3487+43ec1b9f.src.rpm">
          <filename>pg_repack-1.4.8-1.module_el8.8.0+3487+43ec1b9f.s390x.rpm</filename>
          <sum type="sha256">081ea0091971a8aa105bd973398a6bd2618e4c4774ddba96fcc6732fea454d53</sum>
        </package>
        <package name="pgaudit" version="1.7.0" release="1.module_el8.8.0+3487+43ec1b9f" epoch="0" arch="s390x" src="pgaudit-1.7.0-1.module_el8.8.0+3487+43ec1b9f.src.rpm">
          <filename>pgaudit-1.7.0-1.module_el8.8.0+3487+43ec1b9f.s390x.rpm</filename>
          <sum type="sha256">12cd22b7d2193b09d54d32baa05dd1b7085110c0332c6a91154d9bebffb96c95</sum>
        </package>
        <package name="postgresql-server-devel" version="15.6" release="1.module_el8.9.0+3739+514705ed.alma.1" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el8.9.0+3739+514705ed.alma.1.src.rpm">
          <filename>postgresql-server-devel-15.6-1.module_el8.9.0+3739+514705ed.alma.1.s390x.rpm</filename>
          <sum type="sha256">21223fb217637ec08d4b18c711642a6cc4bc6c786abf4ad08e3b6d66977b9c8e</sum>
        </package>
        <package name="postgresql-static" version="15.6" release="1.module_el8.9.0+3739+514705ed.alma.1" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el8.9.0+3739+514705ed.alma.1.src.rpm">
          <filename>postgresql-static-15.6-1.module_el8.9.0+3739+514705ed.alma.1.s390x.rpm</filename>
          <sum type="sha256">3efd39c80a9ff7b446fa5c8dfac9dc76b48d0b64e1b67684a7622e6444dbdea3</sum>
        </package>
        <package name="postgresql-contrib" version="15.6" release="1.module_el8.9.0+3739+514705ed.alma.1" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el8.9.0+3739+514705ed.alma.1.src.rpm">
          <filename>postgresql-contrib-15.6-1.module_el8.9.0+3739+514705ed.alma.1.s390x.rpm</filename>
          <sum type="sha256">44a9af6445350645b8e019f2de301c24d452c7e9b1227cba0fcb68d286828e76</sum>
        </package>
        <package name="postgresql-private-devel" version="15.6" release="1.module_el8.9.0+3739+514705ed.alma.1" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el8.9.0+3739+514705ed.alma.1.src.rpm">
          <filename>postgresql-private-devel-15.6-1.module_el8.9.0+3739+514705ed.alma.1.s390x.rpm</filename>
          <sum type="sha256">45bb562146d886cdcd2f9537a45c12e92349495a1165ba91ccc5675ab7d998fe</sum>
        </package>
        <package name="postgresql-docs" version="15.6" release="1.module_el8.9.0+3739+514705ed.alma.1" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el8.9.0+3739+514705ed.alma.1.src.rpm">
          <filename>postgresql-docs-15.6-1.module_el8.9.0+3739+514705ed.alma.1.s390x.rpm</filename>
          <sum type="sha256">582b38224057672be4456396a13f3996f22cd2d3ca74a17197d2b3a34ae9a526</sum>
        </package>
        <package name="postgresql-private-libs" version="15.6" release="1.module_el8.9.0+3739+514705ed.alma.1" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el8.9.0+3739+514705ed.alma.1.src.rpm">
          <filename>postgresql-private-libs-15.6-1.module_el8.9.0+3739+514705ed.alma.1.s390x.rpm</filename>
          <sum type="sha256">5b17435ba552eaecd9e77c240462a6d351db7fabc4c3511975524f1f32f8fcb0</sum>
        </package>
        <package name="postgresql-plpython3" version="15.6" release="1.module_el8.9.0+3739+514705ed.alma.1" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el8.9.0+3739+514705ed.alma.1.src.rpm">
          <filename>postgresql-plpython3-15.6-1.module_el8.9.0+3739+514705ed.alma.1.s390x.rpm</filename>
          <sum type="sha256">72496eea0e1220d180946fc2f233833ea730c1e6072df7249fca04085ae71aa1</sum>
        </package>
        <package name="postgresql" version="15.6" release="1.module_el8.9.0+3739+514705ed.alma.1" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el8.9.0+3739+514705ed.alma.1.src.rpm">
          <filename>postgresql-15.6-1.module_el8.9.0+3739+514705ed.alma.1.s390x.rpm</filename>
          <sum type="sha256">7ab798e9e0aa45afbd50f95ae774ce53dfd5c90402e52ca3b022211469427a9f</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="15.6" release="1.module_el8.9.0+3739+514705ed.alma.1" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el8.9.0+3739+514705ed.alma.1.src.rpm">
          <filename>postgresql-upgrade-devel-15.6-1.module_el8.9.0+3739+514705ed.alma.1.s390x.rpm</filename>
          <sum type="sha256">9a9794394fc896003b529f07dab5a5b949354e6ff94df666e7119786937a2cd3</sum>
        </package>
        <package name="postgresql-server" version="15.6" release="1.module_el8.9.0+3739+514705ed.alma.1" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el8.9.0+3739+514705ed.alma.1.src.rpm">
          <filename>postgresql-server-15.6-1.module_el8.9.0+3739+514705ed.alma.1.s390x.rpm</filename>
          <sum type="sha256">a1e2d74bf306e1378b6ca27e23bba64d3e32f47793289efb05157abc3cf6176b</sum>
        </package>
        <package name="postgresql-upgrade" version="15.6" release="1.module_el8.9.0+3739+514705ed.alma.1" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el8.9.0+3739+514705ed.alma.1.src.rpm">
          <filename>postgresql-upgrade-15.6-1.module_el8.9.0+3739+514705ed.alma.1.s390x.rpm</filename>
          <sum type="sha256">bb1cadfd9ebb7576241a723ed411c3120828837557e7ca88975d075d471a898b</sum>
        </package>
        <package name="postgresql-plperl" version="15.6" release="1.module_el8.9.0+3739+514705ed.alma.1" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el8.9.0+3739+514705ed.alma.1.src.rpm">
          <filename>postgresql-plperl-15.6-1.module_el8.9.0+3739+514705ed.alma.1.s390x.rpm</filename>
          <sum type="sha256">c6f3f0a3e46f9b29d16a2661f37ccac53fa087e60f128cc18fb170af1c8c8993</sum>
        </package>
        <package name="postgresql-test" version="15.6" release="1.module_el8.9.0+3739+514705ed.alma.1" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el8.9.0+3739+514705ed.alma.1.src.rpm">
          <filename>postgresql-test-15.6-1.module_el8.9.0+3739+514705ed.alma.1.s390x.rpm</filename>
          <sum type="sha256">dcc176db2ae3dd6d79af6528c2700b455f6d75c1bdba052e5b90530c0c7761db</sum>
        </package>
        <package name="postgresql-pltcl" version="15.6" release="1.module_el8.9.0+3739+514705ed.alma.1" epoch="0" arch="s390x" src="postgresql-15.6-1.module_el8.9.0+3739+514705ed.alma.1.src.rpm">
          <filename>postgresql-pltcl-15.6-1.module_el8.9.0+3739+514705ed.alma.1.s390x.rpm</filename>
          <sum type="sha256">fc4abf07997230f8ef0ff98ad2613f25fb049e87411598879b824d36c250ab4b</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="15.6" release="1.module_el8.9.0+3739+514705ed.alma.1" epoch="0" arch="noarch" src="postgresql-15.6-1.module_el8.9.0+3739+514705ed.alma.1.src.rpm">
          <filename>postgresql-test-rpm-macros-15.6-1.module_el8.9.0+3739+514705ed.alma.1.noarch.rpm</filename>
          <sum type="sha256">fcc35c77c93b8672a131f9bd29580036d483b82e07489e1919773fff54b9b184</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0974</id>
    <title>Important: postgresql:12 security update</title>
    <issued date="2024-02-26 00:00:00"/>
    <updated date="2024-02-28 14:58:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:12 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0974" id="RHSA-2024:0974" type="rhsa" title="RHSA-2024:0974"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0985" id="CVE-2024-0985" type="cve" title="CVE-2024-0985"/>
      <reference href="https://bugzilla.redhat.com/2263384" id="2263384" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0974.html" id="ALSA-2024:0974" type="self" title="ALSA-2024:0974"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="postgresql" stream="12" version="8090020240227082527" context="9edba152" arch="s390x"/>
        <package name="pgaudit" version="1.4.0" release="7.module_el8.9.0+3740+0e74851f.alma.1" epoch="0" arch="s390x" src="pgaudit-1.4.0-7.module_el8.9.0+3740+0e74851f.alma.1.src.rpm">
          <filename>pgaudit-1.4.0-7.module_el8.9.0+3740+0e74851f.alma.1.s390x.rpm</filename>
          <sum type="sha256">05a6d09d675776fb9ab998aa9fb52890d6c4ecc40957331844fd2c42f555ebca</sum>
        </package>
        <package name="postgresql-plpython3" version="12.18" release="1.module_el8.9.0+3740+0e74851f.alma.1" epoch="0" arch="s390x" src="postgresql-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.src.rpm">
          <filename>postgresql-plpython3-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.s390x.rpm</filename>
          <sum type="sha256">0a704886e27f82de628b76f6df7bd73e9a4a0f3f20a7163d519421b63dd79e6a</sum>
        </package>
        <package name="pg_repack" version="1.4.6" release="3.module_el8.6.0+3094+eb237fb8" epoch="0" arch="s390x" src="pg_repack-1.4.6-3.module_el8.6.0+3094+eb237fb8.src.rpm">
          <filename>pg_repack-1.4.6-3.module_el8.6.0+3094+eb237fb8.s390x.rpm</filename>
          <sum type="sha256">3173a22fefa8d2ea6d0e0a71673c633cd0c0ee550eb4d9620076c269f6532d94</sum>
        </package>
        <package name="postgres-decoderbufs" version="0.10.0" release="2.module_el8.6.0+3094+eb237fb8" epoch="0" arch="s390x" src="postgres-decoderbufs-0.10.0-2.module_el8.6.0+3094+eb237fb8.src.rpm">
          <filename>postgres-decoderbufs-0.10.0-2.module_el8.6.0+3094+eb237fb8.s390x.rpm</filename>
          <sum type="sha256">39539f821d88e471de98cf0a89ec70e2f70c39805aee9d7d6cdbb1cb6bbbc101</sum>
        </package>
        <package name="postgresql-pltcl" version="12.18" release="1.module_el8.9.0+3740+0e74851f.alma.1" epoch="0" arch="s390x" src="postgresql-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.src.rpm">
          <filename>postgresql-pltcl-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.s390x.rpm</filename>
          <sum type="sha256">398ab614f3ba729a4d91d0aec1b88f61094ec8949bd1def2d166ac165d9bee68</sum>
        </package>
        <package name="postgresql-server" version="12.18" release="1.module_el8.9.0+3740+0e74851f.alma.1" epoch="0" arch="s390x" src="postgresql-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.src.rpm">
          <filename>postgresql-server-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.s390x.rpm</filename>
          <sum type="sha256">4b53c494efe141df7de0c4fd06aa61dc102f5ee84c22ed9dc11e2ee85d2c6359</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="12.18" release="1.module_el8.9.0+3740+0e74851f.alma.1" epoch="0" arch="s390x" src="postgresql-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.src.rpm">
          <filename>postgresql-upgrade-devel-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.s390x.rpm</filename>
          <sum type="sha256">4d76336b78bfdc108e275d5aae6c03185acaecb786637c916fc1d870c164347c</sum>
        </package>
        <package name="postgresql-contrib" version="12.18" release="1.module_el8.9.0+3740+0e74851f.alma.1" epoch="0" arch="s390x" src="postgresql-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.src.rpm">
          <filename>postgresql-contrib-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.s390x.rpm</filename>
          <sum type="sha256">5263caa35c0e8f8375aea2a44aed3917e0a83de8ead58ee983b31e064301065f</sum>
        </package>
        <package name="postgresql-docs" version="12.18" release="1.module_el8.9.0+3740+0e74851f.alma.1" epoch="0" arch="s390x" src="postgresql-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.src.rpm">
          <filename>postgresql-docs-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.s390x.rpm</filename>
          <sum type="sha256">5654bce8caf627daa376fa7fd5d0a29b247233bfdfce19104f81d126c03106fb</sum>
        </package>
        <package name="postgresql-upgrade" version="12.18" release="1.module_el8.9.0+3740+0e74851f.alma.1" epoch="0" arch="s390x" src="postgresql-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.src.rpm">
          <filename>postgresql-upgrade-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.s390x.rpm</filename>
          <sum type="sha256">72da885a0407539cf1d6ba447de2db3d0d1b3d604dbe03cd5107357cbe6a4627</sum>
        </package>
        <package name="postgresql-test" version="12.18" release="1.module_el8.9.0+3740+0e74851f.alma.1" epoch="0" arch="s390x" src="postgresql-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.src.rpm">
          <filename>postgresql-test-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.s390x.rpm</filename>
          <sum type="sha256">760ec5f7ea978809319d521c5990dd61a0ac5930760619305fb94b970a967a75</sum>
        </package>
        <package name="postgresql" version="12.18" release="1.module_el8.9.0+3740+0e74851f.alma.1" epoch="0" arch="s390x" src="postgresql-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.src.rpm">
          <filename>postgresql-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.s390x.rpm</filename>
          <sum type="sha256">8f6456e992f8fca352b47e70cae8dc0cdbf2627371bcc4f61f67303cd04bc319</sum>
        </package>
        <package name="postgresql-static" version="12.18" release="1.module_el8.9.0+3740+0e74851f.alma.1" epoch="0" arch="s390x" src="postgresql-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.src.rpm">
          <filename>postgresql-static-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.s390x.rpm</filename>
          <sum type="sha256">96dfc40e853d47d23c679af14b486a3934822dc6eead86b6771593cf1534acb7</sum>
        </package>
        <package name="postgresql-plperl" version="12.18" release="1.module_el8.9.0+3740+0e74851f.alma.1" epoch="0" arch="s390x" src="postgresql-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.src.rpm">
          <filename>postgresql-plperl-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.s390x.rpm</filename>
          <sum type="sha256">9dd205f7a6d41220bbef5cc6bf74b11d702022afa1be6752c7c3f8c2c0df9da1</sum>
        </package>
        <package name="postgresql-server-devel" version="12.18" release="1.module_el8.9.0+3740+0e74851f.alma.1" epoch="0" arch="s390x" src="postgresql-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.src.rpm">
          <filename>postgresql-server-devel-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.s390x.rpm</filename>
          <sum type="sha256">d83fa5998d4f2e4b7aa67a8580b821543f80f2f747e6bb27bef5bde6c7e3eee8</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="12.18" release="1.module_el8.9.0+3740+0e74851f.alma.1" epoch="0" arch="noarch" src="postgresql-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.src.rpm">
          <filename>postgresql-test-rpm-macros-12.18-1.module_el8.9.0+3740+0e74851f.alma.1.noarch.rpm</filename>
          <sum type="sha256">de6dafd650b49f0b510f71df4e1f5bbbb41e7c6ed1639062b15f5b38f715776d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0975</id>
    <title>Important: postgresql:13 security update</title>
    <issued date="2024-02-26 00:00:00"/>
    <updated date="2024-02-28 14:50:37"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:13 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0975" id="RHSA-2024:0975" type="rhsa" title="RHSA-2024:0975"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0985" id="CVE-2024-0985" type="cve" title="CVE-2024-0985"/>
      <reference href="https://bugzilla.redhat.com/2263384" id="2263384" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0975.html" id="ALSA-2024:0975" type="self" title="ALSA-2024:0975"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="postgresql" stream="13" version="8090020240227081307" context="9edba152" arch="s390x"/>
        <package name="postgresql-upgrade-devel" version="13.14" release="1.module_el8.9.0+3738+d55e2165.alma.1" epoch="0" arch="s390x" src="postgresql-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.src.rpm">
          <filename>postgresql-upgrade-devel-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.s390x.rpm</filename>
          <sum type="sha256">0463da6ced6287df974bd68bd172295330d7cca237b954cbb12f3e6606c07fa2</sum>
        </package>
        <package name="postgresql-upgrade" version="13.14" release="1.module_el8.9.0+3738+d55e2165.alma.1" epoch="0" arch="s390x" src="postgresql-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.src.rpm">
          <filename>postgresql-upgrade-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.s390x.rpm</filename>
          <sum type="sha256">20abbb4d2f5512dfc3e42341498ebd419a81f2841044aa0258560dcc012c76fb</sum>
        </package>
        <package name="postgresql-static" version="13.14" release="1.module_el8.9.0+3738+d55e2165.alma.1" epoch="0" arch="s390x" src="postgresql-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.src.rpm">
          <filename>postgresql-static-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.s390x.rpm</filename>
          <sum type="sha256">2455d2972c75d98edf70219e8d02d3939ee65cd9e990d315878c080345f184e7</sum>
        </package>
        <package name="postgresql-contrib" version="13.14" release="1.module_el8.9.0+3738+d55e2165.alma.1" epoch="0" arch="s390x" src="postgresql-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.src.rpm">
          <filename>postgresql-contrib-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.s390x.rpm</filename>
          <sum type="sha256">2ac70a89aa3382c8be00dda6cf270d8c688a7fab6e2ddf2ac9d28113be13f578</sum>
        </package>
        <package name="postgresql-pltcl" version="13.14" release="1.module_el8.9.0+3738+d55e2165.alma.1" epoch="0" arch="s390x" src="postgresql-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.src.rpm">
          <filename>postgresql-pltcl-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.s390x.rpm</filename>
          <sum type="sha256">2ac71d8e0c3cd14915be8c675c567d54c915173f1e1f9d20755aaa61b9e165b9</sum>
        </package>
        <package name="postgresql-plpython3" version="13.14" release="1.module_el8.9.0+3738+d55e2165.alma.1" epoch="0" arch="s390x" src="postgresql-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.src.rpm">
          <filename>postgresql-plpython3-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.s390x.rpm</filename>
          <sum type="sha256">43e245ceee014f35a04e5637b32169ef0420e0101beaadb17b1cb5bf853f4cc2</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="13.14" release="1.module_el8.9.0+3738+d55e2165.alma.1" epoch="0" arch="noarch" src="postgresql-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.src.rpm">
          <filename>postgresql-test-rpm-macros-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.noarch.rpm</filename>
          <sum type="sha256">666f8cfe26be7c6ee624a4bdfbd80523da3bf52eceb725e6af1ffb14f9cf8cfc</sum>
        </package>
        <package name="postgresql-test" version="13.14" release="1.module_el8.9.0+3738+d55e2165.alma.1" epoch="0" arch="s390x" src="postgresql-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.src.rpm">
          <filename>postgresql-test-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.s390x.rpm</filename>
          <sum type="sha256">7a238dc144bea01a22e1cb85894c1470b248a5c7ca24c971d8ec2dd5deb61b5a</sum>
        </package>
        <package name="postgresql-server" version="13.14" release="1.module_el8.9.0+3738+d55e2165.alma.1" epoch="0" arch="s390x" src="postgresql-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.src.rpm">
          <filename>postgresql-server-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.s390x.rpm</filename>
          <sum type="sha256">7f10c6f1883e340750c296d87944308d05f84b6e3352b75a101e285931030e58</sum>
        </package>
        <package name="postgresql" version="13.14" release="1.module_el8.9.0+3738+d55e2165.alma.1" epoch="0" arch="s390x" src="postgresql-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.src.rpm">
          <filename>postgresql-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.s390x.rpm</filename>
          <sum type="sha256">8e20060ecb86b069f08911ab2d90d27cd08ca7ac064194c0f05de1e323d5e036</sum>
        </package>
        <package name="postgresql-plperl" version="13.14" release="1.module_el8.9.0+3738+d55e2165.alma.1" epoch="0" arch="s390x" src="postgresql-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.src.rpm">
          <filename>postgresql-plperl-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.s390x.rpm</filename>
          <sum type="sha256">9c2ef22c5034522c0850db52475b1d0a29d34d6a27da2fc102d80591080a9d9d</sum>
        </package>
        <package name="pgaudit" version="1.5.0" release="1.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="pgaudit-1.5.0-1.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>pgaudit-1.5.0-1.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">a29cba50326b3c78b1cff9ad076eff7837022e71f02d7ec9e918aed69a9c3f35</sum>
        </package>
        <package name="postgres-decoderbufs" version="0.10.0" release="2.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">b11226898b888f8213eefe941cece0f636a08ccce2ceaa8bee2a38e6058ed4f3</sum>
        </package>
        <package name="pg_repack" version="1.4.6" release="3.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="pg_repack-1.4.6-3.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>pg_repack-1.4.6-3.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">c1b386540b304a4de3ff8d840ec35dc9d67ecd1827aa06cd695f06060e8d2ea7</sum>
        </package>
        <package name="postgresql-server-devel" version="13.14" release="1.module_el8.9.0+3738+d55e2165.alma.1" epoch="0" arch="s390x" src="postgresql-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.src.rpm">
          <filename>postgresql-server-devel-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.s390x.rpm</filename>
          <sum type="sha256">ec0945c15c78787839132c16a6cb0091064aabc5806d50c735b1636a34fcf85e</sum>
        </package>
        <package name="postgresql-docs" version="13.14" release="1.module_el8.9.0+3738+d55e2165.alma.1" epoch="0" arch="s390x" src="postgresql-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.src.rpm">
          <filename>postgresql-docs-13.14-1.module_el8.9.0+3738+d55e2165.alma.1.s390x.rpm</filename>
          <sum type="sha256">fe126c61dfdb7622a87324ec6836017e7c7f90b7766e2ddcd8b3f12e29ce8f04</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10219</id>
    <title>Moderate: perl-App-cpanminus:1.7044 security update</title>
    <issued date="2024-11-25 00:00:00"/>
    <updated date="2024-12-02 10:52:39"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>perl-App-cpanminus:1.7044 security update</summary>
    <description>The panminus is a script to get, unpack, build and install modules from CPAN.  

Security Fix(es):  

  * perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution Vulnerability (CVE-2024-45321)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10219" id="RHSA-2024:10219" type="rhsa" title="RHSA-2024:10219"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45321" id="CVE-2024-45321" type="cve" title="CVE-2024-45321"/>
      <reference href="https://bugzilla.redhat.com/2308078" id="2308078" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-10219.html" id="ALSA-2024:10219" type="self" title="ALSA-2024:10219"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="perl-App-cpanminus" stream="1.7044" version="8100020241126083843" context="436af1ae" arch="s390x"/>
        <package name="perl-CPAN-Meta-Check" version="0.014" release="6.module_el8.10.0+3924+8d272be4" epoch="0" arch="noarch" src="perl-CPAN-Meta-Check-0.014-6.module_el8.10.0+3924+8d272be4.src.rpm">
          <filename>perl-CPAN-Meta-Check-0.014-6.module_el8.10.0+3924+8d272be4.noarch.rpm</filename>
          <sum type="sha256">5a6876e3a8c392939dc8bd51c0ca1742d8b6904d697e79d2e8c737648546a114</sum>
        </package>
        <package name="perl-App-cpanminus" version="1.7044" release="6.module_el8.10.0+3924+8d272be4" epoch="0" arch="noarch" src="perl-App-cpanminus-1.7044-6.module_el8.10.0+3924+8d272be4.src.rpm">
          <filename>perl-App-cpanminus-1.7044-6.module_el8.10.0+3924+8d272be4.noarch.rpm</filename>
          <sum type="sha256">c86cf82d68a8e6d7a6b192587b3e0a15b0e6049ad3d74f728e968e8f1b8a0374</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10289</id>
    <title>Moderate: container-tools:rhel8 security update</title>
    <issued date="2024-11-26 00:00:00"/>
    <updated date="2024-12-02 10:50:29"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>container-tools:rhel8 security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.  

Security Fix(es):  

  * golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents (CVE-2021-33198)
  * podman: podman machine spawns gvproxy with port bound to all IPs (CVE-2021-4024)
  * Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) (CVE-2024-9676)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10289" id="RHSA-2024:10289" type="rhsa" title="RHSA-2024:10289"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33198" id="CVE-2021-33198" type="cve" title="CVE-2021-33198"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-4024" id="CVE-2021-4024" type="cve" title="CVE-2021-4024"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9676" id="CVE-2024-9676" type="cve" title="CVE-2024-9676"/>
      <reference href="https://bugzilla.redhat.com/1989575" id="1989575" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2026675" id="2026675" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317467" id="2317467" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-10289.html" id="ALSA-2024:10289" type="self" title="ALSA-2024:10289"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="container-tools" stream="rhel8" version="8100020240813140059" context="20125149" arch="s390x"/>
        <package name="python3-podman" version="4.9.0" release="3.module_el8.10.0+3926+f12484f5" epoch="0" arch="noarch" src="python-podman-4.9.0-3.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>python3-podman-4.9.0-3.module_el8.10.0+3926+f12484f5.noarch.rpm</filename>
          <sum type="sha256">119eec46b531cd96cf21d959534d70f36f5962b5a68ed11889dfadbc1482481f</sum>
        </package>
        <package name="crun" version="1.14.3" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="crun-1.14.3-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>crun-1.14.3-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">1803f41cb3e0828fe770ce7de14a940b9fad458fd84f420baab724674e2041e7</sum>
        </package>
        <package name="netavark" version="1.10.3" release="1.module_el8.10.0+3926+f12484f5" epoch="2" arch="s390x" src="netavark-1.10.3-1.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>netavark-1.10.3-1.module_el8.10.0+3926+f12484f5.s390x.rpm</filename>
          <sum type="sha256">229bc7970f251b961853b29e4f6c9b17e6fd309418b96ea955e2eaeba74fc773</sum>
        </package>
        <package name="skopeo-tests" version="1.14.5" release="3.module_el8.10.0+3876+e55593a8" epoch="2" arch="s390x" src="skopeo-1.14.5-3.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>skopeo-tests-1.14.5-3.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">29a7b74a18e0a1b63825ee2eb5c3f36a2a3971da39a546401e9c9d07b00cd50e</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.10" release="1.module_el8.10.0+3909+6e1c1eb7" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">335953655f25bd1ac71964d14ffc9ab6adaa73033e74e2b3a851b88683283196</sum>
        </package>
        <package name="aardvark-dns" version="1.10.1" release="2.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="s390x" src="aardvark-dns-1.10.1-2.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>aardvark-dns-1.10.1-2.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">33f0e53072f8851c287e97dada126b7e760aa82256964e34ed5d94a5bb61724c</sum>
        </package>
        <package name="buildah-tests" version="1.33.11" release="1.module_el8.10.0+3926+f12484f5" epoch="2" arch="s390x" src="buildah-1.33.11-1.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>buildah-tests-1.33.11-1.module_el8.10.0+3926+f12484f5.s390x.rpm</filename>
          <sum type="sha256">39800ca617b6a37a1aeab8568d973dc3e69000c2c31c343e8ca3f01ad379207f</sum>
        </package>
        <package name="container-selinux" version="2.229.0" release="2.module_el8.10.0+3909+6e1c1eb7" epoch="2" arch="noarch" src="container-selinux-2.229.0-2.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>container-selinux-2.229.0-2.module_el8.10.0+3909+6e1c1eb7.noarch.rpm</filename>
          <sum type="sha256">39df1f8e08cf61f1d3399b9d32cdaa93153cdbd001ff380fa9145a2012d1190c</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="18.module_el8.10.0+3926+f12484f5" epoch="4" arch="s390x" src="podman-4.9.4-18.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>podman-tests-4.9.4-18.module_el8.10.0+3926+f12484f5.s390x.rpm</filename>
          <sum type="sha256">4e9f18a62d3de30bae49522ceaabe9deaa115e01bef609ed11355db87612861c</sum>
        </package>
        <package name="cockpit-podman" version="84.1" release="1.module_el8.10.0+3876+e55593a8" epoch="0" arch="noarch" src="cockpit-podman-84.1-1.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>cockpit-podman-84.1-1.module_el8.10.0+3876+e55593a8.noarch.rpm</filename>
          <sum type="sha256">55b45ab38b4e2f9aba55c370f27cf80f15945bd3f4c400837f83b38782fd38b8</sum>
        </package>
        <package name="buildah" version="1.33.11" release="1.module_el8.10.0+3926+f12484f5" epoch="2" arch="s390x" src="buildah-1.33.11-1.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>buildah-1.33.11-1.module_el8.10.0+3926+f12484f5.s390x.rpm</filename>
          <sum type="sha256">55bad7a8d60ae051123cfc23794a2f2f55adfee71592476292b575c86857f7e4</sum>
        </package>
        <package name="skopeo" version="1.14.5" release="3.module_el8.10.0+3909+6e1c1eb7" epoch="2" arch="s390x" src="skopeo-1.14.5-3.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>skopeo-1.14.5-3.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">58dd688a7d9090c672382ae53059ed98d14b6b4784899787384be0e51ed8e2cd</sum>
        </package>
        <package name="podman-plugins" version="4.9.4" release="18.module_el8.10.0+3926+f12484f5" epoch="4" arch="s390x" src="podman-4.9.4-18.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>podman-plugins-4.9.4-18.module_el8.10.0+3926+f12484f5.s390x.rpm</filename>
          <sum type="sha256">5b8afef538f9cf413c916795c15d9a4a7843543eb7884ac2d39a0c0aa81854a2</sum>
        </package>
        <package name="python3-criu" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>python3-criu-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">632fe45692e3679dbd77ca62f4dd56c66dd4675de7f1874459025927e78d1db3</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="18.module_el8.10.0+3926+f12484f5" epoch="4" arch="s390x" src="podman-4.9.4-18.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>podman-remote-4.9.4-18.module_el8.10.0+3926+f12484f5.s390x.rpm</filename>
          <sum type="sha256">65f7ebcce589bbc6b37893b773cf525c6a89cfaae3f42fda1451785552211f71</sum>
        </package>
        <package name="udica" version="0.2.6" release="21.module_el8.10.0+3926+f12484f5" epoch="0" arch="noarch" src="udica-0.2.6-21.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>udica-0.2.6-21.module_el8.10.0+3926+f12484f5.noarch.rpm</filename>
          <sum type="sha256">6926e34b1965f9f26dd6b35b2d9809b5e337f117e6b333fb99c624461afd91d8</sum>
        </package>
        <package name="podman" version="4.9.4" release="18.module_el8.10.0+3926+f12484f5" epoch="4" arch="s390x" src="podman-4.9.4-18.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>podman-4.9.4-18.module_el8.10.0+3926+f12484f5.s390x.rpm</filename>
          <sum type="sha256">71e01f0811b1f5f6d2100773a62bea592e4d242cd33f27a150048d742eca396e</sum>
        </package>
        <package name="podman-catatonit" version="4.9.4" release="18.module_el8.10.0+3926+f12484f5" epoch="4" arch="s390x" src="podman-4.9.4-18.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>podman-catatonit-4.9.4-18.module_el8.10.0+3926+f12484f5.s390x.rpm</filename>
          <sum type="sha256">76d3986a266783e6c6057dc80c825091d030881ec5090ff37b206fd139f70ba3</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>libslirp-4.4.0-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">7f6ee088719dda6b4abc4b0005f17b1a478bc5a1f5b85602af95ab2379a13ded</sum>
        </package>
        <package name="fuse-overlayfs" version="1.13" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="s390x" src="fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">8118067655696462cee9dfc553f57e4501b089590d837bc88091716914c8d3f5</sum>
        </package>
        <package name="toolbox" version="0.0.99.5" release="2.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>toolbox-0.0.99.5-2.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">8df71d94e465a66228dced33f5189e4789bc2ac13946b5e79a11e8091af4f33e</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="18.module_el8.10.0+3926+f12484f5" epoch="4" arch="noarch" src="podman-4.9.4-18.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>podman-docker-4.9.4-18.module_el8.10.0+3926+f12484f5.noarch.rpm</filename>
          <sum type="sha256">91047cad2d1075064c2e3b58e03c43b13f11b90bed0d330f6c19f097c3558c50</sum>
        </package>
        <package name="containernetworking-plugins" version="1.4.0" release="5.module_el8.10.0+3926+f12484f5" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-5.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>containernetworking-plugins-1.4.0-5.module_el8.10.0+3926+f12484f5.s390x.rpm</filename>
          <sum type="sha256">96f141033d6130580d82b5d49461f6d8e22652fdd3c2eaa5c87741a6c4bdd7f7</sum>
        </package>
        <package name="containers-common" version="1" release="82.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="s390x" src="containers-common-1-82.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>containers-common-1-82.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">98eb0c5785e1d53743858e76ac35aab0b199a918b88c02e20aa6f64cc6f89618</sum>
        </package>
        <package name="crit" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>crit-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">aeb27c5bcec90a9452f93ad79ef0d4f00ecedf4442f32f9bedb481509db12683</sum>
        </package>
        <package name="criu" version="3.18" release="5.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>criu-3.18-5.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">bdaddee931f3746ac7472d9ccee504acd0be805433b3d160b1e7caf8bf361cb8</sum>
        </package>
        <package name="runc" version="1.1.12" release="5.module_el8.10.0+3909+6e1c1eb7" epoch="1" arch="s390x" src="runc-1.1.12-5.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>runc-1.1.12-5.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">bf3ce8a59c28361dc48b0d52763568c605ad7951832de31c2a88d234c8d1926c</sum>
        </package>
        <package name="podman-gvproxy" version="4.9.4" release="18.module_el8.10.0+3926+f12484f5" epoch="4" arch="s390x" src="podman-4.9.4-18.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>podman-gvproxy-4.9.4-18.module_el8.10.0+3926+f12484f5.s390x.rpm</filename>
          <sum type="sha256">c7ed3f0c00f9b1e1267479d9cca961ab95d6c8ff57c432832e9f41354a9f3f03</sum>
        </package>
        <package name="slirp4netns" version="1.2.3" release="1.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="slirp4netns-1.2.3-1.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>slirp4netns-1.2.3-1.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">d750de35a600a89a6edbd8c2178e292766005ce3339a84c33adecfdef70e7a57</sum>
        </package>
        <package name="criu-libs" version="3.18" release="5.module_el8.10.0+3909+6e1c1eb7" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>criu-libs-3.18-5.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">e0d274cf0f5db049af121f476769c0d601e70c7566ea3aec4e608aca5317b4eb</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.5" release="2.module_el8.10.0+3909+6e1c1eb7" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>toolbox-tests-0.0.99.5-2.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">e5fff3c3d6b6f6023e100d0922c2e8096f567b7f5cfbb57efe322eadd2f43465</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="2.module_el8.10.0+3901+4b80ecd7" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>libslirp-devel-4.4.0-2.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">ea8f3e70f2a1a7886cb1abcdb80e7b2ea3cf36a174dc5158142c286d69fae136</sum>
        </package>
        <package name="conmon" version="2.1.10" release="1.module_el8.10.0+3845+87b84552" epoch="3" arch="s390x" src="conmon-2.1.10-1.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>conmon-2.1.10-1.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">f8f7e631b6103852487fcb99e1c6baaf8c5e60e3654c2f5a4bddc238ed708563</sum>
        </package>
        <package name="criu-devel" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>criu-devel-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">ffa71276e65ae92bb9c7b93241ba28ad74337aa5770f3cf3390d73b2552e73ae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10481</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2024-11-27 00:00:00"/>
    <updated date="2024-12-02 10:32:18"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkitgtk: data isolation bypass vulnerability (CVE-2024-44309)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10481" id="RHSA-2024:10481" type="rhsa" title="RHSA-2024:10481"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-44309" id="CVE-2024-44309" type="cve" title="CVE-2024-44309"/>
      <reference href="https://bugzilla.redhat.com/2327927" id="2327927" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-10481.html" id="ALSA-2024:10481" type="self" title="ALSA-2024:10481"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="webkit2gtk3" version="2.46.3" release="2.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.46.3-2.el8_10.src.rpm">
          <filename>webkit2gtk3-2.46.3-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">0886cd94785659e857fa97537227d061a6889cb6c1758720fda089abaa47538c</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.46.3" release="2.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.46.3-2.el8_10.src.rpm">
          <filename>webkit2gtk3-devel-2.46.3-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">794433a559a7737b7de01078561d1e4fd0bd0b0daffa06a47732afca63dbb760</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.46.3" release="2.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.46.3-2.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.46.3-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">f216032a387d99f8c77dddd4ff377275b189aac96b071fc9577ae1dd77ce4202</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.46.3" release="2.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.46.3-2.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-2.46.3-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">fdf17e8be7232216cb406e28b8bbee540dc20e1ff87ae06119ce76fedc03814d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10591</id>
    <title>Important: thunderbird security update</title>
    <issued date="2024-12-02 00:00:00"/>
    <updated date="2024-12-03 18:10:32"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * thunderbird: Potential disclosure of plaintext in OpenPGP encrypted message (CVE-2024-11159)
  * firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims (CVE-2024-11694)
  * firefox: thunderbird: Unhandled Exception in Add-on Signature Verification (CVE-2024-11696)
  * firefox: thunderbird: Select list elements could be shown over another site (CVE-2024-11692)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5 (CVE-2024-11699)
  * firefox: thunderbird: URL Bar Spoofing via Manipulated Punycode and Whitespace Characters (CVE-2024-11695)
  * firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog (CVE-2024-11697)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10591" id="RHSA-2024:10591" type="rhsa" title="RHSA-2024:10591"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11159" id="CVE-2024-11159" type="cve" title="CVE-2024-11159"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11692" id="CVE-2024-11692" type="cve" title="CVE-2024-11692"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11694" id="CVE-2024-11694" type="cve" title="CVE-2024-11694"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11695" id="CVE-2024-11695" type="cve" title="CVE-2024-11695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11696" id="CVE-2024-11696" type="cve" title="CVE-2024-11696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11697" id="CVE-2024-11697" type="cve" title="CVE-2024-11697"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11699" id="CVE-2024-11699" type="cve" title="CVE-2024-11699"/>
      <reference href="https://bugzilla.redhat.com/2325896" id="2325896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328941" id="2328941" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328943" id="2328943" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328946" id="2328946" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328947" id="2328947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328948" id="2328948" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328950" id="2328950" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-10591.html" id="ALSA-2024:10591" type="self" title="ALSA-2024:10591"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="128.5.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-128.5.0-1.el8_10.alma.1.src.rpm">
          <filename>thunderbird-128.5.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">d6f51a14639c68a79324694f6b4c5e39a5cb49af5e3f11d29e98e6f36463e534</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1063</id>
    <title>Important: edk2 security update</title>
    <issued date="2024-03-04 00:00:00"/>
    <updated date="2024-03-05 14:59:21"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>edk2 security update</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. 

Security Fix(es):

* edk2: Buffer overflow in the DHCPv6 client via a long Server ID option (CVE-2023-45230)
* edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message (CVE-2023-45234)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1063" id="RHSA-2024:1063" type="rhsa" title="RHSA-2024:1063"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45230" id="CVE-2023-45230" type="cve" title="CVE-2023-45230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45234" id="CVE-2023-45234" type="cve" title="CVE-2023-45234"/>
      <reference href="https://bugzilla.redhat.com/2258685" id="2258685" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258697" id="2258697" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1063.html" id="ALSA-2024:1063" type="self" title="ALSA-2024:1063"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="edk2-ovmf" version="20220126gitbb1bba3d77" release="6.el8_9.6.alma" epoch="0" arch="noarch" src="edk2-20220126gitbb1bba3d77-6.el8_9.6.alma.src.rpm">
          <filename>edk2-ovmf-20220126gitbb1bba3d77-6.el8_9.6.alma.noarch.rpm</filename>
          <sum type="sha256">081ad0dd894e7a967a7744bb7c24bf7dea044c82ecdda77f204e144be1076775</sum>
        </package>
        <package name="edk2-aarch64" version="20220126gitbb1bba3d77" release="6.el8_9.6.alma" epoch="0" arch="noarch" src="edk2-20220126gitbb1bba3d77-6.el8_9.6.alma.src.rpm">
          <filename>edk2-aarch64-20220126gitbb1bba3d77-6.el8_9.6.alma.noarch.rpm</filename>
          <sum type="sha256">a952db4906227aa5887d603fdb7af7627d51facf90b74d3edc530e2f620f63ee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10752</id>
    <title>Important: firefox security update</title>
    <issued date="2024-12-03 00:00:00"/>
    <updated date="2024-12-05 14:27:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims (CVE-2024-11694)
  * firefox: thunderbird: Unhandled Exception in Add-on Signature Verification (CVE-2024-11696)
  * firefox: thunderbird: Select list elements could be shown over another site (CVE-2024-11692)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5 (CVE-2024-11699)
  * firefox: thunderbird: URL Bar Spoofing via Manipulated Punycode and Whitespace Characters (CVE-2024-11695)
  * firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog (CVE-2024-11697)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10752" id="RHSA-2024:10752" type="rhsa" title="RHSA-2024:10752"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11692" id="CVE-2024-11692" type="cve" title="CVE-2024-11692"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11694" id="CVE-2024-11694" type="cve" title="CVE-2024-11694"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11695" id="CVE-2024-11695" type="cve" title="CVE-2024-11695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11696" id="CVE-2024-11696" type="cve" title="CVE-2024-11696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11697" id="CVE-2024-11697" type="cve" title="CVE-2024-11697"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11699" id="CVE-2024-11699" type="cve" title="CVE-2024-11699"/>
      <reference href="https://bugzilla.redhat.com/2328941" id="2328941" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328943" id="2328943" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328946" id="2328946" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328947" id="2328947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328948" id="2328948" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328950" id="2328950" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-10752.html" id="ALSA-2024:10752" type="self" title="ALSA-2024:10752"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="128.5.1" release="1.el8_10" epoch="0" arch="s390x" src="firefox-128.5.1-1.el8_10.src.rpm">
          <filename>firefox-128.5.1-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">86ae1f24c8370014a6d3d4c8f4d3d4562af4346750f3b0a26901be9355843187</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10779</id>
    <title>Moderate: python3:3.6.8 security update</title>
    <issued date="2024-12-04 00:00:00"/>
    <updated date="2024-12-05 14:41:23"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3:3.6.8 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)
  * python: Improper validation of IPv6 and IPvFuture addresses (CVE-2024-11168)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10779" id="RHSA-2024:10779" type="rhsa" title="RHSA-2024:10779"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11168" id="CVE-2024-11168" type="cve" title="CVE-2024-11168"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9287" id="CVE-2024-9287" type="cve" title="CVE-2024-9287"/>
      <reference href="https://bugzilla.redhat.com/2321440" id="2321440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325776" id="2325776" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-10779.html" id="ALSA-2024:10779" type="self" title="ALSA-2024:10779"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3-idle" version="3.6.8" release="69.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-69.el8_10.alma.1.src.rpm">
          <filename>python3-idle-3.6.8-69.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">819755fba01a7d75f2788e1b4ce86f0c9aa72cd14f1dd61b16d6601625bf01c0</sum>
        </package>
        <package name="platform-python-devel" version="3.6.8" release="69.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-69.el8_10.alma.1.src.rpm">
          <filename>platform-python-devel-3.6.8-69.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">a49c185d5a130324e3758eb544ac934d2ef8f7d22a8a1e3f69fe93ea019cd271</sum>
        </package>
        <package name="platform-python-debug" version="3.6.8" release="69.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-69.el8_10.alma.1.src.rpm">
          <filename>platform-python-debug-3.6.8-69.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">d908c872961a91a5164717d2515776db695f63a5a1f835c34a251c8b66814a65</sum>
        </package>
        <package name="python3-tkinter" version="3.6.8" release="69.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-69.el8_10.alma.1.src.rpm">
          <filename>python3-tkinter-3.6.8-69.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">edf867d0129ef7679dc300ca99cf3cfe36f10baa07d4cff831428f02ab34c297</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10785</id>
    <title>Important: postgresql:12 security update</title>
    <issued date="2024-12-04 00:00:00"/>
    <updated date="2024-12-05 14:31:42"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:12 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID (CVE-2024-10978)
  * postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code (CVE-2024-10979)
  * postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes (CVE-2024-10976)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10785" id="RHSA-2024:10785" type="rhsa" title="RHSA-2024:10785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10976" id="CVE-2024-10976" type="cve" title="CVE-2024-10976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10978" id="CVE-2024-10978" type="cve" title="CVE-2024-10978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10979" id="CVE-2024-10979" type="cve" title="CVE-2024-10979"/>
      <reference href="https://bugzilla.redhat.com/2326251" id="2326251" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2326253" id="2326253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2326263" id="2326263" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-10785.html" id="ALSA-2024:10785" type="self" title="ALSA-2024:10785"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="12" version="8100020241204100714" context="9edba152" arch="s390x"/>
        <package name="postgresql-upgrade" version="12.22" release="1.module_el8.10.0+3927+7f0fab70" epoch="0" arch="s390x" src="postgresql-12.22-1.module_el8.10.0+3927+7f0fab70.src.rpm">
          <filename>postgresql-upgrade-12.22-1.module_el8.10.0+3927+7f0fab70.s390x.rpm</filename>
          <sum type="sha256">028821e9948653e54715f4df2da9e9fa5e853cea9f632f8f1219460f34505379</sum>
        </package>
        <package name="pgaudit" version="1.4.0" release="7.module_el8.9.0+3740+0e74851f.alma.1" epoch="0" arch="s390x" src="pgaudit-1.4.0-7.module_el8.9.0+3740+0e74851f.alma.1.src.rpm">
          <filename>pgaudit-1.4.0-7.module_el8.9.0+3740+0e74851f.alma.1.s390x.rpm</filename>
          <sum type="sha256">05a6d09d675776fb9ab998aa9fb52890d6c4ecc40957331844fd2c42f555ebca</sum>
        </package>
        <package name="postgresql-plperl" version="12.22" release="1.module_el8.10.0+3927+7f0fab70" epoch="0" arch="s390x" src="postgresql-12.22-1.module_el8.10.0+3927+7f0fab70.src.rpm">
          <filename>postgresql-plperl-12.22-1.module_el8.10.0+3927+7f0fab70.s390x.rpm</filename>
          <sum type="sha256">08acbd16b7684b5794073d71949b57b78bafeb6fa36f49fad235dd43405d8c04</sum>
        </package>
        <package name="postgresql-docs" version="12.22" release="1.module_el8.10.0+3927+7f0fab70" epoch="0" arch="s390x" src="postgresql-12.22-1.module_el8.10.0+3927+7f0fab70.src.rpm">
          <filename>postgresql-docs-12.22-1.module_el8.10.0+3927+7f0fab70.s390x.rpm</filename>
          <sum type="sha256">09fed636fcc229ab3da60e444d6229d58b994e92de065835e7850e3223107e2b</sum>
        </package>
        <package name="pg_repack" version="1.4.6" release="3.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="pg_repack-1.4.6-3.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>pg_repack-1.4.6-3.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">14fdf29fe5dd7075aaf956b75aec2c5028f78ea8c06a19b461fa970284284047</sum>
        </package>
        <package name="postgresql-test" version="12.22" release="1.module_el8.10.0+3927+7f0fab70" epoch="0" arch="s390x" src="postgresql-12.22-1.module_el8.10.0+3927+7f0fab70.src.rpm">
          <filename>postgresql-test-12.22-1.module_el8.10.0+3927+7f0fab70.s390x.rpm</filename>
          <sum type="sha256">1536222f8282b1dc978a4b14a71d68bd23157675b869fac9d057548923cc33a5</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="12.22" release="1.module_el8.10.0+3927+7f0fab70" epoch="0" arch="noarch" src="postgresql-12.22-1.module_el8.10.0+3927+7f0fab70.src.rpm">
          <filename>postgresql-test-rpm-macros-12.22-1.module_el8.10.0+3927+7f0fab70.noarch.rpm</filename>
          <sum type="sha256">6f8d449b55179f40e0058bd2a3a50baedd319e5e7e28573db0cdb896a5d5cc04</sum>
        </package>
        <package name="postgresql" version="12.22" release="1.module_el8.10.0+3927+7f0fab70" epoch="0" arch="s390x" src="postgresql-12.22-1.module_el8.10.0+3927+7f0fab70.src.rpm">
          <filename>postgresql-12.22-1.module_el8.10.0+3927+7f0fab70.s390x.rpm</filename>
          <sum type="sha256">75ae96088049f98ef0509ee6f87a2681ed672df902c00d4fde5ce1888ae55c89</sum>
        </package>
        <package name="postgresql-server" version="12.22" release="1.module_el8.10.0+3927+7f0fab70" epoch="0" arch="s390x" src="postgresql-12.22-1.module_el8.10.0+3927+7f0fab70.src.rpm">
          <filename>postgresql-server-12.22-1.module_el8.10.0+3927+7f0fab70.s390x.rpm</filename>
          <sum type="sha256">871488e9362ecb679b826a329438f8332667bddce0f29f1174132c954f2eb53c</sum>
        </package>
        <package name="postgresql-contrib" version="12.22" release="1.module_el8.10.0+3927+7f0fab70" epoch="0" arch="s390x" src="postgresql-12.22-1.module_el8.10.0+3927+7f0fab70.src.rpm">
          <filename>postgresql-contrib-12.22-1.module_el8.10.0+3927+7f0fab70.s390x.rpm</filename>
          <sum type="sha256">8ff1d1b01d5b70d6eadb27a0d7b2afe5efd5228314d6649749de1f72d23287be</sum>
        </package>
        <package name="postgresql-static" version="12.22" release="1.module_el8.10.0+3927+7f0fab70" epoch="0" arch="s390x" src="postgresql-12.22-1.module_el8.10.0+3927+7f0fab70.src.rpm">
          <filename>postgresql-static-12.22-1.module_el8.10.0+3927+7f0fab70.s390x.rpm</filename>
          <sum type="sha256">91ba64c22b0df6025bd8fc3a17f718d32028d3b5d93fbaf83f6e0e30891dc217</sum>
        </package>
        <package name="postgresql-pltcl" version="12.22" release="1.module_el8.10.0+3927+7f0fab70" epoch="0" arch="s390x" src="postgresql-12.22-1.module_el8.10.0+3927+7f0fab70.src.rpm">
          <filename>postgresql-pltcl-12.22-1.module_el8.10.0+3927+7f0fab70.s390x.rpm</filename>
          <sum type="sha256">9ad120661eee9ebf633693bde8dde06362ab784329bc8b856ee8675815a2c113</sum>
        </package>
        <package name="postgresql-plpython3" version="12.22" release="1.module_el8.10.0+3927+7f0fab70" epoch="0" arch="s390x" src="postgresql-12.22-1.module_el8.10.0+3927+7f0fab70.src.rpm">
          <filename>postgresql-plpython3-12.22-1.module_el8.10.0+3927+7f0fab70.s390x.rpm</filename>
          <sum type="sha256">9b229e1ef6613f0cce127878bf3ec44ac221bc0e7ffbff1ee7757f671d85200e</sum>
        </package>
        <package name="postgres-decoderbufs" version="0.10.0" release="2.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">b11226898b888f8213eefe941cece0f636a08ccce2ceaa8bee2a38e6058ed4f3</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="12.22" release="1.module_el8.10.0+3927+7f0fab70" epoch="0" arch="s390x" src="postgresql-12.22-1.module_el8.10.0+3927+7f0fab70.src.rpm">
          <filename>postgresql-upgrade-devel-12.22-1.module_el8.10.0+3927+7f0fab70.s390x.rpm</filename>
          <sum type="sha256">b3492d868d3996060a78f0fcc45455db6690a53653d7c4575dcf2787fd189746</sum>
        </package>
        <package name="postgresql-server-devel" version="12.22" release="1.module_el8.10.0+3927+7f0fab70" epoch="0" arch="s390x" src="postgresql-12.22-1.module_el8.10.0+3927+7f0fab70.src.rpm">
          <filename>postgresql-server-devel-12.22-1.module_el8.10.0+3927+7f0fab70.s390x.rpm</filename>
          <sum type="sha256">cccccf0948ca8d36842dcf792f0730a6ee35c20b76c0498f5cd053615a0a3301</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10830</id>
    <title>Important: postgresql:15 security update</title>
    <issued date="2024-12-05 00:00:00"/>
    <updated date="2024-12-10 09:13:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:15 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID (CVE-2024-10978)
  * postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code (CVE-2024-10979)
  * postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes (CVE-2024-10976)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10830" id="RHSA-2024:10830" type="rhsa" title="RHSA-2024:10830"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10976" id="CVE-2024-10976" type="cve" title="CVE-2024-10976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10978" id="CVE-2024-10978" type="cve" title="CVE-2024-10978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10979" id="CVE-2024-10979" type="cve" title="CVE-2024-10979"/>
      <reference href="https://bugzilla.redhat.com/2326251" id="2326251" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2326253" id="2326253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2326263" id="2326263" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-10830.html" id="ALSA-2024:10830" type="self" title="ALSA-2024:10830"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="15" version="8100020241205105003" context="9edba152" arch="s390x"/>
        <package name="postgresql" version="15.10" release="1.module_el8.10.0+3929+38258aa5" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el8.10.0+3929+38258aa5.src.rpm">
          <filename>postgresql-15.10-1.module_el8.10.0+3929+38258aa5.s390x.rpm</filename>
          <sum type="sha256">091d08f73aa7dc2da60cf763593dc8ef39c5beb5adf66643fbe2a78a0920f5a5</sum>
        </package>
        <package name="postgresql-private-libs" version="15.10" release="1.module_el8.10.0+3929+38258aa5" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el8.10.0+3929+38258aa5.src.rpm">
          <filename>postgresql-private-libs-15.10-1.module_el8.10.0+3929+38258aa5.s390x.rpm</filename>
          <sum type="sha256">0b581641ccf59d44bf7164f5a0a7fd3be7331f053e8c72777236f754056aaf89</sum>
        </package>
        <package name="postgresql-static" version="15.10" release="1.module_el8.10.0+3929+38258aa5" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el8.10.0+3929+38258aa5.src.rpm">
          <filename>postgresql-static-15.10-1.module_el8.10.0+3929+38258aa5.s390x.rpm</filename>
          <sum type="sha256">2713715f2015447c9d26b7b34a4093df2775e3b4bfd4aac45510a6e776410196</sum>
        </package>
        <package name="postgresql-server-devel" version="15.10" release="1.module_el8.10.0+3929+38258aa5" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el8.10.0+3929+38258aa5.src.rpm">
          <filename>postgresql-server-devel-15.10-1.module_el8.10.0+3929+38258aa5.s390x.rpm</filename>
          <sum type="sha256">43f5f579f39eaac9369d38b1839aa78ac5eae7be8650605a29c0748007193ff8</sum>
        </package>
        <package name="postgresql-test" version="15.10" release="1.module_el8.10.0+3929+38258aa5" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el8.10.0+3929+38258aa5.src.rpm">
          <filename>postgresql-test-15.10-1.module_el8.10.0+3929+38258aa5.s390x.rpm</filename>
          <sum type="sha256">4e394c33ef53290833cb667fff582e643aa80107f334a27346e17c0121753a5f</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="15.10" release="1.module_el8.10.0+3929+38258aa5" epoch="0" arch="noarch" src="postgresql-15.10-1.module_el8.10.0+3929+38258aa5.src.rpm">
          <filename>postgresql-test-rpm-macros-15.10-1.module_el8.10.0+3929+38258aa5.noarch.rpm</filename>
          <sum type="sha256">509db30b29eed5420d8232eb40344b00adf960fb49b9732bf679f4c59304d1eb</sum>
        </package>
        <package name="postgresql-docs" version="15.10" release="1.module_el8.10.0+3929+38258aa5" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el8.10.0+3929+38258aa5.src.rpm">
          <filename>postgresql-docs-15.10-1.module_el8.10.0+3929+38258aa5.s390x.rpm</filename>
          <sum type="sha256">6d170f8d93655e80d2432b72c9fad0285d53a85dd13d402c570512e44359d2a2</sum>
        </package>
        <package name="pg_repack" version="1.4.8" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="pg_repack-1.4.8-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>pg_repack-1.4.8-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">7fbd57e759f737f8bc3c7bc2715300640b00ae84ed9b74d469be03ee537d20b9</sum>
        </package>
        <package name="postgresql-contrib" version="15.10" release="1.module_el8.10.0+3929+38258aa5" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el8.10.0+3929+38258aa5.src.rpm">
          <filename>postgresql-contrib-15.10-1.module_el8.10.0+3929+38258aa5.s390x.rpm</filename>
          <sum type="sha256">87ff8d9160f3d1cf70c9ef862064d04851e696e58b10ebb55178ffdbf90d063d</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="15.10" release="1.module_el8.10.0+3929+38258aa5" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el8.10.0+3929+38258aa5.src.rpm">
          <filename>postgresql-upgrade-devel-15.10-1.module_el8.10.0+3929+38258aa5.s390x.rpm</filename>
          <sum type="sha256">8ba780ad8f35215f3604d0500318ae1347694a99d70c74ad1b056f7bb979ce29</sum>
        </package>
        <package name="postgresql-pltcl" version="15.10" release="1.module_el8.10.0+3929+38258aa5" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el8.10.0+3929+38258aa5.src.rpm">
          <filename>postgresql-pltcl-15.10-1.module_el8.10.0+3929+38258aa5.s390x.rpm</filename>
          <sum type="sha256">8f98fb918d72683ad0da0853c3b762597f35d61155970159df559fba216786e0</sum>
        </package>
        <package name="postgresql-plperl" version="15.10" release="1.module_el8.10.0+3929+38258aa5" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el8.10.0+3929+38258aa5.src.rpm">
          <filename>postgresql-plperl-15.10-1.module_el8.10.0+3929+38258aa5.s390x.rpm</filename>
          <sum type="sha256">b1625bed5647335f6857c9648811f55f9d8a0cfaad5eb05408bfd9dfd0b5634b</sum>
        </package>
        <package name="postgresql-server" version="15.10" release="1.module_el8.10.0+3929+38258aa5" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el8.10.0+3929+38258aa5.src.rpm">
          <filename>postgresql-server-15.10-1.module_el8.10.0+3929+38258aa5.s390x.rpm</filename>
          <sum type="sha256">b7e9eb44f8806d3eeabd5cf4514d0a953755121ba23e752f480cdc6dd58e607c</sum>
        </package>
        <package name="pgaudit" version="1.7.0" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="pgaudit-1.7.0-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>pgaudit-1.7.0-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">bebebc0b85b4d88d466cf43a44e5ae321c851b621377e2c96e1564cf00fd07bd</sum>
        </package>
        <package name="postgresql-upgrade" version="15.10" release="1.module_el8.10.0+3929+38258aa5" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el8.10.0+3929+38258aa5.src.rpm">
          <filename>postgresql-upgrade-15.10-1.module_el8.10.0+3929+38258aa5.s390x.rpm</filename>
          <sum type="sha256">c01117d0288ef0904fc53cc4dad8b20f58c1b6eb287ff6e2094933fecd17a661</sum>
        </package>
        <package name="postgresql-plpython3" version="15.10" release="1.module_el8.10.0+3929+38258aa5" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el8.10.0+3929+38258aa5.src.rpm">
          <filename>postgresql-plpython3-15.10-1.module_el8.10.0+3929+38258aa5.s390x.rpm</filename>
          <sum type="sha256">c25152df1a550e9958fd5d1b33391337f4530a7ef999cf0583b8a09fbbe8fc07</sum>
        </package>
        <package name="postgres-decoderbufs" version="1.9.7" release="1.Final.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="postgres-decoderbufs-1.9.7-1.Final.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>postgres-decoderbufs-1.9.7-1.Final.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">d93f26982b8a0299bb5535e5aed623996c696a2eb2f9157554b4dae3f5cce2ef</sum>
        </package>
        <package name="postgresql-private-devel" version="15.10" release="1.module_el8.10.0+3929+38258aa5" epoch="0" arch="s390x" src="postgresql-15.10-1.module_el8.10.0+3929+38258aa5.src.rpm">
          <filename>postgresql-private-devel-15.10-1.module_el8.10.0+3929+38258aa5.s390x.rpm</filename>
          <sum type="sha256">f25a2e96270d610e192950fc008024d737ade41f97583dc45b5b6898a28852c3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10831</id>
    <title>Important: postgresql:16 security update</title>
    <issued date="2024-12-05 00:00:00"/>
    <updated date="2024-12-10 01:10:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:16 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID (CVE-2024-10978)
  * postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code (CVE-2024-10979)
  * postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes (CVE-2024-10976)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10831" id="RHSA-2024:10831" type="rhsa" title="RHSA-2024:10831"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10976" id="CVE-2024-10976" type="cve" title="CVE-2024-10976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10978" id="CVE-2024-10978" type="cve" title="CVE-2024-10978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10979" id="CVE-2024-10979" type="cve" title="CVE-2024-10979"/>
      <reference href="https://bugzilla.redhat.com/2326251" id="2326251" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2326253" id="2326253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2326263" id="2326263" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-10831.html" id="ALSA-2024:10831" type="self" title="ALSA-2024:10831"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="16" version="8100020241205105204" context="9edba152" arch="s390x"/>
        <package name="postgresql-docs" version="16.6" release="1.module_el8.10.0+3930+ecf33554" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el8.10.0+3930+ecf33554.src.rpm">
          <filename>postgresql-docs-16.6-1.module_el8.10.0+3930+ecf33554.s390x.rpm</filename>
          <sum type="sha256">03ae90c4660415e5926f6c4553ec51a558201182aa9ffc02f88fb48373739dfd</sum>
        </package>
        <package name="postgresql-server-devel" version="16.6" release="1.module_el8.10.0+3930+ecf33554" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el8.10.0+3930+ecf33554.src.rpm">
          <filename>postgresql-server-devel-16.6-1.module_el8.10.0+3930+ecf33554.s390x.rpm</filename>
          <sum type="sha256">0b240fe02f937bbad29eb8a7e6eccd7ba99e24a00317406b47ad25c43757fc3b</sum>
        </package>
        <package name="postgresql-plperl" version="16.6" release="1.module_el8.10.0+3930+ecf33554" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el8.10.0+3930+ecf33554.src.rpm">
          <filename>postgresql-plperl-16.6-1.module_el8.10.0+3930+ecf33554.s390x.rpm</filename>
          <sum type="sha256">238aa29214f0543635e3544e920bf9ae583b3fcceeaa581fcea6a5f5d9e0b7c1</sum>
        </package>
        <package name="postgresql-private-libs" version="16.6" release="1.module_el8.10.0+3930+ecf33554" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el8.10.0+3930+ecf33554.src.rpm">
          <filename>postgresql-private-libs-16.6-1.module_el8.10.0+3930+ecf33554.s390x.rpm</filename>
          <sum type="sha256">4c11fcf01303854ec8b85604dfea1e77f4ec1de658e9959bd12bda13a2f86767</sum>
        </package>
        <package name="postgresql-plpython3" version="16.6" release="1.module_el8.10.0+3930+ecf33554" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el8.10.0+3930+ecf33554.src.rpm">
          <filename>postgresql-plpython3-16.6-1.module_el8.10.0+3930+ecf33554.s390x.rpm</filename>
          <sum type="sha256">592b1be7f89e88280c61d43a78bd6f7a37f6bb649cc6b12436e92e74915f0595</sum>
        </package>
        <package name="postgresql-server" version="16.6" release="1.module_el8.10.0+3930+ecf33554" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el8.10.0+3930+ecf33554.src.rpm">
          <filename>postgresql-server-16.6-1.module_el8.10.0+3930+ecf33554.s390x.rpm</filename>
          <sum type="sha256">66573b0ff832778bd6dd11e2b30915e447b9c34ecca966095a6071a54a0d3051</sum>
        </package>
        <package name="postgresql-pltcl" version="16.6" release="1.module_el8.10.0+3930+ecf33554" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el8.10.0+3930+ecf33554.src.rpm">
          <filename>postgresql-pltcl-16.6-1.module_el8.10.0+3930+ecf33554.s390x.rpm</filename>
          <sum type="sha256">687954fa9ddc571fd510bde51c28db49d6d99a71c3addeb8bb0d52cad4d4809e</sum>
        </package>
        <package name="postgresql-upgrade" version="16.6" release="1.module_el8.10.0+3930+ecf33554" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el8.10.0+3930+ecf33554.src.rpm">
          <filename>postgresql-upgrade-16.6-1.module_el8.10.0+3930+ecf33554.s390x.rpm</filename>
          <sum type="sha256">74b74e909f63a52d0095055cf1b3a82c411e11256886fbfb5aa1a9ce645dd127</sum>
        </package>
        <package name="postgresql-static" version="16.6" release="1.module_el8.10.0+3930+ecf33554" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el8.10.0+3930+ecf33554.src.rpm">
          <filename>postgresql-static-16.6-1.module_el8.10.0+3930+ecf33554.s390x.rpm</filename>
          <sum type="sha256">8bd9251a9d7158ca2ccc3c4087fe5c64c5517fa232e27f39215f0367808cdab5</sum>
        </package>
        <package name="postgresql" version="16.6" release="1.module_el8.10.0+3930+ecf33554" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el8.10.0+3930+ecf33554.src.rpm">
          <filename>postgresql-16.6-1.module_el8.10.0+3930+ecf33554.s390x.rpm</filename>
          <sum type="sha256">981a1e4ddd753d0c6c8ab48ecba37d7c79de4b20138f67b50503b9e2c81e4d61</sum>
        </package>
        <package name="pg_repack" version="1.5.1" release="1.module_el8.10.0+3930+ecf33554" epoch="0" arch="s390x" src="pg_repack-1.5.1-1.module_el8.10.0+3930+ecf33554.src.rpm">
          <filename>pg_repack-1.5.1-1.module_el8.10.0+3930+ecf33554.s390x.rpm</filename>
          <sum type="sha256">9b13f1d5444f6cf8500fa428e1512f73c0cf1f4ddddd6964d429433ae4e5f724</sum>
        </package>
        <package name="postgresql-private-devel" version="16.6" release="1.module_el8.10.0+3930+ecf33554" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el8.10.0+3930+ecf33554.src.rpm">
          <filename>postgresql-private-devel-16.6-1.module_el8.10.0+3930+ecf33554.s390x.rpm</filename>
          <sum type="sha256">ab02271d0490b5c76addaab01af5d136db2771a4f02c8dcf47d1751822f97dff</sum>
        </package>
        <package name="postgresql-contrib" version="16.6" release="1.module_el8.10.0+3930+ecf33554" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el8.10.0+3930+ecf33554.src.rpm">
          <filename>postgresql-contrib-16.6-1.module_el8.10.0+3930+ecf33554.s390x.rpm</filename>
          <sum type="sha256">ae0d5782bb71fe8e831beb314ffa6c0a6f299e708205e4494b90bdd24c17f599</sum>
        </package>
        <package name="postgres-decoderbufs" version="2.4.0" release="1.Final.module_el8.10.0+3798+606ebb9f" epoch="0" arch="s390x" src="postgres-decoderbufs-2.4.0-1.Final.module_el8.10.0+3798+606ebb9f.src.rpm">
          <filename>postgres-decoderbufs-2.4.0-1.Final.module_el8.10.0+3798+606ebb9f.s390x.rpm</filename>
          <sum type="sha256">b4ab4ce80d621ce9e80cef82edec35ef1ab32c9448d690e668db0bb17bd1a90a</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="16.6" release="1.module_el8.10.0+3930+ecf33554" epoch="0" arch="noarch" src="postgresql-16.6-1.module_el8.10.0+3930+ecf33554.src.rpm">
          <filename>postgresql-test-rpm-macros-16.6-1.module_el8.10.0+3930+ecf33554.noarch.rpm</filename>
          <sum type="sha256">b4b1fda4325035b858866f6d2cc9d55424db10a4fd206c59322788bdb0eb0508</sum>
        </package>
        <package name="postgresql-test" version="16.6" release="1.module_el8.10.0+3930+ecf33554" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el8.10.0+3930+ecf33554.src.rpm">
          <filename>postgresql-test-16.6-1.module_el8.10.0+3930+ecf33554.s390x.rpm</filename>
          <sum type="sha256">bed3711fc6831f967c1592493df5745c25620003a82d8310a2ba07518633aa9e</sum>
        </package>
        <package name="pgaudit" version="16.0" release="1.module_el8.10.0+3798+606ebb9f" epoch="0" arch="s390x" src="pgaudit-16.0-1.module_el8.10.0+3798+606ebb9f.src.rpm">
          <filename>pgaudit-16.0-1.module_el8.10.0+3798+606ebb9f.s390x.rpm</filename>
          <sum type="sha256">e1395e420ef0b455c809e9fbbc50b5a27410be72d91603805a4907b86ca95cce</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="16.6" release="1.module_el8.10.0+3930+ecf33554" epoch="0" arch="s390x" src="postgresql-16.6-1.module_el8.10.0+3930+ecf33554.src.rpm">
          <filename>postgresql-upgrade-devel-16.6-1.module_el8.10.0+3930+ecf33554.s390x.rpm</filename>
          <sum type="sha256">eb919c9813fb7f4ccbd12045f49f98ff3a29d702d03e93285a0c698c124b4b14</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10832</id>
    <title>Important: postgresql:13 security update</title>
    <issued date="2024-12-05 00:00:00"/>
    <updated date="2024-12-05 14:20:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:13 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID (CVE-2024-10978)
  * postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code (CVE-2024-10979)
  * postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes (CVE-2024-10976)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10832" id="RHSA-2024:10832" type="rhsa" title="RHSA-2024:10832"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10976" id="CVE-2024-10976" type="cve" title="CVE-2024-10976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10978" id="CVE-2024-10978" type="cve" title="CVE-2024-10978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10979" id="CVE-2024-10979" type="cve" title="CVE-2024-10979"/>
      <reference href="https://bugzilla.redhat.com/2326251" id="2326251" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2326253" id="2326253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2326263" id="2326263" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-10832.html" id="ALSA-2024:10832" type="self" title="ALSA-2024:10832"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="13" version="8100020241205104815" context="9edba152" arch="s390x"/>
        <package name="pg_repack" version="1.4.6" release="3.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="pg_repack-1.4.6-3.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>pg_repack-1.4.6-3.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">14fdf29fe5dd7075aaf956b75aec2c5028f78ea8c06a19b461fa970284284047</sum>
        </package>
        <package name="postgresql-contrib" version="13.18" release="1.module_el8.10.0+3928+8233d274" epoch="0" arch="s390x" src="postgresql-13.18-1.module_el8.10.0+3928+8233d274.src.rpm">
          <filename>postgresql-contrib-13.18-1.module_el8.10.0+3928+8233d274.s390x.rpm</filename>
          <sum type="sha256">2e88c759e674a5ef99e217f8d17644ceb256e8942bfac9fcbca98c3d85e0559a</sum>
        </package>
        <package name="postgresql-server-devel" version="13.18" release="1.module_el8.10.0+3928+8233d274" epoch="0" arch="s390x" src="postgresql-13.18-1.module_el8.10.0+3928+8233d274.src.rpm">
          <filename>postgresql-server-devel-13.18-1.module_el8.10.0+3928+8233d274.s390x.rpm</filename>
          <sum type="sha256">30ca9e163f515d9745d669ac8f710b3148bad6fa2794abff5233b225bf88c6b2</sum>
        </package>
        <package name="postgresql-server" version="13.18" release="1.module_el8.10.0+3928+8233d274" epoch="0" arch="s390x" src="postgresql-13.18-1.module_el8.10.0+3928+8233d274.src.rpm">
          <filename>postgresql-server-13.18-1.module_el8.10.0+3928+8233d274.s390x.rpm</filename>
          <sum type="sha256">34b70dcd9253a40f0222143f4e386bcbcea9208078aaefe2b34b0fd44f8e0715</sum>
        </package>
        <package name="postgresql" version="13.18" release="1.module_el8.10.0+3928+8233d274" epoch="0" arch="s390x" src="postgresql-13.18-1.module_el8.10.0+3928+8233d274.src.rpm">
          <filename>postgresql-13.18-1.module_el8.10.0+3928+8233d274.s390x.rpm</filename>
          <sum type="sha256">36865a8fa92b3912971baabe6b1a4bf39ab4be114b3c677cda9893e5c0e35eb2</sum>
        </package>
        <package name="postgresql-plpython3" version="13.18" release="1.module_el8.10.0+3928+8233d274" epoch="0" arch="s390x" src="postgresql-13.18-1.module_el8.10.0+3928+8233d274.src.rpm">
          <filename>postgresql-plpython3-13.18-1.module_el8.10.0+3928+8233d274.s390x.rpm</filename>
          <sum type="sha256">3f4c62ea6659d9226f644214f127667e4651d9f4d1bdfb98770f8e0af3dfb0fd</sum>
        </package>
        <package name="postgresql-upgrade" version="13.18" release="1.module_el8.10.0+3928+8233d274" epoch="0" arch="s390x" src="postgresql-13.18-1.module_el8.10.0+3928+8233d274.src.rpm">
          <filename>postgresql-upgrade-13.18-1.module_el8.10.0+3928+8233d274.s390x.rpm</filename>
          <sum type="sha256">43565329a086391f4dfae8a315cfba1844bbabc9d11ee0924bba418e05a864c7</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.18" release="1.module_el8.10.0+3928+8233d274" epoch="0" arch="s390x" src="postgresql-13.18-1.module_el8.10.0+3928+8233d274.src.rpm">
          <filename>postgresql-upgrade-devel-13.18-1.module_el8.10.0+3928+8233d274.s390x.rpm</filename>
          <sum type="sha256">44e181b6e8f5dd67078bcebf0e05970ba622198a29dd9ab92c78d8ae5f93a584</sum>
        </package>
        <package name="postgresql-docs" version="13.18" release="1.module_el8.10.0+3928+8233d274" epoch="0" arch="s390x" src="postgresql-13.18-1.module_el8.10.0+3928+8233d274.src.rpm">
          <filename>postgresql-docs-13.18-1.module_el8.10.0+3928+8233d274.s390x.rpm</filename>
          <sum type="sha256">5d623248cadb76b175aa3af0734fde6968746dc852b729bac190dca4314cfc6f</sum>
        </package>
        <package name="postgresql-pltcl" version="13.18" release="1.module_el8.10.0+3928+8233d274" epoch="0" arch="s390x" src="postgresql-13.18-1.module_el8.10.0+3928+8233d274.src.rpm">
          <filename>postgresql-pltcl-13.18-1.module_el8.10.0+3928+8233d274.s390x.rpm</filename>
          <sum type="sha256">6048243f216f51903c7289e84205691e7d614b6ef6a113539b46684fdf4b2e6e</sum>
        </package>
        <package name="postgresql-test" version="13.18" release="1.module_el8.10.0+3928+8233d274" epoch="0" arch="s390x" src="postgresql-13.18-1.module_el8.10.0+3928+8233d274.src.rpm">
          <filename>postgresql-test-13.18-1.module_el8.10.0+3928+8233d274.s390x.rpm</filename>
          <sum type="sha256">671aa26f9379b5d34e1ce052c101f97d28966ba2e2da17a5bb2737ee9fd1860d</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="13.18" release="1.module_el8.10.0+3928+8233d274" epoch="0" arch="noarch" src="postgresql-13.18-1.module_el8.10.0+3928+8233d274.src.rpm">
          <filename>postgresql-test-rpm-macros-13.18-1.module_el8.10.0+3928+8233d274.noarch.rpm</filename>
          <sum type="sha256">91aa4751acd4f6e801c04cd1c40c63d25acb29f14057277efc5cd7786022a911</sum>
        </package>
        <package name="pgaudit" version="1.5.0" release="1.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="pgaudit-1.5.0-1.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>pgaudit-1.5.0-1.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">a29cba50326b3c78b1cff9ad076eff7837022e71f02d7ec9e918aed69a9c3f35</sum>
        </package>
        <package name="postgres-decoderbufs" version="0.10.0" release="2.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">b11226898b888f8213eefe941cece0f636a08ccce2ceaa8bee2a38e6058ed4f3</sum>
        </package>
        <package name="postgresql-static" version="13.18" release="1.module_el8.10.0+3928+8233d274" epoch="0" arch="s390x" src="postgresql-13.18-1.module_el8.10.0+3928+8233d274.src.rpm">
          <filename>postgresql-static-13.18-1.module_el8.10.0+3928+8233d274.s390x.rpm</filename>
          <sum type="sha256">ba506a2465ac3d392ac2f6980fde0d27c05ce335314357beab83b85a33b41b19</sum>
        </package>
        <package name="postgresql-plperl" version="13.18" release="1.module_el8.10.0+3928+8233d274" epoch="0" arch="s390x" src="postgresql-13.18-1.module_el8.10.0+3928+8233d274.src.rpm">
          <filename>postgresql-plperl-13.18-1.module_el8.10.0+3928+8233d274.s390x.rpm</filename>
          <sum type="sha256">d0b2be3f426ee8dae3eb169be7dd8ef1973c1b7c7f08911604d66e9646729eb1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10834</id>
    <title>Important: ruby:3.1 security update</title>
    <issued date="2024-12-05 00:00:00"/>
    <updated date="2024-12-09 09:48:31"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ruby:3.1 security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  

Security Fix(es):  

  * rexml: REXML ReDoS vulnerability (CVE-2024-49761)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10834" id="RHSA-2024:10834" type="rhsa" title="RHSA-2024:10834"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-49761" id="CVE-2024-49761" type="cve" title="CVE-2024-49761"/>
      <reference href="https://bugzilla.redhat.com/2322153" id="2322153" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-10834.html" id="ALSA-2024:10834" type="self" title="ALSA-2024:10834"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="ruby" stream="3.1" version="8100020241206141433" context="9edba152" arch="s390x"/>
        <package name="ruby-doc" version="3.1.5" release="144.module_el8.10.0+3933+43481280" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el8.10.0+3933+43481280.src.rpm">
          <filename>ruby-doc-3.1.5-144.module_el8.10.0+3933+43481280.noarch.rpm</filename>
          <sum type="sha256">00d2730b093e0e72aa411144163cf8d5f3a4d57266a71879daf264ec5122c6ba</sum>
        </package>
        <package name="rubygem-json" version="2.6.1" release="144.module_el8.10.0+3933+43481280" epoch="0" arch="s390x" src="ruby-3.1.5-144.module_el8.10.0+3933+43481280.src.rpm">
          <filename>rubygem-json-2.6.1-144.module_el8.10.0+3933+43481280.s390x.rpm</filename>
          <sum type="sha256">176c02bf8157005da1e55da7f44ef85d826c34233f3c592a205142d6c081bdd8</sum>
        </package>
        <package name="rubygem-psych" version="4.0.4" release="144.module_el8.10.0+3933+43481280" epoch="0" arch="s390x" src="ruby-3.1.5-144.module_el8.10.0+3933+43481280.src.rpm">
          <filename>rubygem-psych-4.0.4-144.module_el8.10.0+3933+43481280.s390x.rpm</filename>
          <sum type="sha256">1c19e506e49776faf7d17d7b92565a0408c176543c8efa4a6e9494de907e0aa7</sum>
        </package>
        <package name="ruby-bundled-gems" version="3.1.5" release="144.module_el8.10.0+3933+43481280" epoch="0" arch="s390x" src="ruby-3.1.5-144.module_el8.10.0+3933+43481280.src.rpm">
          <filename>ruby-bundled-gems-3.1.5-144.module_el8.10.0+3933+43481280.s390x.rpm</filename>
          <sum type="sha256">1ca806e0674a5b7b657b9fd90820b1c64fd4414db3f9f17fedf207f6c9c6ddc5</sum>
        </package>
        <package name="rubygem-rdoc" version="6.4.1.1" release="144.module_el8.10.0+3933+43481280" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el8.10.0+3933+43481280.src.rpm">
          <filename>rubygem-rdoc-6.4.1.1-144.module_el8.10.0+3933+43481280.noarch.rpm</filename>
          <sum type="sha256">2d48573bbe0d1d8ee9da31c2cac0f8192dcf26f6a95c3fed4c61181b6fec7a76</sum>
        </package>
        <package name="rubygem-minitest" version="5.15.0" release="144.module_el8.10.0+3933+43481280" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el8.10.0+3933+43481280.src.rpm">
          <filename>rubygem-minitest-5.15.0-144.module_el8.10.0+3933+43481280.noarch.rpm</filename>
          <sum type="sha256">35723965d67f1c5955cdde106bee558881aa9641bddb3aef565cce54a16110cd</sum>
        </package>
        <package name="rubygem-abrt-doc" version="0.4.0" release="1.module_el8.10.0+3854+02eaa59a" epoch="0" arch="noarch" src="rubygem-abrt-0.4.0-1.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-abrt-doc-0.4.0-1.module_el8.10.0+3854+02eaa59a.noarch.rpm</filename>
          <sum type="sha256">51fb9e1db49f53a9a9507993d89a3924fadb61f32ff3fb4d3765a4093eea2435</sum>
        </package>
        <package name="rubygem-test-unit" version="3.5.3" release="144.module_el8.10.0+3933+43481280" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el8.10.0+3933+43481280.src.rpm">
          <filename>rubygem-test-unit-3.5.3-144.module_el8.10.0+3933+43481280.noarch.rpm</filename>
          <sum type="sha256">5e1bed3bb9cf0b210f9e6b2e216c7035a2f1a4a539d61cfc63924148844eec3a</sum>
        </package>
        <package name="rubygem-rbs" version="2.7.0" release="144.module_el8.10.0+3933+43481280" epoch="0" arch="s390x" src="ruby-3.1.5-144.module_el8.10.0+3933+43481280.src.rpm">
          <filename>rubygem-rbs-2.7.0-144.module_el8.10.0+3933+43481280.s390x.rpm</filename>
          <sum type="sha256">654ac027b4e07136e14e42a9cab03ca23f7801321dbe94e1de7af3fef1abce6a</sum>
        </package>
        <package name="rubygems-devel" version="3.3.27" release="144.module_el8.10.0+3933+43481280" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el8.10.0+3933+43481280.src.rpm">
          <filename>rubygems-devel-3.3.27-144.module_el8.10.0+3933+43481280.noarch.rpm</filename>
          <sum type="sha256">69c624aef0da98330c43fab6b49ea4a2e8fd4a1def8ff6c4033989780939b5f5</sum>
        </package>
        <package name="ruby-libs" version="3.1.5" release="144.module_el8.10.0+3933+43481280" epoch="0" arch="s390x" src="ruby-3.1.5-144.module_el8.10.0+3933+43481280.src.rpm">
          <filename>ruby-libs-3.1.5-144.module_el8.10.0+3933+43481280.s390x.rpm</filename>
          <sum type="sha256">6a2c30d89f1fb47add793eafee0636adedf7d1d133e1296baac826a88f4649e5</sum>
        </package>
        <package name="rubygem-typeprof" version="0.21.3" release="144.module_el8.10.0+3933+43481280" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el8.10.0+3933+43481280.src.rpm">
          <filename>rubygem-typeprof-0.21.3-144.module_el8.10.0+3933+43481280.noarch.rpm</filename>
          <sum type="sha256">6d12f47b73285e700041d76df5ab06cf2d686eafef71398c0bd0a1ca213e9f4d</sum>
        </package>
        <package name="rubygem-rss" version="0.2.9" release="144.module_el8.10.0+3933+43481280" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el8.10.0+3933+43481280.src.rpm">
          <filename>rubygem-rss-0.2.9-144.module_el8.10.0+3933+43481280.noarch.rpm</filename>
          <sum type="sha256">7c2072158f06f633ead35a26640bd80832889f91aa7c7ef92c803b7f64bbacfb</sum>
        </package>
        <package name="rubygems" version="3.3.27" release="144.module_el8.10.0+3933+43481280" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el8.10.0+3933+43481280.src.rpm">
          <filename>rubygems-3.3.27-144.module_el8.10.0+3933+43481280.noarch.rpm</filename>
          <sum type="sha256">87bfc8960620aca0c57a6eda23f141b221131dd12575464621978334188db090</sum>
        </package>
        <package name="rubygem-bigdecimal" version="3.1.1" release="144.module_el8.10.0+3933+43481280" epoch="0" arch="s390x" src="ruby-3.1.5-144.module_el8.10.0+3933+43481280.src.rpm">
          <filename>rubygem-bigdecimal-3.1.1-144.module_el8.10.0+3933+43481280.s390x.rpm</filename>
          <sum type="sha256">894fd949073393d96f86b9f63399b1bd94d881c2c6d523d96eda25932c6e0c49</sum>
        </package>
        <package name="rubygem-mysql2" version="0.5.3" release="3.module_el8.10.0+3854+02eaa59a" epoch="0" arch="s390x" src="rubygem-mysql2-0.5.3-3.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-mysql2-0.5.3-3.module_el8.10.0+3854+02eaa59a.s390x.rpm</filename>
          <sum type="sha256">8b3ec08fb578c281d6c13715415ba10cabc35448b2683f96ac5c50844b709577</sum>
        </package>
        <package name="rubygem-io-console" version="0.5.11" release="144.module_el8.10.0+3933+43481280" epoch="0" arch="s390x" src="ruby-3.1.5-144.module_el8.10.0+3933+43481280.src.rpm">
          <filename>rubygem-io-console-0.5.11-144.module_el8.10.0+3933+43481280.s390x.rpm</filename>
          <sum type="sha256">8d5c9a840a76a8be2dfe733099e98bb328cca7227da9af97ab459ea5e58b4a40</sum>
        </package>
        <package name="rubygem-mysql2-doc" version="0.5.3" release="3.module_el8.10.0+3854+02eaa59a" epoch="0" arch="noarch" src="rubygem-mysql2-0.5.3-3.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-mysql2-doc-0.5.3-3.module_el8.10.0+3854+02eaa59a.noarch.rpm</filename>
          <sum type="sha256">9a559958e8544dd441357fa02b6cdcd78d7e7a0f3ca974ec06e48fee212ea6fe</sum>
        </package>
        <package name="rubygem-abrt" version="0.4.0" release="1.module_el8.9.0+3746+91b8233a" epoch="0" arch="noarch" src="rubygem-abrt-0.4.0-1.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-abrt-0.4.0-1.module_el8.9.0+3746+91b8233a.noarch.rpm</filename>
          <sum type="sha256">a4de616c47a50c4a54611ff12499a00e395fcdf6e3c2ce813e27b0f581ed2c12</sum>
        </package>
        <package name="ruby-default-gems" version="3.1.5" release="144.module_el8.10.0+3933+43481280" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el8.10.0+3933+43481280.src.rpm">
          <filename>ruby-default-gems-3.1.5-144.module_el8.10.0+3933+43481280.noarch.rpm</filename>
          <sum type="sha256">a85d4497daa049a5cc8c8a480e421e04221ac32e76a583d47f27be8c74ca95bb</sum>
        </package>
        <package name="rubygem-rexml" version="3.2.5" release="144.module_el8.10.0+3933+43481280" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el8.10.0+3933+43481280.src.rpm">
          <filename>rubygem-rexml-3.2.5-144.module_el8.10.0+3933+43481280.noarch.rpm</filename>
          <sum type="sha256">aa8c2fbe8538c033fcc182e691098905bca55aeb9b2a53630aea25c9fda03def</sum>
        </package>
        <package name="rubygem-rake" version="13.0.6" release="144.module_el8.10.0+3933+43481280" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el8.10.0+3933+43481280.src.rpm">
          <filename>rubygem-rake-13.0.6-144.module_el8.10.0+3933+43481280.noarch.rpm</filename>
          <sum type="sha256">b785cc937fe43c7f998fe7c1d4deabd540debb80925c1ee9c7933e44b2b0bd0e</sum>
        </package>
        <package name="ruby-devel" version="3.1.5" release="144.module_el8.10.0+3933+43481280" epoch="0" arch="s390x" src="ruby-3.1.5-144.module_el8.10.0+3933+43481280.src.rpm">
          <filename>ruby-devel-3.1.5-144.module_el8.10.0+3933+43481280.s390x.rpm</filename>
          <sum type="sha256">c15a16b5f162daa97aff61540f544249bfe3ebf877308c61115192633123efca</sum>
        </package>
        <package name="rubygem-pg-doc" version="1.3.2" release="1.module_el8.10.0+3854+02eaa59a" epoch="0" arch="noarch" src="rubygem-pg-1.3.2-1.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-pg-doc-1.3.2-1.module_el8.10.0+3854+02eaa59a.noarch.rpm</filename>
          <sum type="sha256">d13a747c9bad6a38fe3eff562dd991a0e0eda5c5de73c4e97cbea7b986dedf0f</sum>
        </package>
        <package name="rubygem-pg" version="1.3.2" release="1.module_el8.10.0+3854+02eaa59a" epoch="0" arch="s390x" src="rubygem-pg-1.3.2-1.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-pg-1.3.2-1.module_el8.10.0+3854+02eaa59a.s390x.rpm</filename>
          <sum type="sha256">d1bff2f887c9e5e758e2d68ed0441446f82fd0d73e43546fa2579d106c92acd6</sum>
        </package>
        <package name="ruby" version="3.1.5" release="144.module_el8.10.0+3933+43481280" epoch="0" arch="s390x" src="ruby-3.1.5-144.module_el8.10.0+3933+43481280.src.rpm">
          <filename>ruby-3.1.5-144.module_el8.10.0+3933+43481280.s390x.rpm</filename>
          <sum type="sha256">dbf500ad314bec88db26f6cc3944f94f57701bb32421f7e5ef192f6eacba22df</sum>
        </package>
        <package name="rubygem-power_assert" version="2.0.1" release="144.module_el8.10.0+3933+43481280" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el8.10.0+3933+43481280.src.rpm">
          <filename>rubygem-power_assert-2.0.1-144.module_el8.10.0+3933+43481280.noarch.rpm</filename>
          <sum type="sha256">f0f4837e908f8d09d9b77b21320e2cba79233af39c3f82abc8835b77dded2b51</sum>
        </package>
        <package name="rubygem-irb" version="1.4.1" release="144.module_el8.10.0+3933+43481280" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el8.10.0+3933+43481280.src.rpm">
          <filename>rubygem-irb-1.4.1-144.module_el8.10.0+3933+43481280.noarch.rpm</filename>
          <sum type="sha256">f4894df619187633dc54c8dc6532dff2b928adc75af642256284e5f080f08c6f</sum>
        </package>
        <package name="rubygem-bundler" version="2.3.27" release="144.module_el8.10.0+3933+43481280" epoch="0" arch="noarch" src="ruby-3.1.5-144.module_el8.10.0+3933+43481280.src.rpm">
          <filename>rubygem-bundler-2.3.27-144.module_el8.10.0+3933+43481280.noarch.rpm</filename>
          <sum type="sha256">fe6a55951380d36839905c7ad0b21bdcdfe5dfb442fc92014579a70a1c79291a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10850</id>
    <title>Important: ruby:2.5 security update</title>
    <issued date="2024-12-05 00:00:00"/>
    <updated date="2024-12-09 09:43:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ruby:2.5 security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  

Security Fix(es):  

  * rexml: REXML ReDoS vulnerability (CVE-2024-49761)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10850" id="RHSA-2024:10850" type="rhsa" title="RHSA-2024:10850"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-49761" id="CVE-2024-49761" type="cve" title="CVE-2024-49761"/>
      <reference href="https://bugzilla.redhat.com/2322153" id="2322153" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-10850.html" id="ALSA-2024:10850" type="self" title="ALSA-2024:10850"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="ruby" stream="2.5" version="8100020240711143328" context="9edba152" arch="s390x"/>
        <package name="rubygem-did_you_mean" version="1.2.0" release="113.module_el8.10.0+3932+2d440da3" epoch="0" arch="noarch" src="ruby-2.5.9-113.module_el8.10.0+3932+2d440da3.src.rpm">
          <filename>rubygem-did_you_mean-1.2.0-113.module_el8.10.0+3932+2d440da3.noarch.rpm</filename>
          <sum type="sha256">0f69dff36c067b0b03b6baa9e66438691d2f11d7b5eaa3df4f19e4cb5d3a180b</sum>
        </package>
        <package name="ruby-libs" version="2.5.9" release="113.module_el8.10.0+3932+2d440da3" epoch="0" arch="s390x" src="ruby-2.5.9-113.module_el8.10.0+3932+2d440da3.src.rpm">
          <filename>ruby-libs-2.5.9-113.module_el8.10.0+3932+2d440da3.s390x.rpm</filename>
          <sum type="sha256">17078be315d260adce3f4f287df0897f2fcd086cce152b4a98c13d6d4dc20587</sum>
        </package>
        <package name="rubygem-bundler" version="1.16.1" release="4.module_el8.10.0+3871+342e2c2f" epoch="0" arch="noarch" src="rubygem-bundler-1.16.1-4.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>rubygem-bundler-1.16.1-4.module_el8.10.0+3871+342e2c2f.noarch.rpm</filename>
          <sum type="sha256">186feaa413e45c36467068a22b04de47541aafc70923a531fe583d9d131263d4</sum>
        </package>
        <package name="rubygem-openssl" version="2.1.2" release="113.module_el8.10.0+3932+2d440da3" epoch="0" arch="s390x" src="ruby-2.5.9-113.module_el8.10.0+3932+2d440da3.src.rpm">
          <filename>rubygem-openssl-2.1.2-113.module_el8.10.0+3932+2d440da3.s390x.rpm</filename>
          <sum type="sha256">4d38593ff844f111461c311686f0feab1e6e39aacc390993a81258453d34b96b</sum>
        </package>
        <package name="rubygem-xmlrpc" version="0.3.0" release="113.module_el8.10.0+3932+2d440da3" epoch="0" arch="noarch" src="ruby-2.5.9-113.module_el8.10.0+3932+2d440da3.src.rpm">
          <filename>rubygem-xmlrpc-0.3.0-113.module_el8.10.0+3932+2d440da3.noarch.rpm</filename>
          <sum type="sha256">4e6c37c756500f4c7aabca9fd26e1ae11ef5bf87e212599124b02f776a48106c</sum>
        </package>
        <package name="rubygem-io-console" version="0.4.6" release="113.module_el8.10.0+3932+2d440da3" epoch="0" arch="s390x" src="ruby-2.5.9-113.module_el8.10.0+3932+2d440da3.src.rpm">
          <filename>rubygem-io-console-0.4.6-113.module_el8.10.0+3932+2d440da3.s390x.rpm</filename>
          <sum type="sha256">4eebb5558efb8857b12e13e5d9b778cb7af7aae67befff6bc520a8a254ff4533</sum>
        </package>
        <package name="rubygem-rake" version="12.3.3" release="113.module_el8.10.0+3932+2d440da3" epoch="0" arch="noarch" src="ruby-2.5.9-113.module_el8.10.0+3932+2d440da3.src.rpm">
          <filename>rubygem-rake-12.3.3-113.module_el8.10.0+3932+2d440da3.noarch.rpm</filename>
          <sum type="sha256">5a49d1e6e1eb3b7a18866cb2d578ac0ffa53f8a8d643eb91c23bac3fc5518465</sum>
        </package>
        <package name="ruby-doc" version="2.5.9" release="113.module_el8.10.0+3932+2d440da3" epoch="0" arch="noarch" src="ruby-2.5.9-113.module_el8.10.0+3932+2d440da3.src.rpm">
          <filename>ruby-doc-2.5.9-113.module_el8.10.0+3932+2d440da3.noarch.rpm</filename>
          <sum type="sha256">695478fcd138191d80508e2e2eac29c256234cbcf2cd9557563b292d261a158f</sum>
        </package>
        <package name="rubygem-net-telnet" version="0.1.1" release="113.module_el8.10.0+3932+2d440da3" epoch="0" arch="noarch" src="ruby-2.5.9-113.module_el8.10.0+3932+2d440da3.src.rpm">
          <filename>rubygem-net-telnet-0.1.1-113.module_el8.10.0+3932+2d440da3.noarch.rpm</filename>
          <sum type="sha256">76dc0548b279b775a1d525594fad0050b89ca9bc1538d2b8d9b76884cb19a5b0</sum>
        </package>
        <package name="ruby-irb" version="2.5.9" release="113.module_el8.10.0+3932+2d440da3" epoch="0" arch="noarch" src="ruby-2.5.9-113.module_el8.10.0+3932+2d440da3.src.rpm">
          <filename>ruby-irb-2.5.9-113.module_el8.10.0+3932+2d440da3.noarch.rpm</filename>
          <sum type="sha256">78392e9072a4f885822d0f30d9bd2d9d5b01a854643673521f91c21147a3ce61</sum>
        </package>
        <package name="rubygem-psych" version="3.0.2" release="113.module_el8.10.0+3932+2d440da3" epoch="0" arch="s390x" src="ruby-2.5.9-113.module_el8.10.0+3932+2d440da3.src.rpm">
          <filename>rubygem-psych-3.0.2-113.module_el8.10.0+3932+2d440da3.s390x.rpm</filename>
          <sum type="sha256">79c5e0ef10ed53bcc8a140315a3f45e921175c168298dea9c01777a655fd9db4</sum>
        </package>
        <package name="rubygem-power_assert" version="1.1.1" release="113.module_el8.10.0+3932+2d440da3" epoch="0" arch="noarch" src="ruby-2.5.9-113.module_el8.10.0+3932+2d440da3.src.rpm">
          <filename>rubygem-power_assert-1.1.1-113.module_el8.10.0+3932+2d440da3.noarch.rpm</filename>
          <sum type="sha256">7ff9c8a6ef04cdb5318ea21c56c6d5d270044b4c9e02540eeed56e36c90f295f</sum>
        </package>
        <package name="rubygem-bson" version="4.3.0" release="2.module_el8.6.0+3170+4b08f9d4" epoch="0" arch="s390x" src="rubygem-bson-4.3.0-2.module_el8.6.0+3170+4b08f9d4.src.rpm">
          <filename>rubygem-bson-4.3.0-2.module_el8.6.0+3170+4b08f9d4.s390x.rpm</filename>
          <sum type="sha256">871397eff83a497bf29db2e02e81837d1648c1813afa6030e2bab44d3f0db282</sum>
        </package>
        <package name="ruby" version="2.5.9" release="113.module_el8.10.0+3932+2d440da3" epoch="0" arch="s390x" src="ruby-2.5.9-113.module_el8.10.0+3932+2d440da3.src.rpm">
          <filename>ruby-2.5.9-113.module_el8.10.0+3932+2d440da3.s390x.rpm</filename>
          <sum type="sha256">87beb7562829eda76be0a515728163c3f729c2b8493fda622e2928fc701adc7c</sum>
        </package>
        <package name="rubygem-pg-doc" version="1.0.0" release="3.module_el8.9.0+3635+c6f99506" epoch="0" arch="noarch" src="rubygem-pg-1.0.0-3.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygem-pg-doc-1.0.0-3.module_el8.9.0+3635+c6f99506.noarch.rpm</filename>
          <sum type="sha256">8d04b2fdb59f2b51995d4fc57a412831e5d4d1c9d80fea1bcd0a7f5beaa55ab7</sum>
        </package>
        <package name="rubygem-bigdecimal" version="1.3.4" release="113.module_el8.10.0+3932+2d440da3" epoch="0" arch="s390x" src="ruby-2.5.9-113.module_el8.10.0+3932+2d440da3.src.rpm">
          <filename>rubygem-bigdecimal-1.3.4-113.module_el8.10.0+3932+2d440da3.s390x.rpm</filename>
          <sum type="sha256">8eeb9f4f55aad2789e62e53cc8ba0350756e332626f4f2ecd1cb079a90f02318</sum>
        </package>
        <package name="rubygem-minitest" version="5.10.3" release="113.module_el8.10.0+3932+2d440da3" epoch="0" arch="noarch" src="ruby-2.5.9-113.module_el8.10.0+3932+2d440da3.src.rpm">
          <filename>rubygem-minitest-5.10.3-113.module_el8.10.0+3932+2d440da3.noarch.rpm</filename>
          <sum type="sha256">a03a341c98c6cbc8488a688f3688e4a18e0d7a57ba82d1af7ff836671e018905</sum>
        </package>
        <package name="rubygems-devel" version="2.7.6.3" release="113.module_el8.10.0+3932+2d440da3" epoch="0" arch="noarch" src="ruby-2.5.9-113.module_el8.10.0+3932+2d440da3.src.rpm">
          <filename>rubygems-devel-2.7.6.3-113.module_el8.10.0+3932+2d440da3.noarch.rpm</filename>
          <sum type="sha256">a5e12eb85780cb9f410fd1f6721df257b14d8d2d139b16b6ffc78c8ed4fea3e7</sum>
        </package>
        <package name="ruby-devel" version="2.5.9" release="113.module_el8.10.0+3932+2d440da3" epoch="0" arch="s390x" src="ruby-2.5.9-113.module_el8.10.0+3932+2d440da3.src.rpm">
          <filename>ruby-devel-2.5.9-113.module_el8.10.0+3932+2d440da3.s390x.rpm</filename>
          <sum type="sha256">aa1c4d89459c890687ce57f05ea6da3e85db8e6040799001287fb9c28f080af2</sum>
        </package>
        <package name="rubygem-rdoc" version="6.0.1.1" release="113.module_el8.10.0+3932+2d440da3" epoch="0" arch="noarch" src="ruby-2.5.9-113.module_el8.10.0+3932+2d440da3.src.rpm">
          <filename>rubygem-rdoc-6.0.1.1-113.module_el8.10.0+3932+2d440da3.noarch.rpm</filename>
          <sum type="sha256">bd3fdac9e0eb596747f05475fab6ef9d8dff4d339b5958d80883a32bdb27dd00</sum>
        </package>
        <package name="rubygems" version="2.7.6.3" release="113.module_el8.10.0+3932+2d440da3" epoch="0" arch="noarch" src="ruby-2.5.9-113.module_el8.10.0+3932+2d440da3.src.rpm">
          <filename>rubygems-2.7.6.3-113.module_el8.10.0+3932+2d440da3.noarch.rpm</filename>
          <sum type="sha256">d02f630f5caec960a9303da275f34ddd4f97c4e2253dbdf7472e7f92c8c3ed57</sum>
        </package>
        <package name="rubygem-pg" version="1.0.0" release="3.module_el8.9.0+3635+c6f99506" epoch="0" arch="s390x" src="rubygem-pg-1.0.0-3.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygem-pg-1.0.0-3.module_el8.9.0+3635+c6f99506.s390x.rpm</filename>
          <sum type="sha256">d52a51f8cfdbeb3099ce92946748481f426b77c9da23f77737fe3d4fcd1b245c</sum>
        </package>
        <package name="rubygem-test-unit" version="3.2.7" release="113.module_el8.10.0+3932+2d440da3" epoch="0" arch="noarch" src="ruby-2.5.9-113.module_el8.10.0+3932+2d440da3.src.rpm">
          <filename>rubygem-test-unit-3.2.7-113.module_el8.10.0+3932+2d440da3.noarch.rpm</filename>
          <sum type="sha256">e0f8eeee2e5b352412c298b49be35cfe3696bec6e5f35bbe8630a7a8f20bb3bb</sum>
        </package>
        <package name="rubygem-json" version="2.1.0" release="113.module_el8.10.0+3932+2d440da3" epoch="0" arch="s390x" src="ruby-2.5.9-113.module_el8.10.0+3932+2d440da3.src.rpm">
          <filename>rubygem-json-2.1.0-113.module_el8.10.0+3932+2d440da3.s390x.rpm</filename>
          <sum type="sha256">e8cc2e9d0cfbca5da1dfca3b5c9f3864dd9029f3c0db94e7cee5f5970359fe8c</sum>
        </package>
        <package name="rubygem-mysql2" version="0.4.10" release="4.module_el8.6.0+3170+4b08f9d4" epoch="0" arch="s390x" src="rubygem-mysql2-0.4.10-4.module_el8.6.0+3170+4b08f9d4.src.rpm">
          <filename>rubygem-mysql2-0.4.10-4.module_el8.6.0+3170+4b08f9d4.s390x.rpm</filename>
          <sum type="sha256">e8ee63b6046ba22292c8ac7eb85440ace9fe11b17fef5bf5f590b754f4c7aadb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10951</id>
    <title>Moderate: php:8.2 security update</title>
    <issued date="2024-12-11 00:00:00"/>
    <updated date="2024-12-16 14:55:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>php:8.2 security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  

Security Fix(es):  

  * php: host/secure cookie bypass due to partial CVE-2022-31629 fix (CVE-2024-2756)
  * php: password_verify can erroneously return true, opening ATO risk (CVE-2024-3096)
  * php: Filter bypass in filter_var (FILTER_VALIDATE_URL) (CVE-2024-5458)
  * php: Erroneous parsing of multipart form data (CVE-2024-8925)
  * php: cgi.force_redirect configuration is bypassable due to the environment variable collision (CVE-2024-8927)
  * php: PHP-FPM Log Manipulation Vulnerability (CVE-2024-9026)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10951" id="RHSA-2024:10951" type="rhsa" title="RHSA-2024:10951"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2756" id="CVE-2024-2756" type="cve" title="CVE-2024-2756"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3096" id="CVE-2024-3096" type="cve" title="CVE-2024-3096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5458" id="CVE-2024-5458" type="cve" title="CVE-2024-5458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8925" id="CVE-2024-8925" type="cve" title="CVE-2024-8925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8927" id="CVE-2024-8927" type="cve" title="CVE-2024-8927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9026" id="CVE-2024-9026" type="cve" title="CVE-2024-9026"/>
      <reference href="https://bugzilla.redhat.com/2275058" id="2275058" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275061" id="2275061" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291252" id="2291252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317049" id="2317049" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317051" id="2317051" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317144" id="2317144" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-10951.html" id="ALSA-2024:10951" type="self" title="ALSA-2024:10951"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="php" stream="8.2" version="8100020240411103139" context="eb0869e2" arch="s390x"/>
        <package name="php-soap" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-soap-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">01a9738cc0801d477608888d0ea79a15bbf59fcb57a1aab9ede1660c91a0013b</sum>
        </package>
        <package name="php-common" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-common-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">08a08a912b69698880b07b5debc466d569c632ef042a04ad4ab5b8ed923d1693</sum>
        </package>
        <package name="php-pecl-rrd" version="2.0.3" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="php-pecl-rrd-2.0.3-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pecl-rrd-2.0.3-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">093a9af91b3963aeb6939d457d8552f7939985a934a7d29fc26882787160c0a4</sum>
        </package>
        <package name="php-gd" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-gd-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">0a88188df7ae8a1c980519059b36bb3058554366cfba805cd55e8907b56b3cd1</sum>
        </package>
        <package name="apcu-panel" version="5.1.23" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="noarch" src="php-pecl-apcu-5.1.23-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>apcu-panel-5.1.23-1.module_el8.10.0+3796+30ed3ef7.noarch.rpm</filename>
          <sum type="sha256">1deada493d8257042f0097d5ac685473d9995b4500854e4c6a0e2ac9a175fa04</sum>
        </package>
        <package name="php-intl" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-intl-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">20da574034f781aadb320bbf295fc0a91cd9fb0392111542253b55082bde9db2</sum>
        </package>
        <package name="php-ffi" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-ffi-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">25883cb9246cee78d0d33084f96e1c9b28406a9c12e02f10f89165be027e52b6</sum>
        </package>
        <package name="php-xml" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-xml-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">298c0d431560ab19a2d135bc8b56c60e911bc2ad368946551e694547ac5b60f3</sum>
        </package>
        <package name="php-pecl-apcu-devel" version="5.1.23" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.23-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pecl-apcu-devel-5.1.23-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">2b18052e97292f4a7381dcbb7589c87b1e6fb49d93c19c334bcf52bb6ed3b955</sum>
        </package>
        <package name="php-snmp" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-snmp-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">2befd8ce93c328ea0220374cf6cab2ad99bf6bdcd96fda01f4ae9e4bd8ed0d8c</sum>
        </package>
        <package name="php-ldap" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-ldap-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">337bbb43d14b47cee179be352e2e7a62db88740e791e0c877968e5283a26d232</sum>
        </package>
        <package name="php-opcache" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-opcache-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">419edd146acb24bd918b62d1b928c79fc6e53786cb79aec73e34a72de10ab7b1</sum>
        </package>
        <package name="php-dbg" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-dbg-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">4a3a66a59c5f95ba888acff230302d7f251a5c2fcd38be455f0c25ed7a591fab</sum>
        </package>
        <package name="php-embedded" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-embedded-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">5713d58904157fc750777d95743c551a7adad33759a73ae9caebac055f55fc23</sum>
        </package>
        <package name="libzip" version="1.7.3" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="libzip-1.7.3-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>libzip-1.7.3-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">5962ee62531b91b8d089dda94343f02f6278557e387f3aa076843e7d6ebcec89</sum>
        </package>
        <package name="php-pdo" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-pdo-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">5a62ab2e4dc5128037738e87594166a2bc0b77abc75cfc7d00bb3c1ed6d06f15</sum>
        </package>
        <package name="php-process" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-process-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">620b3dff02baf9cd14054451be3328452f00a41e7346f781b2deaffd6ffae385</sum>
        </package>
        <package name="libzip-tools" version="1.7.3" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="libzip-1.7.3-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>libzip-tools-1.7.3-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">7374f8cbd2e20ece40e87c7aae7e84b9843a986a938e16d51ec180333d948002</sum>
        </package>
        <package name="php-odbc" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-odbc-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">795c1e60b3e2969c9de3ba3440ac13d48a6b61da94dfa03db50c64a20f321f66</sum>
        </package>
        <package name="php-pecl-xdebug3" version="3.2.2" release="2.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="php-pecl-xdebug3-3.2.2-2.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pecl-xdebug3-3.2.2-2.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">80da4e7cbeb2b5e3b6bf6e9dacd2e33e570fecdd8646fcd94fbfb2573e17a172</sum>
        </package>
        <package name="php" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">885187717ac27f2ab04c711d1fa10b8e284001baa5f09bc60c674616b0d4fd72</sum>
        </package>
        <package name="php-mbstring" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-mbstring-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">966206988793646fd4202ddf4a0b2f77782f4bb0d0a336b62e7223f59c5c1667</sum>
        </package>
        <package name="php-fpm" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-fpm-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">9695efde29639ed8a9a09f68056ad5cc1eb1467bdd9e3a3c5dd0a4f095879e3a</sum>
        </package>
        <package name="php-bcmath" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-bcmath-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">9896a9ae47057f7984f6d069a5c06c6b9f21fc8d1a1b3d861371893f555b80cc</sum>
        </package>
        <package name="php-cli" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-cli-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">a24e0f8e12ab84c34404b410125634e73637ff2fa9cfbfce61ca6f6fd329489a</sum>
        </package>
        <package name="php-devel" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-devel-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">a416feddef8ca04952ed2ef60062326ae0033b402aeb83a450b26af7e0ae7117</sum>
        </package>
        <package name="php-dba" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-dba-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">b12c0350ea36123756a09d262d5515fc998f0c22ef8f4d4b8c201d18928d6a64</sum>
        </package>
        <package name="php-pear" version="1.10.14" release="1.module_el8.10.0+3796+30ed3ef7" epoch="1" arch="noarch" src="php-pear-1.10.14-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pear-1.10.14-1.module_el8.10.0+3796+30ed3ef7.noarch.rpm</filename>
          <sum type="sha256">b77d08e8c3d38704e98139a7653cc3657d21f49aed4c245f85193ad875e74825</sum>
        </package>
        <package name="php-mysqlnd" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-mysqlnd-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">bd58ace79848be1f897b3c759ad679533d29a4259a91a362eb1cae90151358e4</sum>
        </package>
        <package name="php-pecl-apcu" version="5.1.23" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.23-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pecl-apcu-5.1.23-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">c4d4948fd8c0bbfed5894ae768adbe43b853cd5bed8c3abc67142f6731c57e79</sum>
        </package>
        <package name="php-pgsql" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-pgsql-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">c5a2d5d02fb76aae166ce36f865f42cf8bead7ec49d009c0ef879c3724b68469</sum>
        </package>
        <package name="php-gmp" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-gmp-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">cc4b3d7a33e37b0d0449f450033a667b0e4fecc670634e5674ad1a81ae0e8883</sum>
        </package>
        <package name="libzip-devel" version="1.7.3" release="1.module_el8.6.0+3061+6878dd1b" epoch="0" arch="s390x" src="libzip-1.7.3-1.module_el8.6.0+3061+6878dd1b.src.rpm">
          <filename>libzip-devel-1.7.3-1.module_el8.6.0+3061+6878dd1b.s390x.rpm</filename>
          <sum type="sha256">e47efaf25e1c9dcaad2fd645d6bf07cc6e4c97e78b3e08594aeb21eff49e3be9</sum>
        </package>
        <package name="php-pecl-zip" version="1.22.3" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="php-pecl-zip-1.22.3-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pecl-zip-1.22.3-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">e9fc70bd5243e8627c19553ca909b059905ce54432be8d736d1a7f39e1e0a41b</sum>
        </package>
        <package name="php-enchant" version="8.2.25" release="1.module_el8.10.0+3936+14b35499" epoch="0" arch="s390x" src="php-8.2.25-1.module_el8.10.0+3936+14b35499.src.rpm">
          <filename>php-enchant-8.2.25-1.module_el8.10.0+3936+14b35499.s390x.rpm</filename>
          <sum type="sha256">f2c2ed82c8525283cfe9058bdc559c04d7268b22ecbd909f29f3ac90a44709e4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10952</id>
    <title>Moderate: php:7.4 security update</title>
    <issued date="2024-12-11 00:00:00"/>
    <updated date="2024-12-16 14:52:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>php:7.4 security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  

Security Fix(es):  

  * php: 1-byte array overrun in common path resolve code (CVE-2023-0568)
  * php: Password_verify() always return true with some hash (CVE-2023-0567)
  * php: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP (CVE-2023-3247)
  * php: XML loading external entity without being enabled (CVE-2023-3823)
  * php: phar Buffer mismanagement (CVE-2023-3824)
  * php: host/secure cookie bypass due to partial CVE-2022-31629 fix (CVE-2024-2756)
  * php: password_verify can erroneously return true, opening ATO risk (CVE-2024-3096)
  * php: Filter bypass in filter_var (FILTER_VALIDATE_URL) (CVE-2024-5458)
  * php: Erroneous parsing of multipart form data (CVE-2024-8925)
  * php: cgi.force_redirect configuration is bypassable due to the environment variable collision (CVE-2024-8927)
  * php: PHP-FPM Log Manipulation Vulnerability (CVE-2024-9026)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10952" id="RHSA-2024:10952" type="rhsa" title="RHSA-2024:10952"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0567" id="CVE-2023-0567" type="cve" title="CVE-2023-0567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0568" id="CVE-2023-0568" type="cve" title="CVE-2023-0568"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3247" id="CVE-2023-3247" type="cve" title="CVE-2023-3247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3823" id="CVE-2023-3823" type="cve" title="CVE-2023-3823"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3824" id="CVE-2023-3824" type="cve" title="CVE-2023-3824"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2756" id="CVE-2024-2756" type="cve" title="CVE-2024-2756"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3096" id="CVE-2024-3096" type="cve" title="CVE-2024-3096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5458" id="CVE-2024-5458" type="cve" title="CVE-2024-5458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8925" id="CVE-2024-8925" type="cve" title="CVE-2024-8925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8927" id="CVE-2024-8927" type="cve" title="CVE-2024-8927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9026" id="CVE-2024-9026" type="cve" title="CVE-2024-9026"/>
      <reference href="https://bugzilla.redhat.com/2170770" id="2170770" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170771" id="2170771" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219290" id="2219290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2229396" id="2229396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2230101" id="2230101" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275058" id="2275058" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275061" id="2275061" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291252" id="2291252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317049" id="2317049" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317051" id="2317051" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317144" id="2317144" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-10952.html" id="ALSA-2024:10952" type="self" title="ALSA-2024:10952"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="php" stream="7.4" version="8100020241212065510" context="eb0869e2" arch="s390x"/>
        <package name="php-xml" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-xml-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">0309e080cf2b5bb641b3984a71aa054bc739464dd53601e9d1d52d3542734ee6</sum>
        </package>
        <package name="php-soap" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-soap-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">071b3ee7edf2832f5e492308d70d98fab52411f24f9b8f65540ef0d2399a1577</sum>
        </package>
        <package name="php-cli" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-cli-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">1523dc980b816a5f6120c32641ca2ca920d93a2cc3f2158e30a3f21806392ba3</sum>
        </package>
        <package name="php-opcache" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-opcache-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">247f74028122d5afe67cf23cb57dee3b9554f86b977db80a5198a0b009e76da9</sum>
        </package>
        <package name="php-pecl-apcu" version="5.1.18" release="1.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.18-1.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-pecl-apcu-5.1.18-1.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">28cdbec1cbb142c4f90886ef9e321757a16102af0d64e1554101885e86b3bde6</sum>
        </package>
        <package name="php" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">31b3762229308cf5655becc9098793475790f68460671f77d75a9be3329fbc79</sum>
        </package>
        <package name="php-common" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-common-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">3b4152f296879af4cd1e796a1b19c68208cad1512a5721e03b48c3bd80993dc9</sum>
        </package>
        <package name="php-mysqlnd" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-mysqlnd-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">3c4af81b4c31e1a35293b552e936a0bb57a436dfb04772c0117caea4429b6d4f</sum>
        </package>
        <package name="php-pecl-rrd" version="2.0.1" release="1.module_el8.6.0+3059+d65eee13" epoch="0" arch="s390x" src="php-pecl-rrd-2.0.1-1.module_el8.6.0+3059+d65eee13.src.rpm">
          <filename>php-pecl-rrd-2.0.1-1.module_el8.6.0+3059+d65eee13.s390x.rpm</filename>
          <sum type="sha256">3e82fdb9248d98debb9f8b3e4399a18f2b7fa70696a091dce17f6a17b1d4a1ff</sum>
        </package>
        <package name="php-dba" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-dba-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">40a4388000879716bec200eebd8afd1ebe623d9293c2f2dbf54430486634df3c</sum>
        </package>
        <package name="php-pear" version="1.10.13" release="1.module_el8.10.0+3935+28808425" epoch="1" arch="noarch" src="php-pear-1.10.13-1.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-pear-1.10.13-1.module_el8.10.0+3935+28808425.noarch.rpm</filename>
          <sum type="sha256">45f620cfb1bf36fd848dfcfdd35a9fdf7051aa38bf1cf8f748e7da7342e08af1</sum>
        </package>
        <package name="libzip-tools" version="1.6.1" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>libzip-tools-1.6.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">4dcd7aacc8eb606c28a6d4707bf2d928045c38a99d7f40e5818bdfd63931d7c0</sum>
        </package>
        <package name="php-pgsql" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-pgsql-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">535c540538e1eaa32de78bfaa17eb3aac0a395111015137cd890c4639db2b47c</sum>
        </package>
        <package name="php-xmlrpc" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-xmlrpc-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">53abbbc62456b7c90efbe0c950882a2cf3fc81a586b222249ffd7f8f8704277a</sum>
        </package>
        <package name="php-json" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-json-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">56aa4b5a8251f220c0001a1d4949a5ab2c4db49201eee973770f185c44d1179e</sum>
        </package>
        <package name="php-devel" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-devel-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">5a0593cac5f8d800ad31982db32ed436c852dc7a0c3858f9b551a23852a83983</sum>
        </package>
        <package name="php-embedded" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-embedded-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">5a2efe7e1a527425cbc7c68c59bb31acafe56801fbd42bcb494c9ea584fb77ef</sum>
        </package>
        <package name="php-ldap" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-ldap-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">5aa2893799d676965032d1e82d2c3b3f5bce5c3b8b3cc91aa16b307bcae47db4</sum>
        </package>
        <package name="php-dbg" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-dbg-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">5f22a4b1247a33aa2372ffcd620035a2b6fbe7096e08fbc523c69c62384f79ad</sum>
        </package>
        <package name="php-process" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-process-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">6e27c20f0995daf9fded8dcbd5c3faaf6954702e2731cc7643bf749594b57525</sum>
        </package>
        <package name="php-mbstring" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-mbstring-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">72c1de4476afca353098f623d1acf31224661301889bd0445bccdac46c179f3b</sum>
        </package>
        <package name="php-pecl-zip" version="1.18.2" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-pecl-zip-1.18.2-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pecl-zip-1.18.2-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">801fd66e96d056487f697bb442ce1eba14196571735ca21d7c3e4d5a722c4006</sum>
        </package>
        <package name="php-pecl-xdebug" version="2.9.5" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-pecl-xdebug-2.9.5-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pecl-xdebug-2.9.5-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">864cae889833ed12fd18cf7183adf90631fed1cf2cfe6eb1cbc4e31f2ae6ebee</sum>
        </package>
        <package name="php-gmp" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-gmp-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">9a061df87b40ea3096371e0cd1ac1118f03f1947039966ad29849d8d26d45659</sum>
        </package>
        <package name="libzip" version="1.6.1" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">9a9e43a839757a5b4aea25cc7ffbca0524546f9b9177562674854f7d3c042ed1</sum>
        </package>
        <package name="php-pdo" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-pdo-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">9dfe2458157ce02a4e3a4c8177bf8f1160b5198d46ace1db3df791bdd78c9012</sum>
        </package>
        <package name="php-odbc" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-odbc-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">a1e12194855df5929de4248dcbb8da9dfeee857d9e3c0b2d282a48b76f12ab8e</sum>
        </package>
        <package name="libzip-devel" version="1.6.1" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>libzip-devel-1.6.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">a3859fbd79933d7d04d80ad2041fa602d3f20b3cefd633660c5dee5365df1f35</sum>
        </package>
        <package name="php-ffi" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-ffi-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">a63970a79492405b52261c1036e6cbd814579312d7f5867c9198274b603ae90a</sum>
        </package>
        <package name="php-pecl-apcu-devel" version="5.1.18" release="1.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.18-1.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-pecl-apcu-devel-5.1.18-1.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">c100fd4a0db09a4ab7955eceb70da5c39dc77c633908c171f7ee629b45ea9b9a</sum>
        </package>
        <package name="php-gd" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-gd-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">c6972a8a8eeab2489459e5bf14c806ea132e73e79a7fa9a96e1387514a3214d7</sum>
        </package>
        <package name="php-enchant" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-enchant-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">d59dfd3a62bc12a989aa216c57c813986a805df95663a174d253f9327990774e</sum>
        </package>
        <package name="php-bcmath" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-bcmath-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">d809a346a06be94dcc84597ad928ffc85b214f67d3756e063e0ac3a310d5a449</sum>
        </package>
        <package name="php-fpm" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-fpm-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">de2d0ff963ddae8fbb75301afcecbf54b8b330473f9020b48f6d3b133194f00e</sum>
        </package>
        <package name="php-snmp" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-snmp-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">ed40ab4bb862217a1e2020fa436c3d4d1fe29647d9f1a5b47fa204a5c4b71e5b</sum>
        </package>
        <package name="php-intl" version="7.4.33" release="2.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-7.4.33-2.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-intl-7.4.33-2.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">fca38e1b3cc38f587cc94998a500e40dbb8004ac6bf0ddc7a13d9b465c6b62ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10953</id>
    <title>Important: python36:3.6 security update</title>
    <issued date="2024-12-11 00:00:00"/>
    <updated date="2024-12-16 14:49:28"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python36:3.6 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * virtualenv: potential command injection via virtual environment activation scripts (CVE-2024-53899)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10953" id="RHSA-2024:10953" type="rhsa" title="RHSA-2024:10953"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53899" id="CVE-2024-53899" type="cve" title="CVE-2024-53899"/>
      <reference href="https://bugzilla.redhat.com/2328554" id="2328554" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-10953.html" id="ALSA-2024:10953" type="self" title="ALSA-2024:10953"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="python36" stream="3.6" version="8100020240407123453" context="17efdbc7" arch="s390x"/>
        <package name="python3-PyMySQL" version="0.10.1" release="2.module_el8.9.0+3700+efebe9fd" epoch="0" arch="noarch" src="python-PyMySQL-0.10.1-2.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python3-PyMySQL-0.10.1-2.module_el8.9.0+3700+efebe9fd.noarch.rpm</filename>
          <sum type="sha256">00ce4561db1aa8332eb4df72cc4ce7a7849ad039ea8d26435ee2ae2c8e79e5e8</sum>
        </package>
        <package name="python3-wheel" version="0.31.1" release="3.module_el8.9.0+3700+efebe9fd" epoch="1" arch="noarch" src="python-wheel-0.31.1-3.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python3-wheel-0.31.1-3.module_el8.9.0+3700+efebe9fd.noarch.rpm</filename>
          <sum type="sha256">07363d59325506ef178e5681f428e352fa9f9004b1b808dbc91cde789f779978</sum>
        </package>
        <package name="python-nose-docs" version="1.3.7" release="31.module_el8.9.0+3700+efebe9fd" epoch="0" arch="noarch" src="python-nose-1.3.7-31.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python-nose-docs-1.3.7-31.module_el8.9.0+3700+efebe9fd.noarch.rpm</filename>
          <sum type="sha256">0fc8a8e1a308fd4898c5f00bdfa6b6b96ee7eafb3c92e63103002ca2ba63ca1a</sum>
        </package>
        <package name="python3-nose" version="1.3.7" release="31.module_el8.9.0+3700+efebe9fd" epoch="0" arch="noarch" src="python-nose-1.3.7-31.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python3-nose-1.3.7-31.module_el8.9.0+3700+efebe9fd.noarch.rpm</filename>
          <sum type="sha256">153b00d62c1f300cef4f8133dab99c2a2b260ec0318ddcb0fe7ad45f11233869</sum>
        </package>
        <package name="python-sqlalchemy-doc" version="1.3.2" release="3.module_el8.10.0+3769+3838165b" epoch="0" arch="noarch" src="python-sqlalchemy-1.3.2-3.module_el8.10.0+3769+3838165b.src.rpm">
          <filename>python-sqlalchemy-doc-1.3.2-3.module_el8.10.0+3769+3838165b.noarch.rpm</filename>
          <sum type="sha256">2d1210603f6b89e97a47993310aa67ff484c1c9955bb9ed8df221ecca38b7437</sum>
        </package>
        <package name="python3-sqlalchemy" version="1.3.2" release="3.module_el8.10.0+3769+3838165b" epoch="0" arch="s390x" src="python-sqlalchemy-1.3.2-3.module_el8.10.0+3769+3838165b.src.rpm">
          <filename>python3-sqlalchemy-1.3.2-3.module_el8.10.0+3769+3838165b.s390x.rpm</filename>
          <sum type="sha256">30f759f27583cb3151e7a396af5fafe5e57757665ff7d6607c016a3ed9bc4562</sum>
        </package>
        <package name="python3-pymongo-gridfs" version="3.7.0" release="1.module_el8.9.0+3700+efebe9fd" epoch="0" arch="s390x" src="python-pymongo-3.7.0-1.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python3-pymongo-gridfs-3.7.0-1.module_el8.9.0+3700+efebe9fd.s390x.rpm</filename>
          <sum type="sha256">4699fc10aadc16d11334c8a07f0cdbe027f12fd9463ef1e77fa1500195d455d6</sum>
        </package>
        <package name="python3-wheel-wheel" version="0.31.1" release="3.module_el8.9.0+3700+efebe9fd" epoch="1" arch="noarch" src="python-wheel-0.31.1-3.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python3-wheel-wheel-0.31.1-3.module_el8.9.0+3700+efebe9fd.noarch.rpm</filename>
          <sum type="sha256">4aa9829901847b71c453da851d6732efbe4ca26c5ee9dfcae01b189380c42840</sum>
        </package>
        <package name="python3-bson" version="3.7.0" release="1.module_el8.9.0+3700+efebe9fd" epoch="0" arch="s390x" src="python-pymongo-3.7.0-1.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python3-bson-3.7.0-1.module_el8.9.0+3700+efebe9fd.s390x.rpm</filename>
          <sum type="sha256">53de559bfe34aec70db146ba790f1a9fd44153ac25494886a7425e74d16778ac</sum>
        </package>
        <package name="python3-docutils" version="0.14" release="12.module_el8.9.0+3700+efebe9fd" epoch="0" arch="noarch" src="python-docutils-0.14-12.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python3-docutils-0.14-12.module_el8.9.0+3700+efebe9fd.noarch.rpm</filename>
          <sum type="sha256">7beb84a9dcc1562264284092c7a9183262364e73e3804f5a081f974f2674adbc</sum>
        </package>
        <package name="python3-docs" version="3.6.7" release="2.module_el8.9.0+3700+efebe9fd" epoch="0" arch="noarch" src="python-docs-3.6.7-2.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python3-docs-3.6.7-2.module_el8.9.0+3700+efebe9fd.noarch.rpm</filename>
          <sum type="sha256">87f04159e458d0aa921e1f3dec6ccdb98d9535bf1ab68fbecf6aa25b5d44a410</sum>
        </package>
        <package name="python3-pygments" version="2.2.0" release="22.module_el8.9.0+3700+efebe9fd" epoch="0" arch="noarch" src="python-pygments-2.2.0-22.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python3-pygments-2.2.0-22.module_el8.9.0+3700+efebe9fd.noarch.rpm</filename>
          <sum type="sha256">93ea55c7a1e9ea1b53a53e0ad2cae0528ca01c486bcb5341dfe78cce19e61e4b</sum>
        </package>
        <package name="python3-distro" version="1.4.0" release="2.module_el8.9.0+3700+efebe9fd" epoch="0" arch="noarch" src="python-distro-1.4.0-2.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python3-distro-1.4.0-2.module_el8.9.0+3700+efebe9fd.noarch.rpm</filename>
          <sum type="sha256">96ba6744f5f48c89242c92cd68e73ef43f7fbeb495adae87a47e03f10c80f80d</sum>
        </package>
        <package name="python3-virtualenv" version="15.1.0" release="23.module_el8.10.0+3937+b6a3652f" epoch="0" arch="noarch" src="python-virtualenv-15.1.0-23.module_el8.10.0+3937+b6a3652f.src.rpm">
          <filename>python3-virtualenv-15.1.0-23.module_el8.10.0+3937+b6a3652f.noarch.rpm</filename>
          <sum type="sha256">ad076fec16c93bf196fc809d0fd82c7c3a56f2140e43568ccc211188313bd4ac</sum>
        </package>
        <package name="python-pymongo-doc" version="3.7.0" release="1.module_el8.9.0+3700+efebe9fd" epoch="0" arch="noarch" src="python-pymongo-3.7.0-1.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python-pymongo-doc-3.7.0-1.module_el8.9.0+3700+efebe9fd.noarch.rpm</filename>
          <sum type="sha256">b26b1b6343bdad882b57687d36a39b35615e2cc3ab16168ecde443aacff80554</sum>
        </package>
        <package name="python3-scipy" version="1.0.0" release="21.module_el8.9.0+3700+efebe9fd" epoch="0" arch="s390x" src="scipy-1.0.0-21.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python3-scipy-1.0.0-21.module_el8.9.0+3700+efebe9fd.s390x.rpm</filename>
          <sum type="sha256">c4131f454751cf4cf043dd885123bde738a3fa2b62a458e412fdf205b0b909fb</sum>
        </package>
        <package name="python36-rpm-macros" version="3.6.8" release="39.module_el8.10.0+3769+3838165b" epoch="0" arch="noarch" src="python36-3.6.8-39.module_el8.10.0+3769+3838165b.src.rpm">
          <filename>python36-rpm-macros-3.6.8-39.module_el8.10.0+3769+3838165b.noarch.rpm</filename>
          <sum type="sha256">d2950adab74b29df44acbcc69a46b510b543ee7ba2d12246ed957d9badb5808c</sum>
        </package>
        <package name="python36-devel" version="3.6.8" release="39.module_el8.10.0+3769+3838165b" epoch="0" arch="s390x" src="python36-3.6.8-39.module_el8.10.0+3769+3838165b.src.rpm">
          <filename>python36-devel-3.6.8-39.module_el8.10.0+3769+3838165b.s390x.rpm</filename>
          <sum type="sha256">d9ff38c2e46759d49dc748f8acfb930e5950fbb12651fce560647b26ed5b06d6</sum>
        </package>
        <package name="python36-debug" version="3.6.8" release="39.module_el8.10.0+3769+3838165b" epoch="0" arch="s390x" src="python36-3.6.8-39.module_el8.10.0+3769+3838165b.src.rpm">
          <filename>python36-debug-3.6.8-39.module_el8.10.0+3769+3838165b.s390x.rpm</filename>
          <sum type="sha256">e43089c8ca90e89f643652aec9ecac35e65febac434bc9c69a3c91e850897e2f</sum>
        </package>
        <package name="python36" version="3.6.8" release="39.module_el8.10.0+3769+3838165b" epoch="0" arch="s390x" src="python36-3.6.8-39.module_el8.10.0+3769+3838165b.src.rpm">
          <filename>python36-3.6.8-39.module_el8.10.0+3769+3838165b.s390x.rpm</filename>
          <sum type="sha256">f077fd684030aacbdca92cf0d1b0d2e52f27234adc95a7dfa09ec1f54285163f</sum>
        </package>
        <package name="python3-pymongo" version="3.7.0" release="1.module_el8.9.0+3700+efebe9fd" epoch="0" arch="s390x" src="python-pymongo-3.7.0-1.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python3-pymongo-3.7.0-1.module_el8.9.0+3700+efebe9fd.s390x.rpm</filename>
          <sum type="sha256">f8c9e4475af1ed171ed43ce9710b6eac5d02931ba68de6ee0b4ac3ddbfa14bd7</sum>
        </package>
        <package name="python-virtualenv-doc" version="15.1.0" release="23.module_el8.10.0+3937+b6a3652f" epoch="0" arch="noarch" src="python-virtualenv-15.1.0-23.module_el8.10.0+3937+b6a3652f.src.rpm">
          <filename>python-virtualenv-doc-15.1.0-23.module_el8.10.0+3937+b6a3652f.noarch.rpm</filename>
          <sum type="sha256">feaaf8e62c003c6924fa09e554fa946dba1da41a53fd0b74dd9b001fd3a56980</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10979</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-12-12 00:00:00"/>
    <updated date="2024-12-16 14:43:12"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10979" id="RHSA-2024:10979" type="rhsa" title="RHSA-2024:10979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9287" id="CVE-2024-9287" type="cve" title="CVE-2024-9287"/>
      <reference href="https://bugzilla.redhat.com/2321440" id="2321440" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-10979.html" id="ALSA-2024:10979" type="self" title="ALSA-2024:10979"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.11-tkinter" version="3.11.11" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.11-1.el8_10.src.rpm">
          <filename>python3.11-tkinter-3.11.11-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">44ee5dd7f7a2c3a32438ccbc4990956dda33cea0e14f52714abc19e9bf897842</sum>
        </package>
        <package name="python3.11-rpm-macros" version="3.11.11" release="1.el8_10" epoch="0" arch="noarch" src="python3.11-3.11.11-1.el8_10.src.rpm">
          <filename>python3.11-rpm-macros-3.11.11-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">6fb8401f3e1d94937ba902b6f89afd1af586e6121d1cf9cce8157613e8af9f66</sum>
        </package>
        <package name="python3.11-libs" version="3.11.11" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.11-1.el8_10.src.rpm">
          <filename>python3.11-libs-3.11.11-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">98f948f21b6fd74e9df4068a489760aa54bfc505871bd49405855689834091ad</sum>
        </package>
        <package name="python3.11" version="3.11.11" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.11-1.el8_10.src.rpm">
          <filename>python3.11-3.11.11-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">9dfba8d1d79136d05d54327b12ab1cfcd7084c1eaf0c3f967e66ad7d96268861</sum>
        </package>
        <package name="python3.11-devel" version="3.11.11" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.11-1.el8_10.src.rpm">
          <filename>python3.11-devel-3.11.11-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">f0826f75d0996486b0c2094956a85acf4ec143d9adbf648d2601028e1e884aae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10980</id>
    <title>Important: python3.12 security update</title>
    <issued date="2024-12-12 00:00:00"/>
    <updated date="2024-12-16 14:40:28"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)
  * python: Unbounded memory buffering in SelectorSocketTransport.writelines() (CVE-2024-12254)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10980" id="RHSA-2024:10980" type="rhsa" title="RHSA-2024:10980"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12254" id="CVE-2024-12254" type="cve" title="CVE-2024-12254"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9287" id="CVE-2024-9287" type="cve" title="CVE-2024-9287"/>
      <reference href="https://bugzilla.redhat.com/2321440" id="2321440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2330804" id="2330804" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-10980.html" id="ALSA-2024:10980" type="self" title="ALSA-2024:10980"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.12-libs" version="3.12.8" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.8-1.el8_10.src.rpm">
          <filename>python3.12-libs-3.12.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">003016d482bcdc2c8a35ca0c946fcd0614d87b947b3c01c40af1ebcc8e15d4b6</sum>
        </package>
        <package name="python3.12" version="3.12.8" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.8-1.el8_10.src.rpm">
          <filename>python3.12-3.12.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0ad6f34b68360a504bbcd93af1c2e3732e150f454c256fe796bc7bc8db830f74</sum>
        </package>
        <package name="python3.12-tkinter" version="3.12.8" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.8-1.el8_10.src.rpm">
          <filename>python3.12-tkinter-3.12.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">1067e6a107264b7683608054928b2418db7534b2a12dc6fbbdaece3d05c5717a</sum>
        </package>
        <package name="python3.12-rpm-macros" version="3.12.8" release="1.el8_10" epoch="0" arch="noarch" src="python3.12-3.12.8-1.el8_10.src.rpm">
          <filename>python3.12-rpm-macros-3.12.8-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">67fbf9dcb6489dfa71cacc8343cb091b07bb3f9fec8f42972580d3fe603a467e</sum>
        </package>
        <package name="python3.12-devel" version="3.12.8" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.8-1.el8_10.src.rpm">
          <filename>python3.12-devel-3.12.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a719a2b6297cf0d67dbd0fe75e5be531bd5fa7ae3396247f9a4df38032b1ce96</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11154</id>
    <title>Moderate: bluez security update</title>
    <issued date="2024-12-17 00:00:00"/>
    <updated date="2024-12-18 12:53:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bluez security update</summary>
    <description>The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.   

Security Fix(es):  

  * bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution (CVE-2023-45866)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11154" id="RHSA-2024:11154" type="rhsa" title="RHSA-2024:11154"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45866" id="CVE-2023-45866" type="cve" title="CVE-2023-45866"/>
      <reference href="https://bugzilla.redhat.com/2253391" id="2253391" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-11154.html" id="ALSA-2024:11154" type="self" title="ALSA-2024:11154"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="bluez-cups" version="5.63" release="3.el8_10.alma.1" epoch="0" arch="s390x" src="bluez-5.63-3.el8_10.alma.1.src.rpm">
          <filename>bluez-cups-5.63-3.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">61313b159a56fa632228f05796a3bc74a06e44e456d856ab177d60a4e74c888f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11161</id>
    <title>Moderate: tuned security update</title>
    <issued date="2024-12-17 00:00:00"/>
    <updated date="2024-12-18 12:52:12"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>tuned security update</summary>
    <description>The tuned packages provide a service that tunes system settings according to a selected profile.  

Security Fix(es):  

  * tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method (CVE-2024-52337)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11161" id="RHSA-2024:11161" type="rhsa" title="RHSA-2024:11161"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52337" id="CVE-2024-52337" type="cve" title="CVE-2024-52337"/>
      <reference href="https://bugzilla.redhat.com/2324541" id="2324541" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-11161.html" id="ALSA-2024:11161" type="self" title="ALSA-2024:11161"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="tuned-utils-systemtap" version="2.22.1" release="5.el8_10" epoch="0" arch="noarch" src="tuned-2.22.1-5.el8_10.src.rpm">
          <filename>tuned-utils-systemtap-2.22.1-5.el8_10.noarch.rpm</filename>
          <sum type="sha256">076d1eb6234ded01cb27f05e392d5b4e3394c56e688389dc2ad612d6d39c673a</sum>
        </package>
        <package name="tuned-gtk" version="2.22.1" release="5.el8_10" epoch="0" arch="noarch" src="tuned-2.22.1-5.el8_10.src.rpm">
          <filename>tuned-gtk-2.22.1-5.el8_10.noarch.rpm</filename>
          <sum type="sha256">16a6f6b0ff90082cecdae716d2f551231b099ed8f8423d15dbb1087d2a348acc</sum>
        </package>
        <package name="tuned-profiles-postgresql" version="2.22.1" release="5.el8_10" epoch="0" arch="noarch" src="tuned-2.22.1-5.el8_10.src.rpm">
          <filename>tuned-profiles-postgresql-2.22.1-5.el8_10.noarch.rpm</filename>
          <sum type="sha256">1ed8775530e7dd0dde631c7ee90ef21633118092ae52e66fdbd6a45442a76e1b</sum>
        </package>
        <package name="tuned-utils" version="2.22.1" release="5.el8_10" epoch="0" arch="noarch" src="tuned-2.22.1-5.el8_10.src.rpm">
          <filename>tuned-utils-2.22.1-5.el8_10.noarch.rpm</filename>
          <sum type="sha256">f1d755bcaf5e0682358b68106f643b4b6dc5f47311c1c5865312c9c68f221e27</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11185</id>
    <title>Moderate: edk2:20220126gitbb1bba3d77 security update</title>
    <issued date="2024-12-17 00:00:00"/>
    <updated date="2024-12-18 12:49:28"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>edk2:20220126gitbb1bba3d77 security update</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.   

Security Fix(es):  

  * edk2: Integer overflows in PeCoffLoaderRelocateImage (CVE-2024-38796)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11185" id="RHSA-2024:11185" type="rhsa" title="RHSA-2024:11185"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38796" id="CVE-2024-38796" type="cve" title="CVE-2024-38796"/>
      <reference href="https://bugzilla.redhat.com/2315390" id="2315390" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-11185.html" id="ALSA-2024:11185" type="self" title="ALSA-2024:11185"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="edk2-aarch64" version="20220126gitbb1bba3d77" release="13.el8_10.4" epoch="0" arch="noarch" src="edk2-20220126gitbb1bba3d77-13.el8_10.4.src.rpm">
          <filename>edk2-aarch64-20220126gitbb1bba3d77-13.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">38eb3defd536970e26431434416f8c6dda2bf4ae2d637f22d3ae0a4e37697ef9</sum>
        </package>
        <package name="edk2-ovmf" version="20220126gitbb1bba3d77" release="13.el8_10.4" epoch="0" arch="noarch" src="edk2-20220126gitbb1bba3d77-13.el8_10.4.src.rpm">
          <filename>edk2-ovmf-20220126gitbb1bba3d77-13.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">6d6a564763398e87f872239277aaa76ddca4d2e0cea7be212ce5848809a000a4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11189</id>
    <title>Moderate: python3.11-urllib3 security update</title>
    <issued date="2024-12-17 00:00:00"/>
    <updated date="2024-12-18 12:47:55"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11-urllib3 security update</summary>
    <description>The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities.  

Security Fix(es):  

  * urllib3: Request body not stripped after redirect from 303 status changes request method to GET (CVE-2023-45803)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11189" id="RHSA-2024:11189" type="rhsa" title="RHSA-2024:11189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45803" id="CVE-2023-45803" type="cve" title="CVE-2023-45803"/>
      <reference href="https://bugzilla.redhat.com/2246840" id="2246840" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-11189.html" id="ALSA-2024:11189" type="self" title="ALSA-2024:11189"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.11-urllib3" version="1.26.12" release="5.el8_10" epoch="0" arch="noarch" src="python3.11-urllib3-1.26.12-5.el8_10.src.rpm">
          <filename>python3.11-urllib3-1.26.12-5.el8_10.noarch.rpm</filename>
          <sum type="sha256">b85f650ed05643adcad6b136c07c07b6e7d94c6a54bb218e1f851db38f526af8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11192</id>
    <title>Moderate: libsndfile security update</title>
    <issued date="2024-12-17 00:00:00"/>
    <updated date="2024-12-18 12:44:45"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libsndfile security update</summary>
    <description>libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.   

Security Fix(es):  

  * libsndfile: Segmentation fault error in ogg_vorbis.c:417 vorbis_analysis_wrote() (CVE-2024-50612)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11192" id="RHSA-2024:11192" type="rhsa" title="RHSA-2024:11192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50612" id="CVE-2024-50612" type="cve" title="CVE-2024-50612"/>
      <reference href="https://bugzilla.redhat.com/2322057" id="2322057" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-11192.html" id="ALSA-2024:11192" type="self" title="ALSA-2024:11192"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libsndfile" version="1.0.28" release="16.el8_10" epoch="0" arch="s390x" src="libsndfile-1.0.28-16.el8_10.src.rpm">
          <filename>libsndfile-1.0.28-16.el8_10.s390x.rpm</filename>
          <sum type="sha256">438a6c4f24872c96950995b472bf0a2be4c69516405fa76221c6d7522622a206</sum>
        </package>
        <package name="libsndfile-utils" version="1.0.28" release="16.el8_10" epoch="0" arch="s390x" src="libsndfile-1.0.28-16.el8_10.src.rpm">
          <filename>libsndfile-utils-1.0.28-16.el8_10.s390x.rpm</filename>
          <sum type="sha256">62eeb52ac9b55f524b1fbb866ffabc692705c77ab9b98af92c4e95ed93774165</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11193</id>
    <title>Moderate: mpg123 security update</title>
    <issued date="2024-12-17 00:00:00"/>
    <updated date="2024-12-18 12:42:45"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mpg123 security update</summary>
    <description>The mpg123 packages contain real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2, and 3 (most commonly MPEG 1.0 layer 3 also known as MP3), as well as re-usable decoding and output libraries.  

Security Fix(es):  

  * mpg123: Buffer overflow when writing decoded PCM samples (CVE-2024-10573)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11193" id="RHSA-2024:11193" type="rhsa" title="RHSA-2024:11193"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10573" id="CVE-2024-10573" type="cve" title="CVE-2024-10573"/>
      <reference href="https://bugzilla.redhat.com/2322980" id="2322980" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-11193.html" id="ALSA-2024:11193" type="self" title="ALSA-2024:11193"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="mpg123-plugins-pulseaudio" version="1.32.9" release="1.el8_10" epoch="0" arch="s390x" src="mpg123-1.32.9-1.el8_10.src.rpm">
          <filename>mpg123-plugins-pulseaudio-1.32.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">594fa87644692b5586de8d1a2e6542682cff1fa69fa654637aa2feae9849c567</sum>
        </package>
        <package name="mpg123" version="1.32.9" release="1.el8_10" epoch="0" arch="s390x" src="mpg123-1.32.9-1.el8_10.src.rpm">
          <filename>mpg123-1.32.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">6df30b9e9237b7aad7678dbd6eb4248c09a4aff1032bb9845e65b6b5ce407fa1</sum>
        </package>
        <package name="mpg123-libs" version="1.32.9" release="1.el8_10" epoch="0" arch="s390x" src="mpg123-1.32.9-1.el8_10.src.rpm">
          <filename>mpg123-libs-1.32.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">9986b2cb616394daf20f4c870a56dae3ff2dbd0242cb0edf8f77b62b3997cc27</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11299</id>
    <title>Important: gstreamer1-plugins-good security update</title>
    <issued date="2024-12-17 00:00:00"/>
    <updated date="2024-12-18 12:41:06"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-good security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.  

Security Fix(es):  

  * gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer (CVE-2024-47540)
  * gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c (CVE-2024-47537)
  * gstreamer1-plugins-good: OOB-write in convert_to_s334_1a (CVE-2024-47539)
  * gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush (CVE-2024-47613)
  * gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes (CVE-2024-47606)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11299" id="RHSA-2024:11299" type="rhsa" title="RHSA-2024:11299"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47537" id="CVE-2024-47537" type="cve" title="CVE-2024-47537"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47539" id="CVE-2024-47539" type="cve" title="CVE-2024-47539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47540" id="CVE-2024-47540" type="cve" title="CVE-2024-47540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47606" id="CVE-2024-47606" type="cve" title="CVE-2024-47606"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47613" id="CVE-2024-47613" type="cve" title="CVE-2024-47613"/>
      <reference href="https://bugzilla.redhat.com/2331719" id="2331719" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331722" id="2331722" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331726" id="2331726" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331753" id="2331753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331760" id="2331760" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-11299.html" id="ALSA-2024:11299" type="self" title="ALSA-2024:11299"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="gstreamer1-plugins-good-gtk" version="1.16.1" release="5.el8_10" epoch="0" arch="s390x" src="gstreamer1-plugins-good-1.16.1-5.el8_10.src.rpm">
          <filename>gstreamer1-plugins-good-gtk-1.16.1-5.el8_10.s390x.rpm</filename>
          <sum type="sha256">e753486556b0d28dfd02412d2d666655328b1fff73e93c6fb2c8df6bfce54e57</sum>
        </package>
        <package name="gstreamer1-plugins-good" version="1.16.1" release="5.el8_10" epoch="0" arch="s390x" src="gstreamer1-plugins-good-1.16.1-5.el8_10.src.rpm">
          <filename>gstreamer1-plugins-good-1.16.1-5.el8_10.s390x.rpm</filename>
          <sum type="sha256">f7c85a077343bae7dddf598c68c3c5959478920ca6bee45d779a5b8f1077d09d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11345</id>
    <title>Important: gstreamer1-plugins-base security update</title>
    <issued date="2024-12-18 00:00:00"/>
    <updated date="2024-12-18 12:39:10"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-base security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins.  

Security Fix(es):  

  * gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet (CVE-2024-47538)
  * gstreamer1-plugins-base: out-of-bounds write in Ogg demuxer (CVE-2024-47615)
  * gstreamer1-plugins-base: stack-buffer overflow in gst_opus_dec_parse_header (CVE-2024-47607)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11345" id="RHSA-2024:11345" type="rhsa" title="RHSA-2024:11345"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47538" id="CVE-2024-47538" type="cve" title="CVE-2024-47538"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47607" id="CVE-2024-47607" type="cve" title="CVE-2024-47607"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47615" id="CVE-2024-47615" type="cve" title="CVE-2024-47615"/>
      <reference href="https://bugzilla.redhat.com/2331727" id="2331727" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331740" id="2331740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331754" id="2331754" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-11345.html" id="ALSA-2024:11345" type="self" title="ALSA-2024:11345"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="gstreamer1-plugins-base" version="1.16.1" release="5.el8_10" epoch="0" arch="s390x" src="gstreamer1-plugins-base-1.16.1-5.el8_10.src.rpm">
          <filename>gstreamer1-plugins-base-1.16.1-5.el8_10.s390x.rpm</filename>
          <sum type="sha256">1524a55031ffa32c9d6354f752734c56474dc6f3ccc75f719544719cf59e64c9</sum>
        </package>
        <package name="gstreamer1-plugins-base-devel" version="1.16.1" release="5.el8_10" epoch="0" arch="s390x" src="gstreamer1-plugins-base-1.16.1-5.el8_10.src.rpm">
          <filename>gstreamer1-plugins-base-devel-1.16.1-5.el8_10.s390x.rpm</filename>
          <sum type="sha256">731019316622a547520a1f5d9969a34617d04916465f53291343cdeb81c85f8e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1308</id>
    <title>Moderate: .NET 7.0 security update</title>
    <issued date="2024-03-13 00:00:00"/>
    <updated date="2024-03-14 09:56:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.117 and .NET Runtime 7.0.17.

Security Fix(es):

* dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1308" id="RHSA-2024:1308" type="rhsa" title="RHSA-2024:1308"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21392" id="CVE-2024-21392" type="cve" title="CVE-2024-21392"/>
      <reference href="https://bugzilla.redhat.com/2268266" id="2268266" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1308.html" id="ALSA-2024:1308" type="self" title="ALSA-2024:1308"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="dotnet-sdk-7.0" version="7.0.117" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.117-1.el8_9.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.117-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">2b81aafbd251f40dbe4c4f59f50e879bb214ca55ee4a4417434a700cf17511d9</sum>
        </package>
        <package name="dotnet-apphost-pack-7.0" version="7.0.17" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.117-1.el8_9.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.17-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">2c3d8f6ba5f5abb493706f472f2501d72743dd14c22fc2c24d238d87d2d09600</sum>
        </package>
        <package name="aspnetcore-runtime-7.0" version="7.0.17" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.117-1.el8_9.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.17-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">327ba457f99bf8d7e1f6fde4a78d2cc5644e72e87aaf0060cc295407f200f13d</sum>
        </package>
        <package name="dotnet-targeting-pack-7.0" version="7.0.17" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.117-1.el8_9.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.17-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">4c9aa215897a88a4ff17b59545bebe865aaf7c9187bc38329de4171c66404e4f</sum>
        </package>
        <package name="dotnet-hostfxr-7.0" version="7.0.17" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.117-1.el8_9.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.17-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">56c033768281b522ffde9b541461c0b5652be1c2fc5f4ac3fc74b21a4935ce2f</sum>
        </package>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.17" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.117-1.el8_9.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.17-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">9808daa1c1e49319c173869ccc783f4bb55388beffdabb9246a51db4b7b146f7</sum>
        </package>
        <package name="dotnet-templates-7.0" version="7.0.117" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.117-1.el8_9.src.rpm">
          <filename>dotnet-templates-7.0-7.0.117-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">af4b9ea7e0912d868caa3dbc8178ad58225543f40cf3cd4a802bc70fdf0835fb</sum>
        </package>
        <package name="dotnet-runtime-7.0" version="7.0.17" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.117-1.el8_9.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.17-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">e7942c6373397015745f905eb7dfd7c4070bf83211a28d315aea56e083821ade</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1311</id>
    <title>Moderate: .NET 8.0 security update</title>
    <issued date="2024-03-13 00:00:00"/>
    <updated date="2024-03-14 09:41:29"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.103 and .NET Runtime 8.0.3.

Security Fix(es):

* dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1311" id="RHSA-2024:1311" type="rhsa" title="RHSA-2024:1311"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21392" id="CVE-2024-21392" type="cve" title="CVE-2024-21392"/>
      <reference href="https://bugzilla.redhat.com/2268266" id="2268266" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1311.html" id="ALSA-2024:1311" type="self" title="ALSA-2024:1311"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="netstandard-targeting-pack-2.1" version="8.0.103" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-1.el8_9.src.rpm">
          <filename>netstandard-targeting-pack-2.1-8.0.103-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">21a7348fd19255cf75db3ce4bf5992615d8019a0674c543622a2c00f75dccf42</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.3" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-1.el8_9.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.3-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">2cd7e06ec081613cfd247973a433a591ae68b254f1f352f4fece28b3c690cba1</sum>
        </package>
        <package name="dotnet-host" version="8.0.3" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-1.el8_9.src.rpm">
          <filename>dotnet-host-8.0.3-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">7506417300f6b78f5c984faf1e8768a1f20ed45e8fe7f058a851cff5fa07c18a</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.103" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-1.el8_9.src.rpm">
          <filename>dotnet-templates-8.0-8.0.103-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">7c76d85c9606c8c179028fcf8acb7537d4d94e0dbfa7d1e5d0aba12d00d02a4b</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.3" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-1.el8_9.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.3-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">879d091d5f74ef9cb3c402d751d9043dbdb0005fd0b2b6bc72c418e639f63d93</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.3" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-1.el8_9.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.3-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">8c414814b7d5bec3d29dd085f2c258dbf809392492aea9ba6c8bd2203e2a6955</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.3" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-1.el8_9.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.3-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">96359e97d4c08d79703424f7e5056b3e09450e6fd18937a96bd8ed881e28c196</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.3" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-1.el8_9.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.3-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">ac57a015b8954d3a7037bc0c2de2d2950ac65f1a9efab4dd7a2031c104ba8fa3</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.103" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-1.el8_9.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.103-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">be0a9b29444700d97baf711e7521f85b643ddbe1e5e15fe6c40c21315c7d9ad9</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.3" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-1.el8_9.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.3-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">d9fec09d39195ce8e571f1192cb007ea30f761b1b1908e76ea62eb0ba826869e</sum>
        </package>
        <package name="dotnet" version="8.0.103" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-1.el8_9.src.rpm">
          <filename>dotnet-8.0.103-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">ecbc696cd851bfbdce5cc92fe2405ffd46d6600bdff829772c5d75b5f105322d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1335</id>
    <title>Important: dnsmasq security update</title>
    <issued date="2024-03-14 00:00:00"/>
    <updated date="2024-03-18 08:24:00"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dnsmasq security update</summary>
    <description>The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.

Security Fix(es):

* dnsmasq: bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
* dnsmasq: bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1335" id="RHSA-2024:1335" type="rhsa" title="RHSA-2024:1335"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50387" id="CVE-2023-50387" type="cve" title="CVE-2023-50387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50868" id="CVE-2023-50868" type="cve" title="CVE-2023-50868"/>
      <reference href="https://bugzilla.redhat.com/2263914" id="2263914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263917" id="2263917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1335.html" id="ALSA-2024:1335" type="self" title="ALSA-2024:1335"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="dnsmasq" version="2.79" release="31.el8_9.2" epoch="0" arch="s390x" src="dnsmasq-2.79-31.el8_9.2.src.rpm">
          <filename>dnsmasq-2.79-31.el8_9.2.s390x.rpm</filename>
          <sum type="sha256">7698d8d8a961b8443224afa62865a72c8948d6b8445d81654a17e1daa65c2ca0</sum>
        </package>
        <package name="dnsmasq-utils" version="2.79" release="31.el8_9.2" epoch="0" arch="s390x" src="dnsmasq-2.79-31.el8_9.2.src.rpm">
          <filename>dnsmasq-utils-2.79-31.el8_9.2.s390x.rpm</filename>
          <sum type="sha256">f853b7a1a7f82f46c0848f7385bdba0bbba77327a5d948e4e86155b8e6adf4e3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1375</id>
    <title>Important: squid:4 security update</title>
    <issued date="2024-03-19 00:00:00"/>
    <updated date="2024-04-12 18:59:09"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>squid:4 security update</summary>
    <description>Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

* squid: denial of service in HTTP header parser (CVE-2024-25617)
* squid: Denial of Service in HTTP Chunked Decoding (CVE-2024-25111)
* squid: denial of service in HTTP request parsing (CVE-2023-50269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1375" id="RHSA-2024:1375" type="rhsa" title="RHSA-2024:1375"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50269" id="CVE-2023-50269" type="cve" title="CVE-2023-50269"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25111" id="CVE-2024-25111" type="cve" title="CVE-2024-25111"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25617" id="CVE-2024-25617" type="cve" title="CVE-2024-25617"/>
      <reference href="https://bugzilla.redhat.com/2254663" id="2254663" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2264309" id="2264309" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268366" id="2268366" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1375.html" id="ALSA-2024:1375" type="self" title="ALSA-2024:1375"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="squid" stream="4" version="8090020240322074508" context="9edba152" arch="s390x"/>
        <package name="squid" version="4.15" release="7.module_el8.9.0+3749+dbf371ed.10" epoch="7" arch="s390x" src="squid-4.15-7.module_el8.9.0+3749+dbf371ed.10.src.rpm">
          <filename>squid-4.15-7.module_el8.9.0+3749+dbf371ed.10.s390x.rpm</filename>
          <sum type="sha256">0b229790cf4ec048d7ce48ddf16d386013bb74a9dd6d2fd73b7a6c4ed30ba224</sum>
        </package>
        <package name="libecap" version="1.0.1" release="2.module_el8.6.0+3048+383bc947" epoch="0" arch="s390x" src="libecap-1.0.1-2.module_el8.6.0+3048+383bc947.src.rpm">
          <filename>libecap-1.0.1-2.module_el8.6.0+3048+383bc947.s390x.rpm</filename>
          <sum type="sha256">6f8eb1f500a9dca1949f5f05aedf6b97764817d9f17284be3612eec04618f4e1</sum>
        </package>
        <package name="libecap-devel" version="1.0.1" release="2.module_el8.6.0+3048+383bc947" epoch="0" arch="s390x" src="libecap-1.0.1-2.module_el8.6.0+3048+383bc947.src.rpm">
          <filename>libecap-devel-1.0.1-2.module_el8.6.0+3048+383bc947.s390x.rpm</filename>
          <sum type="sha256">96f15e87a90682f6ec87bc4ed7c8edae439f414cd0382f1865dcf76ac3a7807d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1431</id>
    <title>Moderate: ruby:3.1 security, bug fix, and enhancement update</title>
    <issued date="2024-03-19 00:00:00"/>
    <updated date="2024-03-21 12:50:55"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby:3.1 security, bug fix, and enhancement update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.1). (AlmaLinux-28565)

Security Fix(es):

* ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
* ruby: ReDoS vulnerability in URI (CVE-2023-28755)
* ruby: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)
* ruby: ReDoS vulnerability in Time (CVE-2023-28756)

Bug Fix(es):

* ruby/rubygem-irb: IRB has hard dependency on rubygem-rdoc (AlmaLinux-28569)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1431" id="RHSA-2024:1431" type="rhsa" title="RHSA-2024:1431"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33621" id="CVE-2021-33621" type="cve" title="CVE-2021-33621"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28755" id="CVE-2023-28755" type="cve" title="CVE-2023-28755"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28756" id="CVE-2023-28756" type="cve" title="CVE-2023-28756"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36617" id="CVE-2023-36617" type="cve" title="CVE-2023-36617"/>
      <reference href="https://bugzilla.redhat.com/2149706" id="2149706" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184059" id="2184059" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184061" id="2184061" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218614" id="2218614" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1431.html" id="ALSA-2024:1431" type="self" title="ALSA-2024:1431"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="ruby" stream="3.1" version="8090020240320105341" context="9edba152" arch="s390x"/>
        <package name="ruby-default-gems" version="3.1.4" release="142.module_el8.9.0+3746+91b8233a" epoch="0" arch="noarch" src="ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>ruby-default-gems-3.1.4-142.module_el8.9.0+3746+91b8233a.noarch.rpm</filename>
          <sum type="sha256">192f5bd5dd02cd99a650451c708c422c9413e7fee2cb136da5fcafa26fcaaf33</sum>
        </package>
        <package name="rubygems-devel" version="3.3.26" release="142.module_el8.9.0+3746+91b8233a" epoch="0" arch="noarch" src="ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygems-devel-3.3.26-142.module_el8.9.0+3746+91b8233a.noarch.rpm</filename>
          <sum type="sha256">210a558edc0139e22f0384b30e649b6893c6f7284a49a653acdc1e45a01afaf5</sum>
        </package>
        <package name="rubygem-minitest" version="5.15.0" release="142.module_el8.9.0+3746+91b8233a" epoch="0" arch="noarch" src="ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-minitest-5.15.0-142.module_el8.9.0+3746+91b8233a.noarch.rpm</filename>
          <sum type="sha256">2b0001e8f3c7d5bae5df20a98bf9fead8a89af201aa1f1ff1b0b9de2183f51e7</sum>
        </package>
        <package name="ruby-libs" version="3.1.4" release="142.module_el8.9.0+3746+91b8233a" epoch="0" arch="s390x" src="ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>ruby-libs-3.1.4-142.module_el8.9.0+3746+91b8233a.s390x.rpm</filename>
          <sum type="sha256">2c3ef86d2f8b7d1a0beaa1595dec2aca6049d12ed4324f5a41dd0132b2781422</sum>
        </package>
        <package name="rubygem-typeprof" version="0.21.3" release="142.module_el8.9.0+3746+91b8233a" epoch="0" arch="noarch" src="ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-typeprof-0.21.3-142.module_el8.9.0+3746+91b8233a.noarch.rpm</filename>
          <sum type="sha256">329b1ee1d7dff419463fa05f3e1d98317a197e86c5980f9db02822f8d93c9317</sum>
        </package>
        <package name="rubygem-rake" version="13.0.6" release="142.module_el8.9.0+3746+91b8233a" epoch="0" arch="noarch" src="ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-rake-13.0.6-142.module_el8.9.0+3746+91b8233a.noarch.rpm</filename>
          <sum type="sha256">441952af74becb133825706b26c16c16689b297ddde4b9b0e719c5eb7046150e</sum>
        </package>
        <package name="rubygem-pg" version="1.3.2" release="1.module_el8.7.0+3304+9392e77f" epoch="0" arch="s390x" src="rubygem-pg-1.3.2-1.module_el8.7.0+3304+9392e77f.src.rpm">
          <filename>rubygem-pg-1.3.2-1.module_el8.7.0+3304+9392e77f.s390x.rpm</filename>
          <sum type="sha256">454f1d2b472d38004c448eed271c173aa5be1fef8150cd3fa73c9b4b3bcfc2ba</sum>
        </package>
        <package name="rubygem-power_assert" version="2.0.1" release="142.module_el8.9.0+3746+91b8233a" epoch="0" arch="noarch" src="ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-power_assert-2.0.1-142.module_el8.9.0+3746+91b8233a.noarch.rpm</filename>
          <sum type="sha256">4b9d0d0b9dbfbc9d2d9851abdecf1a944ac25ea53cec8a16f63a3e938fb88dec</sum>
        </package>
        <package name="ruby-bundled-gems" version="3.1.4" release="142.module_el8.9.0+3746+91b8233a" epoch="0" arch="s390x" src="ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>ruby-bundled-gems-3.1.4-142.module_el8.9.0+3746+91b8233a.s390x.rpm</filename>
          <sum type="sha256">549de138befe91037b6e4b055f31ee2ef5040af91a94a1ae1d599ee6f30aed6a</sum>
        </package>
        <package name="ruby-devel" version="3.1.4" release="142.module_el8.9.0+3746+91b8233a" epoch="0" arch="s390x" src="ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>ruby-devel-3.1.4-142.module_el8.9.0+3746+91b8233a.s390x.rpm</filename>
          <sum type="sha256">6ac7f3cfda31cdaf941d4077485aeff9db5f15695eae94637e6c915bd8783cbe</sum>
        </package>
        <package name="rubygem-abrt-doc" version="0.4.0" release="1.module_el8.7.0+3304+9392e77f" epoch="0" arch="noarch" src="rubygem-abrt-0.4.0-1.module_el8.7.0+3304+9392e77f.src.rpm">
          <filename>rubygem-abrt-doc-0.4.0-1.module_el8.7.0+3304+9392e77f.noarch.rpm</filename>
          <sum type="sha256">7284beeddeaba713c34bd281bd7e5d501d457d0e37b903a071556fd1ac7a060f</sum>
        </package>
        <package name="rubygems" version="3.3.26" release="142.module_el8.9.0+3746+91b8233a" epoch="0" arch="noarch" src="ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygems-3.3.26-142.module_el8.9.0+3746+91b8233a.noarch.rpm</filename>
          <sum type="sha256">7e8d93cdd6a3ca704cb7b96db6c5e507e630a43c78de3cd0792587d4d7d66374</sum>
        </package>
        <package name="ruby-doc" version="3.1.4" release="142.module_el8.9.0+3746+91b8233a" epoch="0" arch="noarch" src="ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>ruby-doc-3.1.4-142.module_el8.9.0+3746+91b8233a.noarch.rpm</filename>
          <sum type="sha256">81cda5999332a197ff35f8c64be1ea3d886ccce78b9b4b1228ed0d3bd9fd53fe</sum>
        </package>
        <package name="rubygem-rss" version="0.2.9" release="142.module_el8.9.0+3746+91b8233a" epoch="0" arch="noarch" src="ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-rss-0.2.9-142.module_el8.9.0+3746+91b8233a.noarch.rpm</filename>
          <sum type="sha256">847ae5c73ee44b14ff9e5358e36cba8d29bc39769bacc37f44ae6dc9ab652c04</sum>
        </package>
        <package name="rubygem-mysql2" version="0.5.3" release="3.module_el8.9.0+3746+91b8233a" epoch="0" arch="s390x" src="rubygem-mysql2-0.5.3-3.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-mysql2-0.5.3-3.module_el8.9.0+3746+91b8233a.s390x.rpm</filename>
          <sum type="sha256">918f33bb63f2437177e2ccc66781a31b62f2b20d0a0b1449cef7c7359b24eb9d</sum>
        </package>
        <package name="rubygem-rbs" version="2.7.0" release="142.module_el8.9.0+3746+91b8233a" epoch="0" arch="s390x" src="ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-rbs-2.7.0-142.module_el8.9.0+3746+91b8233a.s390x.rpm</filename>
          <sum type="sha256">a3edd52f3d6b3541776e9c03ae18954f4f869f86535ae86f341d77da7b32d103</sum>
        </package>
        <package name="rubygem-pg-doc" version="1.3.2" release="1.module_el8.7.0+3304+9392e77f" epoch="0" arch="noarch" src="rubygem-pg-1.3.2-1.module_el8.7.0+3304+9392e77f.src.rpm">
          <filename>rubygem-pg-doc-1.3.2-1.module_el8.7.0+3304+9392e77f.noarch.rpm</filename>
          <sum type="sha256">a4a83fd3f4b27a2a7051057f8b565f6b0808f755deb1d8f592085c5313236d46</sum>
        </package>
        <package name="rubygem-bigdecimal" version="3.1.1" release="142.module_el8.9.0+3746+91b8233a" epoch="0" arch="s390x" src="ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-bigdecimal-3.1.1-142.module_el8.9.0+3746+91b8233a.s390x.rpm</filename>
          <sum type="sha256">a6bfe2597c9577fb052bf5304da9d257c3d319f688e317d41a2d724f40970904</sum>
        </package>
        <package name="rubygem-rexml" version="3.2.5" release="142.module_el8.9.0+3746+91b8233a" epoch="0" arch="noarch" src="ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-rexml-3.2.5-142.module_el8.9.0+3746+91b8233a.noarch.rpm</filename>
          <sum type="sha256">aa6b1f6e62d0f7d8df63fb09afe0cc712ee45767e6d8f3ae768508fa2a4b566c</sum>
        </package>
        <package name="rubygem-irb" version="1.4.1" release="142.module_el8.9.0+3746+91b8233a" epoch="0" arch="noarch" src="ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-irb-1.4.1-142.module_el8.9.0+3746+91b8233a.noarch.rpm</filename>
          <sum type="sha256">abe99e3c5e34472e68bf8105272138114535c13fc69495b9240ab51827beb034</sum>
        </package>
        <package name="rubygem-mysql2-doc" version="0.5.3" release="3.module_el8.9.0+3746+91b8233a" epoch="0" arch="noarch" src="rubygem-mysql2-0.5.3-3.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-mysql2-doc-0.5.3-3.module_el8.9.0+3746+91b8233a.noarch.rpm</filename>
          <sum type="sha256">b041e7b43395ddba070a6629f247dce8d99b56956940ee94a67a0a2e0ee1fd0a</sum>
        </package>
        <package name="rubygem-io-console" version="0.5.11" release="142.module_el8.9.0+3746+91b8233a" epoch="0" arch="s390x" src="ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-io-console-0.5.11-142.module_el8.9.0+3746+91b8233a.s390x.rpm</filename>
          <sum type="sha256">b6b643b2d2739f48f90f1fdbb5e70ad69c91e92c97bbf535033ffca0c08b009a</sum>
        </package>
        <package name="ruby" version="3.1.4" release="142.module_el8.9.0+3746+91b8233a" epoch="0" arch="s390x" src="ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.s390x.rpm</filename>
          <sum type="sha256">bbb49181acca558548a2655c8211a8a6ab5241946ce75f3abfd5f642464d5f86</sum>
        </package>
        <package name="rubygem-json" version="2.6.1" release="142.module_el8.9.0+3746+91b8233a" epoch="0" arch="s390x" src="ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-json-2.6.1-142.module_el8.9.0+3746+91b8233a.s390x.rpm</filename>
          <sum type="sha256">bfdefc37caae2ec2a8ab5ae185637b3f5462e2729c471478685a7723468920f7</sum>
        </package>
        <package name="rubygem-psych" version="4.0.4" release="142.module_el8.9.0+3746+91b8233a" epoch="0" arch="s390x" src="ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-psych-4.0.4-142.module_el8.9.0+3746+91b8233a.s390x.rpm</filename>
          <sum type="sha256">c4d8b05dae8a9a632a6f3db44f45e472b9603446696f4c6f3c7eefa27632f5e0</sum>
        </package>
        <package name="rubygem-abrt" version="0.4.0" release="1.module_el8.7.0+3304+9392e77f" epoch="0" arch="noarch" src="rubygem-abrt-0.4.0-1.module_el8.7.0+3304+9392e77f.src.rpm">
          <filename>rubygem-abrt-0.4.0-1.module_el8.7.0+3304+9392e77f.noarch.rpm</filename>
          <sum type="sha256">d0c3a8805919b1a45e1a94ae66d42bd18521e5391d4637af60fe14f291c63a5d</sum>
        </package>
        <package name="rubygem-rdoc" version="6.4.0" release="142.module_el8.9.0+3746+91b8233a" epoch="0" arch="noarch" src="ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-rdoc-6.4.0-142.module_el8.9.0+3746+91b8233a.noarch.rpm</filename>
          <sum type="sha256">d5e0640a46a0fbf7077f45eab94c3d058c4b73c7ae8d4d5ccaa70eaea16f9cc7</sum>
        </package>
        <package name="rubygem-bundler" version="2.3.26" release="142.module_el8.9.0+3746+91b8233a" epoch="0" arch="noarch" src="ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-bundler-2.3.26-142.module_el8.9.0+3746+91b8233a.noarch.rpm</filename>
          <sum type="sha256">eae2d27f73136478a142a0c73a9ae8009d93b972d7be6ece9e7b232693102c90</sum>
        </package>
        <package name="rubygem-test-unit" version="3.5.3" release="142.module_el8.9.0+3746+91b8233a" epoch="0" arch="noarch" src="ruby-3.1.4-142.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-test-unit-3.5.3-142.module_el8.9.0+3746+91b8233a.noarch.rpm</filename>
          <sum type="sha256">f91dbc228aa2dbd9650d6b73d33575c722762b6c7fe5bb641c1dae27a3aacb75</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1435</id>
    <title>Important: postgresql-jdbc security update</title>
    <issued date="2024-03-20 00:00:00"/>
    <updated date="2024-03-21 08:51:52"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql-jdbc security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database.

Security Fix(es):

* PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE (CVE-2024-1597)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1435" id="RHSA-2024:1435" type="rhsa" title="RHSA-2024:1435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1597" id="CVE-2024-1597" type="cve" title="CVE-2024-1597"/>
      <reference href="https://bugzilla.redhat.com/2266523" id="2266523" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1435.html" id="ALSA-2024:1435" type="self" title="ALSA-2024:1435"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="postgresql-jdbc" version="42.2.14" release="3.el8_9" epoch="0" arch="noarch" src="postgresql-jdbc-42.2.14-3.el8_9.src.rpm">
          <filename>postgresql-jdbc-42.2.14-3.el8_9.noarch.rpm</filename>
          <sum type="sha256">26c64d5f2ca9d17567e12eaf7ed747502c4b4e413bce2edbc37f18e064d41fa3</sum>
        </package>
        <package name="postgresql-jdbc-javadoc" version="42.2.14" release="3.el8_9" epoch="0" arch="noarch" src="postgresql-jdbc-42.2.14-3.el8_9.src.rpm">
          <filename>postgresql-jdbc-javadoc-42.2.14-3.el8_9.noarch.rpm</filename>
          <sum type="sha256">c46815c60729af5b20b1333f170a7b69e01c7facfaa6d4019c6dbe629676c879</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1444</id>
    <title>Important: nodejs:16 security update</title>
    <issued date="2024-03-20 00:00:00"/>
    <updated date="2024-03-21 14:33:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:16 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

Security Fix(es):

* nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks (CVE-2024-22019)
* nodejs: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1444" id="RHSA-2024:1444" type="rhsa" title="RHSA-2024:1444"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22019" id="CVE-2024-22019" type="cve" title="CVE-2024-22019"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2264574" id="2264574" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1444.html" id="ALSA-2024:1444" type="self" title="ALSA-2024:1444"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="nodejs" stream="16" version="8090020240321070239" context="9edba152" arch="s390x"/>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.8.0+3614+204d6f43" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.8.0+3614+204d6f43.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.8.0+3614+204d6f43.noarch.rpm</filename>
          <sum type="sha256">2b8db0b6778841b5b0d2e3e86ff1391c8b370f251408760a942901ec43e8c298</sum>
        </package>
        <package name="nodejs-packaging" version="26" release="1.module_el8.8.0+3614+204d6f43" epoch="0" arch="noarch" src="nodejs-packaging-26-1.module_el8.8.0+3614+204d6f43.src.rpm">
          <filename>nodejs-packaging-26-1.module_el8.8.0+3614+204d6f43.noarch.rpm</filename>
          <sum type="sha256">55ff8b1958f44d03607bb59c4e3229e1bc8b05fa82bcc87babfe8f2b25c1c841</sum>
        </package>
        <package name="nodejs" version="16.20.2" release="4.module_el8.9.0+3747+ead8229c" epoch="1" arch="s390x" src="nodejs-16.20.2-4.module_el8.9.0+3747+ead8229c.src.rpm">
          <filename>nodejs-16.20.2-4.module_el8.9.0+3747+ead8229c.s390x.rpm</filename>
          <sum type="sha256">9daa85d85c154e32f9ab7dbc924d1657e140d4b3917c2ddbc663fc5700c1a105</sum>
        </package>
        <package name="nodejs-docs" version="16.20.2" release="4.module_el8.9.0+3747+ead8229c" epoch="1" arch="noarch" src="nodejs-16.20.2-4.module_el8.9.0+3747+ead8229c.src.rpm">
          <filename>nodejs-docs-16.20.2-4.module_el8.9.0+3747+ead8229c.noarch.rpm</filename>
          <sum type="sha256">ab411dbc2c275237ac49a6939a4c9e25b2457b5fb675188fcd074f8a1f67d5f4</sum>
        </package>
        <package name="npm" version="8.19.4" release="1.16.20.2.4.module_el8.9.0+3747+ead8229c" epoch="1" arch="s390x" src="nodejs-16.20.2-4.module_el8.9.0+3747+ead8229c.src.rpm">
          <filename>npm-8.19.4-1.16.20.2.4.module_el8.9.0+3747+ead8229c.s390x.rpm</filename>
          <sum type="sha256">cfb9d26c7a566d79f410c2240a45bd766af953c492059c7ba8e2c9d576c0646a</sum>
        </package>
        <package name="nodejs-full-i18n" version="16.20.2" release="4.module_el8.9.0+3747+ead8229c" epoch="1" arch="s390x" src="nodejs-16.20.2-4.module_el8.9.0+3747+ead8229c.src.rpm">
          <filename>nodejs-full-i18n-16.20.2-4.module_el8.9.0+3747+ead8229c.s390x.rpm</filename>
          <sum type="sha256">f034689549356f3a3484df76a4f02a0dd4a3f43a95059361f35e802f3c38dee5</sum>
        </package>
        <package name="nodejs-devel" version="16.20.2" release="4.module_el8.9.0+3747+ead8229c" epoch="1" arch="s390x" src="nodejs-16.20.2-4.module_el8.9.0+3747+ead8229c.src.rpm">
          <filename>nodejs-devel-16.20.2-4.module_el8.9.0+3747+ead8229c.s390x.rpm</filename>
          <sum type="sha256">f3518869071ecf6738a477eea944de125e43efbdc07c15f34df1a533a7e7006c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1472</id>
    <title>Important: go-toolset:rhel8 security update</title>
    <issued date="2024-03-21 00:00:00"/>
    <updated date="2024-03-22 09:53:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>go-toolset:rhel8 security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. 

Security Fix(es):

* golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1472" id="RHSA-2024:1472" type="rhsa" title="RHSA-2024:1472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1394" id="CVE-2024-1394" type="cve" title="CVE-2024-1394"/>
      <reference href="https://bugzilla.redhat.com/2262921" id="2262921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1472.html" id="ALSA-2024:1472" type="self" title="ALSA-2024:1472"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="go-toolset" stream="rhel8" version="8090020240322074549" context="9edba152" arch="s390x"/>
        <package name="golang" version="1.20.12" release="3.module_el8.9.0+3750+10f4110d" epoch="0" arch="s390x" src="golang-1.20.12-3.module_el8.9.0+3750+10f4110d.src.rpm">
          <filename>golang-1.20.12-3.module_el8.9.0+3750+10f4110d.s390x.rpm</filename>
          <sum type="sha256">0074551403921558e1217e165f8b7d6015235aac82dc6c59738021377970c4fb</sum>
        </package>
        <package name="golang-bin" version="1.20.12" release="3.module_el8.9.0+3750+10f4110d" epoch="0" arch="s390x" src="golang-1.20.12-3.module_el8.9.0+3750+10f4110d.src.rpm">
          <filename>golang-bin-1.20.12-3.module_el8.9.0+3750+10f4110d.s390x.rpm</filename>
          <sum type="sha256">219a5e6efcf1b911bb18fb21e2e8c5dd0506eadabf6091299f7691f3776682b7</sum>
        </package>
        <package name="golang-src" version="1.20.12" release="3.module_el8.9.0+3750+10f4110d" epoch="0" arch="noarch" src="golang-1.20.12-3.module_el8.9.0+3750+10f4110d.src.rpm">
          <filename>golang-src-1.20.12-3.module_el8.9.0+3750+10f4110d.noarch.rpm</filename>
          <sum type="sha256">227950dcd1bb063f91923f68684044c76f4faf3a6bb42134c770ae360d746787</sum>
        </package>
        <package name="golang-docs" version="1.20.12" release="3.module_el8.9.0+3750+10f4110d" epoch="0" arch="noarch" src="golang-1.20.12-3.module_el8.9.0+3750+10f4110d.src.rpm">
          <filename>golang-docs-1.20.12-3.module_el8.9.0+3750+10f4110d.noarch.rpm</filename>
          <sum type="sha256">40bc7dee131e0a7b625040e7e0386e793c854f8c14176b466c9657edbe6f3b69</sum>
        </package>
        <package name="golang-misc" version="1.20.12" release="3.module_el8.9.0+3750+10f4110d" epoch="0" arch="noarch" src="golang-1.20.12-3.module_el8.9.0+3750+10f4110d.src.rpm">
          <filename>golang-misc-1.20.12-3.module_el8.9.0+3750+10f4110d.noarch.rpm</filename>
          <sum type="sha256">4e9cb61562d175db0fff8ff2b7bf86da889553e90971928e475d69c0dde30d1f</sum>
        </package>
        <package name="go-toolset" version="1.20.12" release="1.module_el8.9.0+3728+f1d47c6f" epoch="0" arch="s390x" src="go-toolset-1.20.12-1.module_el8.9.0+3728+f1d47c6f.src.rpm">
          <filename>go-toolset-1.20.12-1.module_el8.9.0+3728+f1d47c6f.s390x.rpm</filename>
          <sum type="sha256">7faca76560a577de35bc3154a7837075efd9c8d65ac26e99d125c851bf194b8d</sum>
        </package>
        <package name="golang-tests" version="1.20.12" release="3.module_el8.9.0+3750+10f4110d" epoch="0" arch="noarch" src="golang-1.20.12-3.module_el8.9.0+3750+10f4110d.src.rpm">
          <filename>golang-tests-1.20.12-3.module_el8.9.0+3750+10f4110d.noarch.rpm</filename>
          <sum type="sha256">99bca706861323f26ef4c1ba9db71d87be05e2ba7f0f4ab60fe2358ad3c6a695</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1484</id>
    <title>Critical: firefox security update</title>
    <issued date="2024-03-25 00:00:00"/>
    <updated date="2024-04-03 14:52:34"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards
compliance, performance, and portability.

This update upgrades Firefox to version 115.9.1 ESR.

Security Fix(es):

* nss: timing attack against RSA decryption (CVE-2023-5388)
* Mozilla: Crash in NSS TLS method (CVE-2024-0743)
* Mozilla: JIT code failed to save return registers on Armv7-A (CVE-2024-2607)
* Mozilla: Integer overflow could have led to out of bounds write (CVE-2024-2608)
* Mozilla: Improve handling of out-of-memory conditions in ICU (CVE-2024-2616)
* Mozilla: Improper handling of html and body tags enabled CSP nonce leakage (CVE-2024-2610)
* Mozilla: Clickjacking vulnerability could have led to a user accidentally granting permissions (CVE-2024-2611)
* Mozilla: Self referencing object could have potentially led to a use-after-free (CVE-2024-2612)
* Mozilla: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9 (CVE-2024-2614)
* Mozilla: Privileged JavaScript Execution via Event Handlers (CVE-2024-29944)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1484" id="RHSA-2024:1484" type="rhsa" title="RHSA-2024:1484"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5388" id="CVE-2023-5388" type="cve" title="CVE-2023-5388"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0743" id="CVE-2024-0743" type="cve" title="CVE-2024-0743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2607" id="CVE-2024-2607" type="cve" title="CVE-2024-2607"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2608" id="CVE-2024-2608" type="cve" title="CVE-2024-2608"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2610" id="CVE-2024-2610" type="cve" title="CVE-2024-2610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2611" id="CVE-2024-2611" type="cve" title="CVE-2024-2611"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2612" id="CVE-2024-2612" type="cve" title="CVE-2024-2612"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2614" id="CVE-2024-2614" type="cve" title="CVE-2024-2614"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2616" id="CVE-2024-2616" type="cve" title="CVE-2024-2616"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-29944" id="CVE-2024-29944" type="cve" title="CVE-2024-29944"/>
      <reference href="https://bugzilla.redhat.com/2243644" id="2243644" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2260012" id="2260012" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270660" id="2270660" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270661" id="2270661" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270662" id="2270662" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270663" id="2270663" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270664" id="2270664" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270665" id="2270665" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270666" id="2270666" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271064" id="2271064" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1484.html" id="ALSA-2024:1484" type="self" title="ALSA-2024:1484"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="firefox" version="115.9.1" release="1.el8_9.alma.1" epoch="0" arch="s390x" src="firefox-115.9.1-1.el8_9.alma.1.src.rpm">
          <filename>firefox-115.9.1-1.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">50a6b610429acf53929cddecaf17809da926f534522d6ffb6e17e7cb1ee56c50</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1494</id>
    <title>Moderate: thunderbird security update</title>
    <issued date="2024-03-25 00:00:00"/>
    <updated date="2024-04-04 14:02:37"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.9.0.

Security Fix(es):

* nss: timing attack against RSA decryption (CVE-2023-5388)
* Mozilla: Crash in NSS TLS method (CVE-2024-0743)
* Mozilla: Leaking of encrypted email subjects to other conversations  (CVE-2024-1936)
* Mozilla: JIT code failed to save return registers on Armv7-A (CVE-2024-2607)
* Mozilla: Integer overflow could have led to out of bounds write
(CVE-2024-2608)
* Mozilla: Improper handling of html and body tags enabled CSP nonce leakage
(CVE-2024-2610)
* Mozilla: Clickjacking vulnerability could have led to a user accidentally
granting permissions (CVE-2024-2611)
* Mozilla: Self referencing object could have potentially led to a
use-after-free (CVE-2024-2612)
* Mozilla: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and
Thunderbird 115.9 (CVE-2024-2614)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1494" id="RHSA-2024:1494" type="rhsa" title="RHSA-2024:1494"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5388" id="CVE-2023-5388" type="cve" title="CVE-2023-5388"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0743" id="CVE-2024-0743" type="cve" title="CVE-2024-0743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1936" id="CVE-2024-1936" type="cve" title="CVE-2024-1936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2607" id="CVE-2024-2607" type="cve" title="CVE-2024-2607"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2608" id="CVE-2024-2608" type="cve" title="CVE-2024-2608"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2610" id="CVE-2024-2610" type="cve" title="CVE-2024-2610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2611" id="CVE-2024-2611" type="cve" title="CVE-2024-2611"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2612" id="CVE-2024-2612" type="cve" title="CVE-2024-2612"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2614" id="CVE-2024-2614" type="cve" title="CVE-2024-2614"/>
      <reference href="https://bugzilla.redhat.com/2243644" id="2243644" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2260012" id="2260012" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268171" id="2268171" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270660" id="2270660" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270661" id="2270661" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270663" id="2270663" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270664" id="2270664" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270665" id="2270665" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270666" id="2270666" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1494.html" id="ALSA-2024:1494" type="self" title="ALSA-2024:1494"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="thunderbird" version="115.9.0" release="1.el8_9.alma.1" epoch="0" arch="s390x" src="thunderbird-115.9.0-1.el8_9.alma.1.src.rpm">
          <filename>thunderbird-115.9.0-1.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">a47be420a602a0699c2d33dba60e7f464fdb630f557c92fad2055925bb048b91</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1510</id>
    <title>Important: nodejs:18 security update</title>
    <issued date="2024-03-26 00:00:00"/>
    <updated date="2024-04-02 11:46:33"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:18 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable
network applications in the JavaScript programming language.

Security Fix(es):

* nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks (CVE-2024-22019)
* nodejs: vulnerable to timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding (Marvin) (CVE-2023-46809)
* nodejs: code injection and privilege escalation through Linux capabilities (CVE-2024-21892)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1510" id="RHSA-2024:1510" type="rhsa" title="RHSA-2024:1510"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46809" id="CVE-2023-46809" type="cve" title="CVE-2023-46809"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21892" id="CVE-2024-21892" type="cve" title="CVE-2024-21892"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22019" id="CVE-2024-22019" type="cve" title="CVE-2024-22019"/>
      <reference href="https://bugzilla.redhat.com/2264569" id="2264569" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2264574" id="2264574" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2264582" id="2264582" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1510.html" id="ALSA-2024:1510" type="self" title="ALSA-2024:1510"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="nodejs" stream="18" version="8090020240402085206" context="9edba152" arch="s390x"/>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.8.0+3613+1ed8c91d" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.8.0+3613+1ed8c91d.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.8.0+3613+1ed8c91d.noarch.rpm</filename>
          <sum type="sha256">1de153a1170baeaa24f02ebd86d32d508ac48ea9ed54e2a70c5250a81952a65b</sum>
        </package>
        <package name="nodejs-full-i18n" version="18.19.1" release="1.module_el8.9.0+3753+4de0891b" epoch="1" arch="s390x" src="nodejs-18.19.1-1.module_el8.9.0+3753+4de0891b.src.rpm">
          <filename>nodejs-full-i18n-18.19.1-1.module_el8.9.0+3753+4de0891b.s390x.rpm</filename>
          <sum type="sha256">76ab4c516ffc87f7b1ad69ee51fe8f3108d9e63c1a7b8f9327a9bb51a2e06480</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el8.7.0+3343+ea2b7901" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.noarch.rpm</filename>
          <sum type="sha256">9430d44c78a3cfbe1ae3d39b8531f651606661943959bc0c3de87b2f91ea6f67</sum>
        </package>
        <package name="nodejs" version="18.19.1" release="1.module_el8.9.0+3753+4de0891b" epoch="1" arch="s390x" src="nodejs-18.19.1-1.module_el8.9.0+3753+4de0891b.src.rpm">
          <filename>nodejs-18.19.1-1.module_el8.9.0+3753+4de0891b.s390x.rpm</filename>
          <sum type="sha256">9bd562bd1fae65f2d262de69f857bbfe83b41e9c9d0eab3df791f4c226e8b04f</sum>
        </package>
        <package name="npm" version="10.2.4" release="1.18.19.1.1.module_el8.9.0+3753+4de0891b" epoch="1" arch="s390x" src="nodejs-18.19.1-1.module_el8.9.0+3753+4de0891b.src.rpm">
          <filename>npm-10.2.4-1.18.19.1.1.module_el8.9.0+3753+4de0891b.s390x.rpm</filename>
          <sum type="sha256">a6343500fc8d38a9858e57d18c8d06bb5e6258979b05e9537f23da63d9052e4b</sum>
        </package>
        <package name="nodejs-devel" version="18.19.1" release="1.module_el8.9.0+3753+4de0891b" epoch="1" arch="s390x" src="nodejs-18.19.1-1.module_el8.9.0+3753+4de0891b.src.rpm">
          <filename>nodejs-devel-18.19.1-1.module_el8.9.0+3753+4de0891b.s390x.rpm</filename>
          <sum type="sha256">c361d9cc5ad83236a363be0e668dd4485b1c8633ae01ba849508574813c6ccef</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el8.7.0+3343+ea2b7901" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el8.7.0+3343+ea2b7901.noarch.rpm</filename>
          <sum type="sha256">dca36d100028686323583aeddaa86efff902ff7fe29cb97d4356c309e3e899d9</sum>
        </package>
        <package name="nodejs-docs" version="18.19.1" release="1.module_el8.9.0+3753+4de0891b" epoch="1" arch="noarch" src="nodejs-18.19.1-1.module_el8.9.0+3753+4de0891b.src.rpm">
          <filename>nodejs-docs-18.19.1-1.module_el8.9.0+3753+4de0891b.noarch.rpm</filename>
          <sum type="sha256">ebea7b81320dda8e124a35df8f8a7490d9af812e97bcc2657271e0c4a6432452</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1514</id>
    <title>Important: libreoffice security fix update</title>
    <issued date="2024-03-26 00:00:00"/>
    <updated date="2024-04-09 06:59:53"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libreoffice security fix update</summary>
    <description>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

Security Fix(es):

* libreoffice: Improper Input Validation leading to arbitrary gstreamer plugin execution (CVE-2023-6185)
* libreoffice: Insufficient macro permission validation leading to macro execution (CVE-2023-6186)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1514" id="RHSA-2024:1514" type="rhsa" title="RHSA-2024:1514"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6185" id="CVE-2023-6185" type="cve" title="CVE-2023-6185"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6186" id="CVE-2023-6186" type="cve" title="CVE-2023-6186"/>
      <reference href="https://bugzilla.redhat.com/2254003" id="2254003" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254005" id="2254005" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1514.html" id="ALSA-2024:1514" type="self" title="ALSA-2024:1514"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="autocorr-sr" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-sr-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">0b6de9ec9bb8dfa78c97474aab5b26a0b8d64cd459bc15001da8a4e664c50554</sum>
        </package>
        <package name="autocorr-vi" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-vi-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">0c7e9ea95155bd8c57f6c94bbf5c336ced8a703d4c371e61ae2136dd49881d6c</sum>
        </package>
        <package name="autocorr-cs" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-cs-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">1502d76c9bd175ba0030f854ecfa65b9074ded852a151c34b94110f1e43c766d</sum>
        </package>
        <package name="autocorr-is" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-is-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">1a18c92371f27246c5bf507d58cf9f58cc2e3e7eb0d30f10a0a442739fd223bf</sum>
        </package>
        <package name="autocorr-it" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-it-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">1b8fb0205c08156042fb967ab3d8f6b578045eeba0401e8d1ef2b3fb5f8f11dd</sum>
        </package>
        <package name="libreoffice-help-en" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>libreoffice-help-en-6.4.7.2-16.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">22202a7a6e422e81a04c40bd3c6fe3e68c5c9bb231f05e73c7732c9e15214e63</sum>
        </package>
        <package name="autocorr-da" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-da-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">225f43724b0a579ae0c34ac84ece5e7121d3930bce13488d53f6065a72854fff</sum>
        </package>
        <package name="libreoffice-ure-common" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>libreoffice-ure-common-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">24da3c587babc4e757ad0ba6514e3305c4d6c08c37d8e6fd11e1d28872efb999</sum>
        </package>
        <package name="libreoffice-impress" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>libreoffice-impress-6.4.7.2-16.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">2965498c2cc86d2433f1c5aa6deb8491e9d57ffc7fc376a9c86998111cc3102f</sum>
        </package>
        <package name="libreoffice-opensymbol-fonts" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>libreoffice-opensymbol-fonts-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">2a64a01b3c506af63c368673f2769046d409a23e5cf8da087fb7536d8140e815</sum>
        </package>
        <package name="libreoffice-core" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>libreoffice-core-6.4.7.2-16.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">366c0c749ee4da4f14655af07cf3249e0cb04f2d5fffbc9391804e2ddfd3b090</sum>
        </package>
        <package name="autocorr-nl" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-nl-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">385ecf83eb5ee94723802837906649051279260799ade811c555264607cf0f9d</sum>
        </package>
        <package name="autocorr-mn" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-mn-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">3d51b275cdfd587c043df41db6e4c7981f093ad9550d352f2e4eab1f6d5a3271</sum>
        </package>
        <package name="libreoffice-pyuno" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>libreoffice-pyuno-6.4.7.2-16.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">40bb2a9bb13ef3a10dacf6ae43e999f450143935277c1828677212eb83ea030e</sum>
        </package>
        <package name="autocorr-bg" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-bg-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">45f794e6acfba83da4a9cf9d3ee0c17e93eed62edbe16d7f3f8ea9cefaf3a8fc</sum>
        </package>
        <package name="autocorr-sv" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-sv-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">4654d002be8ad7384f6a029fb959c2faff5195d5feb434ac73cb8ed35e49e846</sum>
        </package>
        <package name="libreoffice-langpack-en" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>libreoffice-langpack-en-6.4.7.2-16.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">4bbea018c665dcd216e54537c2521765b2dc856d6ceccff291237b92d52d5f35</sum>
        </package>
        <package name="autocorr-es" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-es-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">5e4737cb8b5627a4bc3f42e86cfbfe213aa0bf4596e6d4cd13bcae607f07baf5</sum>
        </package>
        <package name="autocorr-en" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-en-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">644ba71346a433d04d95a6caccda7c22634452a62097c8790d33b7197fb82e49</sum>
        </package>
        <package name="libreoffice-writer" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>libreoffice-writer-6.4.7.2-16.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">6bd5a4f7298241bc181b80f617a78b48a182ac1ffe8a17e5d7cd2a33bcabad24</sum>
        </package>
        <package name="libreoffice-graphicfilter" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>libreoffice-graphicfilter-6.4.7.2-16.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">6ed75ab92382eaaa1d5514ed2af7acae29b0f54e5ad355a77a186b30025cea82</sum>
        </package>
        <package name="autocorr-af" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-af-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">7196249b8c6da795c69a44071237a2fabac6277481c7380c79e2c65cf228550b</sum>
        </package>
        <package name="autocorr-ro" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-ro-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">7f3b41f3c08bc5bf502a518357827bd5c9f76bc1597bf59afd4b2d4934ca9f4a</sum>
        </package>
        <package name="libreoffice-ure" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>libreoffice-ure-6.4.7.2-16.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">81d109dcea2a6138e7ab4adfc895774eb348fc300adc114a325c9ad20726441e</sum>
        </package>
        <package name="autocorr-fr" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-fr-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">84361966bc2c4ade6e7ad45220e27503d8ce5bd8fa5c51f8d9a34ca1041b6066</sum>
        </package>
        <package name="libreoffice-pdfimport" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>libreoffice-pdfimport-6.4.7.2-16.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">8adfd3df28f12e602aaa50ddf6eab4ddd84ff2cfbbf126c1a6ddf8886250d846</sum>
        </package>
        <package name="autocorr-zh" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-zh-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">9aac575667a7ada71b66434593ecf8815a17eb84fea70a2e9172676436041412</sum>
        </package>
        <package name="autocorr-lb" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-lb-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">9ef8ed7dae4c620acccc7f68d09daea47e919f0763478bd04e1f21f385caa63c</sum>
        </package>
        <package name="autocorr-sl" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-sl-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">9faa869735d88429dbb14823bd93c25419a76c5c0151ca803d5acc06a6b23466</sum>
        </package>
        <package name="autocorr-fa" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-fa-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">a45afd570a911ccbe5f14a60bdac810b0f23261c7699c30e9eebb63ef8b1eb3e</sum>
        </package>
        <package name="autocorr-lt" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-lt-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">b30994455c54a7572a8c3072e39e945dc9a07806c007ffcef1ef6b9c42eb4c21</sum>
        </package>
        <package name="autocorr-ko" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-ko-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">b3deb537463384970b05dae6067b309a505bd8b86dddb8d6ddad31c575a5787e</sum>
        </package>
        <package name="autocorr-ca" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-ca-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">b6286a97e2d0752c3b35e2c5b916a6d9074514f758b8163567bf0195d61449d9</sum>
        </package>
        <package name="autocorr-ru" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-ru-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">bbc362223e73b5044ffb9ebd8fb7fa6acc54a022d89cbb8f8b3667eed725805f</sum>
        </package>
        <package name="autocorr-de" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-de-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">bbd48df661d07f22cb96fd57b580b24e183405dfa89be5b8df56c6ed966eedc4</sum>
        </package>
        <package name="libreoffice-calc" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>libreoffice-calc-6.4.7.2-16.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">ca45ccc0576f56cc38baae7563f83114fd7b0608e560977a5595c6c96c8c903a</sum>
        </package>
        <package name="autocorr-fi" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-fi-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">cdc1a4120e739c80c9e4cc6e5f55007a7d4776cbddbece0d2e20879f92f7618a</sum>
        </package>
        <package name="autocorr-tr" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-tr-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">d43cac7266fe917a403d56fdef5dcfdfdeb8c766f061605b355c94c19f425237</sum>
        </package>
        <package name="libreoffice-data" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>libreoffice-data-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">dabf80fc6fcb919e122a051ca268a8197971757e045b40cd8670dbc53482aef1</sum>
        </package>
        <package name="autocorr-ga" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-ga-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">dac5a09b9cacde8fabaa887a55dd6cdb6b3d68b1317334e7be0e602a52cbe14d</sum>
        </package>
        <package name="autocorr-pt" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-pt-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">dcb0fe6eb9858f3ad71ecaa30662885e7382e028792122bd64cb60db603585f0</sum>
        </package>
        <package name="autocorr-sk" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-sk-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">decf685dc34167418f94b9755fa35b5e3eae4d293f545c4c39bc9d51bef246de</sum>
        </package>
        <package name="autocorr-ja" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-ja-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">e5338e5169e79e1aa8117da985c2df79c7d7499fb007ede914560ea78fe0edde</sum>
        </package>
        <package name="autocorr-hu" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-hu-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">f671a3ec387ed476b0983640efe48d9aab75f06e6ae56c90e0455d5998581991</sum>
        </package>
        <package name="libreoffice-ogltrans" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>libreoffice-ogltrans-6.4.7.2-16.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">f8754301fae8a2efe99d81e756e5dcc72785f73ddf2939bd084342490b84b2fc</sum>
        </package>
        <package name="autocorr-hr" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-hr-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">fe8ac0e665ed5ca7f1b095292f5d7504102fbe811c3cf9ef7fb02dca8b67fcf5</sum>
        </package>
        <package name="autocorr-pl" version="6.4.7.2" release="16.el8_9.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-16.el8_9.alma.1.src.rpm">
          <filename>autocorr-pl-6.4.7.2-16.el8_9.alma.1.noarch.rpm</filename>
          <sum type="sha256">ff10143651b8cde195ec3bee2d31435c84cb9baab8b9f338b2dceb6e2e99bb25</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1644</id>
    <title>Important: grafana-pcp security and bug fix update</title>
    <issued date="2024-04-02 00:00:00"/>
    <updated date="2024-04-03 14:02:46"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana-pcp security and bug fix update</summary>
    <description>The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.

Security Fix(es):

* golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)

Bug Fix(es):

* TRIAGE CVE-2024-1394 grafana-pcp: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (JIRA:AlmaLinux-30544)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1644" id="RHSA-2024:1644" type="rhsa" title="RHSA-2024:1644"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1394" id="CVE-2024-1394" type="cve" title="CVE-2024-1394"/>
      <reference href="https://bugzilla.redhat.com/2262921" id="2262921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1644.html" id="ALSA-2024:1644" type="self" title="ALSA-2024:1644"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="grafana-pcp" version="5.1.1" release="2.el8_9.alma.1" epoch="0" arch="s390x" src="grafana-pcp-5.1.1-2.el8_9.alma.1.src.rpm">
          <filename>grafana-pcp-5.1.1-2.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">3ab2aa979f6d7715a6b898c04bf2a866ccbb278a43ad1fe78f83dd094f0c5502</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1646</id>
    <title>Important: grafana security and bug fix update</title>
    <issued date="2024-04-02 00:00:00"/>
    <updated date="2024-04-03 15:14:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana security and bug fix update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB. 

Security Fix(es):

* golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)

Bug Fix(es):

* TRIAGE CVE-2024-1394 grafana: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (JIRA:AlmaLinux-30543)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1646" id="RHSA-2024:1646" type="rhsa" title="RHSA-2024:1646"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1394" id="CVE-2024-1394" type="cve" title="CVE-2024-1394"/>
      <reference href="https://bugzilla.redhat.com/2262921" id="2262921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1646.html" id="ALSA-2024:1646" type="self" title="ALSA-2024:1646"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="grafana" version="9.2.10" release="8.el8_9.alma.1" epoch="0" arch="s390x" src="grafana-9.2.10-8.el8_9.alma.1.src.rpm">
          <filename>grafana-9.2.10-8.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">cd2869ce897749124f06b34e634e7a6d559e791e6d77045b83bb792de97a0e16</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1687</id>
    <title>Important: nodejs:20 security update</title>
    <issued date="2024-04-08 00:00:00"/>
    <updated date="2024-04-09 14:54:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:20 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable
network applications in the JavaScript programming language.

Security Fix(es):

* nodejs: vulnerable to timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding (Marvin) (CVE-2023-46809)
* nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks (CVE-2024-22019)
* nodejs: code injection and privilege escalation through Linux capabilities (CVE-2024-21892)
* nodejs: path traversal by monkey-patching buffer internals (CVE-2024-21896)
* nodejs: multiple permission model bypasses due to improper path traversal sequence sanitization (CVE-2024-21891)
* nodejs: improper handling of wildcards in --allow-fs-read and --allow-fs-write (CVE-2024-21890)
* nodejs: setuid() does not drop all privileges due to io_uring (CVE-2024-22017)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1687" id="RHSA-2024:1687" type="rhsa" title="RHSA-2024:1687"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46809" id="CVE-2023-46809" type="cve" title="CVE-2023-46809"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21890" id="CVE-2024-21890" type="cve" title="CVE-2024-21890"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21891" id="CVE-2024-21891" type="cve" title="CVE-2024-21891"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21892" id="CVE-2024-21892" type="cve" title="CVE-2024-21892"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21896" id="CVE-2024-21896" type="cve" title="CVE-2024-21896"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22017" id="CVE-2024-22017" type="cve" title="CVE-2024-22017"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22019" id="CVE-2024-22019" type="cve" title="CVE-2024-22019"/>
      <reference href="https://bugzilla.redhat.com/2264569" id="2264569" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2264574" id="2264574" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2264582" id="2264582" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265717" id="2265717" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265720" id="2265720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265722" id="2265722" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265727" id="2265727" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1687.html" id="ALSA-2024:1687" type="self" title="ALSA-2024:1687"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="nodejs" stream="20" version="8090020240409064740" context="9edba152" arch="s390x"/>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el8.9.0+3684+11b9e959" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.9.0+3684+11b9e959.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el8.9.0+3684+11b9e959.noarch.rpm</filename>
          <sum type="sha256">2737beb0b9ef67ff6403ed0e4f69f5ab715d85eb5860974b3755cefb24e3b7f9</sum>
        </package>
        <package name="nodejs" version="20.11.1" release="1.module_el8.9.0+3775+d8460d35" epoch="1" arch="s390x" src="nodejs-20.11.1-1.module_el8.9.0+3775+d8460d35.src.rpm">
          <filename>nodejs-20.11.1-1.module_el8.9.0+3775+d8460d35.s390x.rpm</filename>
          <sum type="sha256">2f563b46e39458fc2fd6946c49f476be7f880571ac9c3f8748973903a83b0fd4</sum>
        </package>
        <package name="npm" version="10.2.4" release="1.20.11.1.1.module_el8.9.0+3775+d8460d35" epoch="1" arch="s390x" src="nodejs-20.11.1-1.module_el8.9.0+3775+d8460d35.src.rpm">
          <filename>npm-10.2.4-1.20.11.1.1.module_el8.9.0+3775+d8460d35.s390x.rpm</filename>
          <sum type="sha256">43399ce117fe6d0357214ef3d593b73d8ab75851322bdb78e1b32d36ed69fbbb</sum>
        </package>
        <package name="nodejs-devel" version="20.11.1" release="1.module_el8.9.0+3775+d8460d35" epoch="1" arch="s390x" src="nodejs-20.11.1-1.module_el8.9.0+3775+d8460d35.src.rpm">
          <filename>nodejs-devel-20.11.1-1.module_el8.9.0+3775+d8460d35.s390x.rpm</filename>
          <sum type="sha256">5d00b6badd14a9d2e9de26bf03e5e7c05038ff4f06b8c59ed3b1ff17167b7006</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.9.0+3731+490e3ce5" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.9.0+3731+490e3ce5.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.9.0+3731+490e3ce5.noarch.rpm</filename>
          <sum type="sha256">8aef59eb02816fbfcc43df6a4074cc51485b810317c50f44739b0798ac8065de</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el8.9.0+3684+11b9e959" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.9.0+3684+11b9e959.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el8.9.0+3684+11b9e959.noarch.rpm</filename>
          <sum type="sha256">b9f7128be10cd497d323808f86402c91a970afde6884b8967695e20fa4060629</sum>
        </package>
        <package name="nodejs-docs" version="20.11.1" release="1.module_el8.9.0+3775+d8460d35" epoch="1" arch="noarch" src="nodejs-20.11.1-1.module_el8.9.0+3775+d8460d35.src.rpm">
          <filename>nodejs-docs-20.11.1-1.module_el8.9.0+3775+d8460d35.noarch.rpm</filename>
          <sum type="sha256">ba40f7fd81c94874c9c3046a9503a38675fa9d846e9f504187a4efa2f65460ee</sum>
        </package>
        <package name="nodejs-full-i18n" version="20.11.1" release="1.module_el8.9.0+3775+d8460d35" epoch="1" arch="s390x" src="nodejs-20.11.1-1.module_el8.9.0+3775+d8460d35.src.rpm">
          <filename>nodejs-full-i18n-20.11.1-1.module_el8.9.0+3775+d8460d35.s390x.rpm</filename>
          <sum type="sha256">c8dff17c3eac7b1cd5d8ae9cff83cb26744ba5bd5e9d15e5aac778b8e933d758</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1690</id>
    <title>Important: varnish security update</title>
    <issued date="2024-04-08 00:00:00"/>
    <updated date="2024-04-10 14:16:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>varnish security update</summary>
    <description>Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

* varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1690" id="RHSA-2024:1690" type="rhsa" title="RHSA-2024:1690"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30156" id="CVE-2024-30156" type="cve" title="CVE-2024-30156"/>
      <reference href="https://bugzilla.redhat.com/2271486" id="2271486" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1690.html" id="ALSA-2024:1690" type="self" title="ALSA-2024:1690"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="varnish" stream="6" version="8090020240410072434" context="9edba152" arch="s390x"/>
        <package name="varnish-docs" version="6.0.13" release="1.module_el8.9.0+3786+e8a73bbf.alma.1" epoch="0" arch="s390x" src="varnish-6.0.13-1.module_el8.9.0+3786+e8a73bbf.alma.1.src.rpm">
          <filename>varnish-docs-6.0.13-1.module_el8.9.0+3786+e8a73bbf.alma.1.s390x.rpm</filename>
          <sum type="sha256">5176a55b2bd8da780db1952d5ea793137895f16508960a9274d2a5109f17e329</sum>
        </package>
        <package name="varnish" version="6.0.13" release="1.module_el8.9.0+3786+e8a73bbf.alma.1" epoch="0" arch="s390x" src="varnish-6.0.13-1.module_el8.9.0+3786+e8a73bbf.alma.1.src.rpm">
          <filename>varnish-6.0.13-1.module_el8.9.0+3786+e8a73bbf.alma.1.s390x.rpm</filename>
          <sum type="sha256">76cb4421de4be9576410d9f451d4c6980a13e67880efb34734a87d80211dbf65</sum>
        </package>
        <package name="varnish-devel" version="6.0.13" release="1.module_el8.9.0+3786+e8a73bbf.alma.1" epoch="0" arch="s390x" src="varnish-6.0.13-1.module_el8.9.0+3786+e8a73bbf.alma.1.src.rpm">
          <filename>varnish-devel-6.0.13-1.module_el8.9.0+3786+e8a73bbf.alma.1.s390x.rpm</filename>
          <sum type="sha256">7f371d7f6faa428f5509e4c202e4856ed73fd581eb44d928566049cc29259ba5</sum>
        </package>
        <package name="varnish-modules" version="0.15.0" release="6.module_el8.6.0+3089+dac88e97" epoch="0" arch="s390x" src="varnish-modules-0.15.0-6.module_el8.6.0+3089+dac88e97.src.rpm">
          <filename>varnish-modules-0.15.0-6.module_el8.6.0+3089+dac88e97.s390x.rpm</filename>
          <sum type="sha256">f87b7bda5607c3d394f1298c744e857d5fa547aa968815ad8846b1da44910b24</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1719</id>
    <title>Moderate: rear security update</title>
    <issued date="2024-04-09 00:00:00"/>
    <updated date="2024-04-10 08:54:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>rear security update</summary>
    <description>Relax-and-Recover is a recovery and system migration utility. The utility produces a bootable image and restores from backup using this image. It allows to restore to different hardware and can therefore be also used as a migration utility.

Security Fix(es):

* rear: creates a world-readable initrd (CVE-2024-23301)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1719" id="RHSA-2024:1719" type="rhsa" title="RHSA-2024:1719"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23301" id="CVE-2024-23301" type="cve" title="CVE-2024-23301"/>
      <reference href="https://bugzilla.redhat.com/2258396" id="2258396" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1719.html" id="ALSA-2024:1719" type="self" title="ALSA-2024:1719"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="rear" version="2.6" release="11.el8_9.alma.1" epoch="0" arch="s390x" src="rear-2.6-11.el8_9.alma.1.src.rpm">
          <filename>rear-2.6-11.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">2e3ccc373f8be8ec8f112964e3e018e047e71e867549390389d2fc8cdca8142c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1751</id>
    <title>Important: unbound security update</title>
    <issued date="2024-04-11 00:00:00"/>
    <updated date="2024-04-12 11:50:26"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

Security Fix(es):

* A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. The default combination of the "control-use-cert: no" option with either explicit or implicit use of an IP address in the "control-interface" option could allow improper access. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged local process to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether.

To mitigate the vulnerability, a new file "/etc/unbound/conf.d/remote-control.conf" has been added and included in the main unbound configuration file, "unbound.conf". The file contains two directives that should limit access to unbound.conf:

    control-interface: "/run/unbound/control"
    control-use-cert: "yes"

For details about these directives, run "man unbound.conf".

Updating to the version of unbound provided by this advisory should, in most cases, address the vulnerability. To verify that your configuration is not vulnerable, use the "unbound-control status | grep control" command. If the output contains "control(ssl)" or "control(namedpipe)", your configuration is not vulnerable. If the command output returns only "control", the configuration is vulnerable because it does not enforce access only to the unbound group members. To fix your configuration, add the line "include: /etc/unbound/conf.d/remote-control.conf" to the end of the file "/etc/unbound/unbound.conf". If you use a custom "/etc/unbound/conf.d/remote-control.conf" file, add the new directives to this file. (CVE-2024-1488)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1751" id="RHSA-2024:1751" type="rhsa" title="RHSA-2024:1751"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1488" id="CVE-2024-1488" type="cve" title="CVE-2024-1488"/>
      <reference href="https://bugzilla.redhat.com/2264183" id="2264183" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1751.html" id="ALSA-2024:1751" type="self" title="ALSA-2024:1751"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="python3-unbound" version="1.16.2" release="5.el8_9.6" epoch="0" arch="s390x" src="unbound-1.16.2-5.el8_9.6.src.rpm">
          <filename>python3-unbound-1.16.2-5.el8_9.6.s390x.rpm</filename>
          <sum type="sha256">28936df7805712a27b7aafd77f13d80566a7a68b6d44227b7e3224e4982bf992</sum>
        </package>
        <package name="unbound-libs" version="1.16.2" release="5.el8_9.6" epoch="0" arch="s390x" src="unbound-1.16.2-5.el8_9.6.src.rpm">
          <filename>unbound-libs-1.16.2-5.el8_9.6.s390x.rpm</filename>
          <sum type="sha256">2d8dc9f4b435e551b8e28b7ecb3af377e2b3e7fdd64c35cd71d8d1af09bf05e4</sum>
        </package>
        <package name="unbound-devel" version="1.16.2" release="5.el8_9.6" epoch="0" arch="s390x" src="unbound-1.16.2-5.el8_9.6.src.rpm">
          <filename>unbound-devel-1.16.2-5.el8_9.6.s390x.rpm</filename>
          <sum type="sha256">36d503730a01d8fb3e14baff1738448370b41fbd7bc320c89ca9fbc39fea2eef</sum>
        </package>
        <package name="unbound" version="1.16.2" release="5.el8_9.6" epoch="0" arch="s390x" src="unbound-1.16.2-5.el8_9.6.src.rpm">
          <filename>unbound-1.16.2-5.el8_9.6.s390x.rpm</filename>
          <sum type="sha256">59a6995e9d3bf33fb03e2711f4a767d37302ccf74929b0462cbefa0b6f0b9f26</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1781</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2024-04-11 00:00:00"/>
    <updated date="2024-04-12 18:44:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind9: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408)
* bind9: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled (CVE-2023-5517)
* bind9: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution (CVE-2023-5679)
* bind9: Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516)
* bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
* bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1781" id="RHSA-2024:1781" type="rhsa" title="RHSA-2024:1781"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4408" id="CVE-2023-4408" type="cve" title="CVE-2023-4408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50387" id="CVE-2023-50387" type="cve" title="CVE-2023-50387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50868" id="CVE-2023-50868" type="cve" title="CVE-2023-50868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5517" id="CVE-2023-5517" type="cve" title="CVE-2023-5517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5679" id="CVE-2023-5679" type="cve" title="CVE-2023-5679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6516" id="CVE-2023-6516" type="cve" title="CVE-2023-6516"/>
      <reference href="https://bugzilla.redhat.com/2263896" id="2263896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263897" id="2263897" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263909" id="2263909" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263911" id="2263911" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263914" id="2263914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263917" id="2263917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1781.html" id="ALSA-2024:1781" type="self" title="ALSA-2024:1781"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="bind9.16" version="9.16.23" release="0.16.el8_9.2.alma.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.16.el8_9.2.alma.1.src.rpm">
          <filename>bind9.16-9.16.23-0.16.el8_9.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">2706ae492ffe1cce626f816cbfcdffe6823a3fbed377cf668ea284d8e654f6fa</sum>
        </package>
        <package name="bind9.16-dnssec-utils" version="9.16.23" release="0.16.el8_9.2.alma.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.16.el8_9.2.alma.1.src.rpm">
          <filename>bind9.16-dnssec-utils-9.16.23-0.16.el8_9.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">3ae7cba7075fa3c1f18f523eb34add46779c79ef621b39b660cc759328de30d8</sum>
        </package>
        <package name="bind9.16-libs" version="9.16.23" release="0.16.el8_9.2.alma.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.16.el8_9.2.alma.1.src.rpm">
          <filename>bind9.16-libs-9.16.23-0.16.el8_9.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">6300f4d6034bdb3af91ca350eaa1718bb4c6260fc0e7099406524ff9c159668e</sum>
        </package>
        <package name="bind9.16-utils" version="9.16.23" release="0.16.el8_9.2.alma.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.16.el8_9.2.alma.1.src.rpm">
          <filename>bind9.16-utils-9.16.23-0.16.el8_9.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">6c5d6b27ce8411445e020ee8194bb608835a5652388444a925505f97ac078bfe</sum>
        </package>
        <package name="bind9.16-chroot" version="9.16.23" release="0.16.el8_9.2.alma.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.16.el8_9.2.alma.1.src.rpm">
          <filename>bind9.16-chroot-9.16.23-0.16.el8_9.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">93362426709d0fb09b1d0be40049db98d42791b2535ca33eb3d8e2a18688b63a</sum>
        </package>
        <package name="python3-bind9.16" version="9.16.23" release="0.16.el8_9.2.alma.1" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.16.el8_9.2.alma.1.src.rpm">
          <filename>python3-bind9.16-9.16.23-0.16.el8_9.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">9aa0b5ce2ad36cee36344a56133c6e27f97c17ea6a46cd6cfeac1bc0c87e24e4</sum>
        </package>
        <package name="bind9.16-license" version="9.16.23" release="0.16.el8_9.2.alma.1" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.16.el8_9.2.alma.1.src.rpm">
          <filename>bind9.16-license-9.16.23-0.16.el8_9.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">a34d59c58904efcbf354db2e2ce517002b59ef992ba4c3342aeba2b511ab3367</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1782</id>
    <title>Important: bind and dhcp security update</title>
    <issued date="2024-04-12 00:00:00"/>
    <updated date="2024-04-12 17:11:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind and dhcp security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network.

Security Fix(es):

* bind9: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408)
* bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
* bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1782" id="RHSA-2024:1782" type="rhsa" title="RHSA-2024:1782"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4408" id="CVE-2023-4408" type="cve" title="CVE-2023-4408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50387" id="CVE-2023-50387" type="cve" title="CVE-2023-50387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50868" id="CVE-2023-50868" type="cve" title="CVE-2023-50868"/>
      <reference href="https://bugzilla.redhat.com/2263896" id="2263896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263914" id="2263914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263917" id="2263917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1782.html" id="ALSA-2024:1782" type="self" title="ALSA-2024:1782"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="bind-sdb-chroot" version="9.11.36" release="11.el8_9.1" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.1.src.rpm">
          <filename>bind-sdb-chroot-9.11.36-11.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">295c799cfea8bc2d94bdd37cbea9448ae95b26abe7f90d91178df9fc0510776c</sum>
        </package>
        <package name="python3-bind" version="9.11.36" release="11.el8_9.1" epoch="32" arch="noarch" src="bind-9.11.36-11.el8_9.1.src.rpm">
          <filename>python3-bind-9.11.36-11.el8_9.1.noarch.rpm</filename>
          <sum type="sha256">53217bbf6c8501e0c61a8bae8ab483254985d2acb2f4043c56ff038f1dc90bf9</sum>
        </package>
        <package name="bind-pkcs11-devel" version="9.11.36" release="11.el8_9.1" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.1.src.rpm">
          <filename>bind-pkcs11-devel-9.11.36-11.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">6224956b9a4871d7058ef9960ab78c3692a1761189de0373b95d2ddd408ba7ef</sum>
        </package>
        <package name="bind" version="9.11.36" release="11.el8_9.1" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.1.src.rpm">
          <filename>bind-9.11.36-11.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">76cd0b3bc5c2b6c3684d5c5d338914363afb99419c3346872b2aab4a79694ecf</sum>
        </package>
        <package name="bind-pkcs11-utils" version="9.11.36" release="11.el8_9.1" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.1.src.rpm">
          <filename>bind-pkcs11-utils-9.11.36-11.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">8109e44d501bd73cb9548cf1cd40e6b5c0cf84d9c713d317c865ad2937ed1b43</sum>
        </package>
        <package name="bind-chroot" version="9.11.36" release="11.el8_9.1" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.1.src.rpm">
          <filename>bind-chroot-9.11.36-11.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">95dc9bf7037f05316e78d830061884ee627512bea6a389c2df04bd1fd81cbb7e</sum>
        </package>
        <package name="bind-license" version="9.11.36" release="11.el8_9.1" epoch="32" arch="noarch" src="bind-9.11.36-11.el8_9.1.src.rpm">
          <filename>bind-license-9.11.36-11.el8_9.1.noarch.rpm</filename>
          <sum type="sha256">9d37bd3f462f15061c91d3ce3db110ef84e2fb1d773f1c7df650263606ece115</sum>
        </package>
        <package name="bind-libs" version="9.11.36" release="11.el8_9.1" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.1.src.rpm">
          <filename>bind-libs-9.11.36-11.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">9e5115f28ae9c7956d5159178ffe70e62873059130d331ea515e0f09bc1f5eeb</sum>
        </package>
        <package name="bind-pkcs11-libs" version="9.11.36" release="11.el8_9.1" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.1.src.rpm">
          <filename>bind-pkcs11-libs-9.11.36-11.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">a09bf3026104feaa180d0b5d7871e99f0779476ff229b1cfbe6a2e12090a976f</sum>
        </package>
        <package name="bind-devel" version="9.11.36" release="11.el8_9.1" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.1.src.rpm">
          <filename>bind-devel-9.11.36-11.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">bba12474fc7a9f2e220292925e4b1677cde3f7201a8ec0eb9d6415d4dea8a94a</sum>
        </package>
        <package name="bind-libs-lite" version="9.11.36" release="11.el8_9.1" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.1.src.rpm">
          <filename>bind-libs-lite-9.11.36-11.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">c1cf759bd4211e92cc13c04dc31b497020252e492e8df86bf911ffae712f34c6</sum>
        </package>
        <package name="bind-utils" version="9.11.36" release="11.el8_9.1" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.1.src.rpm">
          <filename>bind-utils-9.11.36-11.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">c932b602515f7bc03ac456e62d00a917726cbd5383117ba877329aab14a7b9a0</sum>
        </package>
        <package name="bind-sdb" version="9.11.36" release="11.el8_9.1" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.1.src.rpm">
          <filename>bind-sdb-9.11.36-11.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">d43000e1e93e3a5c2fb6b682c41d17b83cbf2906480c11b930f707ef2aaee67b</sum>
        </package>
        <package name="bind-pkcs11" version="9.11.36" release="11.el8_9.1" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.1.src.rpm">
          <filename>bind-pkcs11-9.11.36-11.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">d6cf794481d04ea8959216e15bc5754011dc679ab794a71f8101875e73c25241</sum>
        </package>
        <package name="bind-lite-devel" version="9.11.36" release="11.el8_9.1" epoch="32" arch="s390x" src="bind-9.11.36-11.el8_9.1.src.rpm">
          <filename>bind-lite-devel-9.11.36-11.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">dabeb463922ed9cc6007c56cfab38b17c25bb4a5c5bdfb6eb3f82c982850573e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1784</id>
    <title>Moderate: gnutls security update</title>
    <issued date="2024-04-11 00:00:00"/>
    <updated date="2024-04-12 11:48:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls security update</summary>
    <description>The gnutls package provide the GNU Transport Layer Security (GnuTLS) library,
which implements cryptographic algorithms and protocols such as SSL, TLS, and
DTLS.

This package update fixes a timing side-channel in deterministic ECDSA.

Security Fix(es):

* gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1784" id="RHSA-2024:1784" type="rhsa" title="RHSA-2024:1784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28834" id="CVE-2024-28834" type="cve" title="CVE-2024-28834"/>
      <reference href="https://bugzilla.redhat.com/2269228" id="2269228" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1784.html" id="ALSA-2024:1784" type="self" title="ALSA-2024:1784"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="gnutls-devel" version="3.6.16" release="8.el8_9.3" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_9.3.src.rpm">
          <filename>gnutls-devel-3.6.16-8.el8_9.3.s390x.rpm</filename>
          <sum type="sha256">4aa9f5484312c7d0abfc207880f851e2d834531ce170797c4159b703dc1e259b</sum>
        </package>
        <package name="gnutls-utils" version="3.6.16" release="8.el8_9.3" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_9.3.src.rpm">
          <filename>gnutls-utils-3.6.16-8.el8_9.3.s390x.rpm</filename>
          <sum type="sha256">845328170260b9684040eadc65c5658479551bad2a17e730270e6eb8dd83a46c</sum>
        </package>
        <package name="gnutls-dane" version="3.6.16" release="8.el8_9.3" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_9.3.src.rpm">
          <filename>gnutls-dane-3.6.16-8.el8_9.3.s390x.rpm</filename>
          <sum type="sha256">abeeee38436479824de9ba8be8b99d3d1f51147cdd426a865775afa5c3a960fa</sum>
        </package>
        <package name="gnutls-c++" version="3.6.16" release="8.el8_9.3" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_9.3.src.rpm">
          <filename>gnutls-c++-3.6.16-8.el8_9.3.s390x.rpm</filename>
          <sum type="sha256">c3879e26eeeb80b5aa5469c3f543c2f299121fdb574d15a0f178aab55ed6bbad</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1786</id>
    <title>Important: httpd:2.4/mod_http2 security update</title>
    <issued date="2024-04-11 00:00:00"/>
    <updated date="2024-04-12 13:00:18"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>httpd:2.4/mod_http2 security update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: mod_http2: CONTINUATION frames DoS (CVE-2024-27316)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1786" id="RHSA-2024:1786" type="rhsa" title="RHSA-2024:1786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27316" id="CVE-2024-27316" type="cve" title="CVE-2024-27316"/>
      <reference href="https://bugzilla.redhat.com/2268277" id="2268277" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1786.html" id="ALSA-2024:1786" type="self" title="ALSA-2024:1786"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="httpd" stream="2.4" version="8090020240412121239" context="9edba152" arch="s390x"/>
        <package name="mod_ssl" version="2.4.37" release="62.module_el8.9.0+3646+acd210d0" epoch="1" arch="s390x" src="httpd-2.4.37-62.module_el8.9.0+3646+acd210d0.src.rpm">
          <filename>mod_ssl-2.4.37-62.module_el8.9.0+3646+acd210d0.s390x.rpm</filename>
          <sum type="sha256">0f3404b1519835db3ee5108d0e226b051135247dd7c6ec11f1c1a65577b1dca8</sum>
        </package>
        <package name="httpd-manual" version="2.4.37" release="62.module_el8.9.0+3646+acd210d0" epoch="0" arch="noarch" src="httpd-2.4.37-62.module_el8.9.0+3646+acd210d0.src.rpm">
          <filename>httpd-manual-2.4.37-62.module_el8.9.0+3646+acd210d0.noarch.rpm</filename>
          <sum type="sha256">124c944729766f6f0e75f36dcfc3aa3042cdd11b5a68d8b57e1d73a83c0e2190</sum>
        </package>
        <package name="httpd-devel" version="2.4.37" release="62.module_el8.9.0+3646+acd210d0" epoch="0" arch="s390x" src="httpd-2.4.37-62.module_el8.9.0+3646+acd210d0.src.rpm">
          <filename>httpd-devel-2.4.37-62.module_el8.9.0+3646+acd210d0.s390x.rpm</filename>
          <sum type="sha256">23657ec788c9bb56b4a0360fa4fe670ea49a19d53a3c90bd6d171f450b9bc059</sum>
        </package>
        <package name="mod_ldap" version="2.4.37" release="62.module_el8.9.0+3646+acd210d0" epoch="0" arch="s390x" src="httpd-2.4.37-62.module_el8.9.0+3646+acd210d0.src.rpm">
          <filename>mod_ldap-2.4.37-62.module_el8.9.0+3646+acd210d0.s390x.rpm</filename>
          <sum type="sha256">4d2d9a79f311c2a557fafdce31a3339dd5647b9f20173afa42ed4941538d2843</sum>
        </package>
        <package name="mod_proxy_html" version="2.4.37" release="62.module_el8.9.0+3646+acd210d0" epoch="1" arch="s390x" src="httpd-2.4.37-62.module_el8.9.0+3646+acd210d0.src.rpm">
          <filename>mod_proxy_html-2.4.37-62.module_el8.9.0+3646+acd210d0.s390x.rpm</filename>
          <sum type="sha256">55559e9c0761a246d4ada301a2963c8f53e50988dafe1ecaa7a121a5fff5b871</sum>
        </package>
        <package name="httpd-tools" version="2.4.37" release="62.module_el8.9.0+3646+acd210d0" epoch="0" arch="s390x" src="httpd-2.4.37-62.module_el8.9.0+3646+acd210d0.src.rpm">
          <filename>httpd-tools-2.4.37-62.module_el8.9.0+3646+acd210d0.s390x.rpm</filename>
          <sum type="sha256">96603a8ce283437f2d58f0dc56448f3d3be3f74b89c73d768fed1147d16f19d5</sum>
        </package>
        <package name="mod_session" version="2.4.37" release="62.module_el8.9.0+3646+acd210d0" epoch="0" arch="s390x" src="httpd-2.4.37-62.module_el8.9.0+3646+acd210d0.src.rpm">
          <filename>mod_session-2.4.37-62.module_el8.9.0+3646+acd210d0.s390x.rpm</filename>
          <sum type="sha256">a74d25d922005ecfc935c934f60d5fb1295526a6f1889192c84db8774914704d</sum>
        </package>
        <package name="mod_http2" version="1.15.7" release="8.module_el8.9.0+3809+48080a14.5.alma.1" epoch="0" arch="s390x" src="mod_http2-1.15.7-8.module_el8.9.0+3809+48080a14.5.alma.1.src.rpm">
          <filename>mod_http2-1.15.7-8.module_el8.9.0+3809+48080a14.5.alma.1.s390x.rpm</filename>
          <sum type="sha256">cbd50d0f96872dbe656906c2b685385293d5970edf338b422d45852f54d6f77e</sum>
        </package>
        <package name="mod_md" version="2.0.8" release="8.module_el8.6.0+3031+fb177b09" epoch="1" arch="s390x" src="mod_md-2.0.8-8.module_el8.6.0+3031+fb177b09.src.rpm">
          <filename>mod_md-2.0.8-8.module_el8.6.0+3031+fb177b09.s390x.rpm</filename>
          <sum type="sha256">e47754aea99df8718074dd3d1df288b448b0af9d0ba4f0f8c6a3b5c8a164a1a7</sum>
        </package>
        <package name="httpd" version="2.4.37" release="62.module_el8.9.0+3646+acd210d0" epoch="0" arch="s390x" src="httpd-2.4.37-62.module_el8.9.0+3646+acd210d0.src.rpm">
          <filename>httpd-2.4.37-62.module_el8.9.0+3646+acd210d0.s390x.rpm</filename>
          <sum type="sha256">e585a52e5d90964b0b7f836cbab70648fe6a561fe06d894dcfcc184c04ee0d29</sum>
        </package>
        <package name="httpd-filesystem" version="2.4.37" release="62.module_el8.9.0+3646+acd210d0" epoch="0" arch="noarch" src="httpd-2.4.37-62.module_el8.9.0+3646+acd210d0.src.rpm">
          <filename>httpd-filesystem-2.4.37-62.module_el8.9.0+3646+acd210d0.noarch.rpm</filename>
          <sum type="sha256">f084ce5b558cf535fb44377010b9f68441a23a8a0335952a6e68701a9e76bbae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1818</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2024-04-18 00:00:00"/>
    <updated date="2024-04-19 13:03:54"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)
* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)
* OpenJDK: Pack200 excessive memory allocation (8322114) (CVE-2024-21085)
* OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) (CVE-2024-21094)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1818" id="RHSA-2024:1818" type="rhsa" title="RHSA-2024:1818"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21011" id="CVE-2024-21011" type="cve" title="CVE-2024-21011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21068" id="CVE-2024-21068" type="cve" title="CVE-2024-21068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21085" id="CVE-2024-21085" type="cve" title="CVE-2024-21085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21094" id="CVE-2024-21094" type="cve" title="CVE-2024-21094"/>
      <reference href="https://bugzilla.redhat.com/2274977" id="2274977" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275001" id="2275001" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275003" id="2275003" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275005" id="2275005" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1818.html" id="ALSA-2024:1818" type="self" title="ALSA-2024:1818"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.412.b08" release="2.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.412.b08-2.el8.noarch.rpm</filename>
          <sum type="sha256">22eb877425f5d62591a43874e0e85ba3806cdd9cccee9e7fa69a715ac02eb249</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.412.b08" release="2.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.412.b08-2.el8.noarch.rpm</filename>
          <sum type="sha256">3decc556ade64136827bb22d1228d60c2c2cc7480b691774f63767e37b8c6566</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.412.b08" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.412.b08-2.el8.s390x.rpm</filename>
          <sum type="sha256">4de180b7cc81a813e52f6ef85dfb402a85d50c03cc2c2405625f39eaeecead9f</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.412.b08" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.412.b08-2.el8.s390x.rpm</filename>
          <sum type="sha256">557f79fa2efb87d4f591de778e70718f098dd555dd6fedd7aed811f5a95fe16b</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.412.b08" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.412.b08-2.el8.s390x.rpm</filename>
          <sum type="sha256">5836920ecd0ea147cd1dc7927f77209c7034ef8226d3cd1219174df8179f487f</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.412.b08" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.412.b08-2.el8.s390x.rpm</filename>
          <sum type="sha256">680fbbd9e46d747de9f0ac84923367897504798b3525ebf27d3b7f9fcb140f99</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.412.b08" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.412.b08-2.el8.s390x.rpm</filename>
          <sum type="sha256">69f2fbb644e001e606a1940b7032dabab8b97e2f3ed280a619e10189007f3689</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility" version="1.8.0.412.b08" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-1.8.0.412.b08-2.el8.s390x.rpm</filename>
          <sum type="sha256">acf88968c7e372885085d69ed10d9eabb2f6e9c3b68acdff798ef2cddb2652de</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1825</id>
    <title>Moderate: java-17-openjdk security update</title>
    <issued date="2024-04-18 00:00:00"/>
    <updated date="2024-04-18 13:46:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)
* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)
* OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) (CVE-2024-21094)
* OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1825" id="RHSA-2024:1825" type="rhsa" title="RHSA-2024:1825"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21011" id="CVE-2024-21011" type="cve" title="CVE-2024-21011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21012" id="CVE-2024-21012" type="cve" title="CVE-2024-21012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21068" id="CVE-2024-21068" type="cve" title="CVE-2024-21068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21094" id="CVE-2024-21094" type="cve" title="CVE-2024-21094"/>
      <reference href="https://bugzilla.redhat.com/2274975" id="2274975" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2274977" id="2274977" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275003" id="2275003" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275005" id="2275005" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1825.html" id="ALSA-2024:1825" type="self" title="ALSA-2024:1825"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="java-17-openjdk-jmods" version="17.0.11.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.11.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">0edbfabfa92cda5ec88bc315c9f4fd7972b58f44e89cbda1577cfac4e391fcfe</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.11.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-17.0.11.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">10a740fca65cdc08b2bbc44901c7d64636844b9ee434dabd2efd42d82bcc9f31</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.11.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.11.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">2f90eec8b5729ecd07241ff9aea685b823884d106dd42b71fcef1bd19ef741ab</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.11.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-17.0.11.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">322e0ce1c2d207d8a877ba93f34c475cd1ce527c359a03c750f62beb87ab6739</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.11.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-17.0.11.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">58a789bb0375d47c2e02e0eae88c0806304c3dfd56291619c3feb5a8a6da5dc9</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.11.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.11.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">9b712974557a3a7ff5332ac918d0c34c0503e6764794ead744fc8c98fac80141</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.11.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.11.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">a07a36b59a1362b392b57608128ab5b6be8f0d1f636f998d00d34a354130cbec</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.11.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-src-17.0.11.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">c872d788da484b745d4237492007e288d88f0df453e9121e368988f740dd5d2f</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.11.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-17.0.11.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">dd92d7d586a172e59b5249634f1fb59d0f5f4172ea8d15fce134136cae164693</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1912</id>
    <title>Important: firefox security update</title>
    <issued date="2024-04-18 00:00:00"/>
    <updated date="2024-04-22 08:21:39"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.10.0 ESR.

Security Fix(es):
  
* GetBoundName in the JIT returned the wrong object (CVE-2024-3852)

* Out-of-bounds-read after mis-optimized switch statement (CVE-2024-3854)
* Incorrect JITting of arguments led to use-after-free during garbage collection (CVE-2024-3857)
* Permission prompt input delay could expire when not in focus (CVE-2024-2609)
* Integer-overflow led to out-of-bounds-read in the OpenType sanitizer (CVE-2024-3859)
* Potential use-after-free due to AlignedBuffer self-move (CVE-2024-3861)
* Memory safety bug fixed in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10 (CVE-2024-3864)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1912" id="RHSA-2024:1912" type="rhsa" title="RHSA-2024:1912"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2609" id="CVE-2024-2609" type="cve" title="CVE-2024-2609"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3852" id="CVE-2024-3852" type="cve" title="CVE-2024-3852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3854" id="CVE-2024-3854" type="cve" title="CVE-2024-3854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3857" id="CVE-2024-3857" type="cve" title="CVE-2024-3857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3859" id="CVE-2024-3859" type="cve" title="CVE-2024-3859"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3861" id="CVE-2024-3861" type="cve" title="CVE-2024-3861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3864" id="CVE-2024-3864" type="cve" title="CVE-2024-3864"/>
      <reference href="https://bugzilla.redhat.com/2275547" id="2275547" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275549" id="2275549" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275550" id="2275550" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275551" id="2275551" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275552" id="2275552" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275553" id="2275553" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275555" id="2275555" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1912.html" id="ALSA-2024:1912" type="self" title="ALSA-2024:1912"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="firefox" version="115.10.0" release="1.el8_9.alma.1" epoch="0" arch="s390x" src="firefox-115.10.0-1.el8_9.alma.1.src.rpm">
          <filename>firefox-115.10.0-1.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">04afa60b0518f85c1b5192b1c58ccc436df6e78a01452609f2a23daf18b9b479</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1939</id>
    <title>Low: thunderbird security update</title>
    <issued date="2024-04-22 00:00:00"/>
    <updated date="2024-04-29 07:46:06"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.10.0.

Security Fix(es):

* Mozilla: Denial of Service using HTTP/2 CONTINUATION frames (CVE-2024-3302)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1939" id="RHSA-2024:1939" type="rhsa" title="RHSA-2024:1939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2609" id="CVE-2024-2609" type="cve" title="CVE-2024-2609"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3302" id="CVE-2024-3302" type="cve" title="CVE-2024-3302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3852" id="CVE-2024-3852" type="cve" title="CVE-2024-3852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3854" id="CVE-2024-3854" type="cve" title="CVE-2024-3854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3857" id="CVE-2024-3857" type="cve" title="CVE-2024-3857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3859" id="CVE-2024-3859" type="cve" title="CVE-2024-3859"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3861" id="CVE-2024-3861" type="cve" title="CVE-2024-3861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3864" id="CVE-2024-3864" type="cve" title="CVE-2024-3864"/>
      <reference href="https://bugzilla.redhat.com/2273383" id="2273383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275547" id="2275547" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275549" id="2275549" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275550" id="2275550" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275551" id="2275551" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275552" id="2275552" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275553" id="2275553" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275555" id="2275555" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1939.html" id="ALSA-2024:1939" type="self" title="ALSA-2024:1939"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="thunderbird" version="115.10.0" release="2.el8_9.alma.1" epoch="0" arch="s390x" src="thunderbird-115.10.0-2.el8_9.alma.1.src.rpm">
          <filename>thunderbird-115.10.0-2.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">de02ba5db52d68a4a56b79f83ccf5de4d2f284bc6ac705e00bde96971c4909f8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1962</id>
    <title>Important: go-toolset:rhel8 security update</title>
    <issued date="2024-04-23 00:00:00"/>
    <updated date="2024-04-29 07:51:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>go-toolset:rhel8 security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. 

Security Fix(es):

* golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1962" id="RHSA-2024:1962" type="rhsa" title="RHSA-2024:1962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45288" id="CVE-2023-45288" type="cve" title="CVE-2023-45288"/>
      <reference href="https://bugzilla.redhat.com/2268273" id="2268273" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1962.html" id="ALSA-2024:1962" type="self" title="ALSA-2024:1962"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="go-toolset" stream="rhel8" version="8090020240423053211" context="9edba152" arch="s390x"/>
        <package name="golang-bin" version="1.20.12" release="8.module_el8.9.0+3818+ac9bcae6" epoch="0" arch="s390x" src="golang-1.20.12-8.module_el8.9.0+3818+ac9bcae6.src.rpm">
          <filename>golang-bin-1.20.12-8.module_el8.9.0+3818+ac9bcae6.s390x.rpm</filename>
          <sum type="sha256">4e7bd3a598082c1cb504c9e95b06054b6c8319083bff6f11a97a5075a8e30272</sum>
        </package>
        <package name="go-toolset" version="1.20.12" release="1.module_el8.9.0+3728+f1d47c6f" epoch="0" arch="s390x" src="go-toolset-1.20.12-1.module_el8.9.0+3728+f1d47c6f.src.rpm">
          <filename>go-toolset-1.20.12-1.module_el8.9.0+3728+f1d47c6f.s390x.rpm</filename>
          <sum type="sha256">7faca76560a577de35bc3154a7837075efd9c8d65ac26e99d125c851bf194b8d</sum>
        </package>
        <package name="golang-tests" version="1.20.12" release="8.module_el8.9.0+3818+ac9bcae6" epoch="0" arch="noarch" src="golang-1.20.12-8.module_el8.9.0+3818+ac9bcae6.src.rpm">
          <filename>golang-tests-1.20.12-8.module_el8.9.0+3818+ac9bcae6.noarch.rpm</filename>
          <sum type="sha256">90540550fbcee756c8daaf5a821ae36b4979b1471b6bfac82eddcf58e13c3eff</sum>
        </package>
        <package name="golang-misc" version="1.20.12" release="8.module_el8.9.0+3818+ac9bcae6" epoch="0" arch="noarch" src="golang-1.20.12-8.module_el8.9.0+3818+ac9bcae6.src.rpm">
          <filename>golang-misc-1.20.12-8.module_el8.9.0+3818+ac9bcae6.noarch.rpm</filename>
          <sum type="sha256">a679b5050fba15bc3cb8cb584643eb96c01a9ae88ef0ddca165ede66dbcedfac</sum>
        </package>
        <package name="golang-docs" version="1.20.12" release="8.module_el8.9.0+3818+ac9bcae6" epoch="0" arch="noarch" src="golang-1.20.12-8.module_el8.9.0+3818+ac9bcae6.src.rpm">
          <filename>golang-docs-1.20.12-8.module_el8.9.0+3818+ac9bcae6.noarch.rpm</filename>
          <sum type="sha256">bfe44686a3d552b8e540fb689a1a48fff798e548a94ccb89a79b71df12dd2602</sum>
        </package>
        <package name="golang-src" version="1.20.12" release="8.module_el8.9.0+3818+ac9bcae6" epoch="0" arch="noarch" src="golang-1.20.12-8.module_el8.9.0+3818+ac9bcae6.src.rpm">
          <filename>golang-src-1.20.12-8.module_el8.9.0+3818+ac9bcae6.noarch.rpm</filename>
          <sum type="sha256">d60f2c37f5cf3ab2732fab997a0cf7238828a57fbfebc4dac30b79f2093ee2fa</sum>
        </package>
        <package name="golang" version="1.20.12" release="8.module_el8.9.0+3818+ac9bcae6" epoch="0" arch="s390x" src="golang-1.20.12-8.module_el8.9.0+3818+ac9bcae6.src.rpm">
          <filename>golang-1.20.12-8.module_el8.9.0+3818+ac9bcae6.s390x.rpm</filename>
          <sum type="sha256">d6bbd3b4d5ceeaf633407426c8282d656c0949692b4fa609f3df7547cc325f67</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1998</id>
    <title>Moderate: libreswan security update</title>
    <issued date="2024-04-23 00:00:00"/>
    <updated date="2024-04-29 07:54:15"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libreswan security update</summary>
    <description>Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).

Security Fix(es):

* libreswan: Missing PreSharedKey for connection can cause crash (CVE-2024-2357)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1998" id="RHSA-2024:1998" type="rhsa" title="RHSA-2024:1998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2357" id="CVE-2024-2357" type="cve" title="CVE-2024-2357"/>
      <reference href="https://bugzilla.redhat.com/2268952" id="2268952" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1998.html" id="ALSA-2024:1998" type="self" title="ALSA-2024:1998"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="libreswan" version="4.12" release="2.el8_9.2.alma.1" epoch="0" arch="s390x" src="libreswan-4.12-2.el8_9.2.alma.1.src.rpm">
          <filename>libreswan-4.12-2.el8_9.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">30d54cca43d4d52e68d85864f23c84eed25e4ff96cd170801bb7fc495b3b86ea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2037</id>
    <title>Important: tigervnc security update</title>
    <issued date="2024-04-24 00:00:00"/>
    <updated date="2024-04-29 08:47:39"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

Security Fix(es):

* xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080)
* xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081)
* xorg-x11-server: User-after-free in ProcRenderAddGlyphs (CVE-2024-31083)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2037" id="RHSA-2024:2037" type="rhsa" title="RHSA-2024:2037"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31080" id="CVE-2024-31080" type="cve" title="CVE-2024-31080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31081" id="CVE-2024-31081" type="cve" title="CVE-2024-31081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31083" id="CVE-2024-31083" type="cve" title="CVE-2024-31083"/>
      <reference href="https://bugzilla.redhat.com/2271997" id="2271997" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271998" id="2271998" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272000" id="2272000" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2037.html" id="ALSA-2024:2037" type="self" title="ALSA-2024:2037"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="tigervnc-server-module" version="1.13.1" release="2.el8_9.10.alma.1" epoch="0" arch="s390x" src="tigervnc-1.13.1-2.el8_9.10.alma.1.src.rpm">
          <filename>tigervnc-server-module-1.13.1-2.el8_9.10.alma.1.s390x.rpm</filename>
          <sum type="sha256">063b4d82444c319d1ad1d4f99668dc1d79bc24f282a1b19e4f509ee7094365c1</sum>
        </package>
        <package name="tigervnc-server-minimal" version="1.13.1" release="2.el8_9.10.alma.1" epoch="0" arch="s390x" src="tigervnc-1.13.1-2.el8_9.10.alma.1.src.rpm">
          <filename>tigervnc-server-minimal-1.13.1-2.el8_9.10.alma.1.s390x.rpm</filename>
          <sum type="sha256">8577e289179f647554135452db05ddacce9773b17926ae12c1675309edea1e26</sum>
        </package>
        <package name="tigervnc-selinux" version="1.13.1" release="2.el8_9.10.alma.1" epoch="0" arch="noarch" src="tigervnc-1.13.1-2.el8_9.10.alma.1.src.rpm">
          <filename>tigervnc-selinux-1.13.1-2.el8_9.10.alma.1.noarch.rpm</filename>
          <sum type="sha256">9cf25d5c5f0da947736b27d04b2dcfae5a5a4428aaee91dc8e2edf7cc89c0b48</sum>
        </package>
        <package name="tigervnc-license" version="1.13.1" release="2.el8_9.10.alma.1" epoch="0" arch="noarch" src="tigervnc-1.13.1-2.el8_9.10.alma.1.src.rpm">
          <filename>tigervnc-license-1.13.1-2.el8_9.10.alma.1.noarch.rpm</filename>
          <sum type="sha256">b1c7e094ca741d1c8bb9ae99d575d4f7c53789a7fc57b8103b4c82b0f21046e8</sum>
        </package>
        <package name="tigervnc-icons" version="1.13.1" release="2.el8_9.10.alma.1" epoch="0" arch="noarch" src="tigervnc-1.13.1-2.el8_9.10.alma.1.src.rpm">
          <filename>tigervnc-icons-1.13.1-2.el8_9.10.alma.1.noarch.rpm</filename>
          <sum type="sha256">b33666864b293f35db2b9980fb783cb4cfdfd28685c545a127b82448f86601a2</sum>
        </package>
        <package name="tigervnc" version="1.13.1" release="2.el8_9.10.alma.1" epoch="0" arch="s390x" src="tigervnc-1.13.1-2.el8_9.10.alma.1.src.rpm">
          <filename>tigervnc-1.13.1-2.el8_9.10.alma.1.s390x.rpm</filename>
          <sum type="sha256">b4bbcdf39d391504091cf27ee991419f752a3cc59cfa1baae392c8243810461e</sum>
        </package>
        <package name="tigervnc-server" version="1.13.1" release="2.el8_9.10.alma.1" epoch="0" arch="s390x" src="tigervnc-1.13.1-2.el8_9.10.alma.1.src.rpm">
          <filename>tigervnc-server-1.13.1-2.el8_9.10.alma.1.s390x.rpm</filename>
          <sum type="sha256">fd9888892d524697871c0ff28bc8da050448d2e58305ef8538874bdd70c26e0a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2084</id>
    <title>Important: container-tools:4.0 security update</title>
    <issued date="2024-04-29 00:00:00"/>
    <updated date="2024-05-07 15:06:55"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>container-tools:4.0 security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* buildah: full container escape at build time (CVE-2024-1753)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2084" id="RHSA-2024:2084" type="rhsa" title="RHSA-2024:2084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1753" id="CVE-2024-1753" type="cve" title="CVE-2024-1753"/>
      <reference href="https://bugzilla.redhat.com/2265513" id="2265513" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2084.html" id="ALSA-2024:2084" type="self" title="ALSA-2024:2084"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="container-tools" stream="4.0" version="8090020240429090257" context="20125149" arch="s390x"/>
        <package name="podman-tests" version="4.0.2" release="26.module_el8.9.0+3722+7fd8ab2b.alma.1" epoch="2" arch="s390x" src="podman-4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1.src.rpm">
          <filename>podman-tests-4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1.s390x.rpm</filename>
          <sum type="sha256">1c4e43d0df40b97bd97d21727ac82d2b7aa7880eeeb563840395e49b25119c59</sum>
        </package>
        <package name="buildah-tests" version="1.24.7" release="1.module_el8.9.0+3821+d7d58347.alma.1" epoch="1" arch="s390x" src="buildah-1.24.7-1.module_el8.9.0+3821+d7d58347.alma.1.src.rpm">
          <filename>buildah-tests-1.24.7-1.module_el8.9.0+3821+d7d58347.alma.1.s390x.rpm</filename>
          <sum type="sha256">1d75fd1be8abc3bd6b98a29b509b1b71a86cc07da9e1c79e27b64bff76dc63f1</sum>
        </package>
        <package name="podman" version="4.0.2" release="26.module_el8.9.0+3722+7fd8ab2b.alma.1" epoch="2" arch="s390x" src="podman-4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1.src.rpm">
          <filename>podman-4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1.s390x.rpm</filename>
          <sum type="sha256">1de74a3c88afbe3b47000d1085b40977ee3c79190b0b47ddbec7834eed28e0de</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.5" release="2.module_el8.8.0+3468+16b86c82" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.5-2.module_el8.8.0+3468+16b86c82.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.5-2.module_el8.8.0+3468+16b86c82.s390x.rpm</filename>
          <sum type="sha256">1e162c539720ce081534f6fb7d539a7332ff986a28465e81ca5532262dc0b96e</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="1.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="libslirp-4.4.0-1.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>libslirp-devel-4.4.0-1.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">23a930ac511e216078f3ebd78a7940a7f4a6b6d16fe2d3c7f7c04c5dd9050b3b</sum>
        </package>
        <package name="criu" version="3.15" release="3.module_el8.9.0+3821+d7d58347" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.9.0+3821+d7d58347.src.rpm">
          <filename>criu-3.15-3.module_el8.9.0+3821+d7d58347.s390x.rpm</filename>
          <sum type="sha256">2b266d669cca5a0c1de47095c6bf26f80a91ed914db6a869756d57005c5dad90</sum>
        </package>
        <package name="python3-criu" version="3.15" release="3.module_el8.9.0+3821+d7d58347" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.9.0+3821+d7d58347.src.rpm">
          <filename>python3-criu-3.15-3.module_el8.9.0+3821+d7d58347.s390x.rpm</filename>
          <sum type="sha256">439de6271a23690d20c4b4d8bd3ea45452caff44bcf6c70253c4ffed300f2140</sum>
        </package>
        <package name="cockpit-podman" version="46" release="1.module_el8.7.0+3344+5bcd850f" epoch="0" arch="noarch" src="cockpit-podman-46-1.module_el8.7.0+3344+5bcd850f.src.rpm">
          <filename>cockpit-podman-46-1.module_el8.7.0+3344+5bcd850f.noarch.rpm</filename>
          <sum type="sha256">4befd0793ef210df16649c866d5c1c4e69991cc174ecf348a5fbe591aa93b387</sum>
        </package>
        <package name="runc" version="1.1.12" release="1.module_el8.9.0+3812+085a32ca" epoch="1" arch="s390x" src="runc-1.1.12-1.module_el8.9.0+3812+085a32ca.src.rpm">
          <filename>runc-1.1.12-1.module_el8.9.0+3812+085a32ca.s390x.rpm</filename>
          <sum type="sha256">4ce826ccd9b2a7d893ae5175e40da09d4bdfe307a93b6c28ba8eece87360ffd5</sum>
        </package>
        <package name="aardvark-dns" version="1.0.1" release="38.module_el8.9.0+3821+d7d58347" epoch="2" arch="s390x" src="containers-common-1-38.module_el8.9.0+3821+d7d58347.src.rpm">
          <filename>aardvark-dns-1.0.1-38.module_el8.9.0+3821+d7d58347.s390x.rpm</filename>
          <sum type="sha256">58488ccf60a52f13f96b4bf18a6e2dd80a735896602e2005d5751b4dc052c33c</sum>
        </package>
        <package name="containers-common" version="1" release="38.module_el8.9.0+3627+db8ec155" epoch="2" arch="s390x" src="containers-common-1-38.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>containers-common-1-38.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">59743e519719ebda4b03e9224b0027f9f0b94172bd75944acd94345533910cab</sum>
        </package>
        <package name="criu-devel" version="3.15" release="3.module_el8.9.0+3821+d7d58347" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.9.0+3821+d7d58347.src.rpm">
          <filename>criu-devel-3.15-3.module_el8.9.0+3821+d7d58347.s390x.rpm</filename>
          <sum type="sha256">639639de3a6bff214c03a4927d270c5c820931f43f5283888c096568da8ae316</sum>
        </package>
        <package name="crit" version="3.15" release="3.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>crit-3.15-3.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">63e66b7937f70ee985aabe920c4d8c1e590159f72b4b79a311e986f58bc147e1</sum>
        </package>
        <package name="podman-remote" version="4.0.2" release="26.module_el8.9.0+3821+d7d58347.alma.1" epoch="2" arch="s390x" src="podman-4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1.src.rpm">
          <filename>podman-remote-4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1.s390x.rpm</filename>
          <sum type="sha256">6446e60ec6fa307cb5a90285a63dfbcc36fa044fc112b2eb470ef57db1c3b499</sum>
        </package>
        <package name="container-selinux" version="2.205.0" release="3.module_el8.9.0+3687+dcd7ef8f" epoch="2" arch="noarch" src="container-selinux-2.205.0-3.module_el8.9.0+3687+dcd7ef8f.src.rpm">
          <filename>container-selinux-2.205.0-3.module_el8.9.0+3687+dcd7ef8f.noarch.rpm</filename>
          <sum type="sha256">7041cfe69b77caa064e026863bd099794de9bb4965bad64293fdf6032c991e31</sum>
        </package>
        <package name="fuse-overlayfs" version="1.9" release="2.module_el8.9.0+3627+db8ec155" epoch="0" arch="s390x" src="fuse-overlayfs-1.9-2.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>fuse-overlayfs-1.9-2.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">769fd619e20112145f23e5c5e36c0c5dbf24116ffe3d85022ae3168f6ab40f80</sum>
        </package>
        <package name="slirp4netns" version="1.1.8" release="3.module_el8.9.0+3821+d7d58347" epoch="0" arch="s390x" src="slirp4netns-1.1.8-3.module_el8.9.0+3821+d7d58347.src.rpm">
          <filename>slirp4netns-1.1.8-3.module_el8.9.0+3821+d7d58347.s390x.rpm</filename>
          <sum type="sha256">983b279231183e69130546a6e92e1ba13fde965c42155f8b90b8aae4f0f1b7aa</sum>
        </package>
        <package name="buildah" version="1.24.7" release="1.module_el8.9.0+3821+d7d58347.alma.1" epoch="1" arch="s390x" src="buildah-1.24.7-1.module_el8.9.0+3821+d7d58347.alma.1.src.rpm">
          <filename>buildah-1.24.7-1.module_el8.9.0+3821+d7d58347.alma.1.s390x.rpm</filename>
          <sum type="sha256">a1e886fe5ebd1251778e48d3b0eff71da8f4558596a444c74c0a452f74f09f72</sum>
        </package>
        <package name="crun" version="1.8.7" release="1.module_el8.9.0+3683+33eb0feb" epoch="0" arch="s390x" src="crun-1.8.7-1.module_el8.9.0+3683+33eb0feb.src.rpm">
          <filename>crun-1.8.7-1.module_el8.9.0+3683+33eb0feb.s390x.rpm</filename>
          <sum type="sha256">a5bead3eccd97d3324391d9bbb99d8e8cae5e3e408b641a7d8a26b935b19393e</sum>
        </package>
        <package name="skopeo-tests" version="1.6.2" release="9.module_el8.9.0+3812+085a32ca.alma.1" epoch="2" arch="s390x" src="skopeo-1.6.2-9.module_el8.9.0+3812+085a32ca.alma.1.src.rpm">
          <filename>skopeo-tests-1.6.2-9.module_el8.9.0+3812+085a32ca.alma.1.s390x.rpm</filename>
          <sum type="sha256">a6c4b23f1b6504900a3ef409b9b4b6670f1c702d8d233508be7b69ab3748677d</sum>
        </package>
        <package name="conmon" version="2.1.4" release="2.module_el8.9.0+3821+d7d58347" epoch="2" arch="s390x" src="conmon-2.1.4-2.module_el8.9.0+3821+d7d58347.src.rpm">
          <filename>conmon-2.1.4-2.module_el8.9.0+3821+d7d58347.s390x.rpm</filename>
          <sum type="sha256">a84e62fa2b650162ab38835049306f1dd69ca06bb7edf8b0d5baf9e82dbf9520</sum>
        </package>
        <package name="udica" version="0.2.6" release="4.module_el8.9.0+3821+d7d58347" epoch="0" arch="noarch" src="udica-0.2.6-4.module_el8.9.0+3821+d7d58347.src.rpm">
          <filename>udica-0.2.6-4.module_el8.9.0+3821+d7d58347.noarch.rpm</filename>
          <sum type="sha256">b16f4c44933cb403cfaa651900ea0a876603121f04f35210336bdcaf8b1e28ca</sum>
        </package>
        <package name="python3-podman" version="4.0.0" release="2.module_el8.9.0+3821+d7d58347" epoch="0" arch="noarch" src="python-podman-4.0.0-2.module_el8.9.0+3821+d7d58347.src.rpm">
          <filename>python3-podman-4.0.0-2.module_el8.9.0+3821+d7d58347.noarch.rpm</filename>
          <sum type="sha256">c081a3661902823c83f6efcadd42a4d26168f60e7a4c5943af919e3c948d2f99</sum>
        </package>
        <package name="podman-plugins" version="4.0.2" release="26.module_el8.9.0+3722+7fd8ab2b.alma.1" epoch="2" arch="s390x" src="podman-4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1.src.rpm">
          <filename>podman-plugins-4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1.s390x.rpm</filename>
          <sum type="sha256">c65a4ed3bdf212ec594e5aaa93cb583729a8ca9b3360e3a09784e3962547720d</sum>
        </package>
        <package name="podman-gvproxy" version="4.0.2" release="26.module_el8.9.0+3821+d7d58347.alma.1" epoch="2" arch="s390x" src="podman-4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1.src.rpm">
          <filename>podman-gvproxy-4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1.s390x.rpm</filename>
          <sum type="sha256">d36dd36902f48f74517f484dee711cac1dc83c070f58b6841302c38335d681b8</sum>
        </package>
        <package name="podman-catatonit" version="4.0.2" release="26.module_el8.9.0+3821+d7d58347.alma.1" epoch="2" arch="s390x" src="podman-4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1.src.rpm">
          <filename>podman-catatonit-4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1.s390x.rpm</filename>
          <sum type="sha256">d876050af080f80735f53a12778ec090d6df41b24b40ac2f8970f0611a0c0d08</sum>
        </package>
        <package name="containernetworking-plugins" version="1.1.1" release="6.module_el8.9.0+3711+04fcca5e" epoch="1" arch="s390x" src="containernetworking-plugins-1.1.1-6.module_el8.9.0+3711+04fcca5e.src.rpm">
          <filename>containernetworking-plugins-1.1.1-6.module_el8.9.0+3711+04fcca5e.s390x.rpm</filename>
          <sum type="sha256">dc50c895f185c1e7e731dd743a506eae294ea586f3f57362d8d39e88ae985dab</sum>
        </package>
        <package name="podman-docker" version="4.0.2" release="26.module_el8.9.0+3821+d7d58347.alma.1" epoch="2" arch="noarch" src="podman-4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1.src.rpm">
          <filename>podman-docker-4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1.noarch.rpm</filename>
          <sum type="sha256">df5d5b777d6842b99c0c061be257dc9de5e1d3cb1306f2e20e6207b76fcc7bab</sum>
        </package>
        <package name="skopeo" version="1.6.2" release="9.module_el8.9.0+3821+d7d58347.alma.1" epoch="2" arch="s390x" src="skopeo-1.6.2-9.module_el8.9.0+3821+d7d58347.alma.1.src.rpm">
          <filename>skopeo-1.6.2-9.module_el8.9.0+3821+d7d58347.alma.1.s390x.rpm</filename>
          <sum type="sha256">e8eec0b4d181427eb89f9952184c729401fa590cc67a6238d875c7db8395f755</sum>
        </package>
        <package name="netavark" version="1.0.1" release="38.module_el8.9.0+3821+d7d58347" epoch="2" arch="s390x" src="containers-common-1-38.module_el8.9.0+3821+d7d58347.src.rpm">
          <filename>netavark-1.0.1-38.module_el8.9.0+3821+d7d58347.s390x.rpm</filename>
          <sum type="sha256">e95d3898cea6cbe8c199890861d53e1835275e658c5b0891932859fe794e7014</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.4" release="5.module_el8.9.0+3627+db8ec155" epoch="0" arch="s390x" src="toolbox-0.0.99.4-5.module_el8.9.0+3627+db8ec155.src.rpm">
          <filename>toolbox-tests-0.0.99.4-5.module_el8.9.0+3627+db8ec155.s390x.rpm</filename>
          <sum type="sha256">e9c564f21054028335b29a43cc179070a0218effbcadd66b0d4d56f9e188fbeb</sum>
        </package>
        <package name="criu-libs" version="3.15" release="3.module_el8.9.0+3821+d7d58347" epoch="0" arch="s390x" src="criu-3.15-3.module_el8.9.0+3821+d7d58347.src.rpm">
          <filename>criu-libs-3.15-3.module_el8.9.0+3821+d7d58347.s390x.rpm</filename>
          <sum type="sha256">f078cab3b7617edf0e5c6c228971522a92e7f4d5fcb0d9eb85583839c1b61fd8</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="1.module_el8.6.0+3137+d33c3efb" epoch="0" arch="s390x" src="libslirp-4.4.0-1.module_el8.6.0+3137+d33c3efb.src.rpm">
          <filename>libslirp-4.4.0-1.module_el8.6.0+3137+d33c3efb.s390x.rpm</filename>
          <sum type="sha256">f2c8aa7fab8501dbdf33f68a74cb5600af266839424a6d637732ac248a58edc7</sum>
        </package>
        <package name="toolbox" version="0.0.99.4" release="5.module_el8.9.0+3722+7fd8ab2b" epoch="0" arch="s390x" src="toolbox-0.0.99.4-5.module_el8.9.0+3722+7fd8ab2b.src.rpm">
          <filename>toolbox-0.0.99.4-5.module_el8.9.0+3722+7fd8ab2b.s390x.rpm</filename>
          <sum type="sha256">fef22ea3f83cd4e048c1caba145d74498f5db6aac513e821f71ac73c437eb4d9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2699</id>
    <title>Important: git-lfs security update</title>
    <issued date="2024-05-06 00:00:00"/>
    <updated date="2024-05-09 12:01:17"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git-lfs security update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.

Security Fix(es):

* golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288,VU#421644.3)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2699" id="RHSA-2024:2699" type="rhsa" title="RHSA-2024:2699"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45288" id="CVE-2023-45288" type="cve" title="CVE-2023-45288"/>
      <reference href="https://bugzilla.redhat.com/2268273" id="2268273" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2699.html" id="ALSA-2024:2699" type="self" title="ALSA-2024:2699"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="git-lfs" version="3.2.0" release="3.el8_9" epoch="0" arch="s390x" src="git-lfs-3.2.0-3.el8_9.src.rpm">
          <filename>git-lfs-3.2.0-3.el8_9.s390x.rpm</filename>
          <sum type="sha256">b184ab29026a5eccc8ee9880e8dcaf08e0f708d35691c8a8d8463cc084dcc418</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2722</id>
    <title>Important: glibc security update</title>
    <issued date="2024-05-07 00:00:00"/>
    <updated date="2024-05-09 12:08:11"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: Out of bounds write in iconv may lead to remote code execution (CVE-2024-2961)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2722" id="RHSA-2024:2722" type="rhsa" title="RHSA-2024:2722"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2961" id="CVE-2024-2961" type="cve" title="CVE-2024-2961"/>
      <reference href="https://bugzilla.redhat.com/2273404" id="2273404" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2722.html" id="ALSA-2024:2722" type="self" title="ALSA-2024:2722"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="compat-libpthread-nonshared" version="2.28" release="236.el8_9.13" epoch="0" arch="s390x" src="glibc-2.28-236.el8_9.13.src.rpm">
          <filename>compat-libpthread-nonshared-2.28-236.el8_9.13.s390x.rpm</filename>
          <sum type="sha256">1e18fa2087b79c17c780beced6067f7f63c75f7cb7e6395c22c50bb25234e971</sum>
        </package>
        <package name="glibc-utils" version="2.28" release="236.el8_9.13" epoch="0" arch="s390x" src="glibc-2.28-236.el8_9.13.src.rpm">
          <filename>glibc-utils-2.28-236.el8_9.13.s390x.rpm</filename>
          <sum type="sha256">45d36fa56bcd5fa38c8d9caed74966a25552411141d0403c532911598bfbaad6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2778</id>
    <title>Important: nodejs:20 security update</title>
    <issued date="2024-05-09 00:00:00"/>
    <updated date="2024-05-09 12:14:55"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:20 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

Security Fix(es):

* c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)
* nghttp2: CONTINUATION frames DoS (CVE-2024-28182)
* nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)
* nodejs: CONTINUATION frames DoS (CVE-2024-27983)
* nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2778" id="RHSA-2024:2778" type="rhsa" title="RHSA-2024:2778"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22025" id="CVE-2024-22025" type="cve" title="CVE-2024-22025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25629" id="CVE-2024-25629" type="cve" title="CVE-2024-25629"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27982" id="CVE-2024-27982" type="cve" title="CVE-2024-27982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27983" id="CVE-2024-27983" type="cve" title="CVE-2024-27983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28182" id="CVE-2024-28182" type="cve" title="CVE-2024-28182"/>
      <reference href="https://bugzilla.redhat.com/2265713" id="2265713" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268639" id="2268639" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270559" id="2270559" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272764" id="2272764" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275392" id="2275392" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2778.html" id="ALSA-2024:2778" type="self" title="ALSA-2024:2778"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="nodejs" stream="20" version="8090020240509091713" context="9edba152" arch="s390x"/>
        <package name="nodejs-devel" version="20.12.2" release="2.module_el8.9.0+3827+11b91f3e" epoch="1" arch="s390x" src="nodejs-20.12.2-2.module_el8.9.0+3827+11b91f3e.src.rpm">
          <filename>nodejs-devel-20.12.2-2.module_el8.9.0+3827+11b91f3e.s390x.rpm</filename>
          <sum type="sha256">133ce51f9f1760dda4953f428d210786024a4f2562417f1dbd3bec85b9960b78</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el8.9.0+3684+11b9e959" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.9.0+3684+11b9e959.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el8.9.0+3684+11b9e959.noarch.rpm</filename>
          <sum type="sha256">2737beb0b9ef67ff6403ed0e4f69f5ab715d85eb5860974b3755cefb24e3b7f9</sum>
        </package>
        <package name="npm" version="10.5.0" release="1.20.12.2.2.module_el8.9.0+3827+11b91f3e" epoch="1" arch="s390x" src="nodejs-20.12.2-2.module_el8.9.0+3827+11b91f3e.src.rpm">
          <filename>npm-10.5.0-1.20.12.2.2.module_el8.9.0+3827+11b91f3e.s390x.rpm</filename>
          <sum type="sha256">30a208022e41b3e61129301f413a424614d4c70b113d980726569c3bb3a728f6</sum>
        </package>
        <package name="nodejs-full-i18n" version="20.12.2" release="2.module_el8.9.0+3827+11b91f3e" epoch="1" arch="s390x" src="nodejs-20.12.2-2.module_el8.9.0+3827+11b91f3e.src.rpm">
          <filename>nodejs-full-i18n-20.12.2-2.module_el8.9.0+3827+11b91f3e.s390x.rpm</filename>
          <sum type="sha256">3c7f11f5ffc589c5b8256f359dc1e38cef5bd53aa6e6479eb8b4f872268045e3</sum>
        </package>
        <package name="nodejs-docs" version="20.12.2" release="2.module_el8.9.0+3827+11b91f3e" epoch="1" arch="noarch" src="nodejs-20.12.2-2.module_el8.9.0+3827+11b91f3e.src.rpm">
          <filename>nodejs-docs-20.12.2-2.module_el8.9.0+3827+11b91f3e.noarch.rpm</filename>
          <sum type="sha256">78de8a8e72e4eeed7a9a7076044fa2d8ee5e112a97270cf85321c96777d4bba3</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.9.0+3731+490e3ce5" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.9.0+3731+490e3ce5.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.9.0+3731+490e3ce5.noarch.rpm</filename>
          <sum type="sha256">8aef59eb02816fbfcc43df6a4074cc51485b810317c50f44739b0798ac8065de</sum>
        </package>
        <package name="nodejs" version="20.12.2" release="2.module_el8.9.0+3827+11b91f3e" epoch="1" arch="s390x" src="nodejs-20.12.2-2.module_el8.9.0+3827+11b91f3e.src.rpm">
          <filename>nodejs-20.12.2-2.module_el8.9.0+3827+11b91f3e.s390x.rpm</filename>
          <sum type="sha256">afbadd0be3f008c93829755d74500f2728e24199972278795d7f3aa0a241d0d2</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el8.9.0+3684+11b9e959" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.9.0+3684+11b9e959.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el8.9.0+3684+11b9e959.noarch.rpm</filename>
          <sum type="sha256">b9f7128be10cd497d323808f86402c91a970afde6884b8967695e20fa4060629</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2780</id>
    <title>Important: nodejs:18 security update</title>
    <issued date="2024-05-09 00:00:00"/>
    <updated date="2024-05-09 12:12:52"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:18 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

Security Fix(es):

* nodejs: CONTINUATION frames DoS (CVE-2024-27983)
* nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)
* nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)
* nghttp2: CONTINUATION frames DoS (CVE-2024-28182)
* c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2780" id="RHSA-2024:2780" type="rhsa" title="RHSA-2024:2780"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22025" id="CVE-2024-22025" type="cve" title="CVE-2024-22025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25629" id="CVE-2024-25629" type="cve" title="CVE-2024-25629"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27982" id="CVE-2024-27982" type="cve" title="CVE-2024-27982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27983" id="CVE-2024-27983" type="cve" title="CVE-2024-27983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28182" id="CVE-2024-28182" type="cve" title="CVE-2024-28182"/>
      <reference href="https://bugzilla.redhat.com/2265713" id="2265713" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268639" id="2268639" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270559" id="2270559" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272764" id="2272764" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275392" id="2275392" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2780.html" id="ALSA-2024:2780" type="self" title="ALSA-2024:2780"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="nodejs" stream="18" version="8090020240509091909" context="9edba152" arch="s390x"/>
        <package name="nodejs-devel" version="18.20.2" release="1.module_el8.9.0+3828+c9fa9644" epoch="1" arch="s390x" src="nodejs-18.20.2-1.module_el8.9.0+3828+c9fa9644.src.rpm">
          <filename>nodejs-devel-18.20.2-1.module_el8.9.0+3828+c9fa9644.s390x.rpm</filename>
          <sum type="sha256">12fb17daf03b46a0c73b3a65fb2bcaff7983a8beba55c2fbf0528b0028c80833</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.8.0+3613+1ed8c91d" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.8.0+3613+1ed8c91d.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.8.0+3613+1ed8c91d.noarch.rpm</filename>
          <sum type="sha256">1de153a1170baeaa24f02ebd86d32d508ac48ea9ed54e2a70c5250a81952a65b</sum>
        </package>
        <package name="npm" version="10.5.0" release="1.18.20.2.1.module_el8.9.0+3828+c9fa9644" epoch="1" arch="s390x" src="nodejs-18.20.2-1.module_el8.9.0+3828+c9fa9644.src.rpm">
          <filename>npm-10.5.0-1.18.20.2.1.module_el8.9.0+3828+c9fa9644.s390x.rpm</filename>
          <sum type="sha256">61a89bd6f10cb20a4c0000128609b3ed4c179c863d2b494f60f2e12cd1a1814b</sum>
        </package>
        <package name="nodejs" version="18.20.2" release="1.module_el8.9.0+3828+c9fa9644" epoch="1" arch="s390x" src="nodejs-18.20.2-1.module_el8.9.0+3828+c9fa9644.src.rpm">
          <filename>nodejs-18.20.2-1.module_el8.9.0+3828+c9fa9644.s390x.rpm</filename>
          <sum type="sha256">64a1b6e415fddb1b17f709c4828c5cca499c3667db995d90c335e6eb603c44cf</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el8.7.0+3343+ea2b7901" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.noarch.rpm</filename>
          <sum type="sha256">9430d44c78a3cfbe1ae3d39b8531f651606661943959bc0c3de87b2f91ea6f67</sum>
        </package>
        <package name="nodejs-docs" version="18.20.2" release="1.module_el8.9.0+3828+c9fa9644" epoch="1" arch="noarch" src="nodejs-18.20.2-1.module_el8.9.0+3828+c9fa9644.src.rpm">
          <filename>nodejs-docs-18.20.2-1.module_el8.9.0+3828+c9fa9644.noarch.rpm</filename>
          <sum type="sha256">b7bc195428d74d6532c8f6340f1d9f4ff77162adcae9c6d876590699165a4a56</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el8.7.0+3343+ea2b7901" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el8.7.0+3343+ea2b7901.noarch.rpm</filename>
          <sum type="sha256">dca36d100028686323583aeddaa86efff902ff7fe29cb97d4356c309e3e899d9</sum>
        </package>
        <package name="nodejs-full-i18n" version="18.20.2" release="1.module_el8.9.0+3828+c9fa9644" epoch="1" arch="s390x" src="nodejs-18.20.2-1.module_el8.9.0+3828+c9fa9644.src.rpm">
          <filename>nodejs-full-i18n-18.20.2-1.module_el8.9.0+3828+c9fa9644.s390x.rpm</filename>
          <sum type="sha256">f47ad6ccb7904bc900900f3f3647d33ffe10bc1edf2cddfbb3b4b65f466e6640</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2961</id>
    <title>Moderate: Image builder components bug fix, enhancement and security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:40:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>Image builder components bug fix, enhancement and security update</summary>
    <description>Image Builder is a service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood.

Security Fix(es):

* osbuild-composer: race condition may disable GPG verification for package repositories (CVE-2024-2307)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2961" id="RHSA-2024:2961" type="rhsa" title="RHSA-2024:2961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2307" id="CVE-2024-2307" type="cve" title="CVE-2024-2307"/>
      <reference href="https://bugzilla.redhat.com/2268513" id="2268513" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2961.html" id="ALSA-2024:2961" type="self" title="ALSA-2024:2961"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="osbuild-composer" version="101" release="1.el8.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101-1.el8.alma.1.src.rpm">
          <filename>osbuild-composer-101-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">a1fbb0097bf3eb1b14c5a04f12d63f29296c9b2216b8a2651a110c53734b8e38</sum>
        </package>
        <package name="osbuild-composer-core" version="101" release="1.el8.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101-1.el8.alma.1.src.rpm">
          <filename>osbuild-composer-core-101-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">bc5bae12773b79a04fc0c1d9de04860cf7ddf4904252f08dc3e278527809cce6</sum>
        </package>
        <package name="osbuild-composer-worker" version="101" release="1.el8.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101-1.el8.alma.1.src.rpm">
          <filename>osbuild-composer-worker-101-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">e51891da927085400f933bbfb1a45c1739ba36f20771b859d77f8ef740310a48</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2966</id>
    <title>Low: ghostscript security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:40:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: Divide by zero in eps_print_page in gdevepsn.c (CVE-2020-21710)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2966" id="RHSA-2024:2966" type="rhsa" title="RHSA-2024:2966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-21710" id="CVE-2020-21710" type="cve" title="CVE-2020-21710"/>
      <reference href="https://bugzilla.redhat.com/2235001" id="2235001" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2966.html" id="ALSA-2024:2966" type="self" title="ALSA-2024:2966"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="ghostscript" version="9.27" release="12.el8" epoch="0" arch="s390x" src="ghostscript-9.27-12.el8.src.rpm">
          <filename>ghostscript-9.27-12.el8.s390x.rpm</filename>
          <sum type="sha256">63817f585547a354280a394bcb7e2a92a033d744f64532ce24a4cddd0c243645</sum>
        </package>
        <package name="libgs" version="9.27" release="12.el8" epoch="0" arch="s390x" src="ghostscript-9.27-12.el8.src.rpm">
          <filename>libgs-9.27-12.el8.s390x.rpm</filename>
          <sum type="sha256">6f4a612e5836a2c220bb374e14ac7175115b25217e13fdfcc30fc4f5443a421b</sum>
        </package>
        <package name="ghostscript-x11" version="9.27" release="12.el8" epoch="0" arch="s390x" src="ghostscript-9.27-12.el8.src.rpm">
          <filename>ghostscript-x11-9.27-12.el8.s390x.rpm</filename>
          <sum type="sha256">d3abb07ea67912b40363dfc5e23c03e0997d68af4837ec8a6398ad84f342cb6b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2968</id>
    <title>Moderate: fence-agents security and bug fix update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:51:26"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fence-agents security and bug fix update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. 

Security Fix(es):

* urllib3: Request body not stripped after redirect from 303 status changes request method to GET (CVE-2023-45803)
* pycryptodome: side-channel leakage for OAEP decryption in PyCryptodome and pycryptodomex (CVE-2023-52323)
* jinja2: HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-22195)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2968" id="RHSA-2024:2968" type="rhsa" title="RHSA-2024:2968"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45803" id="CVE-2023-45803" type="cve" title="CVE-2023-45803"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52323" id="CVE-2023-52323" type="cve" title="CVE-2023-52323"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22195" id="CVE-2024-22195" type="cve" title="CVE-2024-22195"/>
      <reference href="https://bugzilla.redhat.com/2246840" id="2246840" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257028" id="2257028" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257854" id="2257854" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2968.html" id="ALSA-2024:2968" type="self" title="ALSA-2024:2968"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="fence-agents-ipmilan" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-ipmilan-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">08e29b78542a3cdeb6e1932ab378902f2776e211d8e8fc0708fa81216fd47210</sum>
        </package>
        <package name="fence-agents-scsi" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-scsi-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">0acf5b87e0bfcc8337390e47ca5cdff1c7f1e5d2b158795b3a2ee575684f8fe0</sum>
        </package>
        <package name="fence-agents-ilo-ssh" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-ilo-ssh-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">123edc577830153968a1bdf7d8d91ff9438b37c409a104f7d5202160657b6bda</sum>
        </package>
        <package name="fence-agents-mpath" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-mpath-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">13f9ae2fa3570f9c2b4ceed60fd899552f268fbc115ce5d8166c11c329c9339d</sum>
        </package>
        <package name="fence-agents-zvm" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-zvm-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">157b003719bbae13f201387cf821adf9105d6b939dfb5a78eef5404c59fd58c2</sum>
        </package>
        <package name="fence-agents-intelmodular" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-intelmodular-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">1842b542d5a964b86fcffa20acdab02c012a77c2f31ee911eba69457453b0666</sum>
        </package>
        <package name="fence-agents-rsb" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-rsb-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">1c76399ece81d362afb27f07177d131017609aceae927325bcf79f80d02b862a</sum>
        </package>
        <package name="fence-agents-wti" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-wti-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">1dbb6308dff000da7afde0f9492dc5f7905973cb1f1c0407bc92f6d0c8872ec1</sum>
        </package>
        <package name="fence-agents-ibmblade" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-ibmblade-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">2a8e1513094be7c31bafa3dc9156ed3f587a093dec2e20ec34e440a15f427aa4</sum>
        </package>
        <package name="fence-agents-vmware-soap" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-vmware-soap-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">2aac279ebf6119bf4528b3c71ab5742fb38a39f03c90472ea4362bed418a81d1</sum>
        </package>
        <package name="fence-agents-ilo2" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-ilo2-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">2c7ee346c1684b29ae6f0584b24e7464d2b52ed1b22a44de65fd1483f0398776</sum>
        </package>
        <package name="fence-agents-eaton-snmp" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-eaton-snmp-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">2f44a983b87ec674a7cdb38b67d2e43d0b8cf61a2bf2e55e4e688861a3395fe9</sum>
        </package>
        <package name="fence-agents-all" version="4.2.1" release="129.el8" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-all-4.2.1-129.el8.s390x.rpm</filename>
          <sum type="sha256">38f7b7ef58319059d2d5dcb81627be49927bcd01356043cf608ae9096162fbfc</sum>
        </package>
        <package name="fence-agents-ilo-mp" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-ilo-mp-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">4eb1a8e5dd2b22d780b0a58003af61cceaf9d68dde319b3bc06f57916a1d8efa</sum>
        </package>
        <package name="fence-agents-bladecenter" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-bladecenter-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">549bbe2be99520d4127a581edc8428a2dc1c88f253ab341ea667439bd7195784</sum>
        </package>
        <package name="fence-agents-eps" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-eps-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">59f24d90db56e407aa328b15b8966269bb032ae6594df4770cfd54482ed0fb3c</sum>
        </package>
        <package name="fence-agents-apc" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-apc-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">5a461131a864ed1224ba66b050c297b6f92b313d25071f2b4b34864299bb9554</sum>
        </package>
        <package name="fence-agents-hpblade" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-hpblade-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">638cdf11020888be28c006ee5c453d39f53366fe08637f6f4188f9e424c7604c</sum>
        </package>
        <package name="fence-agents-apc-snmp" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-apc-snmp-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">69b5f3ce9977d270a5e6e320ac2e7dffee249cd39d936bda3c5a4ef5b00d1f13</sum>
        </package>
        <package name="fence-agents-ipdu" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-ipdu-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">6b5e919ce01295a19d99863f6aeb36a4a24d99d46cb63cb04b767c05e4699ee6</sum>
        </package>
        <package name="fence-agents-cisco-mds" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-cisco-mds-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">713672213adc8838c04252af77550bc1c91ea8a78a48ac428d00ed64b82b40cd</sum>
        </package>
        <package name="fence-agents-kubevirt" version="4.2.1" release="129.el8" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-kubevirt-4.2.1-129.el8.s390x.rpm</filename>
          <sum type="sha256">742725c92f802dc82fc898a3a32f9c6660f3c37f191b9ee2926ffefa93e8715f</sum>
        </package>
        <package name="fence-agents-amt-ws" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-amt-ws-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">7c22a92b21c4b1c7eff695f993e4bfa7128dd78c9cad76b292020a8979a1b9ad</sum>
        </package>
        <package name="fence-agents-ifmib" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-ifmib-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">7d48f038a18e298b31d79fc567f24cf16c14b1d977bce0b31f2fe9f527ec67aa</sum>
        </package>
        <package name="fence-agents-vmware-rest" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-vmware-rest-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">7dc85dfd96c1e3ab97f47da889ae198f3adb027bd9f63d1bef5a5173ba5dcb15</sum>
        </package>
        <package name="fence-agents-cisco-ucs" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-cisco-ucs-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">8f3fafff65e6234fdddfc1f7b8add1370be9e221ed022360a96220c2e535b6c8</sum>
        </package>
        <package name="fence-agents-redfish" version="4.2.1" release="129.el8" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-redfish-4.2.1-129.el8.s390x.rpm</filename>
          <sum type="sha256">91262d53538daee05cb57d3b28c78b0813e7cc639abe2800ca29dbda5f03136c</sum>
        </package>
        <package name="fence-agents-drac5" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-drac5-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">912976cd7f227f15d8f0a5210cf9945058bfdfbe6509114a5ef6292b901efdf9</sum>
        </package>
        <package name="fence-agents-ibm-vpc" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-ibm-vpc-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">970f0c2bb5ac26c543d1813cc9018585eccf1d90cb196019e9c7ffc4e2c1225e</sum>
        </package>
        <package name="fence-agents-kdump" version="4.2.1" release="129.el8" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-kdump-4.2.1-129.el8.s390x.rpm</filename>
          <sum type="sha256">983c2d8d626bd480006c079585c06fdfac71088c51878365feee8c0d06ce3c33</sum>
        </package>
        <package name="fence-agents-heuristics-ping" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-heuristics-ping-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">9878bbaf87bab7b992a7311dda5db93f3b45b9ef9d39a7591ab6ccc9f378e515</sum>
        </package>
        <package name="fence-agents-rsa" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-rsa-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">a7b0e7e138965b78d20e012612cc181c3acea75732ed97ed78a180aac66b1611</sum>
        </package>
        <package name="fence-agents-sbd" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-sbd-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">aa0c0df2f4079ee776623a2896102a10f278dc59b8a7636d8d1b315a0950c068</sum>
        </package>
        <package name="fence-agents-emerson" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-emerson-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">b0df2982b9949121b9bc176be91d3eccf1639953a14dd0e26c8d71acfb2e10ba</sum>
        </package>
        <package name="fence-agents-ibm-powervs" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-ibm-powervs-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">ba8856ce54709d2676004ae7809cee0229d6d7df74848969f3fb16357115e57b</sum>
        </package>
        <package name="fence-agents-compute" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-compute-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">bd41f51ff0b50830ec3576b7342d5229eed0e43ce2bac2149d7fa93bbcebf759</sum>
        </package>
        <package name="fence-agents-virsh" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-virsh-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">bf4bad683a862444047f9ceaf9c656200728afeea8bffe9f821b37491c9885b4</sum>
        </package>
        <package name="fence-agents-ilo-moonshot" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-ilo-moonshot-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">c1a2d18fefe09177062cd522c50594d9e83efd6e7184a22fdc368849699ca9ec</sum>
        </package>
        <package name="fence-agents-brocade" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-brocade-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">e005cc8e58a6c32f6e97cc88acb5276a8c0f9e9ee02f6726662487616654c7e9</sum>
        </package>
        <package name="fence-agents-common" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-common-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">e60fffe797e7cc45d8fa35d0e0cc1da3ba48c58e2e6f0503c21a6e6e675e0303</sum>
        </package>
        <package name="fence-agents-rhevm" version="4.2.1" release="129.el8" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8.src.rpm">
          <filename>fence-agents-rhevm-4.2.1-129.el8.noarch.rpm</filename>
          <sum type="sha256">f0faf2fa9ebf8ca9f45c0cd7d85de9553f190e84ba12af8c206e6ca594963f92</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2973</id>
    <title>Moderate: libX11 security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:44:45"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libX11 security update</summary>
    <description>The libX11 packages contain the core X11 protocol client library.

Security Fix(es):

* libX11: out-of-bounds memory access in _XkbReadKeySyms() (CVE-2023-43785)
* libX11: stack exhaustion from infinite recursion in PutSubImage() (CVE-2023-43786)
* libX11: integer overflow in XCreateImage() leading to a heap overflow (CVE-2023-43787)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2973" id="RHSA-2024:2973" type="rhsa" title="RHSA-2024:2973"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43785" id="CVE-2023-43785" type="cve" title="CVE-2023-43785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43786" id="CVE-2023-43786" type="cve" title="CVE-2023-43786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43787" id="CVE-2023-43787" type="cve" title="CVE-2023-43787"/>
      <reference href="https://bugzilla.redhat.com/2242252" id="2242252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2242253" id="2242253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2242254" id="2242254" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2973.html" id="ALSA-2024:2973" type="self" title="ALSA-2024:2973"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="libX11-common" version="1.6.8" release="8.el8" epoch="0" arch="noarch" src="libX11-1.6.8-8.el8.src.rpm">
          <filename>libX11-common-1.6.8-8.el8.noarch.rpm</filename>
          <sum type="sha256">3a01813ca9e2700e2a330d3c89135eaf0c6a24de04b5b3b6c234d66652b72a76</sum>
        </package>
        <package name="libX11" version="1.6.8" release="8.el8" epoch="0" arch="s390x" src="libX11-1.6.8-8.el8.src.rpm">
          <filename>libX11-1.6.8-8.el8.s390x.rpm</filename>
          <sum type="sha256">6f2d899bcded124d7185bdd29a975dac14cb47703d9d3da6d168a127c96ae3d6</sum>
        </package>
        <package name="libX11-devel" version="1.6.8" release="8.el8" epoch="0" arch="s390x" src="libX11-1.6.8-8.el8.src.rpm">
          <filename>libX11-devel-1.6.8-8.el8.s390x.rpm</filename>
          <sum type="sha256">ced05b57d370c041b48f12224da49f2846dd4b880d450498dcfb9df3f56ddc44</sum>
        </package>
        <package name="libX11-xcb" version="1.6.8" release="8.el8" epoch="0" arch="s390x" src="libX11-1.6.8-8.el8.src.rpm">
          <filename>libX11-xcb-1.6.8-8.el8.s390x.rpm</filename>
          <sum type="sha256">e7e23c5a8a0923bc8b57b373f7c09d32bb35cd110c0710ca11753b3aa428bf05</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2974</id>
    <title>Moderate: libXpm security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:51"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libXpm security update</summary>
    <description>X.Org X11 libXpm runtime library.

Security Fix(es):

* libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() (CVE-2023-43788)
* libXpm: out of bounds read on XPM with corrupted colormap (CVE-2023-43789)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2974" id="RHSA-2024:2974" type="rhsa" title="RHSA-2024:2974"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43788" id="CVE-2023-43788" type="cve" title="CVE-2023-43788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43789" id="CVE-2023-43789" type="cve" title="CVE-2023-43789"/>
      <reference href="https://bugzilla.redhat.com/2242248" id="2242248" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2242249" id="2242249" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2974.html" id="ALSA-2024:2974" type="self" title="ALSA-2024:2974"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="libXpm-devel" version="3.5.12" release="11.el8" epoch="0" arch="s390x" src="libXpm-3.5.12-11.el8.src.rpm">
          <filename>libXpm-devel-3.5.12-11.el8.s390x.rpm</filename>
          <sum type="sha256">333eb420e51bac2d3202e9c400fc9614d3dd6816894782bd8f6b415b3de162f7</sum>
        </package>
        <package name="libXpm" version="3.5.12" release="11.el8" epoch="0" arch="s390x" src="libXpm-3.5.12-11.el8.src.rpm">
          <filename>libXpm-3.5.12-11.el8.s390x.rpm</filename>
          <sum type="sha256">cc56bff34617c01b580cd8af8a657862f49e81c048e61aab348ba06714c9d5a7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2979</id>
    <title>Moderate: poppler security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:42:01"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

* poppler: NULL pointer dereference in `FoFiType1C::convertToType1` (CVE-2020-36024)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2979" id="RHSA-2024:2979" type="rhsa" title="RHSA-2024:2979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-36024" id="CVE-2020-36024" type="cve" title="CVE-2020-36024"/>
      <reference href="https://bugzilla.redhat.com/2231520" id="2231520" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2979.html" id="ALSA-2024:2979" type="self" title="ALSA-2024:2979"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="poppler-glib" version="20.11.0" release="11.el8" epoch="0" arch="s390x" src="poppler-20.11.0-11.el8.src.rpm">
          <filename>poppler-glib-20.11.0-11.el8.s390x.rpm</filename>
          <sum type="sha256">0bf23d13658a1002387077512fc3139cde56b5d13927993123cb5634ea474b9b</sum>
        </package>
        <package name="poppler-utils" version="20.11.0" release="11.el8" epoch="0" arch="s390x" src="poppler-20.11.0-11.el8.src.rpm">
          <filename>poppler-utils-20.11.0-11.el8.s390x.rpm</filename>
          <sum type="sha256">23cdec18ca3ad19bf8fcdbf4dbb2d1176385520d5f8e2d2654daabe13b2d7911</sum>
        </package>
        <package name="poppler" version="20.11.0" release="11.el8" epoch="0" arch="s390x" src="poppler-20.11.0-11.el8.src.rpm">
          <filename>poppler-20.11.0-11.el8.s390x.rpm</filename>
          <sum type="sha256">247643cdee63ffa290018c818d7ddb7609956a23b8886b5b2291ec7c887073b1</sum>
        </package>
        <package name="poppler-qt5" version="20.11.0" release="11.el8" epoch="0" arch="s390x" src="poppler-20.11.0-11.el8.src.rpm">
          <filename>poppler-qt5-20.11.0-11.el8.s390x.rpm</filename>
          <sum type="sha256">4b8d4db94cf320e25ebcb8c9d8e1589dd01a72a8edce2e67ed8de22518031a7a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2980</id>
    <title>Moderate: harfbuzz security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:40:26"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>harfbuzz security update</summary>
    <description>HarfBuzz is an implementation of the OpenType Layout engine.

Security Fix(es):

* harfbuzz: allows attackers to trigger O(n^2) growth via consecutive marks (CVE-2023-25193)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2980" id="RHSA-2024:2980" type="rhsa" title="RHSA-2024:2980"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25193" id="CVE-2023-25193" type="cve" title="CVE-2023-25193"/>
      <reference href="https://bugzilla.redhat.com/2167254" id="2167254" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2980.html" id="ALSA-2024:2980" type="self" title="ALSA-2024:2980"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="harfbuzz-devel" version="1.7.5" release="4.el8" epoch="0" arch="s390x" src="harfbuzz-1.7.5-4.el8.src.rpm">
          <filename>harfbuzz-devel-1.7.5-4.el8.s390x.rpm</filename>
          <sum type="sha256">480fd49d5c2627942c36643229c512820329993627ae669ce3619c4432c74fe7</sum>
        </package>
        <package name="harfbuzz-icu" version="1.7.5" release="4.el8" epoch="0" arch="s390x" src="harfbuzz-1.7.5-4.el8.src.rpm">
          <filename>harfbuzz-icu-1.7.5-4.el8.s390x.rpm</filename>
          <sum type="sha256">8f486555b7c686981d9a5d5d37b086f4da0d8bb4afafe1b5fa05f187b2b79e7e</sum>
        </package>
        <package name="harfbuzz" version="1.7.5" release="4.el8" epoch="0" arch="s390x" src="harfbuzz-1.7.5-4.el8.src.rpm">
          <filename>harfbuzz-1.7.5-4.el8.s390x.rpm</filename>
          <sum type="sha256">974074aa88e6239120580ea1f1cf1e7c571b3a7085b210ece0402c57909fd5d9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2981</id>
    <title>Moderate: frr security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:43:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>frr security update</summary>
    <description>FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. 

Security Fix(es):

* frr: missing length check in bgp_attr_psid_sub() can lead do DoS (CVE-2023-31490)
* frr: processes invalid NLRIs if attribute length is zero (CVE-2023-41358)
* frr: NULL pointer dereference in bgp_nlri_parse_flowspec() in bgpd/bgp_flowspec.c (CVE-2023-41909)
* frr: mishandled malformed data leading to a crash (CVE-2023-46752)
* frr: crafted BGP UPDATE message leading to a crash (CVE-2023-46753)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2981" id="RHSA-2024:2981" type="rhsa" title="RHSA-2024:2981"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31490" id="CVE-2023-31490" type="cve" title="CVE-2023-31490"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41358" id="CVE-2023-41358" type="cve" title="CVE-2023-41358"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41909" id="CVE-2023-41909" type="cve" title="CVE-2023-41909"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46752" id="CVE-2023-46752" type="cve" title="CVE-2023-46752"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46753" id="CVE-2023-46753" type="cve" title="CVE-2023-46753"/>
      <reference href="https://bugzilla.redhat.com/2235839" id="2235839" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237416" id="2237416" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238992" id="2238992" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2246379" id="2246379" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2246381" id="2246381" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2981.html" id="ALSA-2024:2981" type="self" title="ALSA-2024:2981"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="frr" version="7.5.1" release="22.el8" epoch="0" arch="s390x" src="frr-7.5.1-22.el8.src.rpm">
          <filename>frr-7.5.1-22.el8.s390x.rpm</filename>
          <sum type="sha256">a496b8ee0dcf2b1630b98d9f25a2022057771625a8fda9d9be6fd2fe8bf0ba5c</sum>
        </package>
        <package name="frr-selinux" version="7.5.1" release="22.el8" epoch="0" arch="noarch" src="frr-7.5.1-22.el8.src.rpm">
          <filename>frr-selinux-7.5.1-22.el8.noarch.rpm</filename>
          <sum type="sha256">a9084424bc3c86a44864c397eb368afab0a49d2aaac2a9b5ab990033e5816cfc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2982</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:42:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-40414)
* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-42852)
* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-23213)
* webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents (CVE-2014-1745)
* webkitgtk: User password may be read aloud by a text-to-speech accessibility feature (CVE-2023-32359)
* webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (CVE-2023-39928)
* webkitgtk: Processing web content may lead to a denial of service (CVE-2023-41983)
* webkitgtk: processing a malicious image may lead to a denial of service (CVE-2023-42883)
* webkitgtk: processing malicious web content may lead to arbitrary code execution (CVE-2023-42890)
* webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-23206)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2982" id="RHSA-2024:2982" type="rhsa" title="RHSA-2024:2982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2014-1745" id="CVE-2014-1745" type="cve" title="CVE-2014-1745"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32359" id="CVE-2023-32359" type="cve" title="CVE-2023-32359"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39928" id="CVE-2023-39928" type="cve" title="CVE-2023-39928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40414" id="CVE-2023-40414" type="cve" title="CVE-2023-40414"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41983" id="CVE-2023-41983" type="cve" title="CVE-2023-41983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42852" id="CVE-2023-42852" type="cve" title="CVE-2023-42852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42883" id="CVE-2023-42883" type="cve" title="CVE-2023-42883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42890" id="CVE-2023-42890" type="cve" title="CVE-2023-42890"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23206" id="CVE-2024-23206" type="cve" title="CVE-2024-23206"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23213" id="CVE-2024-23213" type="cve" title="CVE-2024-23213"/>
      <reference href="https://bugzilla.redhat.com/2241400" id="2241400" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254326" id="2254326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254327" id="2254327" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269743" id="2269743" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270141" id="2270141" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270143" id="2270143" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270151" id="2270151" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271449" id="2271449" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271453" id="2271453" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271456" id="2271456" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2982.html" id="ALSA-2024:2982" type="self" title="ALSA-2024:2982"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="webkit2gtk3-jsc" version="2.42.5" release="1.el8" epoch="0" arch="s390x" src="webkit2gtk3-2.42.5-1.el8.src.rpm">
          <filename>webkit2gtk3-jsc-2.42.5-1.el8.s390x.rpm</filename>
          <sum type="sha256">27ff122929d5395d6d879cce760190654e1556da867a857772187e5e84661400</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.42.5" release="1.el8" epoch="0" arch="s390x" src="webkit2gtk3-2.42.5-1.el8.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.42.5-1.el8.s390x.rpm</filename>
          <sum type="sha256">4b698bf5e3262ed2a49602849b1dcaf55682ef0710aad1a791da3a70c3c791df</sum>
        </package>
        <package name="webkit2gtk3" version="2.42.5" release="1.el8" epoch="0" arch="s390x" src="webkit2gtk3-2.42.5-1.el8.src.rpm">
          <filename>webkit2gtk3-2.42.5-1.el8.s390x.rpm</filename>
          <sum type="sha256">63a39687365cf70bd225f09df198e3f3b720b29da4015253cbdfe5f00ed35d0d</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.42.5" release="1.el8" epoch="0" arch="s390x" src="webkit2gtk3-2.42.5-1.el8.src.rpm">
          <filename>webkit2gtk3-devel-2.42.5-1.el8.s390x.rpm</filename>
          <sum type="sha256">cc0f4a69a6aed3ae65cab44cba442733695d7f4f5841480dca87dd54bb8be0e4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2985</id>
    <title>Moderate: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:49:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py (CVE-2022-40897)
* python-cryptography: memory corruption via immutable objects (CVE-2023-23931)
* python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043)
* python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2985" id="RHSA-2024:2985" type="rhsa" title="RHSA-2024:2985"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40897" id="CVE-2022-40897" type="cve" title="CVE-2022-40897"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23931" id="CVE-2023-23931" type="cve" title="CVE-2023-23931"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27043" id="CVE-2023-27043" type="cve" title="CVE-2023-27043"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43804" id="CVE-2023-43804" type="cve" title="CVE-2023-43804"/>
      <reference href="https://bugzilla.redhat.com/2158559" id="2158559" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2171817" id="2171817" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196183" id="2196183" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2242493" id="2242493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2985.html" id="ALSA-2024:2985" type="self" title="ALSA-2024:2985"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="python39" stream="3.9" version="8100020240407120707" context="0a5380d9" arch="s390x"/>
        <package name="python39-setuptools" version="50.3.2" release="5.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python3x-setuptools-50.3.2-5.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-setuptools-50.3.2-5.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">018859714a5ec15d6083de0d414041a7ec93b5effb4db0111926d66b1e2583eb</sum>
        </package>
        <package name="python39-psycopg2-tests" version="2.8.6" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-psycopg2-tests-2.8.6-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">05d2693d2fda223ef60e5133f0ea03da31cbd0047d13a3bd8f677c4042064ec4</sum>
        </package>
        <package name="python39-pip" version="20.2.4" release="9.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python3x-pip-20.2.4-9.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-pip-20.2.4-9.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">1cddc6a728150b59b88dadd96ccc569c7bb77f8952761eca587d684b1a9d53dc</sum>
        </package>
        <package name="python39-urllib3" version="1.25.10" release="5.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python-urllib3-1.25.10-5.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-urllib3-1.25.10-5.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">24df140ee4c409e7c015b7d7584ba8aa8df5b95f9ecea9b457ce9ea0f3c68d98</sum>
        </package>
        <package name="python39-pip-wheel" version="20.2.4" release="9.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python3x-pip-20.2.4-9.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-pip-wheel-20.2.4-9.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">2a77862adcd93af6aa76bbbf2467fbd468eef1d9d6265d21cb2316e69d48cae1</sum>
        </package>
        <package name="python39-psycopg2" version="2.8.6" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">3938e67a4a4560730a8004aa6291d4a5162286bd6f68bc00b16e2ed49d466377</sum>
        </package>
        <package name="python39-setuptools-wheel" version="50.3.2" release="5.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python3x-setuptools-50.3.2-5.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-setuptools-wheel-50.3.2-5.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">487da2e97a76d8471ef969dabc95d8659e0839ba016db9c9e91109c882a0df5b</sum>
        </package>
        <package name="python39-numpy-f2py" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-f2py-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">56f4a39fc3b7cacfec741e84c3c59e67da9e3b2f122f09e59cac8a8020a4ba7c</sum>
        </package>
        <package name="python39-psycopg2-doc" version="2.8.6" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-psycopg2-doc-2.8.6-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">5c33f9b35f95710fe82294dc826e72f8a2af5309c9f694687b92f36df933e837</sum>
        </package>
        <package name="python39-scipy" version="1.5.4" release="5.module_el8.9.0+3634+fb2a896c" epoch="0" arch="s390x" src="scipy-1.5.4-5.module_el8.9.0+3634+fb2a896c.src.rpm">
          <filename>python39-scipy-1.5.4-5.module_el8.9.0+3634+fb2a896c.s390x.rpm</filename>
          <sum type="sha256">68206ec5b6bf886e1266c848bf014248b598bea11cce32708352e16fceaa4475</sum>
        </package>
        <package name="python39-rpm-macros" version="3.9.18" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python39-3.9.18-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-rpm-macros-3.9.18-3.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">8239bffe6e7b585f8841be95673afe750e7744348e74efa55e5b637fa823cca0</sum>
        </package>
        <package name="python39" version="3.9.18" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python39-3.9.18-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-3.9.18-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">837a8022b07d1ac25b8108ae700d143b5095dc61824654ee8f2aedcb6a54e91c</sum>
        </package>
        <package name="python39-cryptography" version="3.3.1" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-cryptography-3.3.1-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-cryptography-3.3.1-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">8834a7762b7982546305749c0b8ab5193a8b777110eaddbdbb80e69fdaf6ea8a</sum>
        </package>
        <package name="python39-test" version="3.9.18" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python39-3.9.18-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-test-3.9.18-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">8ba55594dcbe56a56bca8db53c868e12e9a165ae67a000e9c49ca2c6be763b8e</sum>
        </package>
        <package name="python39-idle" version="3.9.18" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python39-3.9.18-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-idle-3.9.18-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">8d727cab72117228a148adb740f5b003e2998019bdfca02fa0bd178a2d472211</sum>
        </package>
        <package name="python39-psutil" version="5.8.0" release="4.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9300840b5b4e742063f5617bc74cc2b05b4f3d5bdcd113ee5b3a9745baf3d0dc</sum>
        </package>
        <package name="python39-numpy" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9ffe33f6e51a25e79b88e45fa5cdca37a3b77d0868fe40e156f615224308810c</sum>
        </package>
        <package name="python39-tkinter" version="3.9.18" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python39-3.9.18-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-tkinter-3.9.18-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">a7a5b7111b17c5b16d76382fbe9b5f0aa380498ae650ef23745b4938ef6ee254</sum>
        </package>
        <package name="python39-requests" version="2.25.0" release="3.module_el8.9.0+3634+fb2a896c" epoch="0" arch="noarch" src="python-requests-2.25.0-3.module_el8.9.0+3634+fb2a896c.src.rpm">
          <filename>python39-requests-2.25.0-3.module_el8.9.0+3634+fb2a896c.noarch.rpm</filename>
          <sum type="sha256">d021b1b5bb6a395348b4764885ec17842861193b8e60c25abcf8e1ad7a047641</sum>
        </package>
        <package name="python39-mod_wsgi" version="4.7.1" release="7.module_el8.9.0+3634+fb2a896c" epoch="0" arch="s390x" src="mod_wsgi-4.7.1-7.module_el8.9.0+3634+fb2a896c.src.rpm">
          <filename>python39-mod_wsgi-4.7.1-7.module_el8.9.0+3634+fb2a896c.s390x.rpm</filename>
          <sum type="sha256">dc14410284d94a7140daaaefd4c18ea74368f0acc6515ea0f2332b7b14b61f38</sum>
        </package>
        <package name="python39-lxml" version="4.6.5" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">dc2ce0990738ea69e2b3641de1886825066554244cf58815971db30e321b56b2</sum>
        </package>
        <package name="python39-devel" version="3.9.18" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python39-3.9.18-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-devel-3.9.18-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">e46ac4819f0c8dc5ec39e7f63344d5ec450985a5021bd3750dc81252a45919b6</sum>
        </package>
        <package name="python39-cffi" version="1.14.3" release="2.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">ec3acbe8ceecf82559556caacd8c41e2b40e69348f2e6893f0b7598aa36371fd</sum>
        </package>
        <package name="python39-libs" version="3.9.18" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python39-3.9.18-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-libs-3.9.18-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">f0978d6b5a1730e24d815c19bda562f782edc32a370eb42e97f37e071e05a068</sum>
        </package>
        <package name="python39-pyyaml" version="5.4.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="PyYAML-5.4.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pyyaml-5.4.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">faa90d54ace8329c64942f01e18434bce14edf19cc3a534ae07de7bc301cd27f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2986</id>
    <title>Moderate: python3.11-urllib3 security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:42:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11-urllib3 security update</summary>
    <description>The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities.

Security Fix(es):

* python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2986" id="RHSA-2024:2986" type="rhsa" title="RHSA-2024:2986"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43804" id="CVE-2023-43804" type="cve" title="CVE-2023-43804"/>
      <reference href="https://bugzilla.redhat.com/2242493" id="2242493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2986.html" id="ALSA-2024:2986" type="self" title="ALSA-2024:2986"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="python3.11-urllib3" version="1.26.12" release="2.el8" epoch="0" arch="noarch" src="python3.11-urllib3-1.26.12-2.el8.src.rpm">
          <filename>python3.11-urllib3-1.26.12-2.el8.noarch.rpm</filename>
          <sum type="sha256">e8656b9901104210105668e2765f7bfa69b344a5c77579c7d82a13f731a89639</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2987</id>
    <title>Moderate: python27:2.7 security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:49:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python27:2.7 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL.

Security Fix(es):

* pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py (CVE-2022-40897)
* python: use after free in heappushpop() of heapq module (CVE-2022-48560)
* python: XML External Entity in XML processing plistlib module (CVE-2022-48565)
* python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)
* jinja2: HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-22195)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2987" id="RHSA-2024:2987" type="rhsa" title="RHSA-2024:2987"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40897" id="CVE-2022-40897" type="cve" title="CVE-2022-40897"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48560" id="CVE-2022-48560" type="cve" title="CVE-2022-48560"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48565" id="CVE-2022-48565" type="cve" title="CVE-2022-48565"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43804" id="CVE-2023-43804" type="cve" title="CVE-2023-43804"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22195" id="CVE-2024-22195" type="cve" title="CVE-2024-22195"/>
      <reference href="https://bugzilla.redhat.com/2158559" id="2158559" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2240059" id="2240059" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2242493" id="2242493" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2249755" id="2249755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257854" id="2257854" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2987.html" id="ALSA-2024:2987" type="self" title="ALSA-2024:2987"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="python27" stream="2.7" version="8100020240410043933" context="9edba152" arch="s390x"/>
        <package name="python2-psycopg2-debug" version="2.7.5" release="8.module_el8.9.0+3640+8d3927b5" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-8.module_el8.9.0+3640+8d3927b5.src.rpm">
          <filename>python2-psycopg2-debug-2.7.5-8.module_el8.9.0+3640+8d3927b5.s390x.rpm</filename>
          <sum type="sha256">0a34c099819cec6d40a06dda5655334e8dc1c8fa43d1b0e53040efa0bff5f26e</sum>
        </package>
        <package name="python2-scipy" version="1.0.0" release="22.module_el8.9.0+3640+8d3927b5" epoch="0" arch="s390x" src="scipy-1.0.0-22.module_el8.9.0+3640+8d3927b5.src.rpm">
          <filename>python2-scipy-1.0.0-22.module_el8.9.0+3640+8d3927b5.s390x.rpm</filename>
          <sum type="sha256">0a76f903f0eb33ade1824de74deba6b13e05719eb34510698ab467090b09ee13</sum>
        </package>
        <package name="python2-devel" version="2.7.18" release="17.module_el8.10.0+3783+2756348e.alma" epoch="0" arch="s390x" src="python2-2.7.18-17.module_el8.10.0+3783+2756348e.alma.src.rpm">
          <filename>python2-devel-2.7.18-17.module_el8.10.0+3783+2756348e.alma.s390x.rpm</filename>
          <sum type="sha256">2dc3f7de345803a7171fa65b9aa69a1c9e4df5676b254130dcd1d470d64cfd39</sum>
        </package>
        <package name="python2-psycopg2-tests" version="2.7.5" release="8.module_el8.9.0+3640+8d3927b5" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-8.module_el8.9.0+3640+8d3927b5.src.rpm">
          <filename>python2-psycopg2-tests-2.7.5-8.module_el8.9.0+3640+8d3927b5.s390x.rpm</filename>
          <sum type="sha256">2fc36e2343456a1c7ad056369107a55fd92f3cf6b31eb4beb201b4d098f5c3d7</sum>
        </package>
        <package name="python2-Cython" version="0.28.1" release="7.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="Cython-0.28.1-7.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-Cython-0.28.1-7.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">33e5c6fee3819774cc5605ac9884d333321fd0e18a2e6ad15bd4cc626854bf92</sum>
        </package>
        <package name="python2-lxml" version="4.2.3" release="6.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-lxml-4.2.3-6.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-lxml-4.2.3-6.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">34d05166229eef26e630797e84fd32f0aa76104895186ba2de4852d1931449c2</sum>
        </package>
        <package name="python2-markupsafe" version="0.23" release="19.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-markupsafe-0.23-19.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-markupsafe-0.23-19.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">4df63f354ef866a6834b7ae6bbf00de4e90db40a23c0175d0a8e091f46c3831b</sum>
        </package>
        <package name="python2-numpy-f2py" version="1.14.2" release="16.module_el8.6.0+3162+01a09e5a" epoch="1" arch="s390x" src="numpy-1.14.2-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-numpy-f2py-1.14.2-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">5122909fad88771bdc7f253154548be55681207a76858df98d83aee4c019fb99</sum>
        </package>
        <package name="python2-debug" version="2.7.18" release="17.module_el8.10.0+3783+2756348e.alma" epoch="0" arch="s390x" src="python2-2.7.18-17.module_el8.10.0+3783+2756348e.alma.src.rpm">
          <filename>python2-debug-2.7.18-17.module_el8.10.0+3783+2756348e.alma.s390x.rpm</filename>
          <sum type="sha256">51958f20ce1739963e7ecbe9852f4ec9e61a32e1ee683a933a321f045dcbb98d</sum>
        </package>
        <package name="python2-urllib3" version="1.24.2" release="4.module_el8.10.0+3783+2756348e" epoch="0" arch="noarch" src="python-urllib3-1.24.2-4.module_el8.10.0+3783+2756348e.src.rpm">
          <filename>python2-urllib3-1.24.2-4.module_el8.10.0+3783+2756348e.noarch.rpm</filename>
          <sum type="sha256">637a7bf059f5d5170a42b4e12817efa37e1b2cdfce4bb0bec928abdd8e62e4ce</sum>
        </package>
        <package name="python2-tkinter" version="2.7.18" release="17.module_el8.10.0+3783+2756348e.alma" epoch="0" arch="s390x" src="python2-2.7.18-17.module_el8.10.0+3783+2756348e.alma.src.rpm">
          <filename>python2-tkinter-2.7.18-17.module_el8.10.0+3783+2756348e.alma.s390x.rpm</filename>
          <sum type="sha256">6876f0fc489a60427c8ad7aebf7409bab0424a365d8ba876fb65757945614481</sum>
        </package>
        <package name="python2-pymongo" version="3.7.0" release="1.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">6b7bcb16061d074203f3da5d62159766e919e5fc57ef7c9df634c2d56dbe44e1</sum>
        </package>
        <package name="python2-setuptools-wheel" version="39.0.1" release="14.module_el8.10.0+3783+2756348e" epoch="0" arch="noarch" src="python2-setuptools-39.0.1-14.module_el8.10.0+3783+2756348e.src.rpm">
          <filename>python2-setuptools-wheel-39.0.1-14.module_el8.10.0+3783+2756348e.noarch.rpm</filename>
          <sum type="sha256">78d35f2272235855b2d724bed98fa81d9494c95afa1fb796139e33b7116d8994</sum>
        </package>
        <package name="python2-numpy" version="1.14.2" release="16.module_el8.6.0+3162+01a09e5a" epoch="1" arch="s390x" src="numpy-1.14.2-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-numpy-1.14.2-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">852f2d82ccc6de54efa8bf6c6dcf9ede79257d3aa5144c12fc290d43e20b4ab1</sum>
        </package>
        <package name="python2-sqlalchemy" version="1.3.2" release="2.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-sqlalchemy-1.3.2-2.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-sqlalchemy-1.3.2-2.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">854347b4f4c344b9ee4f49435eb2f75b9be1a134ed76388c16d4affae402f809</sum>
        </package>
        <package name="python2-backports" version="1.0" release="16.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-backports-1.0-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-backports-1.0-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">8ce54e96fff1eff1c45e38503fc221bb6e8866180e9e558fe581fa8cc4059796</sum>
        </package>
        <package name="python2-coverage" version="4.5.1" release="5.module_el8.9.0+3640+8d3927b5" epoch="0" arch="s390x" src="python-coverage-4.5.1-5.module_el8.9.0+3640+8d3927b5.src.rpm">
          <filename>python2-coverage-4.5.1-5.module_el8.9.0+3640+8d3927b5.s390x.rpm</filename>
          <sum type="sha256">94669aaf45e096e5dbef1e4fcffbdb0dfb8b945d72ac1ef01075ce6ccb387237</sum>
        </package>
        <package name="python2-libs" version="2.7.18" release="17.module_el8.10.0+3783+2756348e.alma" epoch="0" arch="s390x" src="python2-2.7.18-17.module_el8.10.0+3783+2756348e.alma.src.rpm">
          <filename>python2-libs-2.7.18-17.module_el8.10.0+3783+2756348e.alma.s390x.rpm</filename>
          <sum type="sha256">9e089430a5fdecd95c595a284ea248d9183e6d2c096842fb300c1d134f747eb4</sum>
        </package>
        <package name="python-psycopg2-doc" version="2.7.5" release="8.module_el8.9.0+3640+8d3927b5" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-8.module_el8.9.0+3640+8d3927b5.src.rpm">
          <filename>python-psycopg2-doc-2.7.5-8.module_el8.9.0+3640+8d3927b5.s390x.rpm</filename>
          <sum type="sha256">acfe9481a09a69104cc8e7557ad0d90648f0b763927185a4ae2add804e52599d</sum>
        </package>
        <package name="python2-pymongo-gridfs" version="3.7.0" release="1.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-pymongo-gridfs-3.7.0-1.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">b28d3022855edc1cc4a549f1d3ce67a23d2da958f852bbf7821b325e67895d64</sum>
        </package>
        <package name="python2-test" version="2.7.18" release="17.module_el8.10.0+3783+2756348e.alma" epoch="0" arch="s390x" src="python2-2.7.18-17.module_el8.10.0+3783+2756348e.alma.src.rpm">
          <filename>python2-test-2.7.18-17.module_el8.10.0+3783+2756348e.alma.s390x.rpm</filename>
          <sum type="sha256">c3ad1354ed2c1ea8e12ed231dc05b0e4a49f6b710fa1980e3ef8f9738d29230c</sum>
        </package>
        <package name="python2-psycopg2" version="2.7.5" release="8.module_el8.9.0+3640+8d3927b5" epoch="0" arch="s390x" src="python-psycopg2-2.7.5-8.module_el8.9.0+3640+8d3927b5.src.rpm">
          <filename>python2-psycopg2-2.7.5-8.module_el8.9.0+3640+8d3927b5.s390x.rpm</filename>
          <sum type="sha256">d40c219202979ee47721cd6f039e87ed461ba2f271daeb75196ad3ed95a9dd97</sum>
        </package>
        <package name="python2" version="2.7.18" release="17.module_el8.10.0+3783+2756348e.alma" epoch="0" arch="s390x" src="python2-2.7.18-17.module_el8.10.0+3783+2756348e.alma.src.rpm">
          <filename>python2-2.7.18-17.module_el8.10.0+3783+2756348e.alma.s390x.rpm</filename>
          <sum type="sha256">d65e4ca5ecbf443de476c73ac0ab9c907c4d229a202988dc4e4361650f9e515b</sum>
        </package>
        <package name="python2-bson" version="3.7.0" release="1.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="python-pymongo-3.7.0-1.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-bson-3.7.0-1.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">de74cd7b4f4870f2bac803f8a8aeca7062cc342d4bf9533f9939bf03f306ebfb</sum>
        </package>
        <package name="python2-jinja2" version="2.10" release="10.module_el8.10.0+3783+2756348e" epoch="0" arch="noarch" src="python-jinja2-2.10-10.module_el8.10.0+3783+2756348e.src.rpm">
          <filename>python2-jinja2-2.10-10.module_el8.10.0+3783+2756348e.noarch.rpm</filename>
          <sum type="sha256">deadf93a500eb7943cf1f88e7eb423901011ddc3212cbdf877410a310ad44072</sum>
        </package>
        <package name="python2-setuptools" version="39.0.1" release="14.module_el8.10.0+3783+2756348e" epoch="0" arch="noarch" src="python2-setuptools-39.0.1-14.module_el8.10.0+3783+2756348e.src.rpm">
          <filename>python2-setuptools-39.0.1-14.module_el8.10.0+3783+2756348e.noarch.rpm</filename>
          <sum type="sha256">e3c98bf2161dd040a1c62891e09c6e2f5adde0428aba7b8bf7e0020c5868cf8d</sum>
        </package>
        <package name="python2-tools" version="2.7.18" release="17.module_el8.10.0+3783+2756348e.alma" epoch="0" arch="s390x" src="python2-2.7.18-17.module_el8.10.0+3783+2756348e.alma.src.rpm">
          <filename>python2-tools-2.7.18-17.module_el8.10.0+3783+2756348e.alma.s390x.rpm</filename>
          <sum type="sha256">ea65bd6d7719a6738bf784fc6a736e8bf3e4f7b1879ede25765bcc2b3c5f19a8</sum>
        </package>
        <package name="python2-pytz" version="2017.2" release="13.module_el8.9.0+3640+8d3927b5" epoch="0" arch="noarch" src="pytz-2017.2-13.module_el8.9.0+3640+8d3927b5.src.rpm">
          <filename>python2-pytz-2017.2-13.module_el8.9.0+3640+8d3927b5.noarch.rpm</filename>
          <sum type="sha256">eb73dfb9bce40743d61bf81ead3f71bca6f602b4eb025fe7bd239aa54bb39a4f</sum>
        </package>
        <package name="python2-requests" version="2.20.0" release="4.module_el8.9.0+3640+8d3927b5" epoch="0" arch="noarch" src="python-requests-2.20.0-4.module_el8.9.0+3640+8d3927b5.src.rpm">
          <filename>python2-requests-2.20.0-4.module_el8.9.0+3640+8d3927b5.noarch.rpm</filename>
          <sum type="sha256">f4dd56efc38a8981ef15d6232c4c62d889a1480549e28a0cced2e49b7e3cfb04</sum>
        </package>
        <package name="python2-virtualenv" version="15.1.0" release="22.module_el8.10.0+3783+2756348e" epoch="0" arch="noarch" src="python-virtualenv-15.1.0-22.module_el8.10.0+3783+2756348e.src.rpm">
          <filename>python2-virtualenv-15.1.0-22.module_el8.10.0+3783+2756348e.noarch.rpm</filename>
          <sum type="sha256">f9fda846bebdcf079cec2eabb3d317c396cb0a1517e9957ebbb2a91292ef456d</sum>
        </package>
        <package name="python2-pyyaml" version="3.12" release="16.module_el8.6.0+3162+01a09e5a" epoch="0" arch="s390x" src="PyYAML-3.12-16.module_el8.6.0+3162+01a09e5a.src.rpm">
          <filename>python2-pyyaml-3.12-16.module_el8.6.0+3162+01a09e5a.s390x.rpm</filename>
          <sum type="sha256">fd83c9d2f395a877fc6cc657333bc13305e5d5ebe62c39ec0e2040e8e36542e7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2995</id>
    <title>Moderate: xorg-x11-server security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 16:20:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)
* xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377)
* xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)
* xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229)
* xorg-x11-server: SELinux unlabeled GLX PBuffer (CVE-2024-0408)
* xorg-x11-server: SELinux context corruption (CVE-2024-0409)
* xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885)
* xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886)
* xorg-x11-server: Use-after-free bug in DestroyWindow (CVE-2023-5380)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2995" id="RHSA-2024:2995" type="rhsa" title="RHSA-2024:2995"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5367" id="CVE-2023-5367" type="cve" title="CVE-2023-5367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5380" id="CVE-2023-5380" type="cve" title="CVE-2023-5380"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6377" id="CVE-2023-6377" type="cve" title="CVE-2023-6377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6478" id="CVE-2023-6478" type="cve" title="CVE-2023-6478"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0229" id="CVE-2024-0229" type="cve" title="CVE-2024-0229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0408" id="CVE-2024-0408" type="cve" title="CVE-2024-0408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0409" id="CVE-2024-0409" type="cve" title="CVE-2024-0409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21885" id="CVE-2024-21885" type="cve" title="CVE-2024-21885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21886" id="CVE-2024-21886" type="cve" title="CVE-2024-21886"/>
      <reference href="https://bugzilla.redhat.com/2243091" id="2243091" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244736" id="2244736" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253291" id="2253291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253298" id="2253298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256540" id="2256540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256542" id="2256542" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256690" id="2256690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257689" id="2257689" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257690" id="2257690" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2995.html" id="ALSA-2024:2995" type="self" title="ALSA-2024:2995"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="xorg-x11-server-Xnest" version="1.20.11" release="22.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-22.el8.src.rpm">
          <filename>xorg-x11-server-Xnest-1.20.11-22.el8.s390x.rpm</filename>
          <sum type="sha256">19a9dd97e23d68b0f384bb7f22aded8245724466c4be36de8c60375abd30b481</sum>
        </package>
        <package name="xorg-x11-server-Xorg" version="1.20.11" release="22.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-22.el8.src.rpm">
          <filename>xorg-x11-server-Xorg-1.20.11-22.el8.s390x.rpm</filename>
          <sum type="sha256">7eaefa10086d31601dac8493b45db143f285b7e7490804a1334a46263e8d1cf5</sum>
        </package>
        <package name="xorg-x11-server-common" version="1.20.11" release="22.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-22.el8.src.rpm">
          <filename>xorg-x11-server-common-1.20.11-22.el8.s390x.rpm</filename>
          <sum type="sha256">a6e5301f32068c1b524a553093cd6d31a8866550fc423579b7a6edb99268c2c0</sum>
        </package>
        <package name="xorg-x11-server-Xdmx" version="1.20.11" release="22.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-22.el8.src.rpm">
          <filename>xorg-x11-server-Xdmx-1.20.11-22.el8.s390x.rpm</filename>
          <sum type="sha256">cd0c726c0745d82d7f8a47168b5de768185a4c4661d2945efe52e06a3b8096b7</sum>
        </package>
        <package name="xorg-x11-server-Xephyr" version="1.20.11" release="22.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-22.el8.src.rpm">
          <filename>xorg-x11-server-Xephyr-1.20.11-22.el8.s390x.rpm</filename>
          <sum type="sha256">dc2ab6311df73e111485c3a1ee6136d31b2e399fe4ab9d97376e25c1db39fdca</sum>
        </package>
        <package name="xorg-x11-server-Xvfb" version="1.20.11" release="22.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-22.el8.src.rpm">
          <filename>xorg-x11-server-Xvfb-1.20.11-22.el8.s390x.rpm</filename>
          <sum type="sha256">e6a387822e3987c583953af72b45576b5235e881163819d3e7b321e3356523dc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2996</id>
    <title>Moderate: xorg-x11-server-Xwayland security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 16:19:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

* xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)
* xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377)
* xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)
* xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816)
* xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229)
* xorg-x11-server: SELinux unlabeled GLX PBuffer (CVE-2024-0408)
* xorg-x11-server: SELinux context corruption (CVE-2024-0409)
* xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885)
* xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2996" id="RHSA-2024:2996" type="rhsa" title="RHSA-2024:2996"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5367" id="CVE-2023-5367" type="cve" title="CVE-2023-5367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6377" id="CVE-2023-6377" type="cve" title="CVE-2023-6377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6478" id="CVE-2023-6478" type="cve" title="CVE-2023-6478"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6816" id="CVE-2023-6816" type="cve" title="CVE-2023-6816"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0229" id="CVE-2024-0229" type="cve" title="CVE-2024-0229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0408" id="CVE-2024-0408" type="cve" title="CVE-2024-0408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0409" id="CVE-2024-0409" type="cve" title="CVE-2024-0409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21885" id="CVE-2024-21885" type="cve" title="CVE-2024-21885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21886" id="CVE-2024-21886" type="cve" title="CVE-2024-21886"/>
      <reference href="https://bugzilla.redhat.com/2243091" id="2243091" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253291" id="2253291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253298" id="2253298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256540" id="2256540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256542" id="2256542" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256690" id="2256690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257689" id="2257689" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257690" id="2257690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257691" id="2257691" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2996.html" id="ALSA-2024:2996" type="self" title="ALSA-2024:2996"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="xorg-x11-server-Xwayland" version="21.1.3" release="15.el8" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-21.1.3-15.el8.src.rpm">
          <filename>xorg-x11-server-Xwayland-21.1.3-15.el8.s390x.rpm</filename>
          <sum type="sha256">b59d7fd08656043be51ca7668e25c93345241fa5b128883500ec9cef255ea9fb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3005</id>
    <title>Moderate: python-pillow security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-pillow security update</summary>
    <description>The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities.

Security Fix(es):

* python-pillow: uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument (CVE-2023-44271)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3005" id="RHSA-2024:3005" type="rhsa" title="RHSA-2024:3005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44271" id="CVE-2023-44271" type="cve" title="CVE-2023-44271"/>
      <reference href="https://bugzilla.redhat.com/2247820" id="2247820" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3005.html" id="ALSA-2024:3005" type="self" title="ALSA-2024:3005"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="python3-pillow" version="5.1.1" release="20.el8" epoch="0" arch="s390x" src="python-pillow-5.1.1-20.el8.src.rpm">
          <filename>python3-pillow-5.1.1-20.el8.s390x.rpm</filename>
          <sum type="sha256">ec89de9374bea020710d258b481099bcd37cc8cec453c54e50cff8f08427c6ad</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3008</id>
    <title>Important: pmix security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pmix security update</summary>
    <description>The Process Management Interface (PMI) provides process management functions for MPI implementations. PMI Exascale (PMIx) provides an extended version of the PMI standard specifically designed to support clusters up to and including exascale sizes.

Security Fix(es):

* pmix: race condition allows attackers to obtain ownership of arbitrary files (CVE-2023-41915)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3008" id="RHSA-2024:3008" type="rhsa" title="RHSA-2024:3008"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41915" id="CVE-2023-41915" type="cve" title="CVE-2023-41915"/>
      <reference href="https://bugzilla.redhat.com/2238898" id="2238898" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3008.html" id="ALSA-2024:3008" type="self" title="ALSA-2024:3008"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="pmix" version="2.2.5" release="3.el8" epoch="0" arch="s390x" src="pmix-2.2.5-3.el8.src.rpm">
          <filename>pmix-2.2.5-3.el8.s390x.rpm</filename>
          <sum type="sha256">2ef985b6a718026d318372469599ff62589ed37b873629ceb5165f16181176f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3022</id>
    <title>Moderate: motif security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:40:36"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>motif security update</summary>
    <description>The motif packages include the Motif shared libraries needed to run applications which are dynamically linked against Motif, as well as MWM, the Motif Window Manager.

Security Fix(es):

* libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() (CVE-2023-43788)
* libXpm: out of bounds read on XPM with corrupted colormap (CVE-2023-43789)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3022" id="RHSA-2024:3022" type="rhsa" title="RHSA-2024:3022"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43788" id="CVE-2023-43788" type="cve" title="CVE-2023-43788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43789" id="CVE-2023-43789" type="cve" title="CVE-2023-43789"/>
      <reference href="https://bugzilla.redhat.com/2242248" id="2242248" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2242249" id="2242249" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3022.html" id="ALSA-2024:3022" type="self" title="ALSA-2024:3022"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="motif-static" version="2.3.4" release="20.el8" epoch="0" arch="s390x" src="motif-2.3.4-20.el8.src.rpm">
          <filename>motif-static-2.3.4-20.el8.s390x.rpm</filename>
          <sum type="sha256">245937429e816a40c5e6e3bcf53407bba3c2b69e924ea3871626c5766b44e70e</sum>
        </package>
        <package name="motif" version="2.3.4" release="20.el8" epoch="0" arch="s390x" src="motif-2.3.4-20.el8.src.rpm">
          <filename>motif-2.3.4-20.el8.s390x.rpm</filename>
          <sum type="sha256">481f9ea5eea9052dbcf307561e59e8173105e3904a0c20c944ea46dc596a47e0</sum>
        </package>
        <package name="motif-devel" version="2.3.4" release="20.el8" epoch="0" arch="s390x" src="motif-2.3.4-20.el8.src.rpm">
          <filename>motif-devel-2.3.4-20.el8.s390x.rpm</filename>
          <sum type="sha256">7a23852c4c75d113c98c68ffc1f0549a4c16ac85e44032f1c2071704637adfdb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3030</id>
    <title>Moderate: libsndfile security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:54"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libsndfile security update</summary>
    <description>libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. 

Security Fix(es):

* libsndfile: integer overflow in src/mat4.c and src/au.c leads to DoS (CVE-2022-33065)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3030" id="RHSA-2024:3030" type="rhsa" title="RHSA-2024:3030"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-33065" id="CVE-2022-33065" type="cve" title="CVE-2022-33065"/>
      <reference href="https://bugzilla.redhat.com/2238934" id="2238934" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3030.html" id="ALSA-2024:3030" type="self" title="ALSA-2024:3030"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="libsndfile" version="1.0.28" release="14.el8" epoch="0" arch="s390x" src="libsndfile-1.0.28-14.el8.src.rpm">
          <filename>libsndfile-1.0.28-14.el8.s390x.rpm</filename>
          <sum type="sha256">1a4cc5f229e325826f920fc6503330a473f0d0f799484ba1b28f5cdc00638fa7</sum>
        </package>
        <package name="libsndfile-utils" version="1.0.28" release="14.el8" epoch="0" arch="s390x" src="libsndfile-1.0.28-14.el8.src.rpm">
          <filename>libsndfile-utils-1.0.28-14.el8.s390x.rpm</filename>
          <sum type="sha256">c09e2d3a78b783743f1b7baf68b0395bb717a266efc36ad7567a42593e51d6aa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3043</id>
    <title>Moderate: ansible-core bug fix, enhancement, and security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:55"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ansible-core bug fix, enhancement, and security update</summary>
    <description>Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred to managed machines automatically.

Security Fix(es):

* ansible-core: possible information leak in tasks that ignore ANSIBLE_NO_LOG configuration (CVE-2024-0690)

Bug Fix(es):

* Update ansible-core to 2.16.3 (JIRA:AlmaLinux-23782)
* Rebuild ansible-core with python 3.12 (JIRA:AlmaLinux-24141)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3043" id="RHSA-2024:3043" type="rhsa" title="RHSA-2024:3043"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0690" id="CVE-2024-0690" type="cve" title="CVE-2024-0690"/>
      <reference href="https://bugzilla.redhat.com/2259013" id="2259013" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3043.html" id="ALSA-2024:3043" type="self" title="ALSA-2024:3043"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="ansible-core" version="2.16.3" release="2.el8" epoch="0" arch="s390x" src="ansible-core-2.16.3-2.el8.src.rpm">
          <filename>ansible-core-2.16.3-2.el8.s390x.rpm</filename>
          <sum type="sha256">25d104127c6c28d12a5a307ef72b7fb230342b66dc8513953886d3df70245623</sum>
        </package>
        <package name="ansible-test" version="2.16.3" release="2.el8" epoch="0" arch="s390x" src="ansible-core-2.16.3-2.el8.src.rpm">
          <filename>ansible-test-2.16.3-2.el8.s390x.rpm</filename>
          <sum type="sha256">54594526bf5080f6baff85bf2e1c84f0ae190d8a94142fd5bbb5597153cc1008</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3047</id>
    <title>Moderate: 389-ds:1.4 security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:45:44"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>389-ds:1.4 security update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. 

Security Fix(es):

* 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) (CVE-2024-1062)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3047" id="RHSA-2024:3047" type="rhsa" title="RHSA-2024:3047"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1062" id="CVE-2024-1062" type="cve" title="CVE-2024-1062"/>
      <reference href="https://bugzilla.redhat.com/2261879" id="2261879" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3047.html" id="ALSA-2024:3047" type="self" title="ALSA-2024:3047"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="389-ds" stream="1.4" version="8100020240522113312" context="17499975" arch="s390x"/>
        <package name="python3-lib389" version="1.4.3.39" release="3.module_el8.10.0+3829+ea459e35" epoch="0" arch="noarch" src="389-ds-base-1.4.3.39-3.module_el8.10.0+3829+ea459e35.src.rpm">
          <filename>python3-lib389-1.4.3.39-3.module_el8.10.0+3829+ea459e35.noarch.rpm</filename>
          <sum type="sha256">21f0b8263fe49462044ab5903c51d4f2d8d6749a981ab3b650bef9bd36080fc3</sum>
        </package>
        <package name="389-ds-base" version="1.4.3.39" release="3.module_el8.10.0+3829+ea459e35" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-3.module_el8.10.0+3829+ea459e35.src.rpm">
          <filename>389-ds-base-1.4.3.39-3.module_el8.10.0+3829+ea459e35.s390x.rpm</filename>
          <sum type="sha256">28441d0c9197b3d9636ccd6def0cadf005c065f5c89803ca5f3f4f7fb0b2a7e0</sum>
        </package>
        <package name="389-ds-base-snmp" version="1.4.3.39" release="3.module_el8.10.0+3829+ea459e35" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-3.module_el8.10.0+3829+ea459e35.src.rpm">
          <filename>389-ds-base-snmp-1.4.3.39-3.module_el8.10.0+3829+ea459e35.s390x.rpm</filename>
          <sum type="sha256">3138261f0e173f5ec8c29db0013cd333a6b4ed5e6ee9f42df0f5dbb6e6d19ec5</sum>
        </package>
        <package name="389-ds-base-devel" version="1.4.3.39" release="3.module_el8.10.0+3829+ea459e35" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-3.module_el8.10.0+3829+ea459e35.src.rpm">
          <filename>389-ds-base-devel-1.4.3.39-3.module_el8.10.0+3829+ea459e35.s390x.rpm</filename>
          <sum type="sha256">4b74a23452a56b3e4942a93d97a5c052c763c154fd7b1d9722fc8dc52d45c632</sum>
        </package>
        <package name="389-ds-base-libs" version="1.4.3.39" release="3.module_el8.10.0+3829+ea459e35" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-3.module_el8.10.0+3829+ea459e35.src.rpm">
          <filename>389-ds-base-libs-1.4.3.39-3.module_el8.10.0+3829+ea459e35.s390x.rpm</filename>
          <sum type="sha256">ab294156485a061738ad29dafe47577b0feb30aaafc9e87945644ed5ede22d86</sum>
        </package>
        <package name="389-ds-base-legacy-tools" version="1.4.3.39" release="3.module_el8.10.0+3829+ea459e35" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-3.module_el8.10.0+3829+ea459e35.src.rpm">
          <filename>389-ds-base-legacy-tools-1.4.3.39-3.module_el8.10.0+3829+ea459e35.s390x.rpm</filename>
          <sum type="sha256">ea3f8730c97c263e87bff4eebf878787e946b7d3e7f6b5a56267728e6851384b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3049</id>
    <title>Moderate: perl-Convert-ASN1 security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:42:11"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>perl-Convert-ASN1 security update</summary>
    <description>Convert::ASN1 encodes and decodes ASN.1 data structures using BER/DER rules.

Security Fix(es):

* perl-Convert-ASN1: allows remote attackers to cause an infinite loop via unexpected input (CVE-2013-7488)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3049" id="RHSA-2024:3049" type="rhsa" title="RHSA-2024:3049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2013-7488" id="CVE-2013-7488" type="cve" title="CVE-2013-7488"/>
      <reference href="https://bugzilla.redhat.com/1821879" id="1821879" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3049.html" id="ALSA-2024:3049" type="self" title="ALSA-2024:3049"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="perl-Convert-ASN1" version="0.27" release="18.el8" epoch="0" arch="noarch" src="perl-Convert-ASN1-0.27-18.el8.src.rpm">
          <filename>perl-Convert-ASN1-0.27-18.el8.noarch.rpm</filename>
          <sum type="sha256">8ec74995e2fc22f2a69833c055b364d45b52f40b9fb4c113f75980f35de56cef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3056</id>
    <title>Moderate: qt5-qtbase security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:46:49"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt5-qtbase security update</summary>
    <description>Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. 

Security Fix(es):

* qt: incorrect integer overflow check (CVE-2023-51714)
* qtbase: potential buffer overflow when reading KTX images (CVE-2024-25580)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3056" id="RHSA-2024:3056" type="rhsa" title="RHSA-2024:3056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51714" id="CVE-2023-51714" type="cve" title="CVE-2023-51714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25580" id="CVE-2024-25580" type="cve" title="CVE-2024-25580"/>
      <reference href="https://bugzilla.redhat.com/2255856" id="2255856" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2264423" id="2264423" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3056.html" id="ALSA-2024:3056" type="self" title="ALSA-2024:3056"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="qt5-qtbase-postgresql" version="5.15.3" release="7.el8" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-7.el8.src.rpm">
          <filename>qt5-qtbase-postgresql-5.15.3-7.el8.s390x.rpm</filename>
          <sum type="sha256">00394074e4c3654bef9ad5dd07cc3e7b804eb29db63c556c3c957ebaf5c51399</sum>
        </package>
        <package name="qt5-qtbase-common" version="5.15.3" release="7.el8" epoch="0" arch="noarch" src="qt5-qtbase-5.15.3-7.el8.src.rpm">
          <filename>qt5-qtbase-common-5.15.3-7.el8.noarch.rpm</filename>
          <sum type="sha256">27003e881fb63244c985b5801fec5e5905328d4a2c192ad38626b5b899bf2682</sum>
        </package>
        <package name="qt5-qtbase-gui" version="5.15.3" release="7.el8" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-7.el8.src.rpm">
          <filename>qt5-qtbase-gui-5.15.3-7.el8.s390x.rpm</filename>
          <sum type="sha256">299890ac9a64dbea23c69dd1086d8882d476cc4a032b45839ca6ed30de799097</sum>
        </package>
        <package name="qt5-qtbase-odbc" version="5.15.3" release="7.el8" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-7.el8.src.rpm">
          <filename>qt5-qtbase-odbc-5.15.3-7.el8.s390x.rpm</filename>
          <sum type="sha256">3805d2c82b9f6e459cff098c89393ef1faf5d2222b0723e337d6d9c41d367fa6</sum>
        </package>
        <package name="qt5-qtbase-examples" version="5.15.3" release="7.el8" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-7.el8.src.rpm">
          <filename>qt5-qtbase-examples-5.15.3-7.el8.s390x.rpm</filename>
          <sum type="sha256">3da16e6d6febb6b6cf985c40a22ca45c786b87ead1ae96c57550ca28c2d861a1</sum>
        </package>
        <package name="qt5-qtbase-mysql" version="5.15.3" release="7.el8" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-7.el8.src.rpm">
          <filename>qt5-qtbase-mysql-5.15.3-7.el8.s390x.rpm</filename>
          <sum type="sha256">5b0e86d429deaa76ea53fa373e986e9a07318736eb46358b33cda941ae4683ac</sum>
        </package>
        <package name="qt5-qtbase-devel" version="5.15.3" release="7.el8" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-7.el8.src.rpm">
          <filename>qt5-qtbase-devel-5.15.3-7.el8.s390x.rpm</filename>
          <sum type="sha256">61862bee956f50e518ff5556ff3947e99b1145163941a86ace6815805f46f873</sum>
        </package>
        <package name="qt5-qtbase-private-devel" version="5.15.3" release="7.el8" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-7.el8.src.rpm">
          <filename>qt5-qtbase-private-devel-5.15.3-7.el8.s390x.rpm</filename>
          <sum type="sha256">900a3e562de2357b74cd0050bb504e5b43ea774ef446470587e9ad645f237687</sum>
        </package>
        <package name="qt5-qtbase" version="5.15.3" release="7.el8" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-7.el8.src.rpm">
          <filename>qt5-qtbase-5.15.3-7.el8.s390x.rpm</filename>
          <sum type="sha256">982c1e1530bacda845ad0bac5cd9f28d79f94a24caabbd273ef9e07f6815e8a4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3058</id>
    <title>Moderate: mutt security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:37"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mutt security update</summary>
    <description>Mutt is a low resource, highly configurable, text-based MIME e-mail client. Mutt supports most e-mail storing formats, such as mbox and Maildir, as well as most protocols, including POP3 and IMAP.

Security Fix(es):

* mutt: null pointer dereference (CVE-2023-4874)
* mutt: null pointer dereference (CVE-2023-4875)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3058" id="RHSA-2024:3058" type="rhsa" title="RHSA-2024:3058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4874" id="CVE-2023-4874" type="cve" title="CVE-2023-4874"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4875" id="CVE-2023-4875" type="cve" title="CVE-2023-4875"/>
      <reference href="https://bugzilla.redhat.com/2238240" id="2238240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238241" id="2238241" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3058.html" id="ALSA-2024:3058" type="self" title="ALSA-2024:3058"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="mutt" version="2.0.7" release="3.el8" epoch="5" arch="s390x" src="mutt-2.0.7-3.el8.src.rpm">
          <filename>mutt-2.0.7-3.el8.s390x.rpm</filename>
          <sum type="sha256">9a60fafd50ec8dd275e8514d8afadeeb01829abade9b6ec1d595164c84245ae8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3059</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: out-of-bounds read in tiffcp in tools/tiffcp.c (CVE-2022-4645)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3059" id="RHSA-2024:3059" type="rhsa" title="RHSA-2024:3059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4645" id="CVE-2022-4645" type="cve" title="CVE-2022-4645"/>
      <reference href="https://bugzilla.redhat.com/2176220" id="2176220" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3059.html" id="ALSA-2024:3059" type="self" title="ALSA-2024:3059"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="libtiff" version="4.0.9" release="31.el8" epoch="0" arch="s390x" src="libtiff-4.0.9-31.el8.src.rpm">
          <filename>libtiff-4.0.9-31.el8.s390x.rpm</filename>
          <sum type="sha256">2534fef2df507c7b42d2c1237117e9142895fd2bec7fafcc547e5ea853047646</sum>
        </package>
        <package name="libtiff-devel" version="4.0.9" release="31.el8" epoch="0" arch="s390x" src="libtiff-4.0.9-31.el8.src.rpm">
          <filename>libtiff-devel-4.0.9-31.el8.s390x.rpm</filename>
          <sum type="sha256">7951336ed88de13df6f8140243f625e449a46ee727b1cb0186f66b02018e5c3a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3060</id>
    <title>Moderate: gstreamer1-plugins-bad-free security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gstreamer1-plugins-bad-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

* gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video (CVE-2023-40474)
* gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio (CVE-2023-40475)
* gstreamer-plugins-bad: Integer overflow in H.265 video parser leading to stack overwrite (CVE-2023-40476)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3060" id="RHSA-2024:3060" type="rhsa" title="RHSA-2024:3060"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40474" id="CVE-2023-40474" type="cve" title="CVE-2023-40474"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40475" id="CVE-2023-40475" type="cve" title="CVE-2023-40475"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40476" id="CVE-2023-40476" type="cve" title="CVE-2023-40476"/>
      <reference href="https://bugzilla.redhat.com/2254587" id="2254587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254588" id="2254588" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254589" id="2254589" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3060.html" id="ALSA-2024:3060" type="self" title="ALSA-2024:3060"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="gstreamer1-plugins-bad-free" version="1.16.1" release="4.el8" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.16.1-4.el8.src.rpm">
          <filename>gstreamer1-plugins-bad-free-1.16.1-4.el8.s390x.rpm</filename>
          <sum type="sha256">965d542367c97314f7fb06ffd3bd00986ac56d80b66f5987c3fff99e6d9f4fe3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3061</id>
    <title>Moderate: pki-core:10.6 and pki-deps:10.6 security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:49:53"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>pki-core:10.6 and pki-deps:10.6 security update</summary>
    <description>The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.

Security Fix(es):

* jackson-databind: denial of service via a large depth of nested objects (CVE-2020-36518)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3061" id="RHSA-2024:3061" type="rhsa" title="RHSA-2024:3061"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-36518" id="CVE-2020-36518" type="cve" title="CVE-2020-36518"/>
      <reference href="https://bugzilla.redhat.com/2064698" id="2064698" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3061.html" id="ALSA-2024:3061" type="self" title="ALSA-2024:3061"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="pki-deps" stream="10.6" version="8100020240410201031" context="9edba152" arch="s390x"/>
        <package name="fasterxml-oss-parent" version="49" release="1.module_el8.10.0+3791+e0637953" epoch="0" arch="noarch" src="fasterxml-oss-parent-49-1.module_el8.10.0+3791+e0637953.src.rpm">
          <filename>fasterxml-oss-parent-49-1.module_el8.10.0+3791+e0637953.noarch.rpm</filename>
          <sum type="sha256">3a35d41e06bb31fc941c1dea41e618b5824ad1766ef2e62ed1419484660d69f5</sum>
        </package>
        <package name="glassfish-jaxb-core" version="2.2.11" release="12.module_el8.10.0+3791+e0637953" epoch="0" arch="noarch" src="glassfish-jaxb-2.2.11-12.module_el8.10.0+3791+e0637953.src.rpm">
          <filename>glassfish-jaxb-core-2.2.11-12.module_el8.10.0+3791+e0637953.noarch.rpm</filename>
          <sum type="sha256">477a47687a21585315f4689a51288631d5fbac847b6673fba9f274890712a70a</sum>
        </package>
        <package name="pki-servlet-engine" version="9.0.62" release="1.module_el8.10.0+3791+e0637953" epoch="1" arch="noarch" src="pki-servlet-engine-9.0.62-1.module_el8.10.0+3791+e0637953.src.rpm">
          <filename>pki-servlet-engine-9.0.62-1.module_el8.10.0+3791+e0637953.noarch.rpm</filename>
          <sum type="sha256">532c855c94c4c589650554fdca9b4a4273dbb7c39b9840babd880c237ced690c</sum>
        </package>
        <package name="jackson-parent" version="2.14" release="1.module_el8.10.0+3791+e0637953" epoch="0" arch="noarch" src="jackson-parent-2.14-1.module_el8.10.0+3791+e0637953.src.rpm">
          <filename>jackson-parent-2.14-1.module_el8.10.0+3791+e0637953.noarch.rpm</filename>
          <sum type="sha256">66bc54cf5299c55c1bc4fb32a02219f89e1f2922d64c069493e4f5e708c5bd79</sum>
        </package>
        <package name="glassfish-jaxb-txw2" version="2.2.11" release="12.module_el8.10.0+3791+e0637953" epoch="0" arch="noarch" src="glassfish-jaxb-2.2.11-12.module_el8.10.0+3791+e0637953.src.rpm">
          <filename>glassfish-jaxb-txw2-2.2.11-12.module_el8.10.0+3791+e0637953.noarch.rpm</filename>
          <sum type="sha256">6a6d9268a508987cc0336c3494e5657095dba3e655f1225b7fa7128dc097887f</sum>
        </package>
        <package name="jackson-core" version="2.14.2" release="1.module_el8.10.0+3791+e0637953" epoch="0" arch="noarch" src="jackson-core-2.14.2-1.module_el8.10.0+3791+e0637953.src.rpm">
          <filename>jackson-core-2.14.2-1.module_el8.10.0+3791+e0637953.noarch.rpm</filename>
          <sum type="sha256">7608e0ecc590c1db12ea7f18362cd4650922b184d14cc817ff275748ed0acc3c</sum>
        </package>
        <package name="glassfish-jaxb-runtime" version="2.2.11" release="12.module_el8.10.0+3791+e0637953" epoch="0" arch="noarch" src="glassfish-jaxb-2.2.11-12.module_el8.10.0+3791+e0637953.src.rpm">
          <filename>glassfish-jaxb-runtime-2.2.11-12.module_el8.10.0+3791+e0637953.noarch.rpm</filename>
          <sum type="sha256">7eeafc54dba1be4f10984f2ad8dd2430740d7c134a735d41d95eb83becf36033</sum>
        </package>
        <package name="jackson-jaxrs-json-provider" version="2.14.2" release="1.module_el8.10.0+3791+e0637953" epoch="0" arch="noarch" src="jackson-jaxrs-providers-2.14.2-1.module_el8.10.0+3791+e0637953.src.rpm">
          <filename>jackson-jaxrs-json-provider-2.14.2-1.module_el8.10.0+3791+e0637953.noarch.rpm</filename>
          <sum type="sha256">c450d963735fe43761d2dddd9abdeef99ff82570f10022d85eb697af64968b79</sum>
        </package>
        <package name="jackson-module-jaxb-annotations" version="2.14.2" release="2.module_el8.10.0+3791+e0637953" epoch="0" arch="noarch" src="jackson-modules-base-2.14.2-2.module_el8.10.0+3791+e0637953.src.rpm">
          <filename>jackson-module-jaxb-annotations-2.14.2-2.module_el8.10.0+3791+e0637953.noarch.rpm</filename>
          <sum type="sha256">d37c6424164848c66b8fbd872c9738537e9409244e0311ce1a7d3bc1e0de9093</sum>
        </package>
        <package name="jackson-jaxrs-providers" version="2.14.2" release="1.module_el8.10.0+3791+e0637953" epoch="0" arch="noarch" src="jackson-jaxrs-providers-2.14.2-1.module_el8.10.0+3791+e0637953.src.rpm">
          <filename>jackson-jaxrs-providers-2.14.2-1.module_el8.10.0+3791+e0637953.noarch.rpm</filename>
          <sum type="sha256">d5d65e7ed5e3049a12757d45c69372580e18505aa09ddbc72ead48c4a38cc025</sum>
        </package>
        <package name="jackson-annotations" version="2.14.2" release="1.module_el8.10.0+3791+e0637953" epoch="0" arch="noarch" src="jackson-annotations-2.14.2-1.module_el8.10.0+3791+e0637953.src.rpm">
          <filename>jackson-annotations-2.14.2-1.module_el8.10.0+3791+e0637953.noarch.rpm</filename>
          <sum type="sha256">d92ccc6d7c5d27978b2931e191a1462da2641ed8405988fb4da16994c670b43e</sum>
        </package>
        <package name="jackson-bom" version="2.14.2" release="1.module_el8.10.0+3791+e0637953" epoch="0" arch="noarch" src="jackson-bom-2.14.2-1.module_el8.10.0+3791+e0637953.src.rpm">
          <filename>jackson-bom-2.14.2-1.module_el8.10.0+3791+e0637953.noarch.rpm</filename>
          <sum type="sha256">e7f772934278d583b5ffdade861b258651ee2094a7238654dac63765232ace26</sum>
        </package>
        <package name="jackson-modules-base" version="2.14.2" release="2.module_el8.10.0+3791+e0637953" epoch="0" arch="noarch" src="jackson-modules-base-2.14.2-2.module_el8.10.0+3791+e0637953.src.rpm">
          <filename>jackson-modules-base-2.14.2-2.module_el8.10.0+3791+e0637953.noarch.rpm</filename>
          <sum type="sha256">f86650afc1cae3eb79518b2027d3a7ce2c9988485dd9459cae5abde96eec9135</sum>
        </package>
        <package name="jackson-databind" version="2.14.2" release="1.module_el8.10.0+3791+e0637953" epoch="0" arch="noarch" src="jackson-databind-2.14.2-1.module_el8.10.0+3791+e0637953.src.rpm">
          <filename>jackson-databind-2.14.2-1.module_el8.10.0+3791+e0637953.noarch.rpm</filename>
          <sum type="sha256">fcca039d6c09d06b48bba5e0ee69fbe2bd7fe9b45ec81d4ae0180b6f42c84e82</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3062</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:45:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3062" id="RHSA-2024:3062" type="rhsa" title="RHSA-2024:3062"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27043" id="CVE-2023-27043" type="cve" title="CVE-2023-27043"/>
      <reference href="https://bugzilla.redhat.com/2196183" id="2196183" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3062.html" id="ALSA-2024:3062" type="self" title="ALSA-2024:3062"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="python3.11-rpm-macros" version="3.11.7" release="1.el8" epoch="0" arch="noarch" src="python3.11-3.11.7-1.el8.src.rpm">
          <filename>python3.11-rpm-macros-3.11.7-1.el8.noarch.rpm</filename>
          <sum type="sha256">29fab8178efc07a2c247f22764ab0625199793fba796b4e8863db2bca7d3af08</sum>
        </package>
        <package name="python3.11-devel" version="3.11.7" release="1.el8" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el8.src.rpm">
          <filename>python3.11-devel-3.11.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">50f50f7c4b5884295724b305f9616ef9b364e906ba2078b29a6a9c5735c9adb9</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.7" release="1.el8" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el8.src.rpm">
          <filename>python3.11-tkinter-3.11.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">94fb6ff77373a2bc534d02f686e3455c938f6776d990b13c98ae787b665d082f</sum>
        </package>
        <package name="python3.11-libs" version="3.11.7" release="1.el8" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el8.src.rpm">
          <filename>python3.11-libs-3.11.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">defafa3bbc9baae2710c582c376c90ea345b696d05a090599df988e62f33dcfa</sum>
        </package>
        <package name="python3.11" version="3.11.7" release="1.el8" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el8.src.rpm">
          <filename>python3.11-3.11.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">eb85f90dcf365118b3bffa0269df57db91c19bc44b16d98451837d7dc140f9f5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3066</id>
    <title>Moderate: exempi security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:39"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>exempi security update</summary>
    <description>Exempi provides a library for easy parsing of XMP metadata.

Security Fix(es):

* exempi: denial of service via opening of crafted audio file with ID3V2 frame (CVE-2020-18651)
* exempi: denial of service via opening of crafted webp file (CVE-2020-18652)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3066" id="RHSA-2024:3066" type="rhsa" title="RHSA-2024:3066"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-18651" id="CVE-2020-18651" type="cve" title="CVE-2020-18651"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-18652" id="CVE-2020-18652" type="cve" title="CVE-2020-18652"/>
      <reference href="https://bugzilla.redhat.com/2235669" id="2235669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2235673" id="2235673" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3066.html" id="ALSA-2024:3066" type="self" title="ALSA-2024:3066"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="exempi" version="2.4.5" release="4.el8" epoch="0" arch="s390x" src="exempi-2.4.5-4.el8.src.rpm">
          <filename>exempi-2.4.5-4.el8.s390x.rpm</filename>
          <sum type="sha256">664c44d28e72adc835fbd13ae4ffa4606724f2e5aa0e4dcbe6c1db5b0628bc23</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3067</id>
    <title>Moderate: tigervnc security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 16:18:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

Security Fix(es):

* xorg-x11-server: Use-after-free bug in DestroyWindow (CVE-2023-5380)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3067" id="RHSA-2024:3067" type="rhsa" title="RHSA-2024:3067"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5380" id="CVE-2023-5380" type="cve" title="CVE-2023-5380"/>
      <reference href="https://bugzilla.redhat.com/2244736" id="2244736" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3067.html" id="ALSA-2024:3067" type="self" title="ALSA-2024:3067"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="tigervnc-icons" version="1.13.1" release="8.el8" epoch="0" arch="noarch" src="tigervnc-1.13.1-8.el8.src.rpm">
          <filename>tigervnc-icons-1.13.1-8.el8.noarch.rpm</filename>
          <sum type="sha256">111e15350235b9354fbfe58a2da6d17e98c1a90c18a0a11615e4c6cf9e9aa3a6</sum>
        </package>
        <package name="tigervnc-server-module" version="1.13.1" release="8.el8" epoch="0" arch="s390x" src="tigervnc-1.13.1-8.el8.src.rpm">
          <filename>tigervnc-server-module-1.13.1-8.el8.s390x.rpm</filename>
          <sum type="sha256">46220f052f1b21b58ac5d9f80fb089aa2235b5683bd2be847f0d884709724527</sum>
        </package>
        <package name="tigervnc-license" version="1.13.1" release="8.el8" epoch="0" arch="noarch" src="tigervnc-1.13.1-8.el8.src.rpm">
          <filename>tigervnc-license-1.13.1-8.el8.noarch.rpm</filename>
          <sum type="sha256">8cb626ac7c8fc55022c696fbeb64132c63379ab025dd53e72bb80efd1791964f</sum>
        </package>
        <package name="tigervnc-server" version="1.13.1" release="8.el8" epoch="0" arch="s390x" src="tigervnc-1.13.1-8.el8.src.rpm">
          <filename>tigervnc-server-1.13.1-8.el8.s390x.rpm</filename>
          <sum type="sha256">91c8a41435283aeb67e50daefb776d7914fd810f0e69602fec252f31cc05a917</sum>
        </package>
        <package name="tigervnc-selinux" version="1.13.1" release="8.el8" epoch="0" arch="noarch" src="tigervnc-1.13.1-8.el8.src.rpm">
          <filename>tigervnc-selinux-1.13.1-8.el8.noarch.rpm</filename>
          <sum type="sha256">a853b872c4970f2d0b6d37a46b681090e98b224398bf22efcfc5cad6f5a58eab</sum>
        </package>
        <package name="tigervnc-server-minimal" version="1.13.1" release="8.el8" epoch="0" arch="s390x" src="tigervnc-1.13.1-8.el8.src.rpm">
          <filename>tigervnc-server-minimal-1.13.1-8.el8.s390x.rpm</filename>
          <sum type="sha256">d40181001cbd1c49c03ee11cece3b0aef3f6e006ea37ee119b277f30c9680c30</sum>
        </package>
        <package name="tigervnc" version="1.13.1" release="8.el8" epoch="0" arch="s390x" src="tigervnc-1.13.1-8.el8.src.rpm">
          <filename>tigervnc-1.13.1-8.el8.s390x.rpm</filename>
          <sum type="sha256">f9eed5a15a8a29014f44ab0ea3fe541099c6dd1cc9914b7544b92cf9c00606b0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3088</id>
    <title>Moderate: gstreamer1-plugins-base security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:40:01"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gstreamer1-plugins-base security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins.

Security Fix(es):

* gstreamer-plugins-base: heap overwrite in subtitle parsing (CVE-2023-37328)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3088" id="RHSA-2024:3088" type="rhsa" title="RHSA-2024:3088"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37328" id="CVE-2023-37328" type="cve" title="CVE-2023-37328"/>
      <reference href="https://bugzilla.redhat.com/2254540" id="2254540" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3088.html" id="ALSA-2024:3088" type="self" title="ALSA-2024:3088"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="gstreamer1-plugins-base" version="1.16.1" release="3.el8" epoch="0" arch="s390x" src="gstreamer1-plugins-base-1.16.1-3.el8.src.rpm">
          <filename>gstreamer1-plugins-base-1.16.1-3.el8.s390x.rpm</filename>
          <sum type="sha256">0ff8c2959acd5756aa15c4e43ee58343943d58b68b3ade01bba4354ce24f16c2</sum>
        </package>
        <package name="gstreamer1-plugins-base-devel" version="1.16.1" release="3.el8" epoch="0" arch="s390x" src="gstreamer1-plugins-base-1.16.1-3.el8.src.rpm">
          <filename>gstreamer1-plugins-base-devel-1.16.1-3.el8.s390x.rpm</filename>
          <sum type="sha256">3ca81a4bcfdd3cd3efac7b6d0177b27d7e033ae769a8fba3d8de4d7ee0457a63</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3089</id>
    <title>Moderate: gstreamer1-plugins-good security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:40:01"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gstreamer1-plugins-good security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.

Security Fix(es):

* gstreamer-plugins-good: integer overflow leading to heap overwrite in FLAC image tag handling (CVE-2023-37327)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3089" id="RHSA-2024:3089" type="rhsa" title="RHSA-2024:3089"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37327" id="CVE-2023-37327" type="cve" title="CVE-2023-37327"/>
      <reference href="https://bugzilla.redhat.com/2254539" id="2254539" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3089.html" id="ALSA-2024:3089" type="self" title="ALSA-2024:3089"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="gstreamer1-plugins-good-gtk" version="1.16.1" release="4.el8" epoch="0" arch="s390x" src="gstreamer1-plugins-good-1.16.1-4.el8.src.rpm">
          <filename>gstreamer1-plugins-good-gtk-1.16.1-4.el8.s390x.rpm</filename>
          <sum type="sha256">726fea9b96aa1e8f8e807b74d9b884433a94c5f925b6941fc965e0b53a364c76</sum>
        </package>
        <package name="gstreamer1-plugins-good" version="1.16.1" release="4.el8" epoch="0" arch="s390x" src="gstreamer1-plugins-good-1.16.1-4.el8.src.rpm">
          <filename>gstreamer1-plugins-good-1.16.1-4.el8.s390x.rpm</filename>
          <sum type="sha256">89c89d844ce1d91295ad79a7f0c58b46218ecc2a808834e9bc22dd533dbcd872</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3094</id>
    <title>Moderate: perl-CPAN security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:42:32"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>perl-CPAN security update</summary>
    <description>The CPAN module is a tool to query, download and build perl modules from CPAN sites.

Security Fix(es):

* perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS (CVE-2023-31484)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3094" id="RHSA-2024:3094" type="rhsa" title="RHSA-2024:3094"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31484" id="CVE-2023-31484" type="cve" title="CVE-2023-31484"/>
      <reference href="https://bugzilla.redhat.com/2218667" id="2218667" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3094.html" id="ALSA-2024:3094" type="self" title="ALSA-2024:3094"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="perl-CPAN" version="2.18" release="399.el8" epoch="0" arch="noarch" src="perl-CPAN-2.18-399.el8.src.rpm">
          <filename>perl-CPAN-2.18-399.el8.noarch.rpm</filename>
          <sum type="sha256">c294d408f609fc269848eaad7fa337b4fb9490773217baf64ec9fdb38541489a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3095</id>
    <title>Moderate: vorbis-tools security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:40"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>vorbis-tools security update</summary>
    <description>The vorbis-tools packages provide an encoder, a decoder, a playback tool, and a comment editor for Ogg Vorbis. Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed audio format.

Security Fix(es):

* vorbis-tools: Buffer Overflow vulnerability (CVE-2023-43361)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3095" id="RHSA-2024:3095" type="rhsa" title="RHSA-2024:3095"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43361" id="CVE-2023-43361" type="cve" title="CVE-2023-43361"/>
      <reference href="https://bugzilla.redhat.com/2242151" id="2242151" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3095.html" id="ALSA-2024:3095" type="self" title="ALSA-2024:3095"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="vorbis-tools" version="1.4.0" release="29.el8" epoch="1" arch="s390x" src="vorbis-tools-1.4.0-29.el8.src.rpm">
          <filename>vorbis-tools-1.4.0-29.el8.s390x.rpm</filename>
          <sum type="sha256">63fe770301ffba6a97271d5f196426c3e681887b1917855654d9883592915405</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3102</id>
    <title>Moderate: python-jinja2 security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:42:32"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-jinja2 security update</summary>
    <description>The python-jinja2 package contains Jinja2, a template engine written in pure Python. Jinja2 provides a Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment. 

Security Fix(es):

* jinja2: HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-22195)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3102" id="RHSA-2024:3102" type="rhsa" title="RHSA-2024:3102"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22195" id="CVE-2024-22195" type="cve" title="CVE-2024-22195"/>
      <reference href="https://bugzilla.redhat.com/2257854" id="2257854" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3102.html" id="ALSA-2024:3102" type="self" title="ALSA-2024:3102"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="python3-jinja2" version="2.10.1" release="4.el8" epoch="0" arch="noarch" src="python-jinja2-2.10.1-4.el8.src.rpm">
          <filename>python3-jinja2-2.10.1-4.el8.noarch.rpm</filename>
          <sum type="sha256">1eb789b362eeee97f8f29a7a024a225f3e54126a06db9e517c3d18e7a9865286</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3105</id>
    <title>Moderate: python3.11-cryptography security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:40"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11-cryptography security update</summary>
    <description>The python-cryptography packages contain a Python Cryptographic Authority's (PyCA's) cryptography library, which provides cryptographic primitives and recipes to Python developers.

Security Fix(es):

* python-cryptography: NULL-dereference when loading PKCS7 certificates (CVE-2023-49083)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3105" id="RHSA-2024:3105" type="rhsa" title="RHSA-2024:3105"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-49083" id="CVE-2023-49083" type="cve" title="CVE-2023-49083"/>
      <reference href="https://bugzilla.redhat.com/2255331" id="2255331" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3105.html" id="ALSA-2024:3105" type="self" title="ALSA-2024:3105"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="python3.11-cryptography" version="37.0.2" release="6.el8" epoch="0" arch="s390x" src="python3.11-cryptography-37.0.2-6.el8.src.rpm">
          <filename>python3.11-cryptography-37.0.2-6.el8.s390x.rpm</filename>
          <sum type="sha256">5e37e59dbae22d9e1efb0afc37e5faf724c79c871d76138a9f365484d2c9a917</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3120</id>
    <title>Moderate: freeglut security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:40:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freeglut security update</summary>
    <description>freeglut is a completely open source alternative to the OpenGL Utility Toolkit (GLUT) library with an OSI approved free software license.

Security Fix(es):

* freeglut: memory leak via glutAddSubMenu() function (CVE-2024-24258)
* freeglut: memory leak via glutAddMenuEntry() function (CVE-2024-24259)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3120" id="RHSA-2024:3120" type="rhsa" title="RHSA-2024:3120"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24258" id="CVE-2024-24258" type="cve" title="CVE-2024-24258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24259" id="CVE-2024-24259" type="cve" title="CVE-2024-24259"/>
      <reference href="https://bugzilla.redhat.com/2263939" id="2263939" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263943" id="2263943" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3120.html" id="ALSA-2024:3120" type="self" title="ALSA-2024:3120"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="freeglut" version="3.0.0" release="9.el8" epoch="0" arch="s390x" src="freeglut-3.0.0-9.el8.src.rpm">
          <filename>freeglut-3.0.0-9.el8.s390x.rpm</filename>
          <sum type="sha256">2802b8bf7bcc4df4d9aaec1a7eed362f306af4cb7ebe8431b38e7ab6625fb9d2</sum>
        </package>
        <package name="freeglut-devel" version="3.0.0" release="9.el8" epoch="0" arch="s390x" src="freeglut-3.0.0-9.el8.src.rpm">
          <filename>freeglut-devel-3.0.0-9.el8.s390x.rpm</filename>
          <sum type="sha256">7ee7e1e5a19f266c85964447f8f02b3f4f06a3a6fc1214208bbd651303c93998</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3121</id>
    <title>Moderate: httpd:2.4 security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:47:44"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>httpd:2.4 security update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: mod_macro: out-of-bounds read vulnerability (CVE-2023-31122)
* mod_http2: reset requests exhaust memory (incomplete fix of CVE-2023-44487) (CVE-2023-45802)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3121" id="RHSA-2024:3121" type="rhsa" title="RHSA-2024:3121"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31122" id="CVE-2023-31122" type="cve" title="CVE-2023-31122"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45802" id="CVE-2023-45802" type="cve" title="CVE-2023-45802"/>
      <reference href="https://bugzilla.redhat.com/2243877" id="2243877" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245332" id="2245332" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3121.html" id="ALSA-2024:3121" type="self" title="ALSA-2024:3121"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="httpd" stream="2.4" version="8100020240407115916" context="9edba152" arch="s390x"/>
        <package name="mod_ldap" version="2.4.37" release="64.module_el8.10.0+3761+75f8c656" epoch="0" arch="s390x" src="httpd-2.4.37-64.module_el8.10.0+3761+75f8c656.src.rpm">
          <filename>mod_ldap-2.4.37-64.module_el8.10.0+3761+75f8c656.s390x.rpm</filename>
          <sum type="sha256">1d564cfc65960378953c01cef27f13d131c1500a97cdc64b15656db06388d388</sum>
        </package>
        <package name="httpd-tools" version="2.4.37" release="64.module_el8.10.0+3761+75f8c656" epoch="0" arch="s390x" src="httpd-2.4.37-64.module_el8.10.0+3761+75f8c656.src.rpm">
          <filename>httpd-tools-2.4.37-64.module_el8.10.0+3761+75f8c656.s390x.rpm</filename>
          <sum type="sha256">40be9227683f65c970b673d1b3ce1983ba3f2e5b9c0f19731fd837f440ad0a75</sum>
        </package>
        <package name="mod_session" version="2.4.37" release="64.module_el8.10.0+3761+75f8c656" epoch="0" arch="s390x" src="httpd-2.4.37-64.module_el8.10.0+3761+75f8c656.src.rpm">
          <filename>mod_session-2.4.37-64.module_el8.10.0+3761+75f8c656.s390x.rpm</filename>
          <sum type="sha256">85c2727d07e4bec50802d2283127bd38f5fbf972c5b2613273aa4b5407ef2ff0</sum>
        </package>
        <package name="httpd-devel" version="2.4.37" release="64.module_el8.10.0+3761+75f8c656" epoch="0" arch="s390x" src="httpd-2.4.37-64.module_el8.10.0+3761+75f8c656.src.rpm">
          <filename>httpd-devel-2.4.37-64.module_el8.10.0+3761+75f8c656.s390x.rpm</filename>
          <sum type="sha256">8738c27293d8ba5b9864ef4fb2d151affad9b9efed4a3d99dfde081dc07e7419</sum>
        </package>
        <package name="httpd" version="2.4.37" release="64.module_el8.10.0+3761+75f8c656" epoch="0" arch="s390x" src="httpd-2.4.37-64.module_el8.10.0+3761+75f8c656.src.rpm">
          <filename>httpd-2.4.37-64.module_el8.10.0+3761+75f8c656.s390x.rpm</filename>
          <sum type="sha256">b01265d06fc6e3ef715e12d66d3c94ebf6654c7a0c0a64ffae76491a070a86a0</sum>
        </package>
        <package name="httpd-filesystem" version="2.4.37" release="64.module_el8.10.0+3761+75f8c656" epoch="0" arch="noarch" src="httpd-2.4.37-64.module_el8.10.0+3761+75f8c656.src.rpm">
          <filename>httpd-filesystem-2.4.37-64.module_el8.10.0+3761+75f8c656.noarch.rpm</filename>
          <sum type="sha256">b0c3ff0f7906817e243b3008c64ed6f5d4388f9ff9daacb2511d87994c944d33</sum>
        </package>
        <package name="mod_http2" version="1.15.7" release="10.module_el8.10.0+3832+564e7653" epoch="0" arch="s390x" src="mod_http2-1.15.7-10.module_el8.10.0+3832+564e7653.src.rpm">
          <filename>mod_http2-1.15.7-10.module_el8.10.0+3832+564e7653.s390x.rpm</filename>
          <sum type="sha256">ced86530fe3d6ef0042ef1f6483b8f83f8e28834e2495e5368934e8c1ffcf36c</sum>
        </package>
        <package name="mod_ssl" version="2.4.37" release="64.module_el8.10.0+3761+75f8c656" epoch="1" arch="s390x" src="httpd-2.4.37-64.module_el8.10.0+3761+75f8c656.src.rpm">
          <filename>mod_ssl-2.4.37-64.module_el8.10.0+3761+75f8c656.s390x.rpm</filename>
          <sum type="sha256">d0ca3409078775d6098806c0664e58248218f7f5fc982beb1a96f0b34de966d5</sum>
        </package>
        <package name="mod_md" version="2.0.8" release="8.module_el8.6.0+3031+fb177b09" epoch="1" arch="s390x" src="mod_md-2.0.8-8.module_el8.6.0+3031+fb177b09.src.rpm">
          <filename>mod_md-2.0.8-8.module_el8.6.0+3031+fb177b09.s390x.rpm</filename>
          <sum type="sha256">e47754aea99df8718074dd3d1df288b448b0af9d0ba4f0f8c6a3b5c8a164a1a7</sum>
        </package>
        <package name="mod_proxy_html" version="2.4.37" release="64.module_el8.10.0+3761+75f8c656" epoch="1" arch="s390x" src="httpd-2.4.37-64.module_el8.10.0+3761+75f8c656.src.rpm">
          <filename>mod_proxy_html-2.4.37-64.module_el8.10.0+3761+75f8c656.s390x.rpm</filename>
          <sum type="sha256">f409428c27058f2abae91d9e937c9fef68ec1a577e18f71013d577a4d2b42462</sum>
        </package>
        <package name="httpd-manual" version="2.4.37" release="64.module_el8.10.0+3761+75f8c656" epoch="0" arch="noarch" src="httpd-2.4.37-64.module_el8.10.0+3761+75f8c656.src.rpm">
          <filename>httpd-manual-2.4.37-64.module_el8.10.0+3761+75f8c656.noarch.rpm</filename>
          <sum type="sha256">f59ec43d97be8214e27a5ea63a3d850ae7fabe40962b6fab3b81e444e22a6bba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3127</id>
    <title>Moderate: zziplib security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:40:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>zziplib security update</summary>
    <description>The zziplib is a lightweight library to easily extract data from zip files.

Security Fix(es):

* zziplib: invalid memory access at zzip_disk_entry_to_file_header in mmapped.c (CVE-2020-18770)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3127" id="RHSA-2024:3127" type="rhsa" title="RHSA-2024:3127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-18770" id="CVE-2020-18770" type="cve" title="CVE-2020-18770"/>
      <reference href="https://bugzilla.redhat.com/2246907" id="2246907" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3127.html" id="ALSA-2024:3127" type="self" title="ALSA-2024:3127"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="zziplib" version="0.13.68" release="13.el8_10" epoch="0" arch="s390x" src="zziplib-0.13.68-13.el8_10.src.rpm">
          <filename>zziplib-0.13.68-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">4e75f5574d1b31ad37e56a4625edf7ff1bdf038148251ffea6bf8857bec9cfb9</sum>
        </package>
        <package name="zziplib-utils" version="0.13.68" release="13.el8_10" epoch="0" arch="s390x" src="zziplib-0.13.68-13.el8_10.src.rpm">
          <filename>zziplib-utils-0.13.68-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">f43d2434139a7a755a9f5d0280031e899a24d2af253af91fb7cac4bcc55b1a1c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3128</id>
    <title>Moderate: perl:5.32 security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:52:25"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>perl:5.32 security update</summary>
    <description>Perl is a high-level programming language that is commonly used for system administration utilities and web programming.

Security Fix(es):

* perl: Write past buffer end via illegal user-defined Unicode property (CVE-2023-47038)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3128" id="RHSA-2024:3128" type="rhsa" title="RHSA-2024:3128"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-47038" id="CVE-2023-47038" type="cve" title="CVE-2023-47038"/>
      <reference href="https://bugzilla.redhat.com/2249523" id="2249523" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3128.html" id="ALSA-2024:3128" type="self" title="ALSA-2024:3128"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="perl" stream="5.32" version="8100020240409203632" context="9edba152" arch="s390x"/>
        <package name="perl-Math-BigInt-FastCalc" version="0.500.900" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Math-BigInt-FastCalc-0.500.900-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Math-BigInt-FastCalc-0.500.900-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">02e26e19077af269cd397729470bc4fa338a1f4e076f9fa75dd7efc440debcff</sum>
        </package>
        <package name="perl-ODBM_File" version="1.16" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-ODBM_File-1.16-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">063de2f8da753cb2251391989f0a61bcee8915db4576874e21c2dc1c0c48c12b</sum>
        </package>
        <package name="perl-Sys-Syslog" version="0.36" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Sys-Syslog-0.36-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Sys-Syslog-0.36-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">079b49645d07c209be167587ab587837e44e45fdaeadafa9b8b82e00b338b6bc</sum>
        </package>
        <package name="perl-vars" version="1.05" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-vars-1.05-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">0877eee50179210e4069dbe81866a690b50d85aa418e844709d8cbb7a16bce65</sum>
        </package>
        <package name="perl-Encode" version="3.08" release="461.module_el8.6.0+3181+91434291" epoch="4" arch="s390x" src="perl-Encode-3.08-461.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Encode-3.08-461.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">0aa9678c2c64442ff6a3d5b1089e78550d762a2a5d3b984c64f786b76da7cf01</sum>
        </package>
        <package name="perl-Encode-devel" version="3.08" release="461.module_el8.6.0+3181+91434291" epoch="4" arch="s390x" src="perl-Encode-3.08-461.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Encode-devel-3.08-461.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">0ba7613843dc6a78fe7ba65103ac4915962b045bed0f95f738d64dec0269ae25</sum>
        </package>
        <package name="perl-AutoSplit" version="5.74" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-AutoSplit-5.74-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">0c76ab43dbe2b8355b1202c580cf3f2a9ba55f404fb6753bf7a87c7c358c0db2</sum>
        </package>
        <package name="perl-Math-Complex" version="1.59" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Math-Complex-1.59-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">0df3f9176a3c979bd9615efacb02fd0cc46fcf8347e5b8b61b8452e33738686e</sum>
        </package>
        <package name="perl-IO-Zlib" version="1.10" release="473.module_el8.10.0+3779+d5938d28" epoch="1" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-IO-Zlib-1.10-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">11f1749fef1fa7adb572fd53a2e05a39b6a3d83d948831c49b40af4d3c2aee83</sum>
        </package>
        <package name="perl-File-Find" version="1.37" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-File-Find-1.37-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">1200c12b10c8f89cd925928fcee7ec7035abe801117b5088a7b8f3dcea8a7a98</sum>
        </package>
        <package name="perl-File-Basename" version="2.85" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-File-Basename-2.85-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">12e4256de59de8d0019464c793342ace9e45dab7c59fa306d29d5b550206fcf9</sum>
        </package>
        <package name="perl-Tie-Memoize" version="1.1" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Tie-Memoize-1.1-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">15c944c60718ebc175c47e727acad6d9e559a8cce8fb7ce6ea2b07e99627d772</sum>
        </package>
        <package name="perl-meta-notation" version="5.32.1" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-meta-notation-5.32.1-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">15dde117a2ba8ce334294b26e6e20fbffbfdc3f26a4afb162d6e163e1a317459</sum>
        </package>
        <package name="perl-Devel-SelfStubber" version="1.06" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Devel-SelfStubber-1.06-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">16d239b32e2791b0e1b051e63d4759b49ead1a58527488db0c24f62aa40571fb</sum>
        </package>
        <package name="perl-lib" version="0.65" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-lib-0.65-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">1930393cca133457a64514a37392a6c40b45d14ffdc89cddeb4eb49d73bd61a5</sum>
        </package>
        <package name="perl-DirHandle" version="1.05" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-DirHandle-1.05-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">1cdb3aad123f950fe5031fcd5a15aeb329f99b6d3efdc115937f6e2e21054ee3</sum>
        </package>
        <package name="perl-sort" version="2.04" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-sort-2.04-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">20d78829d77712fa9f92e7718bd7ab19bec61d239b6ae13bd07766b5318e8bad</sum>
        </package>
        <package name="perl-Devel-PPPort" version="3.62" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Devel-PPPort-3.62-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Devel-PPPort-3.62-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">22b89b06807891168f339c873c1df71c09ea6279b58a053c1c3fa7756e5d9cfe</sum>
        </package>
        <package name="perl-Compress-Bzip2" version="2.28" release="2.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Compress-Bzip2-2.28-2.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Compress-Bzip2-2.28-2.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">24e9c4b296bff779ccafb1cce82029a1d0d7610c20f719e87338eecf5e28250d</sum>
        </package>
        <package name="perl" version="5.32.1" release="473.module_el8.10.0+3779+d5938d28" epoch="4" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-5.32.1-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">284b30cf3b31c8f8134678aabe831d4304bebbc91aca3173f62d34398542614b</sum>
        </package>
        <package name="perl-B" version="1.80" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-B-1.80-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">29c63f2ae78eeb7aabc64bb3b246dac4e030223df8ff7a10f460a9a9a1ed4bf3</sum>
        </package>
        <package name="perl-Data-Dumper" version="2.174" release="440.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Data-Dumper-2.174-440.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Data-Dumper-2.174-440.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">2dbd08fb1974f13cdc2e12a54c2ac7974ebdc5ae17ee700b3e207e8068462c84</sum>
        </package>
        <package name="perl-locale" version="1.09" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-locale-1.09-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">300e76f1e758fdd54c0e4884560b2df2fb05056cc1c673e1968ecf6ffd71810b</sum>
        </package>
        <package name="perl-DynaLoader" version="1.47" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-DynaLoader-1.47-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">30e3e94b8e7c8c7e3658736037fc42d2a233d26d91ce5ac9a1958fa6f4e954bd</sum>
        </package>
        <package name="perl-Thread-Semaphore" version="2.13" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Thread-Semaphore-2.13-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">32c3e28ef32644e2147103108193730393eba757d833e460ab5c75b2e3ee3c43</sum>
        </package>
        <package name="perl-Time-HiRes" version="1.9764" release="459.module_el8.6.0+3181+91434291" epoch="4" arch="s390x" src="perl-Time-HiRes-1.9764-459.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Time-HiRes-1.9764-459.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">32d0137f5adc6c485c423ed080898c9d2d389d99c3414bc8183aefd23ff5fa20</sum>
        </package>
        <package name="perl-base" version="2.27" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-base-2.27-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">366f5d6496d93287574f01a7784abdb37a2a12ac8dda37520bcdfc6c8459f160</sum>
        </package>
        <package name="perl-Fcntl" version="1.13" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Fcntl-1.13-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">36e7a97b5907c8d7880fb7e822cf96bbefa01a7b152e93f904347ee9df37c83d</sum>
        </package>
        <package name="perl-Compress-Raw-Lzma" version="2.096" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Compress-Raw-Lzma-2.096-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Compress-Raw-Lzma-2.096-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">37cddb8cb6f7b081513d9ba73cde6b5a7af92dd45d761ed456a2131a0c2ba250</sum>
        </package>
        <package name="perl-Storable" version="3.21" release="457.module_el8.6.0+3181+91434291" epoch="1" arch="s390x" src="perl-Storable-3.21-457.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Storable-3.21-457.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">3ab4014c6090c63ddc06db649dc4f6861695fde6509d5fa1a3fa0dddbe517f1b</sum>
        </package>
        <package name="perl-Tie-RefHash" version="1.39" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Tie-RefHash-1.39-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">3bcef925000dc6a93a87756b87db279ffb70e4510586ebf9495712040362efc8</sum>
        </package>
        <package name="perl-Thread" version="3.05" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Thread-3.05-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">3f39bf77e57de6bda391898d8c203dab1b7b285c1ec5cdd5c96758dfc56f470d</sum>
        </package>
        <package name="perl-DBM_Filter" version="0.06" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-DBM_Filter-0.06-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">4063ec53cf2e91f2747f6fc1cb521811c1d54d85db18e179259a7c567bcf008c</sum>
        </package>
        <package name="perl-Search-Dict" version="1.07" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Search-Dict-1.07-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">40d7e2eb5df00fe0e8cb361da66b69a39c5964942b314f7bae01bed38e94a157</sum>
        </package>
        <package name="perl-I18N-Langinfo" version="0.19" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-I18N-Langinfo-0.19-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">4284ab16f1cac53b7e3cfabb62afb76854ae11a980ce176141a663570f7d0ccc</sum>
        </package>
        <package name="perl-ExtUtils-Embed" version="1.35" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-ExtUtils-Embed-1.35-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">4315c3790269d31986d71065469856d843b9f2a8c862added7cf6e50a81874a3</sum>
        </package>
        <package name="perl-Hash-Util-FieldHash" version="1.20" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Hash-Util-FieldHash-1.20-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">4850d9d666846e938f57ea5d8aca0c1f6659704295d65c314b4a538d3b675d0b</sum>
        </package>
        <package name="perl-Getopt-Std" version="1.12" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Getopt-Std-1.12-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">49c6acce9c1a6baedf7b93249f935e6c73cb842cfbcc77e6cbb26fb9cdf77c40</sum>
        </package>
        <package name="perl-Sys-Hostname" version="1.23" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Sys-Hostname-1.23-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">4b42d70908daf566dcfbc342b56c95510525f465364655d30eecd77d118a8204</sum>
        </package>
        <package name="perl-Class-Struct" version="0.66" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Class-Struct-0.66-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">4b5560554d1cd83f234bc2335417e1ac9d588c1b837cdf11aac0e8c94a2e03df</sum>
        </package>
        <package name="perl-mro" version="1.23" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-mro-1.23-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">4c43d6431ac0bbc91247347b48a94eccc909be168ac7b57d8a7462e5e8963501</sum>
        </package>
        <package name="perl-Tie-File" version="1.06" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Tie-File-1.06-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">4c54327ae0dae37008aa55572c22bdb8cb7af3deab58d97ae5f586f6c5b6a61e</sum>
        </package>
        <package name="perl-Digest-MD5" version="2.58" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Digest-MD5-2.58-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Digest-MD5-2.58-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">4c58a697799d53381b8811353807bc5b41e30181cad4af65d0b9023ee409a623</sum>
        </package>
        <package name="perl-IPC-SysV" version="2.09" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-IPC-SysV-2.09-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-IPC-SysV-2.09-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">508355af60ff76844cc9f5c2f57aeeba6cf7a9e88d14d942f52bd8717b021bff</sum>
        </package>
        <package name="perl-version" version="0.99.29" release="1.module_el8.6.0+3181+91434291" epoch="7" arch="s390x" src="perl-version-0.99.29-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-version-0.99.29-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">51208c4995fd02f53e0cfa0778654ddac6c8c19f2899ef672ec59e99248ae04f</sum>
        </package>
        <package name="perl-interpreter" version="5.32.1" release="473.module_el8.10.0+3779+d5938d28" epoch="4" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-interpreter-5.32.1-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">54e3f6c6b130838ade83b3f25fbb2570a94f909af19b2f8feb319af816bb9ad5</sum>
        </package>
        <package name="perl-NDBM_File" version="1.15" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-NDBM_File-1.15-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">5b085fe390f40f971f9e724113b9775e8d651b3ca27fd970dc02337629942508</sum>
        </package>
        <package name="perl-diagnostics" version="1.37" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-diagnostics-1.37-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">5bf9a9e116e0cc07d9bfc7979c312a55bd1120f34e1239986924d406ee9364b3</sum>
        </package>
        <package name="perl-subs" version="1.03" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-subs-1.03-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">5c3db1309c3f0bc8926407bbbfdcd7bbe5b9837fce1c2a06a04b40a526adcf1d</sum>
        </package>
        <package name="perl-POSIX" version="1.94" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-POSIX-1.94-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">5e0f93b90bc192049b0d55722392fcec8a6f2e4319b927a9c816cc2b3131dfb6</sum>
        </package>
        <package name="perl-Config-Extensions" version="0.03" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Config-Extensions-0.03-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">600e8370a1572d383c229ce636cc79e27ffe67764a07fe42809dd958257b0382</sum>
        </package>
        <package name="perl-Errno" version="1.30" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Errno-1.30-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">614bb355484ece8b4a024dec3c2fb9a935ef5f344ab7c8c77fa29664b31d50d6</sum>
        </package>
        <package name="perl-File-stat" version="1.09" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-File-stat-1.09-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">6349cebadf30d0fda89c6a7977152103c0ca8bbb137251897eae444417c5bc59</sum>
        </package>
        <package name="perl-IO" version="1.43" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-IO-1.43-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">64191359cc9209350f7db895f533f0503333a34a658c85780220d07ad614bdec</sum>
        </package>
        <package name="perl-encoding" version="3.00" release="461.module_el8.6.0+3181+91434291" epoch="4" arch="s390x" src="perl-Encode-3.08-461.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-encoding-3.00-461.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">65c2e2390a32ae4d3401554d2671fa5da05b1266275b57b93945f620c8954b13</sum>
        </package>
        <package name="perl-doc" version="5.32.1" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-doc-5.32.1-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">66465a748a8d6e5ab04226cb4c97bf5805415cdf8ef837caf375a9beb17bce13</sum>
        </package>
        <package name="perl-Module-Loaded" version="0.08" release="473.module_el8.10.0+3779+d5938d28" epoch="1" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Module-Loaded-0.08-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">669c41d815a56824b4e0cca8f3c8b5d8f8291f48a6e467551e1383d95151152f</sum>
        </package>
        <package name="perl-sigtrap" version="1.09" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-sigtrap-1.09-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">66b643015fe195e7c789b7e75eac6a75312d0b349954d18df8538ef702a870ed</sum>
        </package>
        <package name="perl-ExtUtils-Miniperl" version="1.09" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-ExtUtils-Miniperl-1.09-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">66bfcbbacc77f89e49caee8565cb6d69c42f68ba9d4375440573680cc9670a6b</sum>
        </package>
        <package name="perl-FileCache" version="1.10" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-FileCache-1.10-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">686ba69c5600f0056fde8826aa3f200451b03816dc9e3110f6498a1d785021e9</sum>
        </package>
        <package name="perl-blib" version="1.07" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-blib-1.07-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">6ad2913b35bdc924cd69aa4a724ff199fdff144f00ad023a195cb32fdbd2004c</sum>
        </package>
        <package name="perl-Text-Abbrev" version="1.02" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Text-Abbrev-1.02-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">6be38c433dcd8e4476721f776616a33887e99df4cfbdcaa0540e0df73181772b</sum>
        </package>
        <package name="perl-Net-Ping" version="2.72" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Net-Ping-2.72-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">6c238ba10fc11415f5cfee8f1a654964de4b5d1a386cc13921e973bedf00f075</sum>
        </package>
        <package name="perl-Socket" version="2.031" release="1.module_el8.6.0+3181+91434291" epoch="4" arch="s390x" src="perl-Socket-2.031-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Socket-2.031-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">6cd39b199d77bc5ec945e2c8eaed29fd6313b543871371963960bd6ee4f09f97</sum>
        </package>
        <package name="perl-DB_File" version="1.855" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-DB_File-1.855-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-DB_File-1.855-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">6d3754e954e347b8733ea7bcfeb33a9276f3b228e187ad504cf1cf7b6656ea3b</sum>
        </package>
        <package name="perl-AutoLoader" version="5.74" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-AutoLoader-5.74-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">6e889dc7c528d6c4db5e73acf674b8ccff24f0930e9a842b539faa756eeb6a81</sum>
        </package>
        <package name="perl-Time-Piece" version="1.3401" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Time-Piece-1.3401-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">71363b32ed2eeb11e06b9912414ee582f042da1957a5210624cdc65c3d054ce2</sum>
        </package>
        <package name="perl-I18N-LangTags" version="0.44" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-I18N-LangTags-0.44-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">714ff624ba3e26af631a36060930939210d9afa0b52e2a4e74614635c9c562f9</sum>
        </package>
        <package name="perl-threads-shared" version="1.61" release="457.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-threads-shared-1.61-457.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-threads-shared-1.61-457.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">754868e4271ca419c6d78e0277d8f3bc08a056bb9dc302cefb2bbce83895671d</sum>
        </package>
        <package name="perl-overload" version="1.31" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-overload-1.31-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">756ef72e7c6828bd345057258a15aea61ccded4c1a83aaeacd03479bb742f38f</sum>
        </package>
        <package name="perl-Devel-Size" version="0.83" release="3.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Devel-Size-0.83-3.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Devel-Size-0.83-3.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">75c534ebd6e8c18903f47c0cf7b67b280a2797f5f808209654ce89983791b321</sum>
        </package>
        <package name="perl-MIME-Base64" version="3.15" release="1001.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-MIME-Base64-3.15-1001.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-MIME-Base64-3.15-1001.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">771a93948be3a3bbc985dd4bb28f433bb49093c00addd2cb45f2fd3451677537</sum>
        </package>
        <package name="perl-Term-ReadLine" version="1.17" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Term-ReadLine-1.17-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">7a6a16e4c26b75f1295a7da856e9f84e5db447e12fd546a7e2ad389543fa4737</sum>
        </package>
        <package name="perl-Symbol" version="1.08" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Symbol-1.08-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">7c4e2205ed9d6ebe8950c1c5169d4a6c36b8a31e69c6e44291a9f7830dcaec25</sum>
        </package>
        <package name="perl-macros" version="5.32.1" release="473.module_el8.10.0+3779+d5938d28" epoch="4" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-macros-5.32.1-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">7d188f035bdcd5b3efbf8c092d41e50f388165ed60bf867a92c85fb53ecc8209</sum>
        </package>
        <package name="perl-fields" version="2.27" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-fields-2.27-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">80c12832d16468bf5807b90b9fe36d3ef21b0026bce85677cbc8bf28229dcbca</sum>
        </package>
        <package name="perl-File-Copy" version="2.34" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-File-Copy-2.34-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">8281f145c996adcc3b3f65463c8a3385aaa76ce6c4f044aacb80c43f8822d987</sum>
        </package>
        <package name="perl-Unicode-Collate" version="1.29" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Unicode-Collate-1.29-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Unicode-Collate-1.29-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">83aa97c32d943ebd9ca2bbd3d28857b95f786824948a5fa0fa7d66ea9d6afd19</sum>
        </package>
        <package name="perl-Dumpvalue" version="2.27" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Dumpvalue-2.27-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">8813f556ebd3e10135a8efdd924b27f3defaf8682c1b3190a1f13add48d18b63</sum>
        </package>
        <package name="perl-Test" version="1.31" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Test-1.31-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">8877794a3c00081e8ffff10955ae641f8a3970cb6cddc5b5e0e9260901a30efa</sum>
        </package>
        <package name="perl-PathTools" version="3.78" release="439.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-PathTools-3.78-439.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-PathTools-3.78-439.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">8a9e1057a64785f1f6fa2f151bff86e36aa5c0f64ff9fd56c05d2b7c515c9fc2</sum>
        </package>
        <package name="perl-Pod-Functions" version="1.13" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Pod-Functions-1.13-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">8b0eb6d27e874b1db55cb45dec62f7e308bcd086f6a2b2f90d7442e84bbd91b6</sum>
        </package>
        <package name="perl-Time" version="1.03" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Time-1.03-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">8e164aa6aee5fae427407d4b1ab47bbea06f273242797416bd66cc7c0ce9120e</sum>
        </package>
        <package name="perl-encoding-warnings" version="0.13" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-encoding-warnings-0.13-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">9132d456554b75f2b28c5baaeaafaf428a83518854ba14a3f8292fb047d61092</sum>
        </package>
        <package name="perl-devel" version="5.32.1" release="473.module_el8.10.0+3779+d5938d28" epoch="4" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-devel-5.32.1-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">913d2a048c972eae344baaa749e85a4451c8cad76721edf40c17f59a2fbafc47</sum>
        </package>
        <package name="perl-Locale-Maketext-Simple" version="0.21" release="473.module_el8.10.0+3779+d5938d28" epoch="1" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Locale-Maketext-Simple-0.21-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">94b87803d11efbd41d50c5ff1f8b788b33195d80b2937dd16a4b24e040f35558</sum>
        </package>
        <package name="perl-File-Compare" version="1.100.600" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-File-Compare-1.100.600-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">96b370d3e5cb67648d0629ec8f653868aba98c58c0bd73ada4620519f415b3ca</sum>
        </package>
        <package name="perl-Compress-Raw-Zlib" version="2.096" release="2.module_el8.10.0+3779+d5938d28" epoch="0" arch="s390x" src="perl-Compress-Raw-Zlib-2.096-2.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Compress-Raw-Zlib-2.096-2.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">97f176f0c7cda057fb35604812498a37bcfdeaf71ebfe294d9eaca10867904d9</sum>
        </package>
        <package name="perl-deprecate" version="0.04" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-deprecate-0.04-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">99634f80778d66f50fd05397fd48162236706db0f975c1d80c3c27116e669c26</sum>
        </package>
        <package name="perl-I18N-Collate" version="1.02" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-I18N-Collate-1.02-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">9d5647442337c33a6f1655e0b33c30fdc7c4f4b5f146b4fccb2ce30ec7a9fb18</sum>
        </package>
        <package name="perl-Pod-Html" version="1.25" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Pod-Html-1.25-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">9dd98254fc13b4a71dd51c3952884ccac00f6895c83cda26ade246436020cc08</sum>
        </package>
        <package name="perl-open" version="1.12" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-open-1.12-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">ab5367948b897b3e7e243a10144729a8944b263633fc15b070c20c83ba8bde51</sum>
        </package>
        <package name="perl-Benchmark" version="1.23" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Benchmark-1.23-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">b0902fae70f3d781481ec22b3788925caec93683fbd4c8fec81bbf687a585a68</sum>
        </package>
        <package name="perl-Net" version="1.02" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Net-1.02-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">b3e933176a691200e770d067a6e3007f6a920be1277b219f0b4c81a861a269d4</sum>
        </package>
        <package name="perl-File-DosGlob" version="1.12" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-File-DosGlob-1.12-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">b4f2d559341482bd727485a298cfcfe8ec723204368aff2c240c30e2ce254d5f</sum>
        </package>
        <package name="perl-Term-Complete" version="1.403" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Term-Complete-1.403-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">bea89fb20f69c89888c7965414f190b39714f1aca7c3abdc370d6394d0ec52fe</sum>
        </package>
        <package name="perl-Memoize" version="1.03" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Memoize-1.03-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">bfc5b4f11007cc905d57383cbaea4fcf73402579df875da785ae4b847f329fc2</sum>
        </package>
        <package name="perl-if" version="0.60.800" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-if-0.60.800-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">c3b40ad8cc8d7a5fd3ebc7652571a49b10b9811e301d62fe80af6847db17fead</sum>
        </package>
        <package name="perl-IPC-Open3" version="1.21" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-IPC-Open3-1.21-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">c4204bca9c2101e7eb45dcdd8150277f3d995c8716160f16aceda4c2a81af21c</sum>
        </package>
        <package name="perl-Scalar-List-Utils" version="1.55" release="457.module_el8.6.0+3181+91434291" epoch="4" arch="s390x" src="perl-Scalar-List-Utils-1.55-457.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Scalar-List-Utils-1.55-457.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">c6c92b3787b32e6fd71c6e8a74bd56b0438e53e8cc9619293890663e1ebba5b9</sum>
        </package>
        <package name="perl-overloading" version="0.02" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-overloading-0.02-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">c911edbb3e6686520ce584137dcb784062266993bc2d2356ac5c3aa53898aa4b</sum>
        </package>
        <package name="perl-threads" version="2.25" release="457.module_el8.6.0+3181+91434291" epoch="1" arch="s390x" src="perl-threads-2.25-457.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-threads-2.25-457.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">caab48b96be64b8502fedaf6ec636f6bcc011d94eb0c3e8b394af4ec0b586698</sum>
        </package>
        <package name="perl-Compress-Raw-Bzip2" version="2.096" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Compress-Raw-Bzip2-2.096-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Compress-Raw-Bzip2-2.096-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">ce463984e8d2dafef0907beaa97968fa715a908cd45dd640780443c01a11b046</sum>
        </package>
        <package name="perl-Hash-Util" version="0.23" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Hash-Util-0.23-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">cf123197d1777c276a237e868b94901e45a2e3061028b134c4f5b43bbacb4b45</sum>
        </package>
        <package name="perl-Devel-Peek" version="1.28" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Devel-Peek-1.28-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">d01f6abe9f219e218b2b8910a956dcfc20b414da962c483421f4fbf6ee86e7d3</sum>
        </package>
        <package name="perl-autouse" version="1.11" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-autouse-1.11-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">d115510d6cf90977da1cba1ed8b33545768cdc90db5ff9dc37b016c9261ca987</sum>
        </package>
        <package name="perl-filetest" version="1.03" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-filetest-1.03-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">d5fbeb6cc0a5a6a119e47f110b06ab326e8ec2eda07ed071701094fad139caea</sum>
        </package>
        <package name="perl-User-pwent" version="1.03" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-User-pwent-1.03-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">d73c8672956fb524888bbd9146764dd36295ec72b7530c88e50a57e924b30e74</sum>
        </package>
        <package name="perl-Attribute-Handlers" version="1.01" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Attribute-Handlers-1.01-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">d7f10950c4ec4fdc00b118cb280fdc2d221ee09cf4d14a53d45e5140837e46da</sum>
        </package>
        <package name="perl-FindBin" version="1.51" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-FindBin-1.51-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">d8a55447041fd7909a89873451145a3bc126eb8528596e908ebe9a53ba52e9ea</sum>
        </package>
        <package name="perl-libs" version="5.32.1" release="473.module_el8.10.0+3779+d5938d28" epoch="4" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-libs-5.32.1-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">da5c440a388e52854b90553639fd600159fc4902921c1adeb2d33b14938c145f</sum>
        </package>
        <package name="perl-utils" version="5.32.1" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-utils-5.32.1-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">dafbc1137950c0dccd05fc3e33f94a70b587f72fd7b13ef16ce93115298272fb</sum>
        </package>
        <package name="perl-less" version="0.03" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-less-0.03-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">db87ae73d1f1c0c04a4d3ae2279ea9aac4c1570c164ad4aaa578998f39ce35bf</sum>
        </package>
        <package name="perl-vmsish" version="1.04" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-vmsish-1.04-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">de5fbc8a1e1c5fdce355eabc4b926fe746871495ccc3141c6d0df0312f84f9a8</sum>
        </package>
        <package name="perl-debugger" version="1.56" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-debugger-1.56-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">dfc6e42a462d1c4fcbf5be3309b2baf293b15b6ce5079ecf6d5dd063bd00b869</sum>
        </package>
        <package name="perl-Safe" version="2.41" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Safe-2.41-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">e1dfdc8fc502a971c2ef90bae1861978b199497bdcc4cb34a3a77769d82cc26c</sum>
        </package>
        <package name="perl-SelectSaver" version="1.02" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-SelectSaver-1.02-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">e2ac8e064688a1488d50df0f03c89300ff705e5aeb7a76289e6b4888b218cd1b</sum>
        </package>
        <package name="perl-Filter" version="1.60" release="1.module_el8.6.0+3181+91434291" epoch="2" arch="s390x" src="perl-Filter-1.60-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Filter-1.60-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">e3d0da13159278c7de0407ea3901dcbb6d6c91bec1144f9f58b582e04e2a62fb</sum>
        </package>
        <package name="perl-ph" version="5.32.1" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-ph-5.32.1-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">e5e7ea971906c88e8ab9d0a8f3a412defc52d63faccb582f89b481825f013142</sum>
        </package>
        <package name="perl-GDBM_File" version="1.18" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-GDBM_File-1.18-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">e85e88b26a11e8e1287024e8a94de66816eeebcd5991a4684fd97289f74efa3e</sum>
        </package>
        <package name="perl-English" version="1.11" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-English-1.11-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">e99a5c04355e3f4e00a26e75765cc1924f517ad6dcde9422705f1e21c75f52d5</sum>
        </package>
        <package name="perl-libnetcfg" version="5.32.1" release="473.module_el8.10.0+3779+d5938d28" epoch="4" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-libnetcfg-5.32.1-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">ebb765468fbd47b90561bb6ee76e7297ff9ec2e9179561ad012302335ff6304d</sum>
        </package>
        <package name="perl-Digest-SHA" version="6.02" release="2.module_el8.6.0+3181+91434291" epoch="1" arch="s390x" src="perl-Digest-SHA-6.02-2.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Digest-SHA-6.02-2.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">ed84ef9abe04145a64d2994030d066ce6669bf548a106bee087caaf6c64b1e42</sum>
        </package>
        <package name="perl-ExtUtils-Constant" version="0.25" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-ExtUtils-Constant-0.25-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">ef079c762ddbc496f3151dc605958e60fa306ebaae10c7d0f0c0923d48c3900f</sum>
        </package>
        <package name="perl-Unicode-UCD" version="0.75" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Unicode-UCD-0.75-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">ef4b8744fe895090365bae266803b6fba2d921a4e752789ff00b295132c33b98</sum>
        </package>
        <package name="perl-Params-Util" version="1.102" release="2.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Params-Util-1.102-2.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Params-Util-1.102-2.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">f04d7989fc85d22ae36bd4c70dae2c64a2529074fd2a3bd4123b542d6b0b24f8</sum>
        </package>
        <package name="perl-Unicode-Normalize" version="1.27" release="458.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Unicode-Normalize-1.27-458.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Unicode-Normalize-1.27-458.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">f3a57fafe97ad72863248270a54c9a6ce1746188ccd854c1bae904b7a90c5be4</sum>
        </package>
        <package name="perl-Tie" version="4.6" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Tie-4.6-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">f431f3a3e1186e26130359fc5232c18eaa8e7da42a918149877af4ad558621c2</sum>
        </package>
        <package name="perl-NEXT" version="0.67" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-NEXT-0.67-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">f80e337032645ab022a7d036873491bddce71a444c76e1e8b4a303cbd28e5a1a</sum>
        </package>
        <package name="perl-FileHandle" version="2.03" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-FileHandle-2.03-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">fc6073443424ca61338a6b6f63070174613f7145f4f7ff89cd2f8043909c20d0</sum>
        </package>
        <package name="perl-SelfLoader" version="1.26" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="noarch" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-SelfLoader-1.26-473.module_el8.10.0+3779+d5938d28.noarch.rpm</filename>
          <sum type="sha256">fcf256ef7ac823c6b21a6948edda32e197c16edb359fe733d9e470eb45b7e6f3</sum>
        </package>
        <package name="perl-Opcode" version="1.48" release="473.module_el8.10.0+3779+d5938d28" epoch="0" arch="s390x" src="perl-5.32.1-473.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Opcode-1.48-473.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">fcffa59e990e4e3c78a47ed20d0a78cb8a9e0794762444838763fed539c846e2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3166</id>
    <title>Moderate: openssh security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:42"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssh security update</summary>
    <description>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

* openssh: scp allows command injection when using backtick characters in the destination argument (CVE-2020-15778)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3166" id="RHSA-2024:3166" type="rhsa" title="RHSA-2024:3166"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-15778" id="CVE-2020-15778" type="cve" title="CVE-2020-15778"/>
      <reference href="https://bugzilla.redhat.com/1860487" id="1860487" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3166.html" id="ALSA-2024:3166" type="self" title="ALSA-2024:3166"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="openssh-askpass" version="8.0p1" release="24.el8" epoch="0" arch="s390x" src="openssh-8.0p1-24.el8.src.rpm">
          <filename>openssh-askpass-8.0p1-24.el8.s390x.rpm</filename>
          <sum type="sha256">25bfbecfecad0ea7f1c1eb0d2a09bc85f482a2fb78ef8f1b4c071d43f32b7794</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3233</id>
    <title>Low: libssh security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:43"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libssh security update</summary>
    <description>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.

Security Fix(es):

* libssh: ProxyCommand/ProxyJump features allow injection of malicious code through hostname (CVE-2023-6004)
* libssh: Missing checks for return values for digests (CVE-2023-6918)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3233" id="RHSA-2024:3233" type="rhsa" title="RHSA-2024:3233"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6004" id="CVE-2023-6004" type="cve" title="CVE-2023-6004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6918" id="CVE-2023-6918" type="cve" title="CVE-2023-6918"/>
      <reference href="https://bugzilla.redhat.com/2251110" id="2251110" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254997" id="2254997" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3233.html" id="ALSA-2024:3233" type="self" title="ALSA-2024:3233"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="libssh-devel" version="0.9.6" release="14.el8" epoch="0" arch="s390x" src="libssh-0.9.6-14.el8.src.rpm">
          <filename>libssh-devel-0.9.6-14.el8.s390x.rpm</filename>
          <sum type="sha256">79ec804d6b502017c023cfdb560f09ba2a1ed4c0a426cd73d853c7fba33d6f33</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3254</id>
    <title>Important: container-tools:rhel8 security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:49:44"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>container-tools:rhel8 security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* buildah: full container escape at build time (CVE-2024-1753)
* golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)
* golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)
* golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON (CVE-2024-24786)
* jose-go: improper handling of highly compressed data (CVE-2024-28180)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3254" id="RHSA-2024:3254" type="rhsa" title="RHSA-2024:3254"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2880" id="CVE-2022-2880" type="cve" title="CVE-2022-2880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41715" id="CVE-2022-41715" type="cve" title="CVE-2022-41715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1753" id="CVE-2024-1753" type="cve" title="CVE-2024-1753"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24786" id="CVE-2024-24786" type="cve" title="CVE-2024-24786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28180" id="CVE-2024-28180" type="cve" title="CVE-2024-28180"/>
      <reference href="https://bugzilla.redhat.com/2132868" id="2132868" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2132872" id="2132872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265513" id="2265513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268046" id="2268046" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268854" id="2268854" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3254.html" id="ALSA-2024:3254" type="self" title="ALSA-2024:3254"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="container-tools" stream="rhel8" version="8100020240524120519" context="20125149" arch="s390x"/>
        <package name="toolbox" version="0.0.99.5" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>toolbox-0.0.99.5-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">02a2d3af8462551cd77436769f93847657c11f45fa572a63f5d0b0686e6a25d0</sum>
        </package>
        <package name="podman" version="4.9.4" release="1.module_el8.10.0+3845+87b84552" epoch="4" arch="s390x" src="podman-4.9.4-1.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>podman-4.9.4-1.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">0da6beefc405f2da6651d67e801f616b843b6cf173c431be72a848b3a07e55df</sum>
        </package>
        <package name="udica" version="0.2.6" release="21.module_el8.10.0+3845+87b84552" epoch="0" arch="noarch" src="udica-0.2.6-21.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>udica-0.2.6-21.module_el8.10.0+3845+87b84552.noarch.rpm</filename>
          <sum type="sha256">15449ff2f1f134f6485c0baba81ca0a13a81853a194bafa7f9ca3aff014c8c3c</sum>
        </package>
        <package name="slirp4netns" version="1.2.3" release="1.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="slirp4netns-1.2.3-1.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>slirp4netns-1.2.3-1.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">17c756f27a45f68da3f3737b767644dac88ca952f5554417c30e6bf9b8f32a55</sum>
        </package>
        <package name="crun" version="1.14.3" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="crun-1.14.3-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>crun-1.14.3-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">1803f41cb3e0828fe770ce7de14a940b9fad458fd84f420baab724674e2041e7</sum>
        </package>
        <package name="criu-libs" version="3.18" release="5.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>criu-libs-3.18-5.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">1962469cfa08c792359c82d44b5410abab23b62f897edccd5283944edabe867a</sum>
        </package>
        <package name="podman-plugins" version="4.9.4" release="1.module_el8.10.0+3845+87b84552" epoch="4" arch="s390x" src="podman-4.9.4-1.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>podman-plugins-4.9.4-1.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">274f1c4a40ecbb9500972ea96019dbd8b5af01c91c8a7d36b4d395e9e56ff352</sum>
        </package>
        <package name="buildah-tests" version="1.33.7" release="1.module_el8.10.0+3845+87b84552" epoch="2" arch="s390x" src="buildah-1.33.7-1.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>buildah-tests-1.33.7-1.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">28537231cc9465e0c91ba0424e6a0dfc6641d76ce392cd528fe81f12f06e33af</sum>
        </package>
        <package name="skopeo-tests" version="1.14.3" release="2.module_el8.10.0+3845+87b84552" epoch="2" arch="s390x" src="skopeo-1.14.3-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>skopeo-tests-1.14.3-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">2d63c192ce79961433063c7f2bca7b4a475851fd37d36467898c3aedb9e281b3</sum>
        </package>
        <package name="criu-devel" version="3.18" release="5.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>criu-devel-3.18-5.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">3a591916acb81e5301907df3cd27d22c9e4c623354f8cb1290e66ef79f6a2a29</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.10" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">4037e2bac5bce782402772634fc768eefb65e7293a9f73aaa10c38bde9918196</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="1.module_el8.10.0+3845+87b84552" epoch="4" arch="s390x" src="podman-4.9.4-1.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>podman-tests-4.9.4-1.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">486893825e89dace010e094a1bd5258ab419410480e9d7ef5444a5d7653cbb49</sum>
        </package>
        <package name="criu" version="3.18" release="5.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>criu-3.18-5.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">521cc15c52b75efd0acbdbb9617926fa3e87c0fa7cc0211ff1d39577249f0d09</sum>
        </package>
        <package name="cockpit-podman" version="84.1" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="noarch" src="cockpit-podman-84.1-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>cockpit-podman-84.1-1.module_el8.10.0+3792+03eaed9c.noarch.rpm</filename>
          <sum type="sha256">634ab1da73f7869c87e0fc76ea1c9017b29f51694bf90a392d913e35cea1bdbc</sum>
        </package>
        <package name="aardvark-dns" version="1.10.0" release="1.module_el8.10.0+3792+03eaed9c" epoch="2" arch="s390x" src="aardvark-dns-1.10.0-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>aardvark-dns-1.10.0-1.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">642e1fffb6a1933e60a85fda5773d503a43b849ec24dfe457f1f32d242a03dca</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.5" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>toolbox-tests-0.0.99.5-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">6f3afa8d1e85355c8b298eb28c01fa395e12e6268471b962b0987703f32210e9</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>libslirp-4.4.0-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">7f6ee088719dda6b4abc4b0005f17b1a478bc5a1f5b85602af95ab2379a13ded</sum>
        </package>
        <package name="fuse-overlayfs" version="1.13" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="s390x" src="fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">8118067655696462cee9dfc553f57e4501b089590d837bc88091716914c8d3f5</sum>
        </package>
        <package name="python3-podman" version="4.9.0" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="noarch" src="python-podman-4.9.0-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>python3-podman-4.9.0-1.module_el8.10.0+3792+03eaed9c.noarch.rpm</filename>
          <sum type="sha256">884af78bcfd62f80252ad9921c337b7ab39471e00c24fcedb2f30f2a26ede8dc</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="1.module_el8.10.0+3845+87b84552" epoch="4" arch="s390x" src="podman-4.9.4-1.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>podman-remote-4.9.4-1.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">9185ceb48981cacef32018cade0ab65f2751e84f0e76d42fbb4464c88d79d6b0</sum>
        </package>
        <package name="python3-criu" version="3.18" release="5.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>python3-criu-3.18-5.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">946d2997b5ac8d4f7263b9f8ff4aa1b5270289e40c53a9750463cd04a3be44d7</sum>
        </package>
        <package name="container-selinux" version="2.229.0" release="2.module_el8.10.0+3792+03eaed9c" epoch="2" arch="noarch" src="container-selinux-2.229.0-2.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>container-selinux-2.229.0-2.module_el8.10.0+3792+03eaed9c.noarch.rpm</filename>
          <sum type="sha256">990d440d85672170bcff02c319bdb5e6a915c3f8955df7f9667095a0142c1641</sum>
        </package>
        <package name="podman-gvproxy" version="4.9.4" release="1.module_el8.10.0+3845+87b84552" epoch="4" arch="s390x" src="podman-4.9.4-1.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>podman-gvproxy-4.9.4-1.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">a74f34c45c9e19c33ca83485046035af940465ec9ec480b0697aa944b1ed31fd</sum>
        </package>
        <package name="netavark" version="1.10.3" release="1.module_el8.10.0+3845+87b84552" epoch="2" arch="s390x" src="netavark-1.10.3-1.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>netavark-1.10.3-1.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">ab5099e416d5d019c5fdc0cb6dee0d0ec2b08f4adc918665112f240ec2f6f43f</sum>
        </package>
        <package name="crit" version="3.18" release="5.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>crit-3.18-5.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">c445efaf7e37784a9794bcbcc7b245eb123b2a8973b3c7305e9aa8de8569565d</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="1.module_el8.10.0+3845+87b84552" epoch="4" arch="noarch" src="podman-4.9.4-1.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>podman-docker-4.9.4-1.module_el8.10.0+3845+87b84552.noarch.rpm</filename>
          <sum type="sha256">cc964009d50a0362e754192b12a93432302c10e4592c51cf2a4328a611f9174d</sum>
        </package>
        <package name="buildah" version="1.33.7" release="1.module_el8.10.0+3845+87b84552" epoch="2" arch="s390x" src="buildah-1.33.7-1.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>buildah-1.33.7-1.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">cde8837a0dec8a5518fda00c98d5687c4d4f858549422d0fe52a64d33fc0b7d1</sum>
        </package>
        <package name="containers-common" version="1" release="81.module_el8.10.0+3792+03eaed9c" epoch="2" arch="s390x" src="containers-common-1-81.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>containers-common-1-81.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">d9ceae85eb574ba7ffa5dc15b9bb628fcbf7c33aedf61bb1ac9ef7fd1b8d8758</sum>
        </package>
        <package name="skopeo" version="1.14.3" release="2.module_el8.10.0+3845+87b84552" epoch="2" arch="s390x" src="skopeo-1.14.3-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>skopeo-1.14.3-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">dcaa816019867ade9fb51a859b8ab25935818f05c5f5826280968fb8805f894e</sum>
        </package>
        <package name="runc" version="1.1.12" release="1.module_el8.10.0+3845+87b84552" epoch="1" arch="s390x" src="runc-1.1.12-1.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>runc-1.1.12-1.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">ddbb05166787a8f87a24906a7529077930c03d7c42716152f50607d57f9792c5</sum>
        </package>
        <package name="containernetworking-plugins" version="1.4.0" release="2.module_el8.10.0+3792+03eaed9c" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-2.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>containernetworking-plugins-1.4.0-2.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">e7026bcfe3e311453e06eb69681c4ea919d959dfffb5bd8603615429e7705b47</sum>
        </package>
        <package name="conmon" version="2.1.10" release="1.module_el8.10.0+3845+87b84552" epoch="3" arch="s390x" src="conmon-2.1.10-1.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>conmon-2.1.10-1.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">f8f7e631b6103852487fcb99e1c6baaf8c5e60e3654c2f5a4bddc238ed708563</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>libslirp-devel-4.4.0-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">fb2312c4d6bceee27347dfd077d52eb5f97f4b0d97996ea47e00132d679ee0de</sum>
        </package>
        <package name="podman-catatonit" version="4.9.4" release="1.module_el8.10.0+3845+87b84552" epoch="4" arch="s390x" src="podman-4.9.4-1.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>podman-catatonit-4.9.4-1.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">fe534622c471448e767353d9789036db4e87203b1ed4efdeb29fcb7329c06a48</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3258</id>
    <title>Moderate: xorg-x11-server security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:44:29"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080)
* xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081)
* xorg-x11-server: Use-after-free in ProcRenderAddGlyphs (CVE-2024-31083)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3258" id="RHSA-2024:3258" type="rhsa" title="RHSA-2024:3258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31080" id="CVE-2024-31080" type="cve" title="CVE-2024-31080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31081" id="CVE-2024-31081" type="cve" title="CVE-2024-31081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31083" id="CVE-2024-31083" type="cve" title="CVE-2024-31083"/>
      <reference href="https://bugzilla.redhat.com/2271997" id="2271997" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271998" id="2271998" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272000" id="2272000" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3258.html" id="ALSA-2024:3258" type="self" title="ALSA-2024:3258"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="xorg-x11-server-common" version="1.20.11" release="23.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-23.el8_10.src.rpm">
          <filename>xorg-x11-server-common-1.20.11-23.el8_10.s390x.rpm</filename>
          <sum type="sha256">0901e55fff379e8a9239e1220d9e7c4a4fd68a28d3de4abcecf7cf2405e8d044</sum>
        </package>
        <package name="xorg-x11-server-Xorg" version="1.20.11" release="23.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-23.el8_10.src.rpm">
          <filename>xorg-x11-server-Xorg-1.20.11-23.el8_10.s390x.rpm</filename>
          <sum type="sha256">681b260a50855a96a53bd33919c4e66bcd18adffe9b93ae8e792deed8c5c1b42</sum>
        </package>
        <package name="xorg-x11-server-Xnest" version="1.20.11" release="23.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-23.el8_10.src.rpm">
          <filename>xorg-x11-server-Xnest-1.20.11-23.el8_10.s390x.rpm</filename>
          <sum type="sha256">709cbd3242e7b0d773f115556e75f614e434a6f21cb21a51a9f7c0499793d64e</sum>
        </package>
        <package name="xorg-x11-server-Xdmx" version="1.20.11" release="23.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-23.el8_10.src.rpm">
          <filename>xorg-x11-server-Xdmx-1.20.11-23.el8_10.s390x.rpm</filename>
          <sum type="sha256">9f4078f44d63bad13c95e0e59d34b2b8c9c9ab243e98826b615a2f7736459759</sum>
        </package>
        <package name="xorg-x11-server-Xvfb" version="1.20.11" release="23.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-23.el8_10.src.rpm">
          <filename>xorg-x11-server-Xvfb-1.20.11-23.el8_10.s390x.rpm</filename>
          <sum type="sha256">d699bd5d985fbfa3ee9280d54bfe7b5577b3dee847d09b3e8507afdca47b8fd9</sum>
        </package>
        <package name="xorg-x11-server-Xephyr" version="1.20.11" release="23.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-23.el8_10.src.rpm">
          <filename>xorg-x11-server-Xephyr-1.20.11-23.el8_10.s390x.rpm</filename>
          <sum type="sha256">d9075ca1e5c9d7a8c88e146277f2b2323b523f2579f0459a71e3929fe7f6d457</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3259</id>
    <title>Important: go-toolset:rhel8 security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:48:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>go-toolset:rhel8 security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. 

Security Fix(es):

* golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288)
* golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect (CVE-2023-45289)
* golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)
* golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)
* golang: net/mail: comments in display names are incorrectly handled (CVE-2024-24784)
* golang: html/template: errors returned from MarshalJSON methods may break template escaping (CVE-2024-24785)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3259" id="RHSA-2024:3259" type="rhsa" title="RHSA-2024:3259"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45288" id="CVE-2023-45288" type="cve" title="CVE-2023-45288"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45289" id="CVE-2023-45289" type="cve" title="CVE-2023-45289"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45290" id="CVE-2023-45290" type="cve" title="CVE-2023-45290"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24783" id="CVE-2024-24783" type="cve" title="CVE-2024-24783"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24784" id="CVE-2024-24784" type="cve" title="CVE-2024-24784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24785" id="CVE-2024-24785" type="cve" title="CVE-2024-24785"/>
      <reference href="https://bugzilla.redhat.com/2268017" id="2268017" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268018" id="2268018" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268019" id="2268019" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268021" id="2268021" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268022" id="2268022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268273" id="2268273" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3259.html" id="ALSA-2024:3259" type="self" title="ALSA-2024:3259"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <module name="go-toolset" stream="rhel8" version="8100020240523070440" context="9edba152" arch="s390x"/>
        <package name="golang-bin" version="1.21.9" release="1.module_el8.10.0+3840+edaca3c3" epoch="0" arch="s390x" src="golang-1.21.9-1.module_el8.10.0+3840+edaca3c3.src.rpm">
          <filename>golang-bin-1.21.9-1.module_el8.10.0+3840+edaca3c3.s390x.rpm</filename>
          <sum type="sha256">0d3554ed9b831b7b237eb992d4c5f26d1af79c800db71be93cbb3b7dc73f05af</sum>
        </package>
        <package name="golang-src" version="1.21.9" release="1.module_el8.10.0+3840+edaca3c3" epoch="0" arch="noarch" src="golang-1.21.9-1.module_el8.10.0+3840+edaca3c3.src.rpm">
          <filename>golang-src-1.21.9-1.module_el8.10.0+3840+edaca3c3.noarch.rpm</filename>
          <sum type="sha256">1183bd448df5fc8fcef62d3e62f313d0a24a3768877e7ebd1bf9cc0ef7638e9d</sum>
        </package>
        <package name="golang-tests" version="1.21.9" release="1.module_el8.10.0+3840+edaca3c3" epoch="0" arch="noarch" src="golang-1.21.9-1.module_el8.10.0+3840+edaca3c3.src.rpm">
          <filename>golang-tests-1.21.9-1.module_el8.10.0+3840+edaca3c3.noarch.rpm</filename>
          <sum type="sha256">3dbbaa2a29cfc1a9f525bca8b64d9787e59ffc35bd2e553d7b52211f05a52afc</sum>
        </package>
        <package name="golang-misc" version="1.21.9" release="1.module_el8.10.0+3840+edaca3c3" epoch="0" arch="noarch" src="golang-1.21.9-1.module_el8.10.0+3840+edaca3c3.src.rpm">
          <filename>golang-misc-1.21.9-1.module_el8.10.0+3840+edaca3c3.noarch.rpm</filename>
          <sum type="sha256">650d48d2478dba0f96efed249d2f9adb4e4df6b926bf8f49f9c4e27d6b7dca17</sum>
        </package>
        <package name="golang-docs" version="1.21.9" release="1.module_el8.10.0+3840+edaca3c3" epoch="0" arch="noarch" src="golang-1.21.9-1.module_el8.10.0+3840+edaca3c3.src.rpm">
          <filename>golang-docs-1.21.9-1.module_el8.10.0+3840+edaca3c3.noarch.rpm</filename>
          <sum type="sha256">66e92a16c0a52499ab311c4effcb115c331974f149c9598ce40da437d0a7b4df</sum>
        </package>
        <package name="golang" version="1.21.9" release="1.module_el8.10.0+3840+edaca3c3" epoch="0" arch="s390x" src="golang-1.21.9-1.module_el8.10.0+3840+edaca3c3.src.rpm">
          <filename>golang-1.21.9-1.module_el8.10.0+3840+edaca3c3.s390x.rpm</filename>
          <sum type="sha256">834f8bfaba1181f90bae00073b574248073c994db830b50075c36c3f772c59de</sum>
        </package>
        <package name="go-toolset" version="1.21.9" release="1.module_el8.10.0+3840+edaca3c3" epoch="0" arch="s390x" src="go-toolset-1.21.9-1.module_el8.10.0+3840+edaca3c3.src.rpm">
          <filename>go-toolset-1.21.9-1.module_el8.10.0+3840+edaca3c3.s390x.rpm</filename>
          <sum type="sha256">abffe878e08dd822c52beece65706b0c740be26c3c0e2d1b23d3446eda9c143a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3261</id>
    <title>Important: tigervnc security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:47:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

Security Fix(es):

* xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080)
* xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081)
* xorg-x11-server: Use-after-free in ProcRenderAddGlyphs (CVE-2024-31083)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3261" id="RHSA-2024:3261" type="rhsa" title="RHSA-2024:3261"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31080" id="CVE-2024-31080" type="cve" title="CVE-2024-31080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31081" id="CVE-2024-31081" type="cve" title="CVE-2024-31081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31083" id="CVE-2024-31083" type="cve" title="CVE-2024-31083"/>
      <reference href="https://bugzilla.redhat.com/2271997" id="2271997" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271998" id="2271998" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272000" id="2272000" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3261.html" id="ALSA-2024:3261" type="self" title="ALSA-2024:3261"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="tigervnc-server-module" version="1.13.1" release="10.el8_10" epoch="0" arch="s390x" src="tigervnc-1.13.1-10.el8_10.src.rpm">
          <filename>tigervnc-server-module-1.13.1-10.el8_10.s390x.rpm</filename>
          <sum type="sha256">235b8daf2e00c13434f749d47be9f56f1aca2bf41d7b41876a73b40b535bbf1d</sum>
        </package>
        <package name="tigervnc-icons" version="1.13.1" release="10.el8_10" epoch="0" arch="noarch" src="tigervnc-1.13.1-10.el8_10.src.rpm">
          <filename>tigervnc-icons-1.13.1-10.el8_10.noarch.rpm</filename>
          <sum type="sha256">29bab73157ea600472fec725aeef74127d9a8f11bd48357a91aadd405f6ec61f</sum>
        </package>
        <package name="tigervnc-selinux" version="1.13.1" release="10.el8_10" epoch="0" arch="noarch" src="tigervnc-1.13.1-10.el8_10.src.rpm">
          <filename>tigervnc-selinux-1.13.1-10.el8_10.noarch.rpm</filename>
          <sum type="sha256">409616efd6fe42f3d743bd5fadfc160eac43167c7856f6fbe1349babea3d14c9</sum>
        </package>
        <package name="tigervnc-license" version="1.13.1" release="10.el8_10" epoch="0" arch="noarch" src="tigervnc-1.13.1-10.el8_10.src.rpm">
          <filename>tigervnc-license-1.13.1-10.el8_10.noarch.rpm</filename>
          <sum type="sha256">598b4cfdcd915c8fd4f4ccf80e58ba708651b0e4401d7e2e6f3c774e45dc4e3c</sum>
        </package>
        <package name="tigervnc-server-minimal" version="1.13.1" release="10.el8_10" epoch="0" arch="s390x" src="tigervnc-1.13.1-10.el8_10.src.rpm">
          <filename>tigervnc-server-minimal-1.13.1-10.el8_10.s390x.rpm</filename>
          <sum type="sha256">911d84aa7bf68328c269be1c34ec3cbac981400f7d676c4960352d5e4c67b103</sum>
        </package>
        <package name="tigervnc" version="1.13.1" release="10.el8_10" epoch="0" arch="s390x" src="tigervnc-1.13.1-10.el8_10.src.rpm">
          <filename>tigervnc-1.13.1-10.el8_10.s390x.rpm</filename>
          <sum type="sha256">b78f8349947e1273fab5109170b2ee64485bde442311f3f9677ee935f78ea584</sum>
        </package>
        <package name="tigervnc-server" version="1.13.1" release="10.el8_10" epoch="0" arch="s390x" src="tigervnc-1.13.1-10.el8_10.src.rpm">
          <filename>tigervnc-server-1.13.1-10.el8_10.s390x.rpm</filename>
          <sum type="sha256">ba6dcbedc981701582d5ce8978513c5061846eea32485ded37e910b021047829</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3264</id>
    <title>Important: pcp security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:50:43"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pcp security update</summary>
    <description>Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems.

Security Fix(es):

* pcp: exposure of the redis server backend allows remote command execution via pmproxy (CVE-2024-3019)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3264" id="RHSA-2024:3264" type="rhsa" title="RHSA-2024:3264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3019" id="CVE-2024-3019" type="cve" title="CVE-2024-3019"/>
      <reference href="https://bugzilla.redhat.com/2271898" id="2271898" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3264.html" id="ALSA-2024:3264" type="self" title="ALSA-2024:3264"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="pcp-libs" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-libs-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">034d62b2d45d3e8958938ec5fac0b1624a1e354ecf9d96598b6bc766867763eb</sum>
        </package>
        <package name="pcp-pmda-gpfs" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-gpfs-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">07662dfd16e174e3045b71b79b73f4845c60dc4e289e335f991087cad27ad1aa</sum>
        </package>
        <package name="pcp-pmda-zimbra" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-zimbra-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">0a0d14ed406461944d7ac15f060c91402fc87055dc123f653113d925ec7cd595</sum>
        </package>
        <package name="pcp-pmda-netfilter" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-netfilter-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">0f14f4141df6cad70cc128e7d0159bafe1d90283651fdc6f54e3da5e3dbd6f89</sum>
        </package>
        <package name="pcp-pmda-cifs" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-cifs-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">12d895f8a46752b9ad73001c0ba565fc74cc8e5b839480be1566361db4b2e3e9</sum>
        </package>
        <package name="pcp-export-pcp2zabbix" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-export-pcp2zabbix-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">1a9764e84cc483ef7676c3319e228ba61c44ee186d8de654797286f2ce7b0723</sum>
        </package>
        <package name="pcp-gui" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-gui-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">1c06c49a0524dd227f241cedd95707474155a8af49eee1f13a48ecd119ac80ad</sum>
        </package>
        <package name="pcp-pmda-lustrecomm" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-lustrecomm-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">1c5bcef6d813d2d110f7f10cc82eee2a3d89cf4ecbffcceda5b871d40a4bd9ea</sum>
        </package>
        <package name="pcp-pmda-unbound" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-unbound-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">1d0b7b9aef2b78a0992e74b058d4cf595f6ac9e4c7a1291d9be0e30c2c0c0500</sum>
        </package>
        <package name="pcp-pmda-activemq" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-activemq-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">237682318723685c7e75336565fc1126cb9bbe6638569fda551ede893447af36</sum>
        </package>
        <package name="pcp-pmda-libvirt" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-libvirt-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">25fbadc491557904ff20d55e01f533cd237b1ff23d12028a1fdbdd48020e554b</sum>
        </package>
        <package name="python3-pcp" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>python3-pcp-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">277f415c4a9477a84479f9a9837e9bbc55aa7fa74d0f39e086fc1457aeed73e2</sum>
        </package>
        <package name="pcp-pmda-denki" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-denki-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">2c3612fbab65ea4cb40a74884ad391ee919cacc3aa5e169811ac460c23fe4f72</sum>
        </package>
        <package name="pcp-pmda-haproxy" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-haproxy-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">2d89924db2f4b8892eaf7e76d4263cf6264752f5b6301998d6b4ed2dda5c60a9</sum>
        </package>
        <package name="pcp-pmda-rsyslog" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-rsyslog-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">2e85854120340873535967e20d3ccfe931889ff87ba9436fdb38d6b70e9ca00e</sum>
        </package>
        <package name="perl-PCP-MMV" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>perl-PCP-MMV-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">31b6d03284dbc8799e20c6162e4524afd19af5d5f46c360c522622792c290ab3</sum>
        </package>
        <package name="pcp-pmda-slurm" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-slurm-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">34a910329df08c9307c056066a486e1514dfa1f62af32f29e9cecade78fe091c</sum>
        </package>
        <package name="pcp-pmda-statsd" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-statsd-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">352e1cabb48f51d546f29fbfd789b4f19f4510a494ec9a85525115e9e5ff97c1</sum>
        </package>
        <package name="pcp-pmda-postgresql" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-postgresql-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">3bd776a5e5a6aca19e833c453a283acef4d248a1bbb33d4e6c327229ebeaefce</sum>
        </package>
        <package name="pcp-pmda-bind2" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-bind2-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">3dfa049e34f1f18ac635af5f702dc199bcc8b06c34d8eda3c80948df3f33f3c2</sum>
        </package>
        <package name="pcp-doc" version="5.3.7" release="20.el8_10" epoch="0" arch="noarch" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-doc-5.3.7-20.el8_10.noarch.rpm</filename>
          <sum type="sha256">3e8953eab88ffba51a094f2f8cf369046b1d085391d22501126b6a71a357e451</sum>
        </package>
        <package name="pcp-pmda-redis" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-redis-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">42f8d2583e9145b0773423f189e508c3eb8ae22c9ca712c4889cc9e421a561f3</sum>
        </package>
        <package name="pcp-export-pcp2elasticsearch" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-export-pcp2elasticsearch-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">4d05401662b7434a7a5901b816eb02016dfe37adb02a6bfcb06e9a33edd0ec1a</sum>
        </package>
        <package name="pcp-conf" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-conf-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">522ed364b30f5543a7ad17a7cdfae96ed10733656e7c35fd5e766201a769f21e</sum>
        </package>
        <package name="pcp-pmda-bpftrace" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-bpftrace-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">527db94bccfe814dbbfd4ab6f8339361c6e515ec35a3609d120fd49561fa4a2e</sum>
        </package>
        <package name="pcp-pmda-openmetrics" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-openmetrics-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">5287b51200bc46d515d5dfd9fd03a077fb5326a10c567f9f1ba400ec53a793b5</sum>
        </package>
        <package name="pcp-pmda-samba" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-samba-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">5325d7b588ab3857342113731c49159dafcc12da843933945f3924bc68be4a8b</sum>
        </package>
        <package name="pcp-pmda-sendmail" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-sendmail-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">53eb1443213ec435b66a701cc4c0f17ac079f79baefc6de81106471e1e38ca01</sum>
        </package>
        <package name="pcp-pmda-json" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-json-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">567eced16c46448bbb9f6bfc16b66a4e3a1a135a0531345ebad8cfa47b9c05d7</sum>
        </package>
        <package name="perl-PCP-LogImport" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>perl-PCP-LogImport-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">58148b6cf5885e3ed3a30b48a948f4d94d1c59f12a0963000a7fd906b24083f8</sum>
        </package>
        <package name="pcp-export-pcp2influxdb" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-export-pcp2influxdb-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">5a09c63b60d86638c14e1cc459d008bc6deafe21c5401767d22371a1d1f37115</sum>
        </package>
        <package name="pcp-pmda-gfs2" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-gfs2-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">5ae76538ebf4f470735d9ba852f5e0c0acd514d1d76a6780d3ef6efb13c34d03</sum>
        </package>
        <package name="pcp-pmda-memcache" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-memcache-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">5ca1a1cbcec7ff06ec945bcd7cc06b260f743f62ccad81ea769594fa554e40ac</sum>
        </package>
        <package name="pcp-pmda-dm" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-dm-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">5db1bbf248e6ed2b067c381cbd28c61ba91798a97479e00ec8c11d32c8962ded</sum>
        </package>
        <package name="pcp-devel" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-devel-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">60891583e78a50ae76efe78ec76bc3f2b8dc37ce393fd7f91f38022fd51dc22c</sum>
        </package>
        <package name="pcp-pmda-apache" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-apache-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">626387d468d6649cca215d0f7b7753b0f1b0ad05c6fe89daceaf091a005fcde4</sum>
        </package>
        <package name="pcp-pmda-lmsensors" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-lmsensors-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">66250cf881afd2c9ec33e6a02e8f2b26f4b33bc47cacc9e196acfe677de55336</sum>
        </package>
        <package name="pcp-pmda-lio" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-lio-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">696226731db68a4186b44bee823e6d3e68f4f27e7d8d6b2399a25fb4f4c61ab4</sum>
        </package>
        <package name="pcp-pmda-nfsclient" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-nfsclient-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">69e85466072c36ea649be458712f83de2b0025cc7f2c3beef5f1ea14c18fc721</sum>
        </package>
        <package name="pcp-pmda-netcheck" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-netcheck-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">6a735cbd0224d9e8abbfbfc1a611bab34705743b9eeccb0b82de2ab8eba171ac</sum>
        </package>
        <package name="pcp-pmda-podman" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-podman-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">6aed551da1ed9044cb44f99db5556734a564038bf4da8b896201fdd967b23649</sum>
        </package>
        <package name="pcp-pmda-bash" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-bash-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">71d0a2928c201d674dd3c222de5848294f8cc1a5b108a7ef4fc5862eb1b03325</sum>
        </package>
        <package name="pcp-pmda-shping" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-shping-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">725b5ade4e65afbfbfc47bbd78caf78d6c191117c93d5bb200170390c487d19f</sum>
        </package>
        <package name="pcp-pmda-summary" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-summary-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">733b86a17ed648ee8a20d207b3cdd9c9d707fe76c1a08bb7ce29e32c986c1488</sum>
        </package>
        <package name="pcp-pmda-roomtemp" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-roomtemp-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">76c888483698c29242737ae490744fd6a536b702cb7f9f375a2006dfd8649ce7</sum>
        </package>
        <package name="pcp-import-sar2pcp" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-import-sar2pcp-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">781b7f48caeccd88719d9af3e0674436694b80addc662e114ab8019b42b14292</sum>
        </package>
        <package name="pcp-pmda-bcc" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-bcc-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">793256dcdd27d1748c4cd403c4d7bff358a5a76b36710fa0c0c336639bfaa988</sum>
        </package>
        <package name="pcp-libs-devel" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-libs-devel-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">7aa62a74d92beaceebac898b0a1b2841b439220ce7f3b8450b4dc28f6749fa9e</sum>
        </package>
        <package name="pcp-pmda-weblog" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-weblog-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">91601281181e13d9d6651c6dda697760a9cdacfb11dca60dd86bea7ab9c93192</sum>
        </package>
        <package name="pcp-import-iostat2pcp" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-import-iostat2pcp-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">9275d04f85afce5a473870aa15dfb7fbaccf05e905f7c1c59bca1bf77a40d053</sum>
        </package>
        <package name="pcp-pmda-cisco" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-cisco-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">93ece29d39a4b943729f2b90a519edb275d82c047da97476dd29b66157841e7f</sum>
        </package>
        <package name="pcp-pmda-sockets" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-sockets-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">9e0db6ba4a4c3c80cb9c273092ba0454b3b319d6bb59768511552e6110dac4c0</sum>
        </package>
        <package name="pcp-import-ganglia2pcp" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-import-ganglia2pcp-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">9f006a4635a5bad62b051de955fd041f3d137c460cf08711e96b2341b96c7bc8</sum>
        </package>
        <package name="pcp-export-zabbix-agent" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-export-zabbix-agent-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">a073c4818afbc6630aaf4a7a462f1f04c5bc7fc2ff0463495743601507653ca0</sum>
        </package>
        <package name="pcp-export-pcp2spark" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-export-pcp2spark-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">a2428251f146b8ab48ce3d7c915b0b74c83b6a2900b7ca2280f96db39c3e9670</sum>
        </package>
        <package name="pcp-pmda-snmp" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-snmp-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">a2ca45190a7e2b66bcc8487a80705dfcbd47cbfe87c83564c8f3f0a3c6ed268d</sum>
        </package>
        <package name="pcp-pmda-nginx" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-nginx-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">ae2066c3aeb1f5c6c72d122d624708cad00c755b4a2f9dafda7068709cf8b179</sum>
        </package>
        <package name="pcp-selinux" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-selinux-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">b03de0b59278f50f0c66ae528425b5d6c5dc1b1eb9fe4a0e511331380c47be78</sum>
        </package>
        <package name="pcp-pmda-pdns" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-pdns-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">b44e5bde4811017e819b5d6600934f33cbfa4112f16aa201266c4a3ecdb8b3f2</sum>
        </package>
        <package name="pcp-pmda-dbping" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-dbping-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">b59f617715a9c22b40adb8020786d0a9bac8b97032b0613e9471f957cd11591b</sum>
        </package>
        <package name="pcp-export-pcp2xml" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-export-pcp2xml-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">b9d0ee60115166b022d6b425776eac8337a9fa4b8fe375503beac3c401cf1b5f</sum>
        </package>
        <package name="pcp-import-mrtg2pcp" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-import-mrtg2pcp-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">ba260dc9f0194a90a59344f41b922019cd6ad98b0e5457afb1def2c671436079</sum>
        </package>
        <package name="pcp-pmda-zswap" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-zswap-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">ba9fae9e382068c897c6190549e7052f06c6472dc7c371799f8bcb49cec78c4f</sum>
        </package>
        <package name="pcp-pmda-openvswitch" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-openvswitch-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">bdb0857d0fcb9b06e277ed81fef716e80316ea086e35b036eed2afa57b0ae7f8</sum>
        </package>
        <package name="pcp-pmda-systemd" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-systemd-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">bfcf8dcdc2ecb4f946ada355c8d60851eeb1c45e37758464f5fa2d74838684ca</sum>
        </package>
        <package name="pcp-pmda-smart" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-smart-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">c0cde8ca4330472b732c8884df128f7026b77a901e52204f16753e000061b922</sum>
        </package>
        <package name="pcp-pmda-lustre" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-lustre-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">c24f96a130574109e167e931ed38c921a8bd99044e581d5aed71f5f0e08111b8</sum>
        </package>
        <package name="pcp-pmda-mounts" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-mounts-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">c3a59c83541a9799e653702261a7f05b4b88b001636824573d47da59fd784ffc</sum>
        </package>
        <package name="pcp-system-tools" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-system-tools-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">c452c3ed79c7362e6e9b9202f709eaaa798da6fce3585054a17b98443af07a3f</sum>
        </package>
        <package name="pcp-pmda-docker" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-docker-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">c48960eab85da3bdc2515e443e57299b3d29356e39baa9eff30e587339f6cf91</sum>
        </package>
        <package name="perl-PCP-LogSummary" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>perl-PCP-LogSummary-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">ca178f6be871b1d9b4914dda06b66f420a1d11dee894fddc95656e1459b69df5</sum>
        </package>
        <package name="pcp-pmda-logger" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-logger-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">ccab43c144923f7b8fe942e6e3c2ada133fb28a2da79556da1863391e88115ad</sum>
        </package>
        <package name="pcp-pmda-hacluster" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-hacluster-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">cf66c65b698b41298a20e8e58c22ec57bbf6f798ed6b00ff607e410c56c80570</sum>
        </package>
        <package name="perl-PCP-PMDA" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>perl-PCP-PMDA-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">cfd9030f96cb56596c7b9e504bf7e5232f07f882eaff890edff8129ffb1f70cd</sum>
        </package>
        <package name="pcp-testsuite" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-testsuite-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">d242de87d480492740f0dd8405f9bea9c68c1c115f543fa9080723acb06f509e</sum>
        </package>
        <package name="pcp-pmda-ds389log" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-ds389log-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">d7fcdc421740003f53adeb05ce20126ca07846808a1ca48251f4d8f3d09c8586</sum>
        </package>
        <package name="pcp-pmda-gluster" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-gluster-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">d8ae51f4db23ccedeec6049889338fa37bb976905610d609b3ade785290eab7d</sum>
        </package>
        <package name="pcp-pmda-postfix" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-postfix-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">d9e3c712694227a3481bf69a9b02d15d7e77eae93cb69a1f44b3862a2682e5fa</sum>
        </package>
        <package name="pcp-pmda-bonding" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-bonding-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">db933d19b382bc419607487693339159ebfbe523f2f6351b1c1bff2b890a6aa1</sum>
        </package>
        <package name="pcp-export-pcp2graphite" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-export-pcp2graphite-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">de5e9c23c2769f13ff7aecffe106bf935899a90fc55a9e0730e6b2afe46617a3</sum>
        </package>
        <package name="pcp-pmda-trace" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-trace-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">e17f092054ea17b4162fdafe80e8ab8371b2abb3fb5b79ea77c5d04c8f11d330</sum>
        </package>
        <package name="pcp-pmda-ds389" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-ds389-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">e8ee1bb9071d4e42d753c46d516dd6024a6ca90b7f77ad9098ea95f149ed6395</sum>
        </package>
        <package name="pcp-pmda-mysql" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-mysql-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">e99aaa0623636a598fcaa9e4129d31cfccf5ff5bcef74b84c14727e988ec1d12</sum>
        </package>
        <package name="pcp-pmda-nvidia-gpu" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-nvidia-gpu-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">ea35855214a772f08c7ecdd501ebf19f84ecadcce93d7f216224510fee76d3cb</sum>
        </package>
        <package name="pcp-zeroconf" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-zeroconf-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">ebba8f020d773a29310b370c0222034fe14f7ba533725a8a591b2ecb8eb8162a</sum>
        </package>
        <package name="pcp" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">ec47399d2a1963efa4d89e688f4c0fb17b862925e3495e44518008934f37d1e0</sum>
        </package>
        <package name="pcp-pmda-oracle" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-oracle-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">ee910027b8782a1cfeb6e673d1f37d38079b81030cb99a5d215a3c2985921f4e</sum>
        </package>
        <package name="pcp-pmda-elasticsearch" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-elasticsearch-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">eebda9ac70399231d2f7c4ca37d9fa161513f7bd8d2f9771d39c0a364357a9e2</sum>
        </package>
        <package name="pcp-pmda-rabbitmq" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-rabbitmq-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">efea42139ddf18be1780d4f4ee7cf68b50e4ccc715df1489b6b26c0a77708910</sum>
        </package>
        <package name="pcp-pmda-gpsd" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-gpsd-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">f0231b377a6188064c8e46797ab7b8ec5202220b9034afccfb6f0be497171a5c</sum>
        </package>
        <package name="pcp-pmda-named" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-named-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">f0b48aac1b4ba0103d665f39d70448e95c8efe49e1abed715056972555ad421c</sum>
        </package>
        <package name="pcp-export-pcp2json" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-export-pcp2json-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">f13283a470ba1b2c200b6e1ba11a0e1041809536a5bab30851f88ec3d68d37e6</sum>
        </package>
        <package name="pcp-pmda-news" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-news-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">f1c62d35bd8b5666bb3decc8cea67a2ebd35e44a913bea117cc10508187faaad</sum>
        </package>
        <package name="pcp-import-collectl2pcp" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-import-collectl2pcp-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">f54b364663dffa64bf9fddcb920bae03cb95a2b15a651bed2c9197f98756d3ab</sum>
        </package>
        <package name="pcp-pmda-mongodb" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-mongodb-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">f776e96fdb52c9aacf0f9b23947dbb158f5b6ca7892e37c040cfddae06cce8d5</sum>
        </package>
        <package name="pcp-pmda-mic" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-mic-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">fea0908f6a8ed2eeaa6b59567caa9a8c22da614e6b49b8b16ca25716055c193c</sum>
        </package>
        <package name="pcp-pmda-mailq" version="5.3.7" release="20.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-20.el8_10.src.rpm">
          <filename>pcp-pmda-mailq-5.3.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">fec0fc49fc68135b01185a53a66af2cdc3b758adf0b1a8ce67c2b6f2a050422d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3265</id>
    <title>Important: grafana security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:40:10"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for
Graphite, InfluxDB &amp; OpenTSDB.

Security Fix(es):

* golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)
* grafana: vulnerable to authorization bypass (CVE-2024-1313)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3265" id="RHSA-2024:3265" type="rhsa" title="RHSA-2024:3265"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1313" id="CVE-2024-1313" type="cve" title="CVE-2024-1313"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1394" id="CVE-2024-1394" type="cve" title="CVE-2024-1394"/>
      <reference href="https://bugzilla.redhat.com/2262921" id="2262921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271903" id="2271903" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3265.html" id="ALSA-2024:3265" type="self" title="ALSA-2024:3265"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="grafana-selinux" version="9.2.10" release="16.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-16.el8_10.src.rpm">
          <filename>grafana-selinux-9.2.10-16.el8_10.s390x.rpm</filename>
          <sum type="sha256">5e03e0705e8bc51c2d8b0ba6c3a37c6fba705e4737b0c1c14699a96acc0466d6</sum>
        </package>
        <package name="grafana" version="9.2.10" release="16.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-16.el8_10.src.rpm">
          <filename>grafana-9.2.10-16.el8_10.s390x.rpm</filename>
          <sum type="sha256">c2ae82d57742bffce825de91f52ef7b7dd1bd92d0de6f168f529965f87e8389f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3269</id>
    <title>Important: glibc security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 16:15:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: Out of bounds write in iconv may lead to remote code execution (CVE-2024-2961)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3269" id="RHSA-2024:3269" type="rhsa" title="RHSA-2024:3269"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2961" id="CVE-2024-2961" type="cve" title="CVE-2024-2961"/>
      <reference href="https://bugzilla.redhat.com/2273404" id="2273404" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3269.html" id="ALSA-2024:3269" type="self" title="ALSA-2024:3269"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="compat-libpthread-nonshared" version="2.28" release="251.el8_10.1" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.1.src.rpm">
          <filename>compat-libpthread-nonshared-2.28-251.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">4e7ed644ad4950149b7f7d1d3ade4332a01dd239951852a39acf324ab66f1d45</sum>
        </package>
        <package name="glibc-utils" version="2.28" release="251.el8_10.1" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.1.src.rpm">
          <filename>glibc-utils-2.28-251.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">cbb657ed0ce236fcf59253e085f0e5734a6dc216781253cd87d02120e9502110</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3270</id>
    <title>Moderate: sssd security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:46"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>sssd security update</summary>
    <description>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

* sssd: Race condition during authorization leads to GPO policies functioning inconsistently (CVE-2023-3758)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3270" id="RHSA-2024:3270" type="rhsa" title="RHSA-2024:3270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3758" id="CVE-2023-3758" type="cve" title="CVE-2023-3758"/>
      <reference href="https://bugzilla.redhat.com/2223762" id="2223762" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3270.html" id="ALSA-2024:3270" type="self" title="ALSA-2024:3270"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="sssd-idp" version="2.9.4" release="3.el8_10" epoch="0" arch="s390x" src="sssd-2.9.4-3.el8_10.src.rpm">
          <filename>sssd-idp-2.9.4-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">189ce34aaa58ca333df9cebeffcccd781496573e0f4aee271d42dcabac1569e7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3271</id>
    <title>Important: bind and dhcp security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:48:15"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind and dhcp security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to enable and administer DHCP on a network.

Security Fix(es):

* bind9: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408)
* bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
* bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)

Bug Fix:

* dhcp rebuilt after API change of bind-export-libs

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3271" id="RHSA-2024:3271" type="rhsa" title="RHSA-2024:3271"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4408" id="CVE-2023-4408" type="cve" title="CVE-2023-4408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50387" id="CVE-2023-50387" type="cve" title="CVE-2023-50387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50868" id="CVE-2023-50868" type="cve" title="CVE-2023-50868"/>
      <reference href="https://bugzilla.redhat.com/2263896" id="2263896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263914" id="2263914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263917" id="2263917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3271.html" id="ALSA-2024:3271" type="self" title="ALSA-2024:3271"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="bind-sdb" version="9.11.36" release="14.el8_10" epoch="32" arch="s390x" src="bind-9.11.36-14.el8_10.src.rpm">
          <filename>bind-sdb-9.11.36-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">0d058105e3fb19e7d4169297f68ac728bbba735304a44c315823dda31acc6400</sum>
        </package>
        <package name="bind-sdb-chroot" version="9.11.36" release="14.el8_10" epoch="32" arch="s390x" src="bind-9.11.36-14.el8_10.src.rpm">
          <filename>bind-sdb-chroot-9.11.36-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">1ae7509c235f0003c02407f89031f0a2cde919c79e99270f1c69179af42088d2</sum>
        </package>
        <package name="bind-lite-devel" version="9.11.36" release="14.el8_10" epoch="32" arch="s390x" src="bind-9.11.36-14.el8_10.src.rpm">
          <filename>bind-lite-devel-9.11.36-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">29b8e07d620d3036e0c64ae68ed6acc84d742e224bb5883c5a631f3e325bcebf</sum>
        </package>
        <package name="bind-pkcs11" version="9.11.36" release="14.el8_10" epoch="32" arch="s390x" src="bind-9.11.36-14.el8_10.src.rpm">
          <filename>bind-pkcs11-9.11.36-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">3121b6ed2a8d67b206f9e8cde8bacefbe9e1daa79514aaf3789de5efdfe937ab</sum>
        </package>
        <package name="bind" version="9.11.36" release="14.el8_10" epoch="32" arch="s390x" src="bind-9.11.36-14.el8_10.src.rpm">
          <filename>bind-9.11.36-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">40e50fd1639de39ae223085f59cb6695f42e1b583583d4ea490f457ecfd25ac4</sum>
        </package>
        <package name="python3-bind" version="9.11.36" release="14.el8_10" epoch="32" arch="noarch" src="bind-9.11.36-14.el8_10.src.rpm">
          <filename>python3-bind-9.11.36-14.el8_10.noarch.rpm</filename>
          <sum type="sha256">74f4867635e27816f0dbe5c3fb3b6a8b609195309fee3ac0ed658c049228c448</sum>
        </package>
        <package name="bind-utils" version="9.11.36" release="14.el8_10" epoch="32" arch="s390x" src="bind-9.11.36-14.el8_10.src.rpm">
          <filename>bind-utils-9.11.36-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">80bd6dd2c14d2de1f4ba03e7bacbed906d3effae6846d81a9f9147b477aca240</sum>
        </package>
        <package name="bind-libs-lite" version="9.11.36" release="14.el8_10" epoch="32" arch="s390x" src="bind-9.11.36-14.el8_10.src.rpm">
          <filename>bind-libs-lite-9.11.36-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">90f3fd58c1ff6c5a376aa5e1cc779c0dcd49dafc8af5f7fbf9f2b3b0dc4dbcf0</sum>
        </package>
        <package name="bind-devel" version="9.11.36" release="14.el8_10" epoch="32" arch="s390x" src="bind-9.11.36-14.el8_10.src.rpm">
          <filename>bind-devel-9.11.36-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">9390c0e3d8001ba82f4cd3f2f1675b9707d73a2eaf2045c38d0802d2743fa744</sum>
        </package>
        <package name="bind-pkcs11-devel" version="9.11.36" release="14.el8_10" epoch="32" arch="s390x" src="bind-9.11.36-14.el8_10.src.rpm">
          <filename>bind-pkcs11-devel-9.11.36-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">9491d7d8ff366469f019950302da950fa0c7b63a181f64573aab9bb41226ee7a</sum>
        </package>
        <package name="bind-pkcs11-utils" version="9.11.36" release="14.el8_10" epoch="32" arch="s390x" src="bind-9.11.36-14.el8_10.src.rpm">
          <filename>bind-pkcs11-utils-9.11.36-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">993ea13ceb547faf09cc90f03b79cdf33a4a75e6043a4ef9b3075042b30d6d26</sum>
        </package>
        <package name="bind-libs" version="9.11.36" release="14.el8_10" epoch="32" arch="s390x" src="bind-9.11.36-14.el8_10.src.rpm">
          <filename>bind-libs-9.11.36-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">cac48eab1ecd0b81759c8f37f7746652ca3a9770fa23a7c35052050dd0717ee4</sum>
        </package>
        <package name="bind-chroot" version="9.11.36" release="14.el8_10" epoch="32" arch="s390x" src="bind-9.11.36-14.el8_10.src.rpm">
          <filename>bind-chroot-9.11.36-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">d835378af31c906579b1810d4c752365b9e8d9c2a90a25f21b12261ab973665d</sum>
        </package>
        <package name="bind-license" version="9.11.36" release="14.el8_10" epoch="32" arch="noarch" src="bind-9.11.36-14.el8_10.src.rpm">
          <filename>bind-license-9.11.36-14.el8_10.noarch.rpm</filename>
          <sum type="sha256">f56c463fb5a0797b147dffbbd9f5f40b6c14c9e6a201726ab2eee8e880763845</sum>
        </package>
        <package name="bind-pkcs11-libs" version="9.11.36" release="14.el8_10" epoch="32" arch="s390x" src="bind-9.11.36-14.el8_10.src.rpm">
          <filename>bind-pkcs11-libs-9.11.36-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">fa00f01d78eaf4dae4b7802464d0f1f978e885df1f88fa2580b525d3c2d354e1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3340</id>
    <title>Important: .NET 7.0 security update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-29 14:45:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.119 and .NET Runtime 7.0.19.

Security Fix(es):

* dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
* dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3340" id="RHSA-2024:3340" type="rhsa" title="RHSA-2024:3340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30045" id="CVE-2024-30045" type="cve" title="CVE-2024-30045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30046" id="CVE-2024-30046" type="cve" title="CVE-2024-30046"/>
      <reference href="https://bugzilla.redhat.com/2279695" id="2279695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2279697" id="2279697" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3340.html" id="ALSA-2024:3340" type="self" title="ALSA-2024:3340"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="dotnet-targeting-pack-7.0" version="7.0.19" release="1.el8_10" epoch="0" arch="s390x" src="dotnet7.0-7.0.119-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-7.0-7.0.19-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0753486d2dc815466ba3f99e8b56ef6ca4648b9dd0463f444898bda9f975a7aa</sum>
        </package>
        <package name="dotnet-runtime-7.0" version="7.0.19" release="1.el8_10" epoch="0" arch="s390x" src="dotnet7.0-7.0.119-1.el8_10.src.rpm">
          <filename>dotnet-runtime-7.0-7.0.19-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">07870326007d44cd0178f93c33aa0d12f5a3944f2a8c31f60ed9b58e00c3df6b</sum>
        </package>
        <package name="dotnet-sdk-7.0" version="7.0.119" release="1.el8_10" epoch="0" arch="s390x" src="dotnet7.0-7.0.119-1.el8_10.src.rpm">
          <filename>dotnet-sdk-7.0-7.0.119-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">38bc9011a3191e6684576a520cb02d2756178e657fea02af3553be4e021342a6</sum>
        </package>
        <package name="aspnetcore-runtime-7.0" version="7.0.19" release="1.el8_10" epoch="0" arch="s390x" src="dotnet7.0-7.0.119-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-7.0-7.0.19-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">57b9eb1598ee41ee4f1fd4344600ac1969b072ea7e146e58d70332d576b56178</sum>
        </package>
        <package name="dotnet-templates-7.0" version="7.0.119" release="1.el8_10" epoch="0" arch="s390x" src="dotnet7.0-7.0.119-1.el8_10.src.rpm">
          <filename>dotnet-templates-7.0-7.0.119-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">7a35069445d33b76794e0d01ada0b38c69f01a6e038d1536f70b81f041b49b76</sum>
        </package>
        <package name="dotnet-hostfxr-7.0" version="7.0.19" release="1.el8_10" epoch="0" arch="s390x" src="dotnet7.0-7.0.119-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-7.0-7.0.19-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">9d0d10daa2014870d98c3a225d79b48298f2e02a1a30d8c2bbec12fb96f0b148</sum>
        </package>
        <package name="aspnetcore-targeting-pack-7.0" version="7.0.19" release="1.el8_10" epoch="0" arch="s390x" src="dotnet7.0-7.0.119-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-7.0-7.0.19-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c4b5a39f669564a38aa7aac1b061d047cf91458019d79316dfe692f0ed94c66b</sum>
        </package>
        <package name="dotnet-apphost-pack-7.0" version="7.0.19" release="1.el8_10" epoch="0" arch="s390x" src="dotnet7.0-7.0.119-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-7.0-7.0.19-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">d2f104c6abfd408cf82c1dc16fa9222f2105257472d4eb1644b866baf049865b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3341</id>
    <title>Moderate: gdk-pixbuf2 security update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-29 14:40:15"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gdk-pixbuf2 security update</summary>
    <description>The gdk-pixbuf2 packages provide an image loading library that can be extended
by loadable modules for new image formats. It is used by toolkits such as GTK+
or clutter.

Security Fix(es):

* gdk-pixbuf2: heap memory corruption on gdk-pixbuf (CVE-2022-48622)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3341" id="RHSA-2024:3341" type="rhsa" title="RHSA-2024:3341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48622" id="CVE-2022-48622" type="cve" title="CVE-2022-48622"/>
      <reference href="https://bugzilla.redhat.com/2260545" id="2260545" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3341.html" id="ALSA-2024:3341" type="self" title="ALSA-2024:3341"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="gdk-pixbuf2-devel" version="2.36.12" release="6.el8_10" epoch="0" arch="s390x" src="gdk-pixbuf2-2.36.12-6.el8_10.src.rpm">
          <filename>gdk-pixbuf2-devel-2.36.12-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">186ac904565fc046d6aa618b43de695eda6a10e5283b3e9f3ae98a3225bc0270</sum>
        </package>
        <package name="gdk-pixbuf2-modules" version="2.36.12" release="6.el8_10" epoch="0" arch="s390x" src="gdk-pixbuf2-2.36.12-6.el8_10.src.rpm">
          <filename>gdk-pixbuf2-modules-2.36.12-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">8dcca08317681a1845d3d47516f3057d8cc7437ede5aebeeb5ccb00d182130e9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3343</id>
    <title>Important: xorg-x11-server-Xwayland security update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-29 14:39:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

* xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080)
* xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081)
* xorg-x11-server: Use-after-free in ProcRenderAddGlyphs (CVE-2024-31083)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3343" id="RHSA-2024:3343" type="rhsa" title="RHSA-2024:3343"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31080" id="CVE-2024-31080" type="cve" title="CVE-2024-31080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31081" id="CVE-2024-31081" type="cve" title="CVE-2024-31081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31083" id="CVE-2024-31083" type="cve" title="CVE-2024-31083"/>
      <reference href="https://bugzilla.redhat.com/2271997" id="2271997" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271998" id="2271998" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272000" id="2272000" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3343.html" id="ALSA-2024:3343" type="self" title="ALSA-2024:3343"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="xorg-x11-server-Xwayland" version="21.1.3" release="16.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-21.1.3-16.el8_10.src.rpm">
          <filename>xorg-x11-server-Xwayland-21.1.3-16.el8_10.s390x.rpm</filename>
          <sum type="sha256">b01ec4ab714d8a9aa9ee40373679bca125ee3d213d41b256b9a13a18cfe096a8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3344</id>
    <title>Important: glibc security update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-29 14:40:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread
libraries (libpthread), standard math libraries (libm), and the name service
cache daemon (nscd) used by multiple programs on the system. Without these
libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: stack-based buffer overflow in netgroup cache (CVE-2024-33599)
* glibc: null pointer dereferences after failed netgroup cache insertion
(CVE-2024-33600)
* glibc: netgroup cache may terminate daemon on memory allocation failure
(CVE-2024-33601)
* glibc: netgroup cache assumes NSS callback uses in-buffer strings
(CVE-2024-33602)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3344" id="RHSA-2024:3344" type="rhsa" title="RHSA-2024:3344"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33599" id="CVE-2024-33599" type="cve" title="CVE-2024-33599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33600" id="CVE-2024-33600" type="cve" title="CVE-2024-33600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33601" id="CVE-2024-33601" type="cve" title="CVE-2024-33601"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33602" id="CVE-2024-33602" type="cve" title="CVE-2024-33602"/>
      <reference href="https://bugzilla.redhat.com/2277202" id="2277202" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277204" id="2277204" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277205" id="2277205" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277206" id="2277206" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3344.html" id="ALSA-2024:3344" type="self" title="ALSA-2024:3344"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="glibc-utils" version="2.28" release="251.el8_10.2" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.2.src.rpm">
          <filename>glibc-utils-2.28-251.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">1b5f1a72ebe9d02b051aaea2d1c5877281562d62bfd88a904221225bbfed3c2f</sum>
        </package>
        <package name="compat-libpthread-nonshared" version="2.28" release="251.el8_10.2" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.2.src.rpm">
          <filename>compat-libpthread-nonshared-2.28-251.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">d5da54fcc4eccdfc29a25323a8e5551184837b81717a2ea6e596dd22f0a2ce6b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3345</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-29 14:46:45"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5.

Security Fix(es):

* dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
* dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3345" id="RHSA-2024:3345" type="rhsa" title="RHSA-2024:3345"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30045" id="CVE-2024-30045" type="cve" title="CVE-2024-30045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30046" id="CVE-2024-30046" type="cve" title="CVE-2024-30046"/>
      <reference href="https://bugzilla.redhat.com/2279695" id="2279695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2279697" id="2279697" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3345.html" id="ALSA-2024:3345" type="self" title="ALSA-2024:3345"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="dotnet-apphost-pack-8.0" version="8.0.5" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0663c4aa9908af90140bf98076be0300264e9dee642d10ceae37ca7486a3998b</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.5" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">2eac142dffb4946ed62cc098528b3a186250140c2ae4d951c6f7b18227c84e70</sum>
        </package>
        <package name="dotnet-host" version="8.0.5" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el8_10.src.rpm">
          <filename>dotnet-host-8.0.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">3373f5dd3e2b7babbc9bf02ed4e9fffd3870d076a4e502a2e660f3c0967c0942</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.5" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">47a2038b0147b81ef27e33865daf99a3c588351e37f0d45af48d785b1c3ee1d6</sum>
        </package>
        <package name="dotnet" version="8.0.105" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el8_10.src.rpm">
          <filename>dotnet-8.0.105-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">4912b54506f7e946fe3cc0f7fc66690ced023bf069d22e48a3ca2294211f4052</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="8.0.105" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el8_10.src.rpm">
          <filename>netstandard-targeting-pack-2.1-8.0.105-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">4c538b8485d0772c7855fa1b9c03feddf18dfe5d4455b1560d53e633e21faa47</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.105" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.105-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5ead999a3471081f5a40656641714f0652653dab9d80e8bf565db8999558b0d6</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.105" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el8_10.src.rpm">
          <filename>dotnet-templates-8.0-8.0.105-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">78b66f38fbc61992bdf6aca22a7262cdbb2656d315f32d5d7c20eb3be2324511</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.5" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el8_10.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">d04b472c53c88f20c12b04ca6e73cbc9bd71339151ec4beb6cb97d36082fb497</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.5" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">d95e10cb01e72eb6a5106d77c81b2563ddc53b82ed8bb14071c3f2de849bbe10</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.5" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">d991e8c8dc143279e56428a36bda68bd89b230194a308aef617408682f4d08e7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3346</id>
    <title>Important: git-lfs security update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-29 14:39:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git-lfs security update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.

Security Fix(es):

* golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288)
* golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect (CVE-2023-45289)
* golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)
* golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3346" id="RHSA-2024:3346" type="rhsa" title="RHSA-2024:3346"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45288" id="CVE-2023-45288" type="cve" title="CVE-2023-45288"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45289" id="CVE-2023-45289" type="cve" title="CVE-2023-45289"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45290" id="CVE-2023-45290" type="cve" title="CVE-2023-45290"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24783" id="CVE-2024-24783" type="cve" title="CVE-2024-24783"/>
      <reference href="https://bugzilla.redhat.com/2268017" id="2268017" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268018" id="2268018" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268019" id="2268019" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268273" id="2268273" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3346.html" id="ALSA-2024:3346" type="self" title="ALSA-2024:3346"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="git-lfs" version="3.4.1" release="2.el8_10" epoch="0" arch="s390x" src="git-lfs-3.4.1-2.el8_10.src.rpm">
          <filename>git-lfs-3.4.1-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">b793bb44fb30c8f4fea44221227ed9f1a532cf4a6ef626200ba8138f07dc28a6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3347</id>
    <title>Important: python3 security update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-29 14:43:09"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)
* python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3347" id="RHSA-2024:3347" type="rhsa" title="RHSA-2024:3347"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6597" id="CVE-2023-6597" type="cve" title="CVE-2023-6597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0450" id="CVE-2024-0450" type="cve" title="CVE-2024-0450"/>
      <reference href="https://bugzilla.redhat.com/2276518" id="2276518" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2276525" id="2276525" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3347.html" id="ALSA-2024:3347" type="self" title="ALSA-2024:3347"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_9_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_9_default</name>
        <package name="python3-idle" version="3.6.8" release="62.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-62.el8_10.alma.1.src.rpm">
          <filename>python3-idle-3.6.8-62.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">0e052d992fd582bfce595142e2c74ef8ae3e2adfbe444f206ec7c41cbe394743</sum>
        </package>
        <package name="python3-tkinter" version="3.6.8" release="62.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-62.el8_10.alma.1.src.rpm">
          <filename>python3-tkinter-3.6.8-62.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">683a02e582017622f8b9b5a5a613481d3e28710b970e4ff74ff8c97aa90bfadf</sum>
        </package>
        <package name="platform-python-debug" version="3.6.8" release="62.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-62.el8_10.alma.1.src.rpm">
          <filename>platform-python-debug-3.6.8-62.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">830ba4ff70f885626d8470055e324c4decf32c52549acf7d7412c7b2801d8205</sum>
        </package>
        <package name="platform-python-devel" version="3.6.8" release="62.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-62.el8_10.alma.1.src.rpm">
          <filename>platform-python-devel-3.6.8-62.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">bed42ad412c2966db96056650595f7e6ff7fc7a840bdb04819b697b0dd9adb90</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3466</id>
    <title>Important: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2024-05-29 00:00:00"/>
    <updated date="2024-05-31 15:26:09"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python39:3.9/python39: python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)
* python39:3.9/python39: python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)
* python39:3.9/python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode() (CVE-2024-3651)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3466" id="RHSA-2024:3466" type="rhsa" title="RHSA-2024:3466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6597" id="CVE-2023-6597" type="cve" title="CVE-2023-6597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0450" id="CVE-2024-0450" type="cve" title="CVE-2024-0450"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3651" id="CVE-2024-3651" type="cve" title="CVE-2024-3651"/>
      <reference href="https://bugzilla.redhat.com/2274779" id="2274779" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2276518" id="2276518" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2276525" id="2276525" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3466.html" id="ALSA-2024:3466" type="self" title="ALSA-2024:3466"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="python39" stream="3.9" version="8100020240530164632" context="0a5380d9" arch="s390x"/>
        <package name="python39-setuptools" version="50.3.2" release="5.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python3x-setuptools-50.3.2-5.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-setuptools-50.3.2-5.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">018859714a5ec15d6083de0d414041a7ec93b5effb4db0111926d66b1e2583eb</sum>
        </package>
        <package name="python39-psycopg2-tests" version="2.8.6" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-psycopg2-tests-2.8.6-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">05d2693d2fda223ef60e5133f0ea03da31cbd0047d13a3bd8f677c4042064ec4</sum>
        </package>
        <package name="python39" version="3.9.19" release="1.module_el8.10.0+3849+a48d89aa" epoch="0" arch="s390x" src="python39-3.9.19-1.module_el8.10.0+3849+a48d89aa.src.rpm">
          <filename>python39-3.9.19-1.module_el8.10.0+3849+a48d89aa.s390x.rpm</filename>
          <sum type="sha256">14e39e07f25fb8ca4580f0313fdfdea6c98a124bc3e5fbf991c97332bcdc0b78</sum>
        </package>
        <package name="python39-idle" version="3.9.19" release="1.module_el8.10.0+3849+a48d89aa" epoch="0" arch="s390x" src="python39-3.9.19-1.module_el8.10.0+3849+a48d89aa.src.rpm">
          <filename>python39-idle-3.9.19-1.module_el8.10.0+3849+a48d89aa.s390x.rpm</filename>
          <sum type="sha256">1a82c2f4d8b3bff970cca657c1f94908c6d1bb053203c84eb4b48ce0b52e650f</sum>
        </package>
        <package name="python39-pip" version="20.2.4" release="9.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python3x-pip-20.2.4-9.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-pip-20.2.4-9.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">1cddc6a728150b59b88dadd96ccc569c7bb77f8952761eca587d684b1a9d53dc</sum>
        </package>
        <package name="python39-urllib3" version="1.25.10" release="5.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python-urllib3-1.25.10-5.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-urllib3-1.25.10-5.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">24df140ee4c409e7c015b7d7584ba8aa8df5b95f9ecea9b457ce9ea0f3c68d98</sum>
        </package>
        <package name="python39-pip-wheel" version="20.2.4" release="9.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python3x-pip-20.2.4-9.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-pip-wheel-20.2.4-9.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">2a77862adcd93af6aa76bbbf2467fbd468eef1d9d6265d21cb2316e69d48cae1</sum>
        </package>
        <package name="python39-idna" version="2.10" release="4.module_el8.10.0+3849+a48d89aa" epoch="0" arch="noarch" src="python-idna-2.10-4.module_el8.10.0+3849+a48d89aa.src.rpm">
          <filename>python39-idna-2.10-4.module_el8.10.0+3849+a48d89aa.noarch.rpm</filename>
          <sum type="sha256">381f6f79555962d405b57a48952a958cf6f71a88772061ae3a017ad2a49f40c6</sum>
        </package>
        <package name="python39-psycopg2" version="2.8.6" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">3938e67a4a4560730a8004aa6291d4a5162286bd6f68bc00b16e2ed49d466377</sum>
        </package>
        <package name="python39-setuptools-wheel" version="50.3.2" release="5.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python3x-setuptools-50.3.2-5.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-setuptools-wheel-50.3.2-5.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">487da2e97a76d8471ef969dabc95d8659e0839ba016db9c9e91109c882a0df5b</sum>
        </package>
        <package name="python39-numpy-f2py" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-f2py-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">56f4a39fc3b7cacfec741e84c3c59e67da9e3b2f122f09e59cac8a8020a4ba7c</sum>
        </package>
        <package name="python39-psycopg2-doc" version="2.8.6" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-psycopg2-doc-2.8.6-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">5c33f9b35f95710fe82294dc826e72f8a2af5309c9f694687b92f36df933e837</sum>
        </package>
        <package name="python39-scipy" version="1.5.4" release="5.module_el8.9.0+3634+fb2a896c" epoch="0" arch="s390x" src="scipy-1.5.4-5.module_el8.9.0+3634+fb2a896c.src.rpm">
          <filename>python39-scipy-1.5.4-5.module_el8.9.0+3634+fb2a896c.s390x.rpm</filename>
          <sum type="sha256">68206ec5b6bf886e1266c848bf014248b598bea11cce32708352e16fceaa4475</sum>
        </package>
        <package name="python39-cryptography" version="3.3.1" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-cryptography-3.3.1-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-cryptography-3.3.1-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">8834a7762b7982546305749c0b8ab5193a8b777110eaddbdbb80e69fdaf6ea8a</sum>
        </package>
        <package name="python39-psutil" version="5.8.0" release="4.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9300840b5b4e742063f5617bc74cc2b05b4f3d5bdcd113ee5b3a9745baf3d0dc</sum>
        </package>
        <package name="python39-rpm-macros" version="3.9.19" release="1.module_el8.10.0+3849+a48d89aa" epoch="0" arch="noarch" src="python39-3.9.19-1.module_el8.10.0+3849+a48d89aa.src.rpm">
          <filename>python39-rpm-macros-3.9.19-1.module_el8.10.0+3849+a48d89aa.noarch.rpm</filename>
          <sum type="sha256">9d9c3fe1e315db9feb0c50df02939545682caac2ce331f7f9a26a8aacafe6470</sum>
        </package>
        <package name="python39-numpy" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9ffe33f6e51a25e79b88e45fa5cdca37a3b77d0868fe40e156f615224308810c</sum>
        </package>
        <package name="python39-devel" version="3.9.19" release="1.module_el8.10.0+3849+a48d89aa" epoch="0" arch="s390x" src="python39-3.9.19-1.module_el8.10.0+3849+a48d89aa.src.rpm">
          <filename>python39-devel-3.9.19-1.module_el8.10.0+3849+a48d89aa.s390x.rpm</filename>
          <sum type="sha256">b843911ee70a67d452ff4b6c205ad7db02d2bdcab094199e53d2226ce3ce4ade</sum>
        </package>
        <package name="python39-requests" version="2.25.0" release="3.module_el8.9.0+3634+fb2a896c" epoch="0" arch="noarch" src="python-requests-2.25.0-3.module_el8.9.0+3634+fb2a896c.src.rpm">
          <filename>python39-requests-2.25.0-3.module_el8.9.0+3634+fb2a896c.noarch.rpm</filename>
          <sum type="sha256">d021b1b5bb6a395348b4764885ec17842861193b8e60c25abcf8e1ad7a047641</sum>
        </package>
        <package name="python39-mod_wsgi" version="4.7.1" release="7.module_el8.9.0+3634+fb2a896c" epoch="0" arch="s390x" src="mod_wsgi-4.7.1-7.module_el8.9.0+3634+fb2a896c.src.rpm">
          <filename>python39-mod_wsgi-4.7.1-7.module_el8.9.0+3634+fb2a896c.s390x.rpm</filename>
          <sum type="sha256">dc14410284d94a7140daaaefd4c18ea74368f0acc6515ea0f2332b7b14b61f38</sum>
        </package>
        <package name="python39-lxml" version="4.6.5" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">dc2ce0990738ea69e2b3641de1886825066554244cf58815971db30e321b56b2</sum>
        </package>
        <package name="python39-tkinter" version="3.9.19" release="1.module_el8.10.0+3849+a48d89aa" epoch="0" arch="s390x" src="python39-3.9.19-1.module_el8.10.0+3849+a48d89aa.src.rpm">
          <filename>python39-tkinter-3.9.19-1.module_el8.10.0+3849+a48d89aa.s390x.rpm</filename>
          <sum type="sha256">e3f7ed626d637858c2bd756f2e66e7f92c79ab07d5e3c5cc1cedee6f4d585b77</sum>
        </package>
        <package name="python39-test" version="3.9.19" release="1.module_el8.10.0+3849+a48d89aa" epoch="0" arch="s390x" src="python39-3.9.19-1.module_el8.10.0+3849+a48d89aa.src.rpm">
          <filename>python39-test-3.9.19-1.module_el8.10.0+3849+a48d89aa.s390x.rpm</filename>
          <sum type="sha256">e40ce962d19404539e4cd6cd67a08002d7c24c8a83ddd8086ae0ff736b069864</sum>
        </package>
        <package name="python39-libs" version="3.9.19" release="1.module_el8.10.0+3849+a48d89aa" epoch="0" arch="s390x" src="python39-3.9.19-1.module_el8.10.0+3849+a48d89aa.src.rpm">
          <filename>python39-libs-3.9.19-1.module_el8.10.0+3849+a48d89aa.s390x.rpm</filename>
          <sum type="sha256">e6db4367b66efd38c74c7c7a655ee902e710651af06b621b176d5cd0cfe374ae</sum>
        </package>
        <package name="python39-cffi" version="1.14.3" release="2.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">ec3acbe8ceecf82559556caacd8c41e2b40e69348f2e6893f0b7598aa36371fd</sum>
        </package>
        <package name="python39-pyyaml" version="5.4.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="PyYAML-5.4.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pyyaml-5.4.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">faa90d54ace8329c64942f01e18434bce14edf19cc3a534ae07de7bc301cd27f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3500</id>
    <title>Moderate: ruby:3.0 security update</title>
    <issued date="2024-05-30 00:00:00"/>
    <updated date="2024-05-31 14:51:44"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby:3.0 security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

* ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
* ruby: ReDoS vulnerability in URI (CVE-2023-28755)
* ruby: ReDoS vulnerability in Time (CVE-2023-28756)
* ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
* ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
* ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3500" id="RHSA-2024:3500" type="rhsa" title="RHSA-2024:3500"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33621" id="CVE-2021-33621" type="cve" title="CVE-2021-33621"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28755" id="CVE-2023-28755" type="cve" title="CVE-2023-28755"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28756" id="CVE-2023-28756" type="cve" title="CVE-2023-28756"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27280" id="CVE-2024-27280" type="cve" title="CVE-2024-27280"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27281" id="CVE-2024-27281" type="cve" title="CVE-2024-27281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27282" id="CVE-2024-27282" type="cve" title="CVE-2024-27282"/>
      <reference href="https://bugzilla.redhat.com/2149706" id="2149706" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184059" id="2184059" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184061" id="2184061" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270749" id="2270749" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270750" id="2270750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2276810" id="2276810" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3500.html" id="ALSA-2024:3500" type="self" title="ALSA-2024:3500"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="ruby" stream="3.0" version="8100020240530225444" context="9edba152" arch="s390x"/>
        <package name="rubygem-minitest" version="5.14.2" release="143.module_el8.10.0+3852+ce828b19" epoch="0" arch="noarch" src="ruby-3.0.7-143.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>rubygem-minitest-5.14.2-143.module_el8.10.0+3852+ce828b19.noarch.rpm</filename>
          <sum type="sha256">03dc0459eeb71619e1c847cbf194517ad70c3aca98630e49514464ecf7420d88</sum>
        </package>
        <package name="rubygem-rss" version="0.2.9" release="143.module_el8.10.0+3852+ce828b19" epoch="0" arch="noarch" src="ruby-3.0.7-143.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>rubygem-rss-0.2.9-143.module_el8.10.0+3852+ce828b19.noarch.rpm</filename>
          <sum type="sha256">0a09c2385c7efc5d22d9398c69675e9b5682364b4b3f2f3a8fda9bf77983dde9</sum>
        </package>
        <package name="rubygem-rbs" version="1.4.0" release="143.module_el8.10.0+3852+ce828b19" epoch="0" arch="noarch" src="ruby-3.0.7-143.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>rubygem-rbs-1.4.0-143.module_el8.10.0+3852+ce828b19.noarch.rpm</filename>
          <sum type="sha256">1d24c762b07c3e1ea6cc87e87b4c48ed65af88110864b857cf2dccd571927519</sum>
        </package>
        <package name="rubygem-io-console" version="0.5.7" release="143.module_el8.10.0+3852+ce828b19" epoch="0" arch="s390x" src="ruby-3.0.7-143.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>rubygem-io-console-0.5.7-143.module_el8.10.0+3852+ce828b19.s390x.rpm</filename>
          <sum type="sha256">2149ac0557efc1b87939f436b2f4cb35f83875ad1668516cdee2eb1958ca5089</sum>
        </package>
        <package name="rubygems-devel" version="3.2.33" release="143.module_el8.10.0+3852+ce828b19" epoch="0" arch="noarch" src="ruby-3.0.7-143.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>rubygems-devel-3.2.33-143.module_el8.10.0+3852+ce828b19.noarch.rpm</filename>
          <sum type="sha256">2ea7c55cc91d1bfcf5a33ab1e8f5e448b383da4643770e0ced12c113d259b141</sum>
        </package>
        <package name="ruby" version="3.0.7" release="143.module_el8.10.0+3852+ce828b19" epoch="0" arch="s390x" src="ruby-3.0.7-143.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>ruby-3.0.7-143.module_el8.10.0+3852+ce828b19.s390x.rpm</filename>
          <sum type="sha256">360aaeab01f88d22f89dd6feeec1a1324c8ce44f06346d9fa83282a8280d1c69</sum>
        </package>
        <package name="rubygem-power_assert" version="1.2.1" release="143.module_el8.10.0+3852+ce828b19" epoch="0" arch="noarch" src="ruby-3.0.7-143.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>rubygem-power_assert-1.2.1-143.module_el8.10.0+3852+ce828b19.noarch.rpm</filename>
          <sum type="sha256">3e14193dabf6fb73b63d8593c4db98ed0b0d3174a8b5faf170016416eee2b884</sum>
        </package>
        <package name="rubygem-typeprof" version="0.15.2" release="143.module_el8.10.0+3852+ce828b19" epoch="0" arch="noarch" src="ruby-3.0.7-143.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>rubygem-typeprof-0.15.2-143.module_el8.10.0+3852+ce828b19.noarch.rpm</filename>
          <sum type="sha256">45ef7144edf81471a63e1369d39036cf1ee466692d684bc59443dec6ee46fa2f</sum>
        </package>
        <package name="rubygem-rake" version="13.0.3" release="143.module_el8.10.0+3852+ce828b19" epoch="0" arch="noarch" src="ruby-3.0.7-143.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>rubygem-rake-13.0.3-143.module_el8.10.0+3852+ce828b19.noarch.rpm</filename>
          <sum type="sha256">513bb1d4685cb29a3c652aaabc8b8647df782e541480c28992663a6d0f9bec2a</sum>
        </package>
        <package name="rubygem-bundler" version="2.2.33" release="143.module_el8.10.0+3852+ce828b19" epoch="0" arch="noarch" src="ruby-3.0.7-143.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>rubygem-bundler-2.2.33-143.module_el8.10.0+3852+ce828b19.noarch.rpm</filename>
          <sum type="sha256">55a0eb7d4124518bd1115a7b3f286d33ab554120692566738c1fc7b00193bb16</sum>
        </package>
        <package name="rubygem-psych" version="3.3.2" release="143.module_el8.10.0+3852+ce828b19" epoch="0" arch="s390x" src="ruby-3.0.7-143.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>rubygem-psych-3.3.2-143.module_el8.10.0+3852+ce828b19.s390x.rpm</filename>
          <sum type="sha256">67ce0c954f1cf5c9aedfc9e23f5e3fb3bc3b88d5bc5ca72df5c84e1df8954c18</sum>
        </package>
        <package name="rubygem-rdoc" version="6.3.4.1" release="143.module_el8.10.0+3852+ce828b19" epoch="0" arch="noarch" src="ruby-3.0.7-143.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>rubygem-rdoc-6.3.4.1-143.module_el8.10.0+3852+ce828b19.noarch.rpm</filename>
          <sum type="sha256">743a6e5f262a5f739ed2811a81c898e00d1f51705cd00199641f4b169c4611ad</sum>
        </package>
        <package name="rubygem-pg-doc" version="1.2.3" release="1.module_el8.10.0+3852+ce828b19" epoch="0" arch="noarch" src="rubygem-pg-1.2.3-1.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>rubygem-pg-doc-1.2.3-1.module_el8.10.0+3852+ce828b19.noarch.rpm</filename>
          <sum type="sha256">7efc18ebb66457c2b224e9d68e60ab9480e19b14720c9584adde6139e7e9c288</sum>
        </package>
        <package name="rubygems" version="3.2.33" release="143.module_el8.10.0+3852+ce828b19" epoch="0" arch="noarch" src="ruby-3.0.7-143.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>rubygems-3.2.33-143.module_el8.10.0+3852+ce828b19.noarch.rpm</filename>
          <sum type="sha256">8469600aef77e953eff599a39b46f6f359be8eeec339e86c3eb8d03a3bf5e077</sum>
        </package>
        <package name="rubygem-abrt" version="0.4.0" release="1.module_el8.10.0+3852+ce828b19" epoch="0" arch="noarch" src="rubygem-abrt-0.4.0-1.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>rubygem-abrt-0.4.0-1.module_el8.10.0+3852+ce828b19.noarch.rpm</filename>
          <sum type="sha256">84b70695336bc292fd58bfc44a9a143b0ec5be8ba8f156b6ddd073d152037a6c</sum>
        </package>
        <package name="rubygem-mysql2" version="0.5.3" release="2.module_el8.10.0+3852+ce828b19" epoch="0" arch="s390x" src="rubygem-mysql2-0.5.3-2.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>rubygem-mysql2-0.5.3-2.module_el8.10.0+3852+ce828b19.s390x.rpm</filename>
          <sum type="sha256">8e030bb6dc303c305c821e3206669fcdaa1aa3d5d76a24c17b9ef74adc865d93</sum>
        </package>
        <package name="rubygem-json" version="2.5.1" release="143.module_el8.10.0+3852+ce828b19" epoch="0" arch="s390x" src="ruby-3.0.7-143.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>rubygem-json-2.5.1-143.module_el8.10.0+3852+ce828b19.s390x.rpm</filename>
          <sum type="sha256">92ce7b430cd7ad3538dc5711432a163fd2508cd4c38b01cfcc5388f36f34195f</sum>
        </package>
        <package name="ruby-libs" version="3.0.7" release="143.module_el8.10.0+3852+ce828b19" epoch="0" arch="s390x" src="ruby-3.0.7-143.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>ruby-libs-3.0.7-143.module_el8.10.0+3852+ce828b19.s390x.rpm</filename>
          <sum type="sha256">955ff57e16ac6ff4ed86c657834390c6ee985d058a32a6e420c5197b0b5a8b33</sum>
        </package>
        <package name="rubygem-bigdecimal" version="3.0.0" release="143.module_el8.10.0+3852+ce828b19" epoch="0" arch="s390x" src="ruby-3.0.7-143.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>rubygem-bigdecimal-3.0.0-143.module_el8.10.0+3852+ce828b19.s390x.rpm</filename>
          <sum type="sha256">9f1d56abc7ea1377056f5549d56df66526f70d3291f05a524cbe8f90c6db2ed7</sum>
        </package>
        <package name="rubygem-abrt-doc" version="0.4.0" release="1.module_el8.10.0+3852+ce828b19" epoch="0" arch="noarch" src="rubygem-abrt-0.4.0-1.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>rubygem-abrt-doc-0.4.0-1.module_el8.10.0+3852+ce828b19.noarch.rpm</filename>
          <sum type="sha256">a9168016abaca5b2f824863d77590941a090c45c163392e9947abfc0f03dcd48</sum>
        </package>
        <package name="rubygem-mysql2-doc" version="0.5.3" release="2.module_el8.10.0+3852+ce828b19" epoch="0" arch="noarch" src="rubygem-mysql2-0.5.3-2.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>rubygem-mysql2-doc-0.5.3-2.module_el8.10.0+3852+ce828b19.noarch.rpm</filename>
          <sum type="sha256">ae6e65f7e7ebc7407cc08fcda0e2ce43e3db486c38331fb74d89195305f8c660</sum>
        </package>
        <package name="ruby-devel" version="3.0.7" release="143.module_el8.10.0+3852+ce828b19" epoch="0" arch="s390x" src="ruby-3.0.7-143.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>ruby-devel-3.0.7-143.module_el8.10.0+3852+ce828b19.s390x.rpm</filename>
          <sum type="sha256">be7ca7f82799d6a58ed151bfae50ce199bec3aadb1d121794e44e5a61b395d08</sum>
        </package>
        <package name="rubygem-pg" version="1.2.3" release="1.module_el8.6.0+3144+d138acf1" epoch="0" arch="s390x" src="rubygem-pg-1.2.3-1.module_el8.6.0+3144+d138acf1.src.rpm">
          <filename>rubygem-pg-1.2.3-1.module_el8.6.0+3144+d138acf1.s390x.rpm</filename>
          <sum type="sha256">e5e418e782fc2d4ec7746c1c503d1e951f6b0e366a1ff9e81c67d85da1ef9552</sum>
        </package>
        <package name="rubygem-rexml" version="3.2.5" release="143.module_el8.10.0+3852+ce828b19" epoch="0" arch="noarch" src="ruby-3.0.7-143.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>rubygem-rexml-3.2.5-143.module_el8.10.0+3852+ce828b19.noarch.rpm</filename>
          <sum type="sha256">ea399230bd36dd16a3ebeead6e2f5d48000ffd0a4269294229a300ec9634211b</sum>
        </package>
        <package name="rubygem-test-unit" version="3.3.7" release="143.module_el8.10.0+3852+ce828b19" epoch="0" arch="noarch" src="ruby-3.0.7-143.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>rubygem-test-unit-3.3.7-143.module_el8.10.0+3852+ce828b19.noarch.rpm</filename>
          <sum type="sha256">ed5976754fc7f01e1f42f37523fd9c0eed263ccce56bded957ea7e7b4d1137ea</sum>
        </package>
        <package name="ruby-default-gems" version="3.0.7" release="143.module_el8.10.0+3852+ce828b19" epoch="0" arch="noarch" src="ruby-3.0.7-143.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>ruby-default-gems-3.0.7-143.module_el8.10.0+3852+ce828b19.noarch.rpm</filename>
          <sum type="sha256">f6d3ada62e813d32f68d1912ab9b88cd8660f0e2a8b24456d4f689d1c2781abc</sum>
        </package>
        <package name="rubygem-irb" version="1.3.5" release="143.module_el8.10.0+3852+ce828b19" epoch="0" arch="noarch" src="ruby-3.0.7-143.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>rubygem-irb-1.3.5-143.module_el8.10.0+3852+ce828b19.noarch.rpm</filename>
          <sum type="sha256">fb08cc356b46b37c9785209c1cd916cd36f7b06af35d7d8425021d513c16f82c</sum>
        </package>
        <package name="ruby-doc" version="3.0.7" release="143.module_el8.10.0+3852+ce828b19" epoch="0" arch="noarch" src="ruby-3.0.7-143.module_el8.10.0+3852+ce828b19.src.rpm">
          <filename>ruby-doc-3.0.7-143.module_el8.10.0+3852+ce828b19.noarch.rpm</filename>
          <sum type="sha256">fdb56e67fc61ea8c12ea22aa7fc13a6b7c193f959ac9cceaa90061d37b84bbf3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3546</id>
    <title>Moderate: ruby:3.1 security, bug fix, and enhancement update</title>
    <issued date="2024-06-03 00:00:00"/>
    <updated date="2024-06-04 07:46:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby:3.1 security, bug fix, and enhancement update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

* ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
* ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
* ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3546" id="RHSA-2024:3546" type="rhsa" title="RHSA-2024:3546"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27280" id="CVE-2024-27280" type="cve" title="CVE-2024-27280"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27281" id="CVE-2024-27281" type="cve" title="CVE-2024-27281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27282" id="CVE-2024-27282" type="cve" title="CVE-2024-27282"/>
      <reference href="https://bugzilla.redhat.com/2270749" id="2270749" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270750" id="2270750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2276810" id="2276810" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3546.html" id="ALSA-2024:3546" type="self" title="ALSA-2024:3546"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="ruby" stream="3.1" version="8100020240603205718" context="9edba152" arch="s390x"/>
        <package name="rubygem-rss" version="0.2.9" release="143.module_el8.10.0+3854+02eaa59a" epoch="0" arch="noarch" src="ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-rss-0.2.9-143.module_el8.10.0+3854+02eaa59a.noarch.rpm</filename>
          <sum type="sha256">0c2a8281df449cb486442fb90e8c40d4a79c64143c97e104614823255e3ad9ab</sum>
        </package>
        <package name="ruby-devel" version="3.1.5" release="143.module_el8.10.0+3854+02eaa59a" epoch="0" arch="s390x" src="ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>ruby-devel-3.1.5-143.module_el8.10.0+3854+02eaa59a.s390x.rpm</filename>
          <sum type="sha256">23b0638bf4c33069b99f9ee9c701389f4b270f51b410557858a4f7d4a25dd55d</sum>
        </package>
        <package name="ruby-libs" version="3.1.5" release="143.module_el8.10.0+3854+02eaa59a" epoch="0" arch="s390x" src="ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>ruby-libs-3.1.5-143.module_el8.10.0+3854+02eaa59a.s390x.rpm</filename>
          <sum type="sha256">41fedd8d5671144fb8565783f47c3e4eb6340992948f1e0a16c0ae8471ac5856</sum>
        </package>
        <package name="rubygem-minitest" version="5.15.0" release="143.module_el8.10.0+3854+02eaa59a" epoch="0" arch="noarch" src="ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-minitest-5.15.0-143.module_el8.10.0+3854+02eaa59a.noarch.rpm</filename>
          <sum type="sha256">43fb974852f98c5ea257784f25c2946ecfccc7bd823146cc4909467b1861f3d4</sum>
        </package>
        <package name="rubygem-typeprof" version="0.21.3" release="143.module_el8.10.0+3854+02eaa59a" epoch="0" arch="noarch" src="ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-typeprof-0.21.3-143.module_el8.10.0+3854+02eaa59a.noarch.rpm</filename>
          <sum type="sha256">5676c32596c579d03f4245a4fd1d0e6eb32d1ca19c16d0a00915f30c0afb10e3</sum>
        </package>
        <package name="rubygem-io-console" version="0.5.11" release="143.module_el8.10.0+3854+02eaa59a" epoch="0" arch="s390x" src="ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-io-console-0.5.11-143.module_el8.10.0+3854+02eaa59a.s390x.rpm</filename>
          <sum type="sha256">56a6c8f83b227319083a0ac0e05531efa5ab0443f8e9c2f46c22edf6f73eb47e</sum>
        </package>
        <package name="ruby-default-gems" version="3.1.5" release="143.module_el8.10.0+3854+02eaa59a" epoch="0" arch="noarch" src="ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>ruby-default-gems-3.1.5-143.module_el8.10.0+3854+02eaa59a.noarch.rpm</filename>
          <sum type="sha256">677d0ce73518fb3ed3767bb45b999c865a46b78ecbf379db6a4ff2dbc06625c8</sum>
        </package>
        <package name="rubygem-json" version="2.6.1" release="143.module_el8.10.0+3854+02eaa59a" epoch="0" arch="s390x" src="ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-json-2.6.1-143.module_el8.10.0+3854+02eaa59a.s390x.rpm</filename>
          <sum type="sha256">6db3b463ce8c7214e87d0acc7f1c49bed9dc853ab0af72e689bde67f4c59164a</sum>
        </package>
        <package name="ruby" version="3.1.5" release="143.module_el8.10.0+3854+02eaa59a" epoch="0" arch="s390x" src="ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.s390x.rpm</filename>
          <sum type="sha256">713e24c88fc37baa903bc97b93045ceb13cd6af82dd9ba1c3d58a8b0aa798205</sum>
        </package>
        <package name="rubygem-rexml" version="3.2.5" release="143.module_el8.10.0+3854+02eaa59a" epoch="0" arch="noarch" src="ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-rexml-3.2.5-143.module_el8.10.0+3854+02eaa59a.noarch.rpm</filename>
          <sum type="sha256">8b795229fdbeb02170eed7c9056e4b0a8aeec95b856183adbe067ecea6f1bb10</sum>
        </package>
        <package name="ruby-doc" version="3.1.5" release="143.module_el8.10.0+3854+02eaa59a" epoch="0" arch="noarch" src="ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>ruby-doc-3.1.5-143.module_el8.10.0+3854+02eaa59a.noarch.rpm</filename>
          <sum type="sha256">8c4abd4bac286747769a05badbbafe5ee20900006e5067136e1804c0972b6526</sum>
        </package>
        <package name="rubygem-rdoc" version="6.4.1.1" release="143.module_el8.10.0+3854+02eaa59a" epoch="0" arch="noarch" src="ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-rdoc-6.4.1.1-143.module_el8.10.0+3854+02eaa59a.noarch.rpm</filename>
          <sum type="sha256">9109346d66d9d78dfb3b125ecfada795feb35e09df154e83304332552c0443e4</sum>
        </package>
        <package name="rubygem-mysql2" version="0.5.3" release="3.module_el8.9.0+3746+91b8233a" epoch="0" arch="s390x" src="rubygem-mysql2-0.5.3-3.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-mysql2-0.5.3-3.module_el8.9.0+3746+91b8233a.s390x.rpm</filename>
          <sum type="sha256">918f33bb63f2437177e2ccc66781a31b62f2b20d0a0b1449cef7c7359b24eb9d</sum>
        </package>
        <package name="rubygem-irb" version="1.4.1" release="143.module_el8.10.0+3854+02eaa59a" epoch="0" arch="noarch" src="ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-irb-1.4.1-143.module_el8.10.0+3854+02eaa59a.noarch.rpm</filename>
          <sum type="sha256">a1354cd498c9a05bbd486a6a800aecff6978d3d8f947d2585c9dd2ddd5c172cc</sum>
        </package>
        <package name="rubygems-devel" version="3.3.27" release="143.module_el8.10.0+3854+02eaa59a" epoch="0" arch="noarch" src="ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygems-devel-3.3.27-143.module_el8.10.0+3854+02eaa59a.noarch.rpm</filename>
          <sum type="sha256">a2b501f7ed43672e9cb911b71d8c2edb2064741c83b2893db02cbd883d86e153</sum>
        </package>
        <package name="rubygem-abrt" version="0.4.0" release="1.module_el8.9.0+3746+91b8233a" epoch="0" arch="noarch" src="rubygem-abrt-0.4.0-1.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-abrt-0.4.0-1.module_el8.9.0+3746+91b8233a.noarch.rpm</filename>
          <sum type="sha256">a4de616c47a50c4a54611ff12499a00e395fcdf6e3c2ce813e27b0f581ed2c12</sum>
        </package>
        <package name="rubygem-psych" version="4.0.4" release="143.module_el8.10.0+3854+02eaa59a" epoch="0" arch="s390x" src="ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-psych-4.0.4-143.module_el8.10.0+3854+02eaa59a.s390x.rpm</filename>
          <sum type="sha256">a655fbdf1c07eaf4c278422fc787c044f9d25ca3f5859f1eae470d95e81e1c00</sum>
        </package>
        <package name="rubygem-mysql2-doc" version="0.5.3" release="3.module_el8.9.0+3746+91b8233a" epoch="0" arch="noarch" src="rubygem-mysql2-0.5.3-3.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-mysql2-doc-0.5.3-3.module_el8.9.0+3746+91b8233a.noarch.rpm</filename>
          <sum type="sha256">b041e7b43395ddba070a6629f247dce8d99b56956940ee94a67a0a2e0ee1fd0a</sum>
        </package>
        <package name="rubygem-test-unit" version="3.5.3" release="143.module_el8.10.0+3854+02eaa59a" epoch="0" arch="noarch" src="ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-test-unit-3.5.3-143.module_el8.10.0+3854+02eaa59a.noarch.rpm</filename>
          <sum type="sha256">b316cddb0fe59c60b512538bb1d02b3de26045e52d07ade8ec54c2583418f742</sum>
        </package>
        <package name="rubygem-abrt-doc" version="0.4.0" release="1.module_el8.9.0+3746+91b8233a" epoch="0" arch="noarch" src="rubygem-abrt-0.4.0-1.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-abrt-doc-0.4.0-1.module_el8.9.0+3746+91b8233a.noarch.rpm</filename>
          <sum type="sha256">b3b928354f6d07cca1e7cfce71aa08f097da08d99e41f459707e928f85703485</sum>
        </package>
        <package name="ruby-bundled-gems" version="3.1.5" release="143.module_el8.10.0+3854+02eaa59a" epoch="0" arch="s390x" src="ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>ruby-bundled-gems-3.1.5-143.module_el8.10.0+3854+02eaa59a.s390x.rpm</filename>
          <sum type="sha256">b4f3caef40c48dbedc76748b64efb3b646b4a48f02bf5b5b18a009182ffbaed3</sum>
        </package>
        <package name="rubygem-rake" version="13.0.6" release="143.module_el8.10.0+3854+02eaa59a" epoch="0" arch="noarch" src="ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-rake-13.0.6-143.module_el8.10.0+3854+02eaa59a.noarch.rpm</filename>
          <sum type="sha256">b50f069e303b0b7c062743ffcaa8aa8e89b47739fd4b358b6d6edb19c9f441de</sum>
        </package>
        <package name="rubygem-rbs" version="2.7.0" release="143.module_el8.10.0+3854+02eaa59a" epoch="0" arch="s390x" src="ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-rbs-2.7.0-143.module_el8.10.0+3854+02eaa59a.s390x.rpm</filename>
          <sum type="sha256">b599d878f7631e18afa17eee0b3243c12e95660dd7eb7a4fecb7e9019f5b994f</sum>
        </package>
        <package name="rubygem-pg-doc" version="1.3.2" release="1.module_el8.9.0+3746+91b8233a" epoch="0" arch="noarch" src="rubygem-pg-1.3.2-1.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-pg-doc-1.3.2-1.module_el8.9.0+3746+91b8233a.noarch.rpm</filename>
          <sum type="sha256">baf9236c33aec08aad023fee6e81391fc5027f5860c40affd4596d3a958fabbc</sum>
        </package>
        <package name="rubygem-pg" version="1.3.2" release="1.module_el8.9.0+3746+91b8233a" epoch="0" arch="s390x" src="rubygem-pg-1.3.2-1.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-pg-1.3.2-1.module_el8.9.0+3746+91b8233a.s390x.rpm</filename>
          <sum type="sha256">c5850062377cea2f45840ad208edacee1c01685eff9e15babb4969842bf65557</sum>
        </package>
        <package name="rubygems" version="3.3.27" release="143.module_el8.10.0+3854+02eaa59a" epoch="0" arch="noarch" src="ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygems-3.3.27-143.module_el8.10.0+3854+02eaa59a.noarch.rpm</filename>
          <sum type="sha256">ce68996b23674776bf538b5645f63269263f5009e1eac7c07e030313436c15d5</sum>
        </package>
        <package name="rubygem-bigdecimal" version="3.1.1" release="143.module_el8.10.0+3854+02eaa59a" epoch="0" arch="s390x" src="ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-bigdecimal-3.1.1-143.module_el8.10.0+3854+02eaa59a.s390x.rpm</filename>
          <sum type="sha256">ec5c0d71d2bc25b43e847593de07ba0c1b51ccbabdd516259f55473a86990c16</sum>
        </package>
        <package name="rubygem-bundler" version="2.3.27" release="143.module_el8.10.0+3854+02eaa59a" epoch="0" arch="noarch" src="ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-bundler-2.3.27-143.module_el8.10.0+3854+02eaa59a.noarch.rpm</filename>
          <sum type="sha256">f89fc7ed17d529edd595b0649d769b32573989ff2ec14b5c1547cf524bb50ed9</sum>
        </package>
        <package name="rubygem-power_assert" version="2.0.1" release="143.module_el8.10.0+3854+02eaa59a" epoch="0" arch="noarch" src="ruby-3.1.5-143.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-power_assert-2.0.1-143.module_el8.10.0+3854+02eaa59a.noarch.rpm</filename>
          <sum type="sha256">f907f8c26f82aa2aadcf6dcdfa364faa0b3c0fb2e06f5a64bf3984eebe5a5d54</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3626</id>
    <title>Moderate: libxml2 security update</title>
    <issued date="2024-06-05 00:00:00"/>
    <updated date="2024-06-05 18:34:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of
various XML standards.

Security Fix(es):

* libxml2: use-after-free in XMLReader (CVE-2024-25062)

For more details about the security issue(s), including the impact,
a CVSS score, acknowledgments, and other related information, refer
to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3626" id="RHSA-2024:3626" type="rhsa" title="RHSA-2024:3626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25062" id="CVE-2024-25062" type="cve" title="CVE-2024-25062"/>
      <reference href="https://bugzilla.redhat.com/2262726" id="2262726" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3626.html" id="ALSA-2024:3626" type="self" title="ALSA-2024:3626"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libxml2-devel" version="2.9.7" release="18.el8_10.1" epoch="0" arch="s390x" src="libxml2-2.9.7-18.el8_10.1.src.rpm">
          <filename>libxml2-devel-2.9.7-18.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">33a6a9b5056187d797015053f8330455f2ff0d050300ddc9c747a8f6b5540fbf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3666</id>
    <title>Important: tomcat security and bug fix update</title>
    <issued date="2024-06-06 00:00:00"/>
    <updated date="2024-06-06 12:55:40"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tomcat security and bug fix update</summary>
    <description>Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.

Security Fix(es):

* Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549)
* Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672)

Bug Fix(es):

* Rebase tomcat to version 9.0.87 (JIRA:AlmaLinux-35813)
* Amend tomcat package's changelog so that fixed CVEs are mentioned explicitly (JIRA:AlmaLinux-38548)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3666" id="RHSA-2024:3666" type="rhsa" title="RHSA-2024:3666"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23672" id="CVE-2024-23672" type="cve" title="CVE-2024-23672"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24549" id="CVE-2024-24549" type="cve" title="CVE-2024-24549"/>
      <reference href="https://bugzilla.redhat.com/2269607" id="2269607" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269608" id="2269608" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3666.html" id="ALSA-2024:3666" type="self" title="ALSA-2024:3666"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="tomcat-webapps" version="9.0.87" release="1.el8_10.1.alma.1" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.1.alma.1.src.rpm">
          <filename>tomcat-webapps-9.0.87-1.el8_10.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">1ff32773cce5105c83c457b7ba2e261b9740a215a06c302abd11a5468ff3682a</sum>
        </package>
        <package name="tomcat-servlet-4.0-api" version="9.0.87" release="1.el8_10.1.alma.1" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.1.alma.1.src.rpm">
          <filename>tomcat-servlet-4.0-api-9.0.87-1.el8_10.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">3eefdfa6953c7bf0d5b41155cb73d65b2915b357a0b2da2fe42e112610d8080c</sum>
        </package>
        <package name="tomcat-lib" version="9.0.87" release="1.el8_10.1.alma.1" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.1.alma.1.src.rpm">
          <filename>tomcat-lib-9.0.87-1.el8_10.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">692410447b47e283646811b2c01dc52cb0c6d0e1a3d40f0ddbe21fd1f7008015</sum>
        </package>
        <package name="tomcat-docs-webapp" version="9.0.87" release="1.el8_10.1.alma.1" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.1.alma.1.src.rpm">
          <filename>tomcat-docs-webapp-9.0.87-1.el8_10.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">792e3e2da00c02575cfbf3bfad26a2a138e461b2cedfe2edd3cf3c0de08112ee</sum>
        </package>
        <package name="tomcat-jsp-2.3-api" version="9.0.87" release="1.el8_10.1.alma.1" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.1.alma.1.src.rpm">
          <filename>tomcat-jsp-2.3-api-9.0.87-1.el8_10.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">8c81c47b78ce8e5cb6ce97d8f42e6ac98cdd6c1e03ec6ab0c2189b581ff6f603</sum>
        </package>
        <package name="tomcat-el-3.0-api" version="9.0.87" release="1.el8_10.1.alma.1" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.1.alma.1.src.rpm">
          <filename>tomcat-el-3.0-api-9.0.87-1.el8_10.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">8f2784f9a834bcd8d272db6fa117360e616d0d0ad82e7fd2cffc98998b180a74</sum>
        </package>
        <package name="tomcat" version="9.0.87" release="1.el8_10.1.alma.1" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.1.alma.1.src.rpm">
          <filename>tomcat-9.0.87-1.el8_10.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">91d7afc92b11d177aca6ef6d0b57b49bd406b73ec4fc9a9ef60ac459be56af66</sum>
        </package>
        <package name="tomcat-admin-webapps" version="9.0.87" release="1.el8_10.1.alma.1" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.1.alma.1.src.rpm">
          <filename>tomcat-admin-webapps-9.0.87-1.el8_10.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">a00345e119cee48d48d13971b427ac714538e04deb2f402d8393583e03bd0822</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3670</id>
    <title>Moderate: ruby:3.3 security, bug fix, and enhancement update</title>
    <issued date="2024-06-06 00:00:00"/>
    <updated date="2024-06-10 14:22:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby:3.3 security, bug fix, and enhancement update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.3). (AlmaLinux-37446)

Security Fix(es):

* ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
* ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
* ruby: Arbitrary memory address read vulnerability with Regex search
(CVE-2024-27282)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3670" id="RHSA-2024:3670" type="rhsa" title="RHSA-2024:3670"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27280" id="CVE-2024-27280" type="cve" title="CVE-2024-27280"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27281" id="CVE-2024-27281" type="cve" title="CVE-2024-27281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27282" id="CVE-2024-27282" type="cve" title="CVE-2024-27282"/>
      <reference href="https://bugzilla.redhat.com/2270749" id="2270749" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270750" id="2270750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2276810" id="2276810" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3670.html" id="ALSA-2024:3670" type="self" title="ALSA-2024:3670"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="ruby" stream="3.3" version="8100020240606162810" context="9edba152" arch="s390x"/>
        <package name="rubygem-mysql2" version="0.5.5" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="s390x" src="rubygem-mysql2-0.5.5-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-mysql2-0.5.5-1.module_el8.10.0+3799+191214cc.s390x.rpm</filename>
          <sum type="sha256">0212e4bd0a248fdb4c10424d90e73d4c0400b209c24f90e3a5fac26348adcdc3</sum>
        </package>
        <package name="rubygem-io-console" version="0.7.1" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="s390x" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>rubygem-io-console-0.7.1-2.module_el8.10.0+3855+767cb125.s390x.rpm</filename>
          <sum type="sha256">0ec6d5ab79d06322d266262462db7c71cd160ee1260b40568518fc38181952fa</sum>
        </package>
        <package name="rubygem-rake" version="13.1.0" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>rubygem-rake-13.1.0-2.module_el8.10.0+3855+767cb125.noarch.rpm</filename>
          <sum type="sha256">29a0d577255f1dc0ead45c62b14b16391b7b1c0dd9b012f74f841310de7e6eca</sum>
        </package>
        <package name="rubygem-json" version="2.7.1" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="s390x" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>rubygem-json-2.7.1-2.module_el8.10.0+3855+767cb125.s390x.rpm</filename>
          <sum type="sha256">2b595df5672c9965403a2f2f3777e36043e2fedc308526d5f434c5d275c5ccbc</sum>
        </package>
        <package name="rubygem-rss" version="0.3.0" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>rubygem-rss-0.3.0-2.module_el8.10.0+3855+767cb125.noarch.rpm</filename>
          <sum type="sha256">2f13b5a0d6538aefd6b63102b6edf6266dc41f7b411c7a07852a64cd308a39e3</sum>
        </package>
        <package name="rubygems" version="3.5.9" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>rubygems-3.5.9-2.module_el8.10.0+3855+767cb125.noarch.rpm</filename>
          <sum type="sha256">33d74a8a9a425f6b49dc494bf3c5fe54a28a5d9bf2a760bd1c96eb032c203608</sum>
        </package>
        <package name="rubygem-rbs" version="3.4.0" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="s390x" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>rubygem-rbs-3.4.0-2.module_el8.10.0+3855+767cb125.s390x.rpm</filename>
          <sum type="sha256">369538120f605b2350672de5ae970143b066e4c71f117f529180b52363be6081</sum>
        </package>
        <package name="rubygem-test-unit" version="3.6.1" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>rubygem-test-unit-3.6.1-2.module_el8.10.0+3855+767cb125.noarch.rpm</filename>
          <sum type="sha256">4066859a0bfd7a366b7d3abd406d7cc538c72983f68c26093108f42a863c5c75</sum>
        </package>
        <package name="rubygem-psych" version="5.1.2" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="s390x" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>rubygem-psych-5.1.2-2.module_el8.10.0+3855+767cb125.s390x.rpm</filename>
          <sum type="sha256">4343da87e0eaaa8e9919a3223478a249c1ebe04542cb31c49600d6676e6f6e60</sum>
        </package>
        <package name="rubygem-irb" version="1.11.0" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>rubygem-irb-1.11.0-2.module_el8.10.0+3855+767cb125.noarch.rpm</filename>
          <sum type="sha256">4468c56b17722519fa88ecf4d57e771cf0e16017717b0da19dd6373e01ff8a18</sum>
        </package>
        <package name="rubygem-bundler" version="2.5.9" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>rubygem-bundler-2.5.9-2.module_el8.10.0+3855+767cb125.noarch.rpm</filename>
          <sum type="sha256">47659a59398ff4e68a61352f39b7e9f7bb2905539be7c25fd4fa2a3fff7506d9</sum>
        </package>
        <package name="rubygem-racc" version="1.7.3" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="s390x" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>rubygem-racc-1.7.3-2.module_el8.10.0+3855+767cb125.s390x.rpm</filename>
          <sum type="sha256">4c0d177321393686a8f17b600c232e2257406f43a8b0a5b5f1d4be0078863bbe</sum>
        </package>
        <package name="rubygem-bigdecimal" version="3.1.5" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="s390x" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>rubygem-bigdecimal-3.1.5-2.module_el8.10.0+3855+767cb125.s390x.rpm</filename>
          <sum type="sha256">55c8d765331a951955c62701cc0234cc4df5c81223ad214beeebb47a94762e61</sum>
        </package>
        <package name="rubygem-rexml" version="3.2.6" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>rubygem-rexml-3.2.6-2.module_el8.10.0+3855+767cb125.noarch.rpm</filename>
          <sum type="sha256">622b7bf2b9ebc27d575b4dd6b3bb0cef17c7d813c661f412610cea54b79ef462</sum>
        </package>
        <package name="rubygem-rdoc" version="6.6.3.1" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>rubygem-rdoc-6.6.3.1-2.module_el8.10.0+3855+767cb125.noarch.rpm</filename>
          <sum type="sha256">83c1237de90d2c5724cb4c0a5796a21baee61e18254271fedfc6a3b6ad72ff0f</sum>
        </package>
        <package name="ruby-devel" version="3.3.1" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="s390x" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>ruby-devel-3.3.1-2.module_el8.10.0+3855+767cb125.s390x.rpm</filename>
          <sum type="sha256">844b82261954d03bfffee731456b7d8d15b3877413dcdbabf11eb3f06aa162e1</sum>
        </package>
        <package name="rubygem-typeprof" version="0.21.9" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>rubygem-typeprof-0.21.9-2.module_el8.10.0+3855+767cb125.noarch.rpm</filename>
          <sum type="sha256">9837d4fe31ea7cf91718054aaad47117c1aeb49fac12f5fc57a6f8e7682588e0</sum>
        </package>
        <package name="ruby-bundled-gems" version="3.3.1" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="s390x" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>ruby-bundled-gems-3.3.1-2.module_el8.10.0+3855+767cb125.s390x.rpm</filename>
          <sum type="sha256">9b875491830f61511bda75edebe3851eb4497ba43228c7ee6594d184f2e85ec0</sum>
        </package>
        <package name="rubygem-mysql2-doc" version="0.5.5" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-mysql2-0.5.5-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-mysql2-doc-0.5.5-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">a1e84a63a7afd9043eb9ee27d2b4a2784de6e4790859efeb6e29353b8922b91f</sum>
        </package>
        <package name="ruby-doc" version="3.3.1" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>ruby-doc-3.3.1-2.module_el8.10.0+3855+767cb125.noarch.rpm</filename>
          <sum type="sha256">a96b95f0ba62fcb579f5c06f6836aa48af7ee0019291d224ddeeed3d8515a91c</sum>
        </package>
        <package name="rubygem-pg" version="1.5.4" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="s390x" src="rubygem-pg-1.5.4-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-pg-1.5.4-1.module_el8.10.0+3799+191214cc.s390x.rpm</filename>
          <sum type="sha256">b17f6e9ce3697902b5d1a0a00f804510913440b751583002e5226f0f1bafcfad</sum>
        </package>
        <package name="rubygem-power_assert" version="2.0.3" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>rubygem-power_assert-2.0.3-2.module_el8.10.0+3855+767cb125.noarch.rpm</filename>
          <sum type="sha256">b20a878d3dea8a3bf7620d01c84d87506468252d1a7009a8d7383d358b03c565</sum>
        </package>
        <package name="rubygem-pg-doc" version="1.5.4" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-pg-1.5.4-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-pg-doc-1.5.4-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">b8da427ba088e5a263b5c71d592a6515861cf12932be7ac5577f51afc1c68900</sum>
        </package>
        <package name="ruby-libs" version="3.3.1" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="s390x" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>ruby-libs-3.3.1-2.module_el8.10.0+3855+767cb125.s390x.rpm</filename>
          <sum type="sha256">b9d9ca3a9cf862eacc7e03191ad5101589edc6ab6337fb07ce6b62c18cbfb895</sum>
        </package>
        <package name="rubygem-abrt-doc" version="0.4.0" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-abrt-0.4.0-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-abrt-doc-0.4.0-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">c7018cb7e3cfdd28f00117935672e78df8eddf81f308a36b9be1dd8a3fec2afe</sum>
        </package>
        <package name="ruby-default-gems" version="3.3.1" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>ruby-default-gems-3.3.1-2.module_el8.10.0+3855+767cb125.noarch.rpm</filename>
          <sum type="sha256">c8b0e14d0239cbe888d1684a57bbcc086222a9267e6fc145a61c1022ee08f9d0</sum>
        </package>
        <package name="rubygems-devel" version="3.5.9" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>rubygems-devel-3.5.9-2.module_el8.10.0+3855+767cb125.noarch.rpm</filename>
          <sum type="sha256">cb21ac5386973ddd4fffabfa61691323b34c3d04f529631923f3a79de3333c0f</sum>
        </package>
        <package name="rubygem-minitest" version="5.20.0" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="noarch" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>rubygem-minitest-5.20.0-2.module_el8.10.0+3855+767cb125.noarch.rpm</filename>
          <sum type="sha256">d2fb9911fdfacd518d63e86d236a6d199467ad01ec0dc06d17591c82a009853e</sum>
        </package>
        <package name="rubygem-abrt" version="0.4.0" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-abrt-0.4.0-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-abrt-0.4.0-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">eb0f7cad4d0f103b5e53f11647208a780406db8c8cd8c9556e219bec8e1d9893</sum>
        </package>
        <package name="ruby" version="3.3.1" release="2.module_el8.10.0+3855+767cb125" epoch="0" arch="s390x" src="ruby-3.3.1-2.module_el8.10.0+3855+767cb125.src.rpm">
          <filename>ruby-3.3.1-2.module_el8.10.0+3855+767cb125.s390x.rpm</filename>
          <sum type="sha256">f942eb4b448f6a0786ebfbae846905f6665716a642892aa4b99c7bcb1c53e870</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3755</id>
    <title>Important: idm:DL1 security update</title>
    <issued date="2024-06-10 00:00:00"/>
    <updated date="2024-06-20 15:58:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>idm:DL1 security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. 

Security Fix(es):

* CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service
* CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3755" id="RHSA-2024:3755" type="rhsa" title="RHSA-2024:3755"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2698" id="CVE-2024-2698" type="cve" title="CVE-2024-2698"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3183" id="CVE-2024-3183" type="cve" title="CVE-2024-3183"/>
      <reference href="https://bugzilla.redhat.com/2270353" id="2270353" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270685" id="2270685" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3755.html" id="ALSA-2024:3755" type="self" title="ALSA-2024:3755"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="idm" stream="DL1" version="8100020240524093607" context="93c20af6" arch="s390x"/>
        <package name="ipa-python-compat" version="4.9.13" release="10.module_el8.10.0+3857+9c8da539" epoch="0" arch="noarch" src="ipa-4.9.13-10.module_el8.10.0+3857+9c8da539.src.rpm">
          <filename>ipa-python-compat-4.9.13-10.module_el8.10.0+3857+9c8da539.noarch.rpm</filename>
          <sum type="sha256">1a97c446ae3a0ab511cfc4a7aad7331ac7db94aa170f06c795d8344b32d5302c</sum>
        </package>
        <package name="ipa-healthcheck" version="0.12" release="3.module_el8.9.0+3651+d05ea4c5" epoch="0" arch="noarch" src="ipa-healthcheck-0.12-3.module_el8.9.0+3651+d05ea4c5.src.rpm">
          <filename>ipa-healthcheck-0.12-3.module_el8.9.0+3651+d05ea4c5.noarch.rpm</filename>
          <sum type="sha256">256f632b4bbfcf825ee03e258b1f1cd9f232c910107bcb967a25bb28d768e27f</sum>
        </package>
        <package name="ipa-server-dns" version="4.9.13" release="10.module_el8.10.0+3857+9c8da539" epoch="0" arch="noarch" src="ipa-4.9.13-10.module_el8.10.0+3857+9c8da539.src.rpm">
          <filename>ipa-server-dns-4.9.13-10.module_el8.10.0+3857+9c8da539.noarch.rpm</filename>
          <sum type="sha256">2ed649133aebea664678216076249193e7123f577d943c78c84338cd38c81b3c</sum>
        </package>
        <package name="python3-jwcrypto" version="0.5.0" release="2.module_el8.10.0+3844+20e075e5" epoch="0" arch="noarch" src="python-jwcrypto-0.5.0-2.module_el8.10.0+3844+20e075e5.src.rpm">
          <filename>python3-jwcrypto-0.5.0-2.module_el8.10.0+3844+20e075e5.noarch.rpm</filename>
          <sum type="sha256">3827ec1b1ddb7641307d2aae1a6e9d8a9634a2f4e2f2ee7e8ba866903524734b</sum>
        </package>
        <package name="ipa-server" version="4.9.13" release="10.module_el8.10.0+3857+9c8da539" epoch="0" arch="s390x" src="ipa-4.9.13-10.module_el8.10.0+3857+9c8da539.src.rpm">
          <filename>ipa-server-4.9.13-10.module_el8.10.0+3857+9c8da539.s390x.rpm</filename>
          <sum type="sha256">4c4e16612c59b17a6fd976895ad564e3330e34c512097af786a79fd680d99b48</sum>
        </package>
        <package name="ipa-server-common" version="4.9.13" release="10.module_el8.10.0+3857+9c8da539" epoch="0" arch="noarch" src="ipa-4.9.13-10.module_el8.10.0+3857+9c8da539.src.rpm">
          <filename>ipa-server-common-4.9.13-10.module_el8.10.0+3857+9c8da539.noarch.rpm</filename>
          <sum type="sha256">55543b9c53a7e95b37516bc0be5eb1a8249a66b1793b1bd22e336d44fd15d87a</sum>
        </package>
        <package name="ipa-client" version="4.9.13" release="10.module_el8.10.0+3857+9c8da539" epoch="0" arch="s390x" src="ipa-4.9.13-10.module_el8.10.0+3857+9c8da539.src.rpm">
          <filename>ipa-client-4.9.13-10.module_el8.10.0+3857+9c8da539.s390x.rpm</filename>
          <sum type="sha256">57bfe6b1b5c74c0cd1b5d98ad5534b26129ab520110682ae5ae233139be3b30d</sum>
        </package>
        <package name="ipa-client-samba" version="4.9.13" release="10.module_el8.10.0+3857+9c8da539" epoch="0" arch="s390x" src="ipa-4.9.13-10.module_el8.10.0+3857+9c8da539.src.rpm">
          <filename>ipa-client-samba-4.9.13-10.module_el8.10.0+3857+9c8da539.s390x.rpm</filename>
          <sum type="sha256">5dcc8169397ff59486220d15e37a3b24c1bc8f29d873a8dad57cbd382d1d120e</sum>
        </package>
        <package name="python3-pyusb" version="1.0.0" release="9.1.module_el8.7.0+3349+cfeff52e" epoch="0" arch="noarch" src="pyusb-1.0.0-9.1.module_el8.7.0+3349+cfeff52e.src.rpm">
          <filename>python3-pyusb-1.0.0-9.1.module_el8.7.0+3349+cfeff52e.noarch.rpm</filename>
          <sum type="sha256">5f45866e2459f1c9a0b969263baab4ffed264d2998456658cafd554de6300cfa</sum>
        </package>
        <package name="python3-yubico" version="1.3.2" release="9.1.module_el8.7.0+3349+cfeff52e" epoch="0" arch="noarch" src="python-yubico-1.3.2-9.1.module_el8.7.0+3349+cfeff52e.src.rpm">
          <filename>python3-yubico-1.3.2-9.1.module_el8.7.0+3349+cfeff52e.noarch.rpm</filename>
          <sum type="sha256">68b28b3fb94f5026730feca1a1c3feb64c06ad5601a7cf8befb4e704510edd73</sum>
        </package>
        <package name="ipa-selinux" version="4.9.13" release="10.module_el8.10.0+3857+9c8da539" epoch="0" arch="noarch" src="ipa-4.9.13-10.module_el8.10.0+3857+9c8da539.src.rpm">
          <filename>ipa-selinux-4.9.13-10.module_el8.10.0+3857+9c8da539.noarch.rpm</filename>
          <sum type="sha256">695ebc6f4fb25a4f99bd1127e4e7fdde64b4b7af8edb1e944793d5505905949d</sum>
        </package>
        <package name="ipa-healthcheck-core" version="0.12" release="3.module_el8.9.0+3651+d05ea4c5" epoch="0" arch="noarch" src="ipa-healthcheck-0.12-3.module_el8.9.0+3651+d05ea4c5.src.rpm">
          <filename>ipa-healthcheck-core-0.12-3.module_el8.9.0+3651+d05ea4c5.noarch.rpm</filename>
          <sum type="sha256">6e29224e5e6a92366a33c093fa580ef7885db16383aaca82fa62f0491d7e06e0</sum>
        </package>
        <package name="opendnssec" version="2.1.7" release="1.module_el8.6.0+3031+2f24dc92" epoch="0" arch="s390x" src="opendnssec-2.1.7-1.module_el8.6.0+3031+2f24dc92.src.rpm">
          <filename>opendnssec-2.1.7-1.module_el8.6.0+3031+2f24dc92.s390x.rpm</filename>
          <sum type="sha256">70507943973619cb0dcbeacad47947e0edfc24e6bd7cf67323083e2fcb0ea086</sum>
        </package>
        <package name="python3-ipaclient" version="4.9.13" release="10.module_el8.10.0+3857+9c8da539" epoch="0" arch="noarch" src="ipa-4.9.13-10.module_el8.10.0+3857+9c8da539.src.rpm">
          <filename>python3-ipaclient-4.9.13-10.module_el8.10.0+3857+9c8da539.noarch.rpm</filename>
          <sum type="sha256">79957209f14796e4c9860e9eaef8f867b51024c3121f5e393d849b809bffd2fb</sum>
        </package>
        <package name="ipa-common" version="4.9.13" release="10.module_el8.10.0+3857+9c8da539" epoch="0" arch="noarch" src="ipa-4.9.13-10.module_el8.10.0+3857+9c8da539.src.rpm">
          <filename>ipa-common-4.9.13-10.module_el8.10.0+3857+9c8da539.noarch.rpm</filename>
          <sum type="sha256">8587841de2b32399baf65a3ad5b0465b7dd2f5ee14d3295eae49ca9dc2828643</sum>
        </package>
        <package name="python3-ipaserver" version="4.9.13" release="10.module_el8.10.0+3857+9c8da539" epoch="0" arch="noarch" src="ipa-4.9.13-10.module_el8.10.0+3857+9c8da539.src.rpm">
          <filename>python3-ipaserver-4.9.13-10.module_el8.10.0+3857+9c8da539.noarch.rpm</filename>
          <sum type="sha256">8e04256e75f06c04051f7de3838df00e1fa15d9b022d648e057beff7a63e2f3f</sum>
        </package>
        <package name="python3-ipatests" version="4.9.13" release="10.module_el8.10.0+3857+9c8da539" epoch="0" arch="noarch" src="ipa-4.9.13-10.module_el8.10.0+3857+9c8da539.src.rpm">
          <filename>python3-ipatests-4.9.13-10.module_el8.10.0+3857+9c8da539.noarch.rpm</filename>
          <sum type="sha256">9740f7d9bec69cd9fd238a37ed8db6c120d0f372e2807eebe1e9aa9e7bfde6a4</sum>
        </package>
        <package name="softhsm-devel" version="2.6.0" release="5.module_el8.6.0+3031+2f24dc92" epoch="0" arch="s390x" src="softhsm-2.6.0-5.module_el8.6.0+3031+2f24dc92.src.rpm">
          <filename>softhsm-devel-2.6.0-5.module_el8.6.0+3031+2f24dc92.s390x.rpm</filename>
          <sum type="sha256">99b0ac3696d5de6fbbd0e2bb5882b9a36feef44b0fcb4f42dd82963f3077f8ab</sum>
        </package>
        <package name="python3-ipalib" version="4.9.13" release="10.module_el8.10.0+3857+9c8da539" epoch="0" arch="noarch" src="ipa-4.9.13-10.module_el8.10.0+3857+9c8da539.src.rpm">
          <filename>python3-ipalib-4.9.13-10.module_el8.10.0+3857+9c8da539.noarch.rpm</filename>
          <sum type="sha256">9b8dcd478c26966a1a99617d277d880f6de1fc76cd6d9d9d9b98bf8a80eba85b</sum>
        </package>
        <package name="softhsm" version="2.6.0" release="5.module_el8.6.0+3031+2f24dc92" epoch="0" arch="s390x" src="softhsm-2.6.0-5.module_el8.6.0+3031+2f24dc92.src.rpm">
          <filename>softhsm-2.6.0-5.module_el8.6.0+3031+2f24dc92.s390x.rpm</filename>
          <sum type="sha256">ad706f5e338373e1c6880dce46ce69f7e82ebf416e464ec0abc5c316b27306a1</sum>
        </package>
        <package name="slapi-nis" version="0.60.0" release="4.module_el8.10.0+3844+20e075e5.alma.1" epoch="0" arch="s390x" src="slapi-nis-0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1.src.rpm">
          <filename>slapi-nis-0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1.s390x.rpm</filename>
          <sum type="sha256">bfc1ed725a4b9c6d74b4b99b8b4dd82647f4f1a4e958e8e455cb5762aae70113</sum>
        </package>
        <package name="python3-kdcproxy" version="0.4" release="5.module_el8.9.0+3785+2238a12a" epoch="0" arch="noarch" src="python-kdcproxy-0.4-5.module_el8.9.0+3785+2238a12a.src.rpm">
          <filename>python3-kdcproxy-0.4-5.module_el8.9.0+3785+2238a12a.noarch.rpm</filename>
          <sum type="sha256">c12ba9ad226d2e590cd3522afe6f22b16b149437aaf0e52b4e26b8352bcda158</sum>
        </package>
        <package name="bind-dyndb-ldap" version="11.6" release="5.module_el8.10.0+3844+20e075e5.alma.2" epoch="0" arch="s390x" src="bind-dyndb-ldap-11.6-5.module_el8.10.0+3844+20e075e5.alma.2.src.rpm">
          <filename>bind-dyndb-ldap-11.6-5.module_el8.10.0+3844+20e075e5.alma.2.s390x.rpm</filename>
          <sum type="sha256">d93329746b8b9750c3b4e97d67ab8cacca4a42c1da937b455fa815f34283a638</sum>
        </package>
        <package name="ipa-client-common" version="4.9.13" release="10.module_el8.10.0+3857+9c8da539" epoch="0" arch="noarch" src="ipa-4.9.13-10.module_el8.10.0+3857+9c8da539.src.rpm">
          <filename>ipa-client-common-4.9.13-10.module_el8.10.0+3857+9c8da539.noarch.rpm</filename>
          <sum type="sha256">dbe66d1f4c9064fe53b98c5a7a2389566e0406a2d24d1fbdebab15adcea838cd</sum>
        </package>
        <package name="ipa-client-epn" version="4.9.13" release="10.module_el8.10.0+3857+9c8da539" epoch="0" arch="s390x" src="ipa-4.9.13-10.module_el8.10.0+3857+9c8da539.src.rpm">
          <filename>ipa-client-epn-4.9.13-10.module_el8.10.0+3857+9c8da539.s390x.rpm</filename>
          <sum type="sha256">df341ef8d4e4872e6ef7054c7e24dd16b441c1aaabfe2c50d278934efb62bf6b</sum>
        </package>
        <package name="ipa-server-trust-ad" version="4.9.13" release="10.module_el8.10.0+3857+9c8da539" epoch="0" arch="s390x" src="ipa-4.9.13-10.module_el8.10.0+3857+9c8da539.src.rpm">
          <filename>ipa-server-trust-ad-4.9.13-10.module_el8.10.0+3857+9c8da539.s390x.rpm</filename>
          <sum type="sha256">f4eda7500b56909f91f6a84c408502d60204489381c05eca273e27de3e00f428</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3783</id>
    <title>Moderate: firefox security update</title>
    <issued date="2024-06-10 00:00:00"/>
    <updated date="2024-06-20 21:37:10"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards
compliance, performance, and portability.

This update upgrades Firefox to version 115.11.0 ESR.

Security Fix(es):

* firefox: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367)
* firefox: IndexedDB files retained in private browsing mode (CVE-2024-4767)
* firefox: Potential permissions request bypass via clickjacking (CVE-2024-4768)
* firefox: Cross-origin responses could be distinguished between script and
non-script content-types (CVE-2024-4769)
* firefox: Use-after-free could occur when printing to PDF (CVE-2024-4770)
* firefox: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and
Thunderbird 115.11 (CVE-2024-4777)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3783" id="RHSA-2024:3783" type="rhsa" title="RHSA-2024:3783"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4367" id="CVE-2024-4367" type="cve" title="CVE-2024-4367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4767" id="CVE-2024-4767" type="cve" title="CVE-2024-4767"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4768" id="CVE-2024-4768" type="cve" title="CVE-2024-4768"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4769" id="CVE-2024-4769" type="cve" title="CVE-2024-4769"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4770" id="CVE-2024-4770" type="cve" title="CVE-2024-4770"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4777" id="CVE-2024-4777" type="cve" title="CVE-2024-4777"/>
      <reference href="https://bugzilla.redhat.com/2280382" id="2280382" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280383" id="2280383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280384" id="2280384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280385" id="2280385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280386" id="2280386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280387" id="2280387" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3783.html" id="ALSA-2024:3783" type="self" title="ALSA-2024:3783"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="115.11.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-115.11.0-1.el8_10.alma.1.src.rpm">
          <filename>firefox-115.11.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">07cd7c86155696df14ef3f40033ea5de2d8a582cf6450d6b13425669f9e6767a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3784</id>
    <title>Moderate: thunderbird security update</title>
    <issued date="2024-06-10 00:00:00"/>
    <updated date="2024-06-20 21:36:14"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.11.0.

Security Fix(es):

* firefox: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367)
* firefox: IndexedDB files retained in private browsing mode (CVE-2024-4767)
* firefox: Potential permissions request bypass via clickjacking (CVE-2024-4768)
* firefox: Cross-origin responses could be distinguished between script and
non-script content-types (CVE-2024-4769)
* firefox: Use-after-free could occur when printing to PDF (CVE-2024-4770)
* firefox: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and
Thunderbird 115.11 (CVE-2024-4777)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3784" id="RHSA-2024:3784" type="rhsa" title="RHSA-2024:3784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4367" id="CVE-2024-4367" type="cve" title="CVE-2024-4367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4767" id="CVE-2024-4767" type="cve" title="CVE-2024-4767"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4768" id="CVE-2024-4768" type="cve" title="CVE-2024-4768"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4769" id="CVE-2024-4769" type="cve" title="CVE-2024-4769"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4770" id="CVE-2024-4770" type="cve" title="CVE-2024-4770"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4777" id="CVE-2024-4777" type="cve" title="CVE-2024-4777"/>
      <reference href="https://bugzilla.redhat.com/2280382" id="2280382" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280383" id="2280383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280384" id="2280384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280385" id="2280385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280386" id="2280386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280387" id="2280387" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3784.html" id="ALSA-2024:3784" type="self" title="ALSA-2024:3784"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="115.11.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-115.11.0-1.el8_10.alma.1.src.rpm">
          <filename>thunderbird-115.11.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">c33da09660129ff4e2fb09699867995794edf96388f208e82f28c7fabdb18bb6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3954</id>
    <title>Important: firefox security update</title>
    <issued date="2024-06-17 00:00:00"/>
    <updated date="2024-06-19 09:10:34"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.12.0 ESR.

Security Fix(es):
  
* firefox: Use-after-free in networking (CVE-2024-5702)

* firefox: Use-after-free in JavaScript object transplant (CVE-2024-5688)
* firefox: External protocol handlers leaked by timing attack (CVE-2024-5690)
* firefox:  Sandboxed iframes were able to bypass sandbox restrictions to open a new window (CVE-2024-5691)
* firefox: Cross-Origin Image leak via Offscreen Canvas (CVE-2024-5693)
* firefox: Memory Corruption in Text Fragments (CVE-2024-5696)
* firefox: Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12 (CVE-2024-5700) 

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3954" id="RHSA-2024:3954" type="rhsa" title="RHSA-2024:3954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5688" id="CVE-2024-5688" type="cve" title="CVE-2024-5688"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5690" id="CVE-2024-5690" type="cve" title="CVE-2024-5690"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5691" id="CVE-2024-5691" type="cve" title="CVE-2024-5691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5693" id="CVE-2024-5693" type="cve" title="CVE-2024-5693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5696" id="CVE-2024-5696" type="cve" title="CVE-2024-5696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5700" id="CVE-2024-5700" type="cve" title="CVE-2024-5700"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5702" id="CVE-2024-5702" type="cve" title="CVE-2024-5702"/>
      <reference href="https://bugzilla.redhat.com/2291394" id="2291394" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291395" id="2291395" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291396" id="2291396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291397" id="2291397" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291399" id="2291399" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291400" id="2291400" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291401" id="2291401" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3954.html" id="ALSA-2024:3954" type="self" title="ALSA-2024:3954"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="115.12.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-115.12.0-1.el8_10.alma.1.src.rpm">
          <filename>firefox-115.12.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">012ebda2341efd3abce25646081244d8d4a37697e430a15c92aa6483f58ce896</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3961</id>
    <title>Important: flatpak security update</title>
    <issued date="2024-06-17 00:00:00"/>
    <updated date="2024-06-19 09:15:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>flatpak security update</summary>
    <description>Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

Security Fix(es):

* flatpak: sandbox escape via RequestBackground portal (CVE-2024-32462)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3961" id="RHSA-2024:3961" type="rhsa" title="RHSA-2024:3961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-32462" id="CVE-2024-32462" type="cve" title="CVE-2024-32462"/>
      <reference href="https://bugzilla.redhat.com/2275981" id="2275981" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3961.html" id="ALSA-2024:3961" type="self" title="ALSA-2024:3961"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="flatpak-session-helper" version="1.12.9" release="1.el8_10" epoch="0" arch="s390x" src="flatpak-1.12.9-1.el8_10.src.rpm">
          <filename>flatpak-session-helper-1.12.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5bb89f2c4c1428e53299fcb05f8c3674f2321a4e4d441fe732f9fc318c9bc9a2</sum>
        </package>
        <package name="flatpak-selinux" version="1.12.9" release="1.el8_10" epoch="0" arch="noarch" src="flatpak-1.12.9-1.el8_10.src.rpm">
          <filename>flatpak-selinux-1.12.9-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">628edb8d36db58152cc75004cbb48142a94b758854fe2a3325d4ee58ba267c8a</sum>
        </package>
        <package name="flatpak" version="1.12.9" release="1.el8_10" epoch="0" arch="s390x" src="flatpak-1.12.9-1.el8_10.src.rpm">
          <filename>flatpak-1.12.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c0c5e951837c8d5ce0b9f587c4ddbda8b8221b72483e25f6a1a35e6cf7e2bf71</sum>
        </package>
        <package name="flatpak-libs" version="1.12.9" release="1.el8_10" epoch="0" arch="s390x" src="flatpak-1.12.9-1.el8_10.src.rpm">
          <filename>flatpak-libs-1.12.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">dd58f111b2bad7fe6c7d64530147621ad4885ba901ac4716aed05c4341e378fa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3968</id>
    <title>Moderate: container-tools:rhel8 bug fix and enhancement update</title>
    <issued date="2024-06-18 00:00:00"/>
    <updated date="2024-06-19 09:17:27"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>container-tools:rhel8 bug fix and enhancement update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* podman: jose-go: improper handling of highly compressed data (CVE-2024-28180)
* buildah: jose-go: improper handling of highly compressed data (CVE-2024-28180)
* podman: jose-go: resource exhaustion (CVE-2024-28176)
* buildah: jose-go: resource exhaustion (CVE-2024-28176)
* skopeo: jose-go: resource exhaustion (CVE-2024-28176)

Additional Changes:

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3968" id="RHSA-2024:3968" type="rhsa" title="RHSA-2024:3968"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28176" id="CVE-2024-28176" type="cve" title="CVE-2024-28176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28180" id="CVE-2024-28180" type="cve" title="CVE-2024-28180"/>
      <reference href="https://bugzilla.redhat.com/2268820" id="2268820" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268854" id="2268854" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3968.html" id="ALSA-2024:3968" type="self" title="ALSA-2024:3968"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="container-tools" stream="rhel8" version="8100020240618090252" context="20125149" arch="s390x"/>
        <package name="toolbox" version="0.0.99.5" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>toolbox-0.0.99.5-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">02a2d3af8462551cd77436769f93847657c11f45fa572a63f5d0b0686e6a25d0</sum>
        </package>
        <package name="buildah" version="1.33.7" release="2.module_el8.10.0+3858+6ad51f9f" epoch="2" arch="s390x" src="buildah-1.33.7-2.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>buildah-1.33.7-2.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">074ba7cb4adbc1dfc1d989f49b5ece8affba7d8896d1d45e0bb1b785b61893ec</sum>
        </package>
        <package name="criu-libs" version="3.18" release="5.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>criu-libs-3.18-5.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">1962469cfa08c792359c82d44b5410abab23b62f897edccd5283944edabe867a</sum>
        </package>
        <package name="runc" version="1.1.12" release="1.module_el8.10.0+3858+6ad51f9f" epoch="1" arch="s390x" src="runc-1.1.12-1.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>runc-1.1.12-1.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">3311fbb35407728f20496c095803d328f0f711e05412c643cca9a0aead47c2d4</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.10" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">4037e2bac5bce782402772634fc768eefb65e7293a9f73aaa10c38bde9918196</sum>
        </package>
        <package name="slirp4netns" version="1.2.3" release="1.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="slirp4netns-1.2.3-1.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>slirp4netns-1.2.3-1.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">47e064f66ebe5ddf06943af427f7e84b1bfe6139ff8bfd3f03d60c6be4ac9be1</sum>
        </package>
        <package name="buildah-tests" version="1.33.7" release="2.module_el8.10.0+3858+6ad51f9f" epoch="2" arch="s390x" src="buildah-1.33.7-2.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>buildah-tests-1.33.7-2.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">60b61a42f2b7f178fff9acb655d6940e2209ecc0ce24692752facf8783bbb463</sum>
        </package>
        <package name="python3-criu" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>python3-criu-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">632fe45692e3679dbd77ca62f4dd56c66dd4675de7f1874459025927e78d1db3</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="3.module_el8.10.0+3858+6ad51f9f" epoch="4" arch="s390x" src="podman-4.9.4-3.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>podman-remote-4.9.4-3.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">6ad2fb4f43b999ab8c079f5c8a39cc703cbc6d155d1eb6456160d2df6c752a2a</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.5" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>toolbox-tests-0.0.99.5-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">6f3afa8d1e85355c8b298eb28c01fa395e12e6268471b962b0987703f32210e9</sum>
        </package>
        <package name="podman-gvproxy" version="4.9.4" release="3.module_el8.10.0+3858+6ad51f9f" epoch="4" arch="s390x" src="podman-4.9.4-3.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>podman-gvproxy-4.9.4-3.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">74920a55b53aa2d843b088cad0b249f05a3a43231e99ee70ac4be98665baa30f</sum>
        </package>
        <package name="cockpit-podman" version="84.1" release="1.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="noarch" src="cockpit-podman-84.1-1.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>cockpit-podman-84.1-1.module_el8.10.0+3858+6ad51f9f.noarch.rpm</filename>
          <sum type="sha256">7915999cb1ee8e09a70de43499543840abebc7d5a924567453d192a165b02427</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>libslirp-4.4.0-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">7f6ee088719dda6b4abc4b0005f17b1a478bc5a1f5b85602af95ab2379a13ded</sum>
        </package>
        <package name="skopeo-tests" version="1.14.3" release="2.module_el8.10.0+3858+6ad51f9f" epoch="2" arch="s390x" src="skopeo-1.14.3-2.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>skopeo-tests-1.14.3-2.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">801ac29f0c54f79812ebc19d479fde66e13f71c1f3f08fa9285b8f25c00c5a46</sum>
        </package>
        <package name="fuse-overlayfs" version="1.13" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="s390x" src="fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">8118067655696462cee9dfc553f57e4501b089590d837bc88091716914c8d3f5</sum>
        </package>
        <package name="python3-podman" version="4.9.0" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="noarch" src="python-podman-4.9.0-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>python3-podman-4.9.0-1.module_el8.10.0+3792+03eaed9c.noarch.rpm</filename>
          <sum type="sha256">884af78bcfd62f80252ad9921c337b7ab39471e00c24fcedb2f30f2a26ede8dc</sum>
        </package>
        <package name="aardvark-dns" version="1.10.0" release="1.module_el8.10.0+3858+6ad51f9f" epoch="2" arch="s390x" src="aardvark-dns-1.10.0-1.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>aardvark-dns-1.10.0-1.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">8930e60873726395a1b7b7b675fa0aa66538198c06fb483ea9f24ae795ca8a1d</sum>
        </package>
        <package name="udica" version="0.2.6" release="21.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="noarch" src="udica-0.2.6-21.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>udica-0.2.6-21.module_el8.10.0+3858+6ad51f9f.noarch.rpm</filename>
          <sum type="sha256">8d98a1794f4f68669a824ce7988ed1fd46c307ec693bba17b3a0fe11d7e0665d</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="2.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>libslirp-devel-4.4.0-2.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">8e619da0a95c4f17206294099001540f08000d56a3e433f027055d84dabef841</sum>
        </package>
        <package name="containers-common" version="1" release="81.module_el8.10.0+3858+6ad51f9f" epoch="2" arch="s390x" src="containers-common-1-81.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>containers-common-1-81.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">9956adf17dbc8119a6e80b9b693c80da337246ac0d8dc82dc41a91b209b5c078</sum>
        </package>
        <package name="netavark" version="1.10.3" release="1.module_el8.10.0+3845+87b84552" epoch="2" arch="s390x" src="netavark-1.10.3-1.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>netavark-1.10.3-1.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">ab5099e416d5d019c5fdc0cb6dee0d0ec2b08f4adc918665112f240ec2f6f43f</sum>
        </package>
        <package name="crit" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>crit-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">aeb27c5bcec90a9452f93ad79ef0d4f00ecedf4442f32f9bedb481509db12683</sum>
        </package>
        <package name="container-selinux" version="2.229.0" release="2.module_el8.10.0+3858+6ad51f9f" epoch="2" arch="noarch" src="container-selinux-2.229.0-2.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>container-selinux-2.229.0-2.module_el8.10.0+3858+6ad51f9f.noarch.rpm</filename>
          <sum type="sha256">bd30b0ee8a2420be3eb817012b3c9f5ac58902e830a3493dad648ee021ea7ab5</sum>
        </package>
        <package name="podman-catatonit" version="4.9.4" release="3.module_el8.10.0+3858+6ad51f9f" epoch="4" arch="s390x" src="podman-4.9.4-3.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>podman-catatonit-4.9.4-3.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">cfa970aeff9b338ee44773e9d698fc2ffa979a4d286cac1cdc84eda7e05da9ed</sum>
        </package>
        <package name="podman-plugins" version="4.9.4" release="3.module_el8.10.0+3858+6ad51f9f" epoch="4" arch="s390x" src="podman-4.9.4-3.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>podman-plugins-4.9.4-3.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">cfce1ebfb439c3a649c5e9c8d7461b15467b16a382a97ec750ab7de280c35c8c</sum>
        </package>
        <package name="crun" version="1.14.3" release="2.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="crun-1.14.3-2.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>crun-1.14.3-2.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">d07a292ed62fb537ef65dee1cce03a0dfb3eb95bb4967ff688f1d3332fabe47b</sum>
        </package>
        <package name="skopeo" version="1.14.3" release="2.module_el8.10.0+3845+87b84552" epoch="2" arch="s390x" src="skopeo-1.14.3-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>skopeo-1.14.3-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">dcaa816019867ade9fb51a859b8ab25935818f05c5f5826280968fb8805f894e</sum>
        </package>
        <package name="criu" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>criu-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">e6f4185ffc86727029c96555a60751ea090eea01d5166266ccb4ec5201db4819</sum>
        </package>
        <package name="containernetworking-plugins" version="1.4.0" release="2.module_el8.10.0+3792+03eaed9c" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-2.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>containernetworking-plugins-1.4.0-2.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">e7026bcfe3e311453e06eb69681c4ea919d959dfffb5bd8603615429e7705b47</sum>
        </package>
        <package name="podman" version="4.9.4" release="3.module_el8.10.0+3858+6ad51f9f" epoch="4" arch="s390x" src="podman-4.9.4-3.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>podman-4.9.4-3.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">e73ff29bad4f90f32e4eda5bed3c505ced72aceb6680835736da8a89abcceb2a</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="3.module_el8.10.0+3858+6ad51f9f" epoch="4" arch="noarch" src="podman-4.9.4-3.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>podman-docker-4.9.4-3.module_el8.10.0+3858+6ad51f9f.noarch.rpm</filename>
          <sum type="sha256">e7e87bcfa7c8d8d39d2ab923e3a6f7532c732a25341bedc67d5a7858fc4e6c41</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="3.module_el8.10.0+3858+6ad51f9f" epoch="4" arch="s390x" src="podman-4.9.4-3.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>podman-tests-4.9.4-3.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">f01a352651ec7e8daf3bf8f491e0ed33c2782e224fd164e82fba7736454da92b</sum>
        </package>
        <package name="conmon" version="2.1.10" release="1.module_el8.10.0+3845+87b84552" epoch="3" arch="s390x" src="conmon-2.1.10-1.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>conmon-2.1.10-1.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">f8f7e631b6103852487fcb99e1c6baaf8c5e60e3654c2f5a4bddc238ed708563</sum>
        </package>
        <package name="criu-devel" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>criu-devel-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">ffa71276e65ae92bb9c7b93241ba28ad74337aa5770f3cf3390d73b2552e73ae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4000</id>
    <title>Important: ghostscript security update</title>
    <issued date="2024-06-20 00:00:00"/>
    <updated date="2024-06-20 11:36:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: OPVP device arbitrary code execution via custom Driver library (CVE-2024-33871)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4000" id="RHSA-2024:4000" type="rhsa" title="RHSA-2024:4000"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33871" id="CVE-2024-33871" type="cve" title="CVE-2024-33871"/>
      <reference href="https://bugzilla.redhat.com/2283508" id="2283508" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4000.html" id="ALSA-2024:4000" type="self" title="ALSA-2024:4000"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libgs" version="9.27" release="13.el8_10" epoch="0" arch="s390x" src="ghostscript-9.27-13.el8_10.src.rpm">
          <filename>libgs-9.27-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">7f720d5ce1620451da6b280a846749be60593c20ba1c498a8dbe1f09ac53c565</sum>
        </package>
        <package name="ghostscript" version="9.27" release="13.el8_10" epoch="0" arch="s390x" src="ghostscript-9.27-13.el8_10.src.rpm">
          <filename>ghostscript-9.27-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">b6832e008b28274f1464e3faed4e7598b86fc553a4e7d2cb661a74b6014fa316</sum>
        </package>
        <package name="ghostscript-x11" version="9.27" release="13.el8_10" epoch="0" arch="s390x" src="ghostscript-9.27-13.el8_10.src.rpm">
          <filename>ghostscript-x11-9.27-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">d5b0a498ca81896e5fba9f6c828fa04d1e33d25696224b572739e37bfc10a951</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4036</id>
    <title>Important: thunderbird security update</title>
    <issued date="2024-06-20 00:00:00"/>
    <updated date="2024-06-21 07:20:21"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.12.1.

Security Fix(es):

* thunderbird: Use-after-free in networking (CVE-2024-5702)
* thunderbird: Use-after-free in JavaScript object transplant (CVE-2024-5688)
* thunderbird: External protocol handlers leaked by timing attack (CVE-2024-5690)
* thunderbird:  Sandboxed iframes were able to bypass sandbox restrictions to open a new window (CVE-2024-5691)
* thunderbird: Cross-Origin Image leak via Offscreen Canvas (CVE-2024-5693)
* thunderbird: Memory Corruption in Text Fragments (CVE-2024-5696)
* thunderbird: Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12 (CVE-2024-5700)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4036" id="RHSA-2024:4036" type="rhsa" title="RHSA-2024:4036"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5688" id="CVE-2024-5688" type="cve" title="CVE-2024-5688"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5690" id="CVE-2024-5690" type="cve" title="CVE-2024-5690"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5691" id="CVE-2024-5691" type="cve" title="CVE-2024-5691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5693" id="CVE-2024-5693" type="cve" title="CVE-2024-5693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5696" id="CVE-2024-5696" type="cve" title="CVE-2024-5696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5700" id="CVE-2024-5700" type="cve" title="CVE-2024-5700"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5702" id="CVE-2024-5702" type="cve" title="CVE-2024-5702"/>
      <reference href="https://bugzilla.redhat.com/2291394" id="2291394" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291395" id="2291395" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291396" id="2291396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291397" id="2291397" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291399" id="2291399" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291400" id="2291400" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291401" id="2291401" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4036.html" id="ALSA-2024:4036" type="self" title="ALSA-2024:4036"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="115.12.1" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-115.12.1-1.el8_10.alma.1.src.rpm">
          <filename>thunderbird-115.12.1-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">ac07c53477237a122876a5c666ae7c1c15dcd866a7b6d045f74ca5204259edb8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4058</id>
    <title>Important: python3.11 security update</title>
    <issued date="2024-06-24 00:00:00"/>
    <updated date="2024-06-24 12:16:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)
* python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4058" id="RHSA-2024:4058" type="rhsa" title="RHSA-2024:4058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6597" id="CVE-2023-6597" type="cve" title="CVE-2023-6597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0450" id="CVE-2024-0450" type="cve" title="CVE-2024-0450"/>
      <reference href="https://bugzilla.redhat.com/2276518" id="2276518" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2276525" id="2276525" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4058.html" id="ALSA-2024:4058" type="self" title="ALSA-2024:4058"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.11-rpm-macros" version="3.11.9" release="1.el8_10" epoch="0" arch="noarch" src="python3.11-3.11.9-1.el8_10.src.rpm">
          <filename>python3.11-rpm-macros-3.11.9-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">589582e827b84b092cad9d3a477cc3f8774fb243242e27575dd164bc1f6d1ca0</sum>
        </package>
        <package name="python3.11-libs" version="3.11.9" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.9-1.el8_10.src.rpm">
          <filename>python3.11-libs-3.11.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5fe99754ae8f8917adada86bf537c5b2808540c28c644008a910803caef3ab37</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.9" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.9-1.el8_10.src.rpm">
          <filename>python3.11-tkinter-3.11.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">6d37f67c79b1ce3fad7abede8ba7e96e483d4f442b851b8a43d30464ab506e09</sum>
        </package>
        <package name="python3.11" version="3.11.9" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.9-1.el8_10.src.rpm">
          <filename>python3.11-3.11.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a44d9180ef6e8e433fa99cafb67541b799b1bba2c0016624617891e49ea0c70c</sum>
        </package>
        <package name="python3.11-devel" version="3.11.9" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.9-1.el8_10.src.rpm">
          <filename>python3.11-devel-3.11.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b29c5c1dcc215a4d27d143588517bcbaef01565d949895631de25ed784d3fa4d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4084</id>
    <title>Important: git security update</title>
    <issued date="2024-06-25 00:00:00"/>
    <updated date="2024-06-25 14:12:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git security update</summary>
    <description>Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.

Security Fix(es):

* git: Recursive clones RCE (CVE-2024-32002)
* git: RCE while cloning local repos (CVE-2024-32004)
* git: additional local RCE (CVE-2024-32465)
* git: insecure hardlinks (CVE-2024-32020)
* git: symlink bypass (CVE-2024-32021)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4084" id="RHSA-2024:4084" type="rhsa" title="RHSA-2024:4084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-32002" id="CVE-2024-32002" type="cve" title="CVE-2024-32002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-32004" id="CVE-2024-32004" type="cve" title="CVE-2024-32004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-32020" id="CVE-2024-32020" type="cve" title="CVE-2024-32020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-32021" id="CVE-2024-32021" type="cve" title="CVE-2024-32021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-32465" id="CVE-2024-32465" type="cve" title="CVE-2024-32465"/>
      <reference href="https://bugzilla.redhat.com/2280421" id="2280421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280428" id="2280428" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280446" id="2280446" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280466" id="2280466" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280484" id="2280484" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4084.html" id="ALSA-2024:4084" type="self" title="ALSA-2024:4084"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="git-instaweb" version="2.43.5" release="1.el8_10" epoch="0" arch="noarch" src="git-2.43.5-1.el8_10.src.rpm">
          <filename>git-instaweb-2.43.5-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">0c55b4348e6fef5183d4f41232a04306b52e4a662fea23f8473d89f42ce93992</sum>
        </package>
        <package name="git-daemon" version="2.43.5" release="1.el8_10" epoch="0" arch="s390x" src="git-2.43.5-1.el8_10.src.rpm">
          <filename>git-daemon-2.43.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0d86df8cbcedd8049452f1b0e323a71ff22aad7174dffbe3a784242db9ae19cb</sum>
        </package>
        <package name="gitk" version="2.43.5" release="1.el8_10" epoch="0" arch="noarch" src="git-2.43.5-1.el8_10.src.rpm">
          <filename>gitk-2.43.5-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">153573119c596bf4cb869a04ece33a273f5501e0c679c478ae3d368614d5dc3d</sum>
        </package>
        <package name="perl-Git" version="2.43.5" release="1.el8_10" epoch="0" arch="noarch" src="git-2.43.5-1.el8_10.src.rpm">
          <filename>perl-Git-2.43.5-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">1bbeed83f118bb41825ad949f76535c7e327bee6eafd474f5f16fe3447ae1f9a</sum>
        </package>
        <package name="gitweb" version="2.43.5" release="1.el8_10" epoch="0" arch="noarch" src="git-2.43.5-1.el8_10.src.rpm">
          <filename>gitweb-2.43.5-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">46aca45c161147dc7c0cbcb246962bb1857dc6589c4df680bfd166f734245ce1</sum>
        </package>
        <package name="git" version="2.43.5" release="1.el8_10" epoch="0" arch="s390x" src="git-2.43.5-1.el8_10.src.rpm">
          <filename>git-2.43.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5f2c5034bf11eb6e85293c6285cb4b9ca5bf6dea0cff11053f366afac5bdd9d8</sum>
        </package>
        <package name="git-subtree" version="2.43.5" release="1.el8_10" epoch="0" arch="s390x" src="git-2.43.5-1.el8_10.src.rpm">
          <filename>git-subtree-2.43.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5fa6cf76edd833ac58e08d16453820bf43880de8428a91eb14277b6d9fc4b992</sum>
        </package>
        <package name="git-credential-libsecret" version="2.43.5" release="1.el8_10" epoch="0" arch="s390x" src="git-2.43.5-1.el8_10.src.rpm">
          <filename>git-credential-libsecret-2.43.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">6272e06ce1527e3fe0eaa219ba3e413c972ba4c55127b04bd95a00ed2933ee45</sum>
        </package>
        <package name="git-gui" version="2.43.5" release="1.el8_10" epoch="0" arch="noarch" src="git-2.43.5-1.el8_10.src.rpm">
          <filename>git-gui-2.43.5-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">6c06f19cdb6fab7903d2e41ed4b1b5277fdaf1a59fc45639e30430ece3a7deb9</sum>
        </package>
        <package name="git-core" version="2.43.5" release="1.el8_10" epoch="0" arch="s390x" src="git-2.43.5-1.el8_10.src.rpm">
          <filename>git-core-2.43.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">9d227f07fb261bb885f63c23050ea23dc1c2c3ad0912d73e6dfcf0937e91ce40</sum>
        </package>
        <package name="perl-Git-SVN" version="2.43.5" release="1.el8_10" epoch="0" arch="noarch" src="git-2.43.5-1.el8_10.src.rpm">
          <filename>perl-Git-SVN-2.43.5-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">b13a0b8c73c6d96e926d5bfc8fe30423b30bd28a8331632f95306444002868a1</sum>
        </package>
        <package name="git-email" version="2.43.5" release="1.el8_10" epoch="0" arch="noarch" src="git-2.43.5-1.el8_10.src.rpm">
          <filename>git-email-2.43.5-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">d3a7a9b15cc2e060dc2431955ee77b60aa3b808c029fc5869eaafe8a4f68a6b6</sum>
        </package>
        <package name="git-core-doc" version="2.43.5" release="1.el8_10" epoch="0" arch="noarch" src="git-2.43.5-1.el8_10.src.rpm">
          <filename>git-core-doc-2.43.5-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">da1cbfc97504a229e3e6d5a9961bee396ff4a6a01b415927d76b11d44d8a8949</sum>
        </package>
        <package name="git-svn" version="2.43.5" release="1.el8_10" epoch="0" arch="noarch" src="git-2.43.5-1.el8_10.src.rpm">
          <filename>git-svn-2.43.5-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">db73232276dd4b0a81eb0dd7e6ffb93d33106c2c2705cfad0c575289cae216e7</sum>
        </package>
        <package name="git-all" version="2.43.5" release="1.el8_10" epoch="0" arch="noarch" src="git-2.43.5-1.el8_10.src.rpm">
          <filename>git-all-2.43.5-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">ea10f0978df14bc8d7fd2215048983bfeb364b35eebd4e772aad5c1184c19633</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4197</id>
    <title>Moderate: httpd:2.4/httpd security update</title>
    <issued date="2024-07-01 00:00:00"/>
    <updated date="2024-07-01 16:03:26"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>httpd:2.4/httpd security update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd:2.4: httpd: HTTP response splitting (CVE-2023-38709)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4197" id="RHSA-2024:4197" type="rhsa" title="RHSA-2024:4197"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38709" id="CVE-2023-38709" type="cve" title="CVE-2023-38709"/>
      <reference href="https://bugzilla.redhat.com/2273491" id="2273491" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4197.html" id="ALSA-2024:4197" type="self" title="ALSA-2024:4197"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="httpd" stream="2.4" version="8100020240701140447" context="9edba152" arch="s390x"/>
        <package name="httpd-manual" version="2.4.37" release="65.module_el8.10.0+3860+a6e26e50" epoch="0" arch="noarch" src="httpd-2.4.37-65.module_el8.10.0+3860+a6e26e50.src.rpm">
          <filename>httpd-manual-2.4.37-65.module_el8.10.0+3860+a6e26e50.noarch.rpm</filename>
          <sum type="sha256">10a007d374796b3d7ac799963f0abde4b83e2a42ec8362c545427e0120025037</sum>
        </package>
        <package name="mod_ssl" version="2.4.37" release="65.module_el8.10.0+3860+a6e26e50" epoch="1" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+3860+a6e26e50.src.rpm">
          <filename>mod_ssl-2.4.37-65.module_el8.10.0+3860+a6e26e50.s390x.rpm</filename>
          <sum type="sha256">1edba8e62df0b9bb7679b5abf98db926adf5c78f1483afe271921713f7f723a8</sum>
        </package>
        <package name="mod_ldap" version="2.4.37" release="65.module_el8.10.0+3860+a6e26e50" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+3860+a6e26e50.src.rpm">
          <filename>mod_ldap-2.4.37-65.module_el8.10.0+3860+a6e26e50.s390x.rpm</filename>
          <sum type="sha256">4680d5e6637b4a35a6959d4ba11d5f6649e1403df52e8a6887ffb24ae24a7ee6</sum>
        </package>
        <package name="httpd-filesystem" version="2.4.37" release="65.module_el8.10.0+3860+a6e26e50" epoch="0" arch="noarch" src="httpd-2.4.37-65.module_el8.10.0+3860+a6e26e50.src.rpm">
          <filename>httpd-filesystem-2.4.37-65.module_el8.10.0+3860+a6e26e50.noarch.rpm</filename>
          <sum type="sha256">48bc8798380f75db276386195e8c248c720992066eb82fc65ca9d8e351e164bf</sum>
        </package>
        <package name="httpd-tools" version="2.4.37" release="65.module_el8.10.0+3860+a6e26e50" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+3860+a6e26e50.src.rpm">
          <filename>httpd-tools-2.4.37-65.module_el8.10.0+3860+a6e26e50.s390x.rpm</filename>
          <sum type="sha256">5c5bd8cad060023a6c464baa8701ecd1abf4e81ace395656f354c9fc00876325</sum>
        </package>
        <package name="mod_session" version="2.4.37" release="65.module_el8.10.0+3860+a6e26e50" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+3860+a6e26e50.src.rpm">
          <filename>mod_session-2.4.37-65.module_el8.10.0+3860+a6e26e50.s390x.rpm</filename>
          <sum type="sha256">650af486c18f0ef01c5634a469ea1cdeef3c7a92347b2dd07700526c78af11ec</sum>
        </package>
        <package name="httpd-devel" version="2.4.37" release="65.module_el8.10.0+3860+a6e26e50" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+3860+a6e26e50.src.rpm">
          <filename>httpd-devel-2.4.37-65.module_el8.10.0+3860+a6e26e50.s390x.rpm</filename>
          <sum type="sha256">74abee4803b54a6cd5d992530c7b0a40b0c22f3758fe4a347a48fb00a3f6f609</sum>
        </package>
        <package name="httpd" version="2.4.37" release="65.module_el8.10.0+3860+a6e26e50" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+3860+a6e26e50.src.rpm">
          <filename>httpd-2.4.37-65.module_el8.10.0+3860+a6e26e50.s390x.rpm</filename>
          <sum type="sha256">760b7d40998284fb21610b29e7e64e6f793979e276b58e84a101abbb9837acc2</sum>
        </package>
        <package name="mod_http2" version="1.15.7" release="10.module_el8.10.0+3832+564e7653" epoch="0" arch="s390x" src="mod_http2-1.15.7-10.module_el8.10.0+3832+564e7653.src.rpm">
          <filename>mod_http2-1.15.7-10.module_el8.10.0+3832+564e7653.s390x.rpm</filename>
          <sum type="sha256">ced86530fe3d6ef0042ef1f6483b8f83f8e28834e2495e5368934e8c1ffcf36c</sum>
        </package>
        <package name="mod_md" version="2.0.8" release="8.module_el8.6.0+3031+fb177b09" epoch="1" arch="s390x" src="mod_md-2.0.8-8.module_el8.6.0+3031+fb177b09.src.rpm">
          <filename>mod_md-2.0.8-8.module_el8.6.0+3031+fb177b09.s390x.rpm</filename>
          <sum type="sha256">e47754aea99df8718074dd3d1df288b448b0af9d0ba4f0f8c6a3b5c8a164a1a7</sum>
        </package>
        <package name="mod_proxy_html" version="2.4.37" release="65.module_el8.10.0+3860+a6e26e50" epoch="1" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+3860+a6e26e50.src.rpm">
          <filename>mod_proxy_html-2.4.37-65.module_el8.10.0+3860+a6e26e50.s390x.rpm</filename>
          <sum type="sha256">f3d044892ab03abdf6966ec15c67ee0de8ebbf8859e4fe1815f8e2e201327b74</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4227</id>
    <title>Moderate: python-pillow security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 14:21:11"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-pillow security update</summary>
    <description>The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities.

Security Fix(es):

* python-pillow: buffer overflow in _imagingcms.c (CVE-2024-28219)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4227" id="RHSA-2024:4227" type="rhsa" title="RHSA-2024:4227"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28219" id="CVE-2024-28219" type="cve" title="CVE-2024-28219"/>
      <reference href="https://bugzilla.redhat.com/2272563" id="2272563" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4227.html" id="ALSA-2024:4227" type="self" title="ALSA-2024:4227"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3-pillow" version="5.1.1" release="21.el8_10" epoch="0" arch="s390x" src="python-pillow-5.1.1-21.el8_10.src.rpm">
          <filename>python3-pillow-5.1.1-21.el8_10.s390x.rpm</filename>
          <sum type="sha256">0a4b1f7ced9dd8aed3a3814130fa758b2808e328dc6504f0784f1ad1d8e554e7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4231</id>
    <title>Moderate: python-jinja2 security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 14:19:17"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-jinja2 security update</summary>
    <description>The python-jinja2 package contains Jinja2, a template engine written in pure Python. Jinja2 provides a Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment. 

Security Fix(es):

* jinja2: accepts keys containing non-attribute characters (CVE-2024-34064)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4231" id="RHSA-2024:4231" type="rhsa" title="RHSA-2024:4231"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34064" id="CVE-2024-34064" type="cve" title="CVE-2024-34064"/>
      <reference href="https://bugzilla.redhat.com/2279476" id="2279476" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4231.html" id="ALSA-2024:4231" type="self" title="ALSA-2024:4231"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3-jinja2" version="2.10.1" release="5.el8_10" epoch="0" arch="noarch" src="python-jinja2-2.10.1-5.el8_10.src.rpm">
          <filename>python3-jinja2-2.10.1-5.el8_10.noarch.rpm</filename>
          <sum type="sha256">057d0a8fbd6a8277011c4c079f31aee509ae60590c12932849a12af8b3f0ea67</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4235</id>
    <title>Important: 389-ds security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-04 07:29:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>389-ds security update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. 

Security Fix(es):

* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)
* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4235" id="RHSA-2024:4235" type="rhsa" title="RHSA-2024:4235"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2199" id="CVE-2024-2199" type="cve" title="CVE-2024-2199"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3657" id="CVE-2024-3657" type="cve" title="CVE-2024-3657"/>
      <reference href="https://bugzilla.redhat.com/2267976" id="2267976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2274401" id="2274401" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4235.html" id="ALSA-2024:4235" type="self" title="ALSA-2024:4235"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="389-ds" stream="1.4" version="8100020240704063712" context="17499975" arch="s390x"/>
        <package name="389-ds-base-libs" version="1.4.3.39" release="7.module_el8.10.0+3864+d8eec553" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-7.module_el8.10.0+3864+d8eec553.src.rpm">
          <filename>389-ds-base-libs-1.4.3.39-7.module_el8.10.0+3864+d8eec553.s390x.rpm</filename>
          <sum type="sha256">0dad4d797537ba64d22bf3a79a6dbd02ec08ae4bf44ee9240dd92e4085d1dc90</sum>
        </package>
        <package name="389-ds-base-snmp" version="1.4.3.39" release="7.module_el8.10.0+3864+d8eec553" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-7.module_el8.10.0+3864+d8eec553.src.rpm">
          <filename>389-ds-base-snmp-1.4.3.39-7.module_el8.10.0+3864+d8eec553.s390x.rpm</filename>
          <sum type="sha256">26ae4f4286e59961e8cf6b1fff11d886b0d064c358f0fe93aaea8c9b34849923</sum>
        </package>
        <package name="389-ds-base-legacy-tools" version="1.4.3.39" release="7.module_el8.10.0+3864+d8eec553" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-7.module_el8.10.0+3864+d8eec553.src.rpm">
          <filename>389-ds-base-legacy-tools-1.4.3.39-7.module_el8.10.0+3864+d8eec553.s390x.rpm</filename>
          <sum type="sha256">5687ac634c0ff91ed986ca0fb6404f2c31e6f818068a0922283a0dbeb64c19c0</sum>
        </package>
        <package name="389-ds-base" version="1.4.3.39" release="7.module_el8.10.0+3864+d8eec553" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-7.module_el8.10.0+3864+d8eec553.src.rpm">
          <filename>389-ds-base-1.4.3.39-7.module_el8.10.0+3864+d8eec553.s390x.rpm</filename>
          <sum type="sha256">a98ca27399834914a4e01cefb9892c8d892cdf7bfce1e4bf64e4253d91dc71d1</sum>
        </package>
        <package name="python3-lib389" version="1.4.3.39" release="7.module_el8.10.0+3864+d8eec553" epoch="0" arch="noarch" src="389-ds-base-1.4.3.39-7.module_el8.10.0+3864+d8eec553.src.rpm">
          <filename>python3-lib389-1.4.3.39-7.module_el8.10.0+3864+d8eec553.noarch.rpm</filename>
          <sum type="sha256">b9840f9b99c2a6245d14c67493bdd173efbfc6a894d2c0c1218fe54c1bb82de3</sum>
        </package>
        <package name="389-ds-base-devel" version="1.4.3.39" release="7.module_el8.10.0+3864+d8eec553" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-7.module_el8.10.0+3864+d8eec553.src.rpm">
          <filename>389-ds-base-devel-1.4.3.39-7.module_el8.10.0+3864+d8eec553.s390x.rpm</filename>
          <sum type="sha256">ec757676289fc8d135e7dcc296cf4fd6e372309f63288cc6d349ff07bbef7bbb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4237</id>
    <title>Moderate: go-toolset security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 12:24:12"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>go-toolset security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. 

Security Fix(es):

* golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)
* golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4237" id="RHSA-2024:4237" type="rhsa" title="RHSA-2024:4237"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24789" id="CVE-2024-24789" type="cve" title="CVE-2024-24789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24790" id="CVE-2024-24790" type="cve" title="CVE-2024-24790"/>
      <reference href="https://bugzilla.redhat.com/2292668" id="2292668" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2292787" id="2292787" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4237.html" id="ALSA-2024:4237" type="self" title="ALSA-2024:4237"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="go-toolset" stream="rhel8" version="8100020240703083906" context="9edba152" arch="s390x"/>
        <package name="go-toolset" version="1.21.11" release="1.module_el8.10.0+3863+bb82df69" epoch="0" arch="s390x" src="go-toolset-1.21.11-1.module_el8.10.0+3863+bb82df69.src.rpm">
          <filename>go-toolset-1.21.11-1.module_el8.10.0+3863+bb82df69.s390x.rpm</filename>
          <sum type="sha256">192e3e9bd19b3f335a54e1b32265fcd35231738375a6485e6db96e80b3a980eb</sum>
        </package>
        <package name="golang-src" version="1.21.11" release="1.module_el8.10.0+3863+bb82df69" epoch="0" arch="noarch" src="golang-1.21.11-1.module_el8.10.0+3863+bb82df69.src.rpm">
          <filename>golang-src-1.21.11-1.module_el8.10.0+3863+bb82df69.noarch.rpm</filename>
          <sum type="sha256">6fb39ceab60b7c993aa438447bb2676e33e82e4069dfe9f025184c11de29d4bd</sum>
        </package>
        <package name="golang" version="1.21.11" release="1.module_el8.10.0+3863+bb82df69" epoch="0" arch="s390x" src="golang-1.21.11-1.module_el8.10.0+3863+bb82df69.src.rpm">
          <filename>golang-1.21.11-1.module_el8.10.0+3863+bb82df69.s390x.rpm</filename>
          <sum type="sha256">7d1ba5a0f840835af0ec5d755b775c3e35f4affb41346f462e15311fc136fe36</sum>
        </package>
        <package name="golang-tests" version="1.21.11" release="1.module_el8.10.0+3863+bb82df69" epoch="0" arch="noarch" src="golang-1.21.11-1.module_el8.10.0+3863+bb82df69.src.rpm">
          <filename>golang-tests-1.21.11-1.module_el8.10.0+3863+bb82df69.noarch.rpm</filename>
          <sum type="sha256">98a794472656647c6916a76cdd80139eeb15c373ba4f846cb2d661434b170a64</sum>
        </package>
        <package name="golang-docs" version="1.21.11" release="1.module_el8.10.0+3863+bb82df69" epoch="0" arch="noarch" src="golang-1.21.11-1.module_el8.10.0+3863+bb82df69.src.rpm">
          <filename>golang-docs-1.21.11-1.module_el8.10.0+3863+bb82df69.noarch.rpm</filename>
          <sum type="sha256">ad6a225392fec7b8c5e25af5835472c73c060e6edb2fc4ac80df4054468df326</sum>
        </package>
        <package name="golang-bin" version="1.21.11" release="1.module_el8.10.0+3863+bb82df69" epoch="0" arch="s390x" src="golang-1.21.11-1.module_el8.10.0+3863+bb82df69.src.rpm">
          <filename>golang-bin-1.21.11-1.module_el8.10.0+3863+bb82df69.s390x.rpm</filename>
          <sum type="sha256">b5a9888467d80375e1581908555e116bc8b910013f09fb86a1862f6cc0690aea</sum>
        </package>
        <package name="golang-misc" version="1.21.11" release="1.module_el8.10.0+3863+bb82df69" epoch="0" arch="noarch" src="golang-1.21.11-1.module_el8.10.0+3863+bb82df69.src.rpm">
          <filename>golang-misc-1.21.11-1.module_el8.10.0+3863+bb82df69.noarch.rpm</filename>
          <sum type="sha256">e4c4c19986fef27dc345f20f1d0b6e2d76aebeea915ee8cf670c657ac96319a2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4241</id>
    <title>Moderate: iperf3 security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 14:17:31"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>iperf3 security update</summary>
    <description>Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

Security Fix(es):

* iperf3: possible denial of service (CVE-2023-7250)
* iperf3: vulnerable to marvin attack if the authentication option is used (CVE-2024-26306)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4241" id="RHSA-2024:4241" type="rhsa" title="RHSA-2024:4241"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-7250" id="CVE-2023-7250" type="cve" title="CVE-2023-7250"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26306" id="CVE-2024-26306" type="cve" title="CVE-2024-26306"/>
      <reference href="https://bugzilla.redhat.com/2244707" id="2244707" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270270" id="2270270" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4241.html" id="ALSA-2024:4241" type="self" title="ALSA-2024:4241"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="iperf3" version="3.5" release="10.el8_10" epoch="0" arch="s390x" src="iperf3-3.5-10.el8_10.src.rpm">
          <filename>iperf3-3.5-10.el8_10.s390x.rpm</filename>
          <sum type="sha256">d23a667e631260d9877624ede0ac7490ddb1acb4999a4bcc7ab1535f606ba0b8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4242</id>
    <title>Moderate: libreoffice security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-04 06:41:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libreoffice security update</summary>
    <description>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

Security Fix(es):

* libreoffice: create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic (CVE-2024-3044)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4242" id="RHSA-2024:4242" type="rhsa" title="RHSA-2024:4242"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3044" id="CVE-2024-3044" type="cve" title="CVE-2024-3044"/>
      <reference href="https://bugzilla.redhat.com/2280542" id="2280542" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4242.html" id="ALSA-2024:4242" type="self" title="ALSA-2024:4242"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="autocorr-ru" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-ru-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">1b1ee519eea62d32b87eb6815f4ebffaee1e2409975d0b946feb889a5c8caca4</sum>
        </package>
        <package name="libreoffice-ure" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>libreoffice-ure-6.4.7.2-17.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">2a31854ca2f37a4ec38f1d611f2c57b95a16c5f9730cfb80a3fc14c406e11a0c</sum>
        </package>
        <package name="autocorr-sv" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-sv-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">2b2a18d053a8170a7a248332accd274be6f2dcda364750dc86dfc37e789118c5</sum>
        </package>
        <package name="autocorr-hr" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-hr-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">38be7b316806b0d1d97d390dd1132344729cd159553c71fab7fad9169321a266</sum>
        </package>
        <package name="libreoffice-core" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>libreoffice-core-6.4.7.2-17.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">3b8a1b74bcbb499e869a1ba3c10e5317eb82a12d713d13607fc4c3c70cfc9a36</sum>
        </package>
        <package name="autocorr-ko" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-ko-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">422fb0634fca4ba567a629767a4f9e222440b6c92eb97c43c0332e5e830a6072</sum>
        </package>
        <package name="autocorr-sk" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-sk-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">44f18ae40e3cbe3e47726e2cf9435b12552aa97310dc79db799af4d627f1bb76</sum>
        </package>
        <package name="autocorr-cs" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-cs-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">46746d6a3ac701ec9b6adac42ddf690639f17cc859eacdbe299920a1991a205c</sum>
        </package>
        <package name="autocorr-ca" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-ca-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">4c0b619507716ccaa2d3b097e54e998523c2411fc1d79f8e4c081275f5fa60bd</sum>
        </package>
        <package name="autocorr-ja" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-ja-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">4dcb3556a5b39bc14a859e7af8cecd64bc10952151951586e5b67c4c38ca8264</sum>
        </package>
        <package name="autocorr-fr" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-fr-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">50c6933d8e9ccb7b7632a7c71390048f408f76743f71da5abc5aed36b2450985</sum>
        </package>
        <package name="autocorr-lt" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-lt-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">551b9ed983fed9d741def8e292dedacb2e61277355b520308ee763f4a949d02e</sum>
        </package>
        <package name="libreoffice-graphicfilter" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>libreoffice-graphicfilter-6.4.7.2-17.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">566581056e86cf01deb90e5263fde0cb59917e6eb65da566de98b60b7d8d143a</sum>
        </package>
        <package name="autocorr-sr" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-sr-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">5667b15497831b126261764b11ff6c42448eb58f145c459c363a74ee0ba8d50c</sum>
        </package>
        <package name="autocorr-da" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-da-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">575f556ef59aaeb08129f29c16611612234ef505cb89ff8ce0259d93b3eb0943</sum>
        </package>
        <package name="libreoffice-calc" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>libreoffice-calc-6.4.7.2-17.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">669875e7b5894b2038f465cd52078cd498257134ba8776c1522c5567640dfbed</sum>
        </package>
        <package name="autocorr-vi" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-vi-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">70c0385ba9a9b55cb7e6773b9d00f7ab0596e8a476ddb52bb3ea3e17f1e410e0</sum>
        </package>
        <package name="autocorr-it" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-it-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">7293a321630e63bf72256e589fc9024656984fbdbade25232d5f4dd0d080918b</sum>
        </package>
        <package name="autocorr-fa" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-fa-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">747121041ab8fdd13736a93899b440ad89284872aae7a033830ac165172244e9</sum>
        </package>
        <package name="libreoffice-opensymbol-fonts" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>libreoffice-opensymbol-fonts-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">74d87f30faa63c210d5a69a096b17f3e06f52c03f887ff6c9dab4711c1b0f3fb</sum>
        </package>
        <package name="libreoffice-pdfimport" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>libreoffice-pdfimport-6.4.7.2-17.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">781968541a08c75ca61568826dfe452713b03b410286c2438f6ed6416dfc1a18</sum>
        </package>
        <package name="autocorr-ro" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-ro-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">7f257eeb27234744fa2b7eb3b73ffa4a9bc0e635893132736d47e3e70424538f</sum>
        </package>
        <package name="autocorr-pt" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-pt-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">8022fbd395ef0355e9548bcd5b39c7e3110fa22c130e807820e42bba2fb8d583</sum>
        </package>
        <package name="autocorr-is" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-is-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">80432d82fde51caec8fb1af0eb58959ca8883759c77866468e6a99b353342875</sum>
        </package>
        <package name="autocorr-nl" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-nl-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">854e99fd115660cc0c8e91e9330ea3e49d4acccc945a826d47db34db11ed168a</sum>
        </package>
        <package name="autocorr-zh" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-zh-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">85c8a326a0fe16213f86ef9ebabc8b964fc665c9e65404eeaf96ba3d49331262</sum>
        </package>
        <package name="autocorr-mn" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-mn-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">8609faeb45cdcb6432b237c5ddf51b4534061d8f79e2a08797762abfe6a83a84</sum>
        </package>
        <package name="autocorr-ga" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-ga-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">91f13386d219059efb11601923494fc154a8200bc9ee6242029aadd3308c44a2</sum>
        </package>
        <package name="autocorr-fi" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-fi-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">99775af4f1dd7cce3efcab727aeddea3aa7273b001a3e9582dab1d65ecfc06f7</sum>
        </package>
        <package name="libreoffice-writer" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>libreoffice-writer-6.4.7.2-17.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">a06bd8f79591edbf5f20d636710ebe16b776d2fc19416ba15601a2ce3d7de8b1</sum>
        </package>
        <package name="autocorr-es" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-es-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">a3288ebeaafd9d92ab06f49aeccb5cc2814489c55627efba5295dfc5e40ffe27</sum>
        </package>
        <package name="libreoffice-langpack-en" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>libreoffice-langpack-en-6.4.7.2-17.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">a5745e480c0319c7bced327b8c58254b3520b398811eec4b5adbe7c6ea67e544</sum>
        </package>
        <package name="autocorr-lb" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-lb-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">aaf3be5dbad7fc54e55b930c7737eb8b26bf2cbd25c385d13916b2665778dfd3</sum>
        </package>
        <package name="libreoffice-help-en" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>libreoffice-help-en-6.4.7.2-17.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">ac8aaef42488bba0a8eb0c9577b72f9fd0c66ff8a360779e5d880b31e1cb7870</sum>
        </package>
        <package name="autocorr-en" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-en-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">aca1c2040f4db05011a8d5b3d847663ff4b37632acc39b1ad262ec4e2fb9cbe6</sum>
        </package>
        <package name="autocorr-de" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-de-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">ae742f17e210184700127eac83b39308f3f95203ed5552fd6435d0f1e02660d4</sum>
        </package>
        <package name="autocorr-hu" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-hu-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">b4b4f79824d369f3ec5ca0e0c1099e1ba6c4c725a119a551dd3d890cb432e25d</sum>
        </package>
        <package name="libreoffice-ogltrans" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>libreoffice-ogltrans-6.4.7.2-17.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">bfa54c0ceb9e64c0e62a4d298f12fa6a40eec748170753dd16cf63b0a139d2ba</sum>
        </package>
        <package name="libreoffice-data" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>libreoffice-data-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">c62eb07243284fb878970a6902f9526516f66789347b04bb13001141ec90acee</sum>
        </package>
        <package name="libreoffice-pyuno" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>libreoffice-pyuno-6.4.7.2-17.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">d098c2a41721ad3d012d6d7367fccb32fcf98634c4a22275914ecc1b8cd410bc</sum>
        </package>
        <package name="autocorr-tr" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-tr-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">dfaa9e2fd92a8e9112f2fffd1f0f26a7b4ae31aa34c3f3a884e8926ee41eb48b</sum>
        </package>
        <package name="autocorr-af" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-af-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">ec0733fb565485fa583c28cbb605a5044ccd87e3cc1a85cb84e64adf278875c2</sum>
        </package>
        <package name="libreoffice-ure-common" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>libreoffice-ure-common-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">f425269109b8b47b5c881978eee797ff3714e7a2c14611eb3cd4392e7a14ae7f</sum>
        </package>
        <package name="libreoffice-impress" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>libreoffice-impress-6.4.7.2-17.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">f59f960737829eec1dbc3c257bec6e11ead74a0acc30581433fa8a59dd55d767</sum>
        </package>
        <package name="autocorr-sl" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-sl-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">fd6dcb894e046c338bcace5c81475ca71edc13747c8efe7a00bde2da36a52af7</sum>
        </package>
        <package name="autocorr-pl" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-pl-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">fd89cc6e44220691dbe484cf32218658c75fd1f3e40ac45829d607f800364371</sum>
        </package>
        <package name="autocorr-bg" version="6.4.7.2" release="17.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-17.el8_10.alma.1.src.rpm">
          <filename>autocorr-bg-6.4.7.2-17.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">fe5609542fd5ea74e3502af2d4f1f8b7781506ab8536e953da9270c1dc248c3b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4243</id>
    <title>Moderate: python3 security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 12:16:41"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4243" id="RHSA-2024:4243" type="rhsa" title="RHSA-2024:4243"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0450" id="CVE-2024-0450" type="cve" title="CVE-2024-0450"/>
      <reference href="https://bugzilla.redhat.com/2276525" id="2276525" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4243.html" id="ALSA-2024:4243" type="self" title="ALSA-2024:4243"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.12-devel" version="3.12.3" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.3-2.el8_10.src.rpm">
          <filename>python3.12-devel-3.12.3-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">34ef67d1df6f92ee500fb396c0b147fef527f223c8a8d66acd80df45d6ec5012</sum>
        </package>
        <package name="python3.12-libs" version="3.12.3" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.3-2.el8_10.src.rpm">
          <filename>python3.12-libs-3.12.3-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">4e721788f89d187653624d3f4707e4f38e8792746f1c73771a14ab94b4990e68</sum>
        </package>
        <package name="python3.12-rpm-macros" version="3.12.3" release="2.el8_10" epoch="0" arch="noarch" src="python3.12-3.12.3-2.el8_10.src.rpm">
          <filename>python3.12-rpm-macros-3.12.3-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">5fb8ef1a4fd47fce25f3cb656f5289dccea2a5dfe0d9fa25ccc375313304d53f</sum>
        </package>
        <package name="python3.12-tkinter" version="3.12.3" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.3-2.el8_10.src.rpm">
          <filename>python3.12-tkinter-3.12.3-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">6664b22576111ee8db97ac03871fb93ec2152f4564a2d741a8cec61995449ac0</sum>
        </package>
        <package name="python3.12" version="3.12.3" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.3-2.el8_10.src.rpm">
          <filename>python3.12-3.12.3-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">ab59a9fd64a6b239406eb0827a2db4d4f6dc78f097867dea494f178964fa19c5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4244</id>
    <title>Moderate: python3.11-PyMySQL security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 12:11:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11-PyMySQL security update</summary>
    <description>This package contains a pure-Python MySQL client library. The goal of PyMySQL is to be a drop-in replacement for MySQLdb and work on CPython, PyPy, IronPython and Jython.

Security Fix(es):

* python-pymysql: SQL injection if used with untrusted JSON input (CVE-2024-36039)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4244" id="RHSA-2024:4244" type="rhsa" title="RHSA-2024:4244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36039" id="CVE-2024-36039" type="cve" title="CVE-2024-36039"/>
      <reference href="https://bugzilla.redhat.com/2282821" id="2282821" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4244.html" id="ALSA-2024:4244" type="self" title="ALSA-2024:4244"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.11-PyMySQL" version="1.0.2" release="2.el8_10" epoch="0" arch="noarch" src="python3.11-PyMySQL-1.0.2-2.el8_10.src.rpm">
          <filename>python3.11-PyMySQL-1.0.2-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">eff363deec11c0336c4bff86155351f482527653977101348eb1b67450bab2c7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4245</id>
    <title>Moderate: python3 security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 12:05:45"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python-pymysql: SQL injection if used with untrusted JSON input (CVE-2024-36039)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4245" id="RHSA-2024:4245" type="rhsa" title="RHSA-2024:4245"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36039" id="CVE-2024-36039" type="cve" title="CVE-2024-36039"/>
      <reference href="https://bugzilla.redhat.com/2282821" id="2282821" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4245.html" id="ALSA-2024:4245" type="self" title="ALSA-2024:4245"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.12-PyMySQL" version="1.1.0" release="3.el8_10" epoch="0" arch="noarch" src="python3.12-PyMySQL-1.1.0-3.el8_10.src.rpm">
          <filename>python3.12-PyMySQL-1.1.0-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">62e5bb7b24b556f3fd22e7718efa51406ec3211dde665b0c02a7b0c1871c10a9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4246</id>
    <title>Moderate: container-tools security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 12:02:00"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>container-tools security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON (CVE-2024-24786)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4246" id="RHSA-2024:4246" type="rhsa" title="RHSA-2024:4246"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24786" id="CVE-2024-24786" type="cve" title="CVE-2024-24786"/>
      <reference href="https://bugzilla.redhat.com/2268046" id="2268046" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4246.html" id="ALSA-2024:4246" type="self" title="ALSA-2024:4246"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="container-tools" stream="rhel8" version="8100020240618090252" context="20125149" arch="s390x"/>
        <package name="toolbox" version="0.0.99.5" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>toolbox-0.0.99.5-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">02a2d3af8462551cd77436769f93847657c11f45fa572a63f5d0b0686e6a25d0</sum>
        </package>
        <package name="skopeo-tests" version="1.14.4" release="1.module_el8.10.0+3862+c5a22a8d" epoch="2" arch="s390x" src="skopeo-1.14.4-1.module_el8.10.0+3862+c5a22a8d.src.rpm">
          <filename>skopeo-tests-1.14.4-1.module_el8.10.0+3862+c5a22a8d.s390x.rpm</filename>
          <sum type="sha256">043274d7cd439b8a4e62a2d83e8ac85e82e5e5bf490a547fb447ee4ff37d3c21</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="4.module_el8.10.0+3862+c5a22a8d" epoch="4" arch="s390x" src="podman-4.9.4-4.module_el8.10.0+3862+c5a22a8d.src.rpm">
          <filename>podman-tests-4.9.4-4.module_el8.10.0+3862+c5a22a8d.s390x.rpm</filename>
          <sum type="sha256">0ab5ac157f057671c5b3dfac2d98b1394fcfcb548363b57d4af56ef842fe1ce9</sum>
        </package>
        <package name="criu-libs" version="3.18" release="5.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>criu-libs-3.18-5.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">1962469cfa08c792359c82d44b5410abab23b62f897edccd5283944edabe867a</sum>
        </package>
        <package name="skopeo" version="1.14.4" release="1.module_el8.10.0+3862+c5a22a8d" epoch="2" arch="s390x" src="skopeo-1.14.4-1.module_el8.10.0+3862+c5a22a8d.src.rpm">
          <filename>skopeo-1.14.4-1.module_el8.10.0+3862+c5a22a8d.s390x.rpm</filename>
          <sum type="sha256">1f37c5d5ed297377874dba058106da49cf0ca552a033f0314828ada22c06e677</sum>
        </package>
        <package name="podman-catatonit" version="4.9.4" release="4.module_el8.10.0+3862+c5a22a8d" epoch="4" arch="s390x" src="podman-4.9.4-4.module_el8.10.0+3862+c5a22a8d.src.rpm">
          <filename>podman-catatonit-4.9.4-4.module_el8.10.0+3862+c5a22a8d.s390x.rpm</filename>
          <sum type="sha256">28b398e5ea89a955db9b49641bebd83c83806d5895bc6f75c952e0b3e804d698</sum>
        </package>
        <package name="fuse-overlayfs" version="1.13" release="1.module_el8.10.0+3859+6ae70a0e" epoch="0" arch="s390x" src="fuse-overlayfs-1.13-1.module_el8.10.0+3859+6ae70a0e.src.rpm">
          <filename>fuse-overlayfs-1.13-1.module_el8.10.0+3859+6ae70a0e.s390x.rpm</filename>
          <sum type="sha256">29b30d0c5708c9391957eaf454601ebef98ef92f93cfcf35fc2ac68ca6e95c87</sum>
        </package>
        <package name="runc" version="1.1.12" release="1.module_el8.10.0+3858+6ad51f9f" epoch="1" arch="s390x" src="runc-1.1.12-1.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>runc-1.1.12-1.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">3311fbb35407728f20496c095803d328f0f711e05412c643cca9a0aead47c2d4</sum>
        </package>
        <package name="slirp4netns" version="1.2.3" release="1.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="slirp4netns-1.2.3-1.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>slirp4netns-1.2.3-1.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">47e064f66ebe5ddf06943af427f7e84b1bfe6139ff8bfd3f03d60c6be4ac9be1</sum>
        </package>
        <package name="podman-plugins" version="4.9.4" release="4.module_el8.10.0+3862+c5a22a8d" epoch="4" arch="s390x" src="podman-4.9.4-4.module_el8.10.0+3862+c5a22a8d.src.rpm">
          <filename>podman-plugins-4.9.4-4.module_el8.10.0+3862+c5a22a8d.s390x.rpm</filename>
          <sum type="sha256">518ce465131d8d09e8bbc0b178dfdf2bf69bcc3014d88f5d04530dce442a4f66</sum>
        </package>
        <package name="podman" version="4.9.4" release="4.module_el8.10.0+3862+c5a22a8d" epoch="4" arch="s390x" src="podman-4.9.4-4.module_el8.10.0+3862+c5a22a8d.src.rpm">
          <filename>podman-4.9.4-4.module_el8.10.0+3862+c5a22a8d.s390x.rpm</filename>
          <sum type="sha256">535b1b2622c2129c64d23232ede3c7cb078f97d4b66978c39e2f783c0b6b8434</sum>
        </package>
        <package name="python3-criu" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>python3-criu-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">632fe45692e3679dbd77ca62f4dd56c66dd4675de7f1874459025927e78d1db3</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.5" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>toolbox-tests-0.0.99.5-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">6f3afa8d1e85355c8b298eb28c01fa395e12e6268471b962b0987703f32210e9</sum>
        </package>
        <package name="cockpit-podman" version="84.1" release="1.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="noarch" src="cockpit-podman-84.1-1.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>cockpit-podman-84.1-1.module_el8.10.0+3858+6ad51f9f.noarch.rpm</filename>
          <sum type="sha256">7915999cb1ee8e09a70de43499543840abebc7d5a924567453d192a165b02427</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>libslirp-4.4.0-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">7f6ee088719dda6b4abc4b0005f17b1a478bc5a1f5b85602af95ab2379a13ded</sum>
        </package>
        <package name="buildah-tests" version="1.33.8" release="1.module_el8.10.0+3862+c5a22a8d" epoch="2" arch="s390x" src="buildah-1.33.8-1.module_el8.10.0+3862+c5a22a8d.src.rpm">
          <filename>buildah-tests-1.33.8-1.module_el8.10.0+3862+c5a22a8d.s390x.rpm</filename>
          <sum type="sha256">85ad1fab2f6e695e569253d2fef1edda33e2f81ca05dda217787520e67339bef</sum>
        </package>
        <package name="python3-podman" version="4.9.0" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="noarch" src="python-podman-4.9.0-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>python3-podman-4.9.0-1.module_el8.10.0+3792+03eaed9c.noarch.rpm</filename>
          <sum type="sha256">884af78bcfd62f80252ad9921c337b7ab39471e00c24fcedb2f30f2a26ede8dc</sum>
        </package>
        <package name="aardvark-dns" version="1.10.0" release="1.module_el8.10.0+3858+6ad51f9f" epoch="2" arch="s390x" src="aardvark-dns-1.10.0-1.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>aardvark-dns-1.10.0-1.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">8930e60873726395a1b7b7b675fa0aa66538198c06fb483ea9f24ae795ca8a1d</sum>
        </package>
        <package name="udica" version="0.2.6" release="21.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="noarch" src="udica-0.2.6-21.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>udica-0.2.6-21.module_el8.10.0+3858+6ad51f9f.noarch.rpm</filename>
          <sum type="sha256">8d98a1794f4f68669a824ce7988ed1fd46c307ec693bba17b3a0fe11d7e0665d</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="2.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>libslirp-devel-4.4.0-2.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">8e619da0a95c4f17206294099001540f08000d56a3e433f027055d84dabef841</sum>
        </package>
        <package name="containers-common" version="1" release="81.module_el8.10.0+3858+6ad51f9f" epoch="2" arch="s390x" src="containers-common-1-81.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>containers-common-1-81.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">9956adf17dbc8119a6e80b9b693c80da337246ac0d8dc82dc41a91b209b5c078</sum>
        </package>
        <package name="netavark" version="1.10.3" release="1.module_el8.10.0+3845+87b84552" epoch="2" arch="s390x" src="netavark-1.10.3-1.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>netavark-1.10.3-1.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">ab5099e416d5d019c5fdc0cb6dee0d0ec2b08f4adc918665112f240ec2f6f43f</sum>
        </package>
        <package name="crit" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>crit-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">aeb27c5bcec90a9452f93ad79ef0d4f00ecedf4442f32f9bedb481509db12683</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="4.module_el8.10.0+3862+c5a22a8d" epoch="4" arch="s390x" src="podman-4.9.4-4.module_el8.10.0+3862+c5a22a8d.src.rpm">
          <filename>podman-remote-4.9.4-4.module_el8.10.0+3862+c5a22a8d.s390x.rpm</filename>
          <sum type="sha256">b828c582aad0ce5b279a9904af1a843a3e070def569c177afc93590ef36be47b</sum>
        </package>
        <package name="container-selinux" version="2.229.0" release="2.module_el8.10.0+3858+6ad51f9f" epoch="2" arch="noarch" src="container-selinux-2.229.0-2.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>container-selinux-2.229.0-2.module_el8.10.0+3858+6ad51f9f.noarch.rpm</filename>
          <sum type="sha256">bd30b0ee8a2420be3eb817012b3c9f5ac58902e830a3493dad648ee021ea7ab5</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="4.module_el8.10.0+3862+c5a22a8d" epoch="4" arch="noarch" src="podman-4.9.4-4.module_el8.10.0+3862+c5a22a8d.src.rpm">
          <filename>podman-docker-4.9.4-4.module_el8.10.0+3862+c5a22a8d.noarch.rpm</filename>
          <sum type="sha256">c42c97d9b4981a1c385670692a5d653998aca4372160b531d6c4cec3d92b2c74</sum>
        </package>
        <package name="crun" version="1.14.3" release="2.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="crun-1.14.3-2.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>crun-1.14.3-2.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">d07a292ed62fb537ef65dee1cce03a0dfb3eb95bb4967ff688f1d3332fabe47b</sum>
        </package>
        <package name="buildah" version="1.33.8" release="1.module_el8.10.0+3862+c5a22a8d" epoch="2" arch="s390x" src="buildah-1.33.8-1.module_el8.10.0+3862+c5a22a8d.src.rpm">
          <filename>buildah-1.33.8-1.module_el8.10.0+3862+c5a22a8d.s390x.rpm</filename>
          <sum type="sha256">d3970f3caaec1670800cc0d2593b767645f9a932c891138ef66f7fa1b8c8abf5</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.10" release="1.module_el8.10.0+3859+6ae70a0e" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3859+6ae70a0e.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3859+6ae70a0e.s390x.rpm</filename>
          <sum type="sha256">e0c5603c38bf2b38fcbe3ab49d91842c01b94fb340f2a4145aa932567565aa2e</sum>
        </package>
        <package name="podman-gvproxy" version="4.9.4" release="4.module_el8.10.0+3862+c5a22a8d" epoch="4" arch="s390x" src="podman-4.9.4-4.module_el8.10.0+3862+c5a22a8d.src.rpm">
          <filename>podman-gvproxy-4.9.4-4.module_el8.10.0+3862+c5a22a8d.s390x.rpm</filename>
          <sum type="sha256">e19c7b59fde33da0793edf58ebfb3d3251f34cac3ba5ffdc29d038ccc2ece1ee</sum>
        </package>
        <package name="criu" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>criu-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">e6f4185ffc86727029c96555a60751ea090eea01d5166266ccb4ec5201db4819</sum>
        </package>
        <package name="containernetworking-plugins" version="1.4.0" release="2.module_el8.10.0+3792+03eaed9c" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-2.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>containernetworking-plugins-1.4.0-2.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">e7026bcfe3e311453e06eb69681c4ea919d959dfffb5bd8603615429e7705b47</sum>
        </package>
        <package name="conmon" version="2.1.10" release="1.module_el8.10.0+3845+87b84552" epoch="3" arch="s390x" src="conmon-2.1.10-1.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>conmon-2.1.10-1.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">f8f7e631b6103852487fcb99e1c6baaf8c5e60e3654c2f5a4bddc238ed708563</sum>
        </package>
        <package name="criu-devel" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>criu-devel-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">ffa71276e65ae92bb9c7b93241ba28ad74337aa5770f3cf3390d73b2552e73ae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4247</id>
    <title>Moderate: libuv security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 11:49:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libuv security update</summary>
    <description>libuv is a multi-platform support library with a focus on asynchronous I/O. 

Security Fix(es):

* libuv: Improper Domain Lookup that potentially leads to SSRF attacks (CVE-2024-24806)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4247" id="RHSA-2024:4247" type="rhsa" title="RHSA-2024:4247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24806" id="CVE-2024-24806" type="cve" title="CVE-2024-24806"/>
      <reference href="https://bugzilla.redhat.com/2263292" id="2263292" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4247.html" id="ALSA-2024:4247" type="self" title="ALSA-2024:4247"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libuv" version="1.41.1" release="2.el8_10" epoch="1" arch="s390x" src="libuv-1.41.1-2.el8_10.src.rpm">
          <filename>libuv-1.41.1-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">9b78657319098f0a1708f247b24e68036ac1437cade5b918388400e6c264dd7f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4265</id>
    <title>Moderate: cups security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 11:29:06"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>cups security update</summary>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.

Security Fix(es):

* cups: Cupsd Listen arbitrary chmod 0140777 (CVE-2024-35235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4265" id="RHSA-2024:4265" type="rhsa" title="RHSA-2024:4265"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35235" id="CVE-2024-35235" type="cve" title="CVE-2024-35235"/>
      <reference href="https://bugzilla.redhat.com/2290318" id="2290318" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4265.html" id="ALSA-2024:4265" type="self" title="ALSA-2024:4265"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="cups-client" version="2.2.6" release="60.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-60.el8_10.src.rpm">
          <filename>cups-client-2.2.6-60.el8_10.s390x.rpm</filename>
          <sum type="sha256">0bc5b9b945b96c84731298c1ec743053948b57e565cc0a2456ba41666b438fc5</sum>
        </package>
        <package name="cups-ipptool" version="2.2.6" release="60.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-60.el8_10.src.rpm">
          <filename>cups-ipptool-2.2.6-60.el8_10.s390x.rpm</filename>
          <sum type="sha256">69f5c8d49a60844e70914b8633442da540b7b8df3c5a7e5236b6b044dca36ecd</sum>
        </package>
        <package name="cups-devel" version="2.2.6" release="60.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-60.el8_10.src.rpm">
          <filename>cups-devel-2.2.6-60.el8_10.s390x.rpm</filename>
          <sum type="sha256">86367d471884d607d983817f7c6ca2eaaf60761cb63c67bb96b2994e9164309f</sum>
        </package>
        <package name="cups" version="2.2.6" release="60.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-60.el8_10.src.rpm">
          <filename>cups-2.2.6-60.el8_10.s390x.rpm</filename>
          <sum type="sha256">97b51888f1ae7b21b781f71ec4ff294d2713c04932660cc3b07b498f9331fb6a</sum>
        </package>
        <package name="cups-lpd" version="2.2.6" release="60.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-60.el8_10.src.rpm">
          <filename>cups-lpd-2.2.6-60.el8_10.s390x.rpm</filename>
          <sum type="sha256">c1830c045981dd172f55e267e5e68e5986d7539376600b4ff97c73f61789537f</sum>
        </package>
        <package name="cups-filesystem" version="2.2.6" release="60.el8_10" epoch="1" arch="noarch" src="cups-2.2.6-60.el8_10.src.rpm">
          <filename>cups-filesystem-2.2.6-60.el8_10.noarch.rpm</filename>
          <sum type="sha256">e769568f7c5b7de6a7742cfd9f9f9c2fa5c616d83d46a9187a2f72107cf66b2a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4351</id>
    <title>Low: virt:rhel and virt-devel:rhel security and bug fix update</title>
    <issued date="2024-07-08 00:00:00"/>
    <updated date="2024-07-08 11:17:59"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>virt:rhel and virt-devel:rhel security and bug fix update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix:

* virt:rhel/libvirt: stack use-after-free in virNetClientIOEventLoop (CVE-2024-4418) 

Bug fix:

* virsh destroy with --graceful destroyed a paused guest (qemu process paused by SIGSTOP) (JIRA:AlmaLinux-36064)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4351" id="RHSA-2024:4351" type="rhsa" title="RHSA-2024:4351"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4418" id="CVE-2024-4418" type="cve" title="CVE-2024-4418"/>
      <reference href="https://bugzilla.redhat.com/2278616" id="2278616" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4351.html" id="ALSA-2024:4351" type="self" title="ALSA-2024:4351"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="virt" stream="rhel" version="8100020240407121213" context="9edba152" arch="s390x"/>
        <package name="qemu-kvm-common" version="6.2.0" release="49.module_el8.10.0+3839+c94ce74b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-49.module_el8.10.0+3839+c94ce74b.src.rpm">
          <filename>qemu-kvm-common-6.2.0-49.module_el8.10.0+3839+c94ce74b.s390x.rpm</filename>
          <sum type="sha256">0473b549b9f23c3c770bd6427ee54e3416a0d8f64ae9a7752508b889491afa4e</sum>
        </package>
        <package name="nbdkit-basic-plugins" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-basic-plugins-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">04adc669a1655a4f4dcadbdd520afd5f6f5dc82b44738fcabde3a280f36fb90f</sum>
        </package>
        <package name="python3-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>python3-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">05372f9ad377c74c0d221dacf23c7510171afbb751c03585fd3c09513d7e1bde</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-secret-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">0916d092d4199dba40abe8c7c924705daa1d14a269f6d4e68bbbadf834091607</sum>
        </package>
        <package name="libnbd-devel" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libnbd-devel-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">0c1f0ee145a6b54bb1a2b502a47bc75e63b75d7e6b2e8c60a6c053988fc3b6ab</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-nwfilter-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">10873d1e7f2c099d2c50f356ead84ac6ebd44352a522d1ace4a0070a843b2c67</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-kvm-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">10f4cfb0cdbd249d55e614fb0407b9ee89a3cd8e3950f0365b6cb213bb5fbc60</sum>
        </package>
        <package name="libguestfs-tools" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-tools-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">116835a3e003417d7186479fbf47960a09588a3ace207d4f34da6a19ab8c07de</sum>
        </package>
        <package name="netcf-devel" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-devel-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1888edc09e8d44539c2c7b84b7a8df91477b8a725fe93436ac4d71106e177d48</sum>
        </package>
        <package name="libguestfs-javadoc" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-javadoc-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">18b9d6c98999a3b289a865504944fb3dc9b2994eff5461933549add50c6faa5b</sum>
        </package>
        <package name="nbdkit" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">1a6f5649d6acd35dd28d2d99042056bc8308fe0910ce6322bf27b0ec71bbee4f</sum>
        </package>
        <package name="hivex-devel" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>hivex-devel-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1aa145aa6a3f900531fc1c8f1c161197f37539d113d47c14efd9c66def20940a</sum>
        </package>
        <package name="nbdfuse" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdfuse-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1d3157c38399bbfb00c7e7762135285383554b08b780fcf5eb390ce2f5845d23</sum>
        </package>
        <package name="libnbd" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">2220e7631c2178fe00b6e20d56043e2efc51bec8ccbe9c14dabccdb05ec81abf</sum>
        </package>
        <package name="nbdkit-python-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-python-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">23c394ecc23e544232d78956b610b1403324cb6a46a3d46adc0fd256f19a1e4b</sum>
        </package>
        <package name="nbdkit-tar-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tar-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">2521bcc64ce8e24df611cf9194277fd5f7856f3df3f72be3276748b10d23beb3</sum>
        </package>
        <package name="nbdkit-bash-completion" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="noarch" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-bash-completion-1.24.0-5.module_el8.8.0+3485+7cffc4a3.noarch.rpm</filename>
          <sum type="sha256">254dfbf64036ae05d930d81be90202718fba7b341f0457de4a29ecfca3aea646</sum>
        </package>
        <package name="nbdkit-xz-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-xz-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">263ad615e21aaba0dce020cf1ad8b569c3860640d8074e9f74035ff925c409d0</sum>
        </package>
        <package name="libtpms-devel" version="0.9.1" release="2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3" epoch="0" arch="s390x" src="libtpms-0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3.src.rpm">
          <filename>libtpms-devel-0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3.s390x.rpm</filename>
          <sum type="sha256">269f20560a0beff0b38ed88964a0be1d0318c9057569bd209332e0a87ddbae0b</sum>
        </package>
        <package name="nbdkit-gzip-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-gzip-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">27675a3171d769e7f9ea9b7fa63303b3e51f8221a68feaee1f16aeb7d658dccb</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">2820368b6f9e9d4e64dc753ff9238fa06e4f9b5ac53c076a3f90393b5848892e</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-qemu-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">2eb8c7a3284255dbd6a21029f088658a8a40fe8aa9e4ceaf365e9666b91b82e6</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-nodedev-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">361289dad4ffd3db0c0ed71866ef64564becf279898cdf499ad6741ea693c5d4</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-config-network-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">36c7410a276d0c05b62de2c4f759cbfd213afee70d18941b83714a439847d199</sum>
        </package>
        <package name="lua-guestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>lua-guestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">36d15a85e154608cf2bc661120c8a573356cb3e0e1dc77a94387aa3c8bce90ef</sum>
        </package>
        <package name="libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">40e3ffa7c3e67b0fe9a110dbe8bf267fa9906f358a3bd81135b33a624e6429ba</sum>
        </package>
        <package name="ruby-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ruby-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">4428b40d29de3a3eda15340b2cbacebe838ba363b3897a1a91f904b9f2b4f8b9</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-interface-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">461b3845d7ef2b3b8576cf617cf2d9652aeec803ba40be9b4867d7e8a196f397</sum>
        </package>
        <package name="libvirt-client" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-client-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">48d67c7ebd04f63f2d5e2c0d4e8604ab8a9fb72bb8c7d5e4622809ec50a3847a</sum>
        </package>
        <package name="nbdkit-basic-filters" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-basic-filters-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">494ad345b2b9b009436ba9a8c8c6bb245e8617e921dae51ab6d9281e95999f31</sum>
        </package>
        <package name="nbdkit-curl-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-curl-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">4fd1a6bbe855d7c4068fcf080b4b0b15b367ef7f635ac869b7bddb1698dafa01</sum>
        </package>
        <package name="libvirt-lock-sanlock" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-lock-sanlock-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">5a35761e748522ef61aa778a9cffc1f7e4bb21ed904727f6a7f307d3769358ce</sum>
        </package>
        <package name="libguestfs-bash-completion" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-bash-completion-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">5a67ce33e944ee07d6ea976afa13f8c832ce4be22f124591ace620dfe08b5178</sum>
        </package>
        <package name="qemu-kvm-core" version="6.2.0" release="49.module_el8.10.0+3839+c94ce74b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-49.module_el8.10.0+3839+c94ce74b.src.rpm">
          <filename>qemu-kvm-core-6.2.0-49.module_el8.10.0+3839+c94ce74b.s390x.rpm</filename>
          <sum type="sha256">5b82ff55343fb34efecc7c0b1af70b9bec0c6c98778b401a05605680e55611d7</sum>
        </package>
        <package name="libguestfs-gobject-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gobject-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">5e05d955e58bc16ccb3e4097f338dd34af18225ef9bcd2b420d794a9efdd269b</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">5e2c2a5ff62ebbfcb6a922079204a8b7b0873f33628d274248fca981206b0721</sum>
        </package>
        <package name="python3-libnbd" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>python3-libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">5e93f1875db0f5a6e64e8d785a745072133d63b53e30cf6a7984ebd2e8119320</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">6277db162f5e50a3e36eca7b3d4f1e6bdcccf617d5349bdac8daed441c806885</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-storage-logical-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">63d9d31d22e2e1d4391601e409eb0bb21f005d79dda3310aae5f591995c006db</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-storage-core-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">66eda12af76d14fceb10af042f8b1113d6aa0fceabc8b145f7998e89f221bfe9</sum>
        </package>
        <package name="libvirt-daemon" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">69088558d53f492d1dbc8a22e18e6b3f7cb8ed39126b252d9181f6deab068ec2</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="6.2.0" release="49.module_el8.10.0+3839+c94ce74b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-49.module_el8.10.0+3839+c94ce74b.src.rpm">
          <filename>qemu-kvm-block-curl-6.2.0-49.module_el8.10.0+3839+c94ce74b.s390x.rpm</filename>
          <sum type="sha256">6f1e54c8817226f3427873b1bcae5bf539a20769c6e2965289248a642ca6fdb9</sum>
        </package>
        <package name="nbdkit-tmpdisk-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tmpdisk-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">6f4728c5aa7cc03d70b241d6947aff1fe49546aac4cc62bd01a59c1b1b73ba35</sum>
        </package>
        <package name="libguestfs-java-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-java-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">6fc6fe19b2e83d70d5f240d776ccc00a181870a485d39667fccb62ec0b851f02</sum>
        </package>
        <package name="nbdkit-server" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-server-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">706c1dd5780f1e48f883702f6c86a985bd057078fcd41326947b283625a77e05</sum>
        </package>
        <package name="perl-Sys-Guestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>perl-Sys-Guestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">77c035cdcf2f7e819dcb6d76b9ba12ae63a6f07d615a9a435b7ec2dc8ca93330</sum>
        </package>
        <package name="libguestfs-gfs2" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gfs2-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">7ee36ba216591f26a055c687e5e75e054585c69c86b085d8966cb419ddeb3362</sum>
        </package>
        <package name="qemu-img" version="6.2.0" release="49.module_el8.10.0+3839+c94ce74b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-49.module_el8.10.0+3839+c94ce74b.src.rpm">
          <filename>qemu-img-6.2.0-49.module_el8.10.0+3839+c94ce74b.s390x.rpm</filename>
          <sum type="sha256">804b6cbff4e690119de6ee4e823f8d0a22ae0d5da70b1098d8d8dbe031031b13</sum>
        </package>
        <package name="libguestfs-gobject" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gobject-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">8292ca96b97184b2ca5475901b46b09f715adbe99d1a5983c9ad4a0d2b3d72bb</sum>
        </package>
        <package name="netcf-libs" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-libs-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">843b61e4019e8cec44d5f5823d3c8c0b803997791aecef6ff1023224147cd6f8</sum>
        </package>
        <package name="nbdkit-linuxdisk-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-linuxdisk-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">8673003aa4610f82cbe152021387ac3c6c59d730a79b446aad432030e20f5eff</sum>
        </package>
        <package name="swtpm-tools" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-tools-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">87ce1c2ecc368965a92cf71a29a7cb1331508c7c86394cfaa7e4e87d20897d7b</sum>
        </package>
        <package name="nbdkit-tar-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tar-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">87ec102223607b5d8760ee3d8998a48b3fbce6a1abe6d8056782c1d9f94513ad</sum>
        </package>
        <package name="supermin-devel" version="5.2.1" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="supermin-5.2.1-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>supermin-devel-5.2.1-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">8a47307269cf95719225e1e27dcd1cebdf6a0481948e4a044db972af12de9ce3</sum>
        </package>
        <package name="libguestfs-man-pages-uk" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-man-pages-uk-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">8cd1a80b657a0373e6dcf0b6699e7574c9874db489201985b16bc1d1d78cc55b</sum>
        </package>
        <package name="swtpm-tools-pkcs11" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-tools-pkcs11-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">8e7eeb060f1253ff8a48085d0b452c2ba2c1837e286fd23d91426f255d72398a</sum>
        </package>
        <package name="libguestfs-rescue" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-rescue-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">92093c28f6226504668df61e0bc2c5d1e7d8bf505a8bf762cdd5d2e7a50bb52f</sum>
        </package>
        <package name="netcf" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">9268b4ab854af88a5e511f78b47cf3c4acd66d76f7ea901452f6efd3f9c8bc7c</sum>
        </package>
        <package name="libguestfs-man-pages-ja" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-man-pages-ja-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">968dd115e865d941a07d1728940d84bdfef4f26d43d39aa225f4f4a5a821c89d</sum>
        </package>
        <package name="libguestfs-rsync" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-rsync-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">9cc94d5cec35a9f048fa74c69a8b7d6a0ec48c14074297bb564b91f4cdc4c54f</sum>
        </package>
        <package name="hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">9d259d5ff0ee30b3a2a8e5f897675750f74741ed06d50d3623cf469d1d0f01d8</sum>
        </package>
        <package name="libiscsi" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">a1c871e87ebd136bfd498f13824563fd7428fcaf66bcffb341cfbb8370c2a18d</sum>
        </package>
        <package name="qemu-guest-agent" version="6.2.0" release="49.module_el8.10.0+3839+c94ce74b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-49.module_el8.10.0+3839+c94ce74b.src.rpm">
          <filename>qemu-guest-agent-6.2.0-49.module_el8.10.0+3839+c94ce74b.s390x.rpm</filename>
          <sum type="sha256">a339aa545ecd140ac8c28fd47d414f9be68aebe6de7d975c9be2ffbea6d748dd</sum>
        </package>
        <package name="qemu-kvm" version="6.2.0" release="49.module_el8.10.0+3839+c94ce74b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-49.module_el8.10.0+3839+c94ce74b.src.rpm">
          <filename>qemu-kvm-6.2.0-49.module_el8.10.0+3839+c94ce74b.s390x.rpm</filename>
          <sum type="sha256">a6a86df30abe786f01e4c4a62006e4b57bbe03a0b3adac0e10ba0ea976ee0fe5</sum>
        </package>
        <package name="swtpm" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">a7fbed17619ce4d6d7d43a459be652ec92882b41903ac386ebfd9815806bc622</sum>
        </package>
        <package name="perl-Sys-Virt" version="8.0.0" release="1.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="perl-Sys-Virt-8.0.0-1.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>perl-Sys-Virt-8.0.0-1.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">a8b115eb9ca2707d1d7f800ac1b7730dcc6718168ff355f065464e6778ef5929</sum>
        </package>
        <package name="nbdkit-nbd-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-nbd-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">a9427bee7f157a63f2acd2357032ce829e0561b24193d204072502adad4aa52e</sum>
        </package>
        <package name="libvirt-wireshark" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-wireshark-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">aa6eee72b29e4849c3797c2a17eda03bea12f7b67bcdfe743742a470d30c8eaa</sum>
        </package>
        <package name="nbdkit-example-plugins" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-example-plugins-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">b10c0d094e84d5c035dae70b4db36c311eb7ff9cbee00c8443848f049a600ae4</sum>
        </package>
        <package name="libvirt-libs" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-libs-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">b52ff7673688df8e1bf265faf0a3c9d6c31258a574e9c80d9ea0537475354707</sum>
        </package>
        <package name="libguestfs-appliance" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-appliance-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">b5add06502e5bda5f39f712640e2ab0e8cf539b7a90370c6c1fd963bb73bc7d7</sum>
        </package>
        <package name="libiscsi-utils" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-utils-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">b6eb101dc2787a7d79b4fe51913319933f5927d1816ea03592d2be849ce21faf</sum>
        </package>
        <package name="ruby-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ruby-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">b8696f7658b7872cb5f4e9fe2319e00ec6b668fe0e9adea787890cb9500e0223</sum>
        </package>
        <package name="nbdkit-ssh-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-ssh-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">b9b590364d69f18da851dea269d4774ff711f44e3ace9b3304e87fe25f26aaa5</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">bc058445b194c8733733f1678aedd9b5d8e604881097518ef9cc03aaeb60ed42</sum>
        </package>
        <package name="libvirt" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">be4c2e49177e757351b275d08f093308abee670e459788731ffae081e2cf4daf</sum>
        </package>
        <package name="virt-dib" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>virt-dib-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">bf4b5929cf910fb7e4671e32c9ac2ce2f456e8b1e577cb0f4f33a0df8d316c27</sum>
        </package>
        <package name="libguestfs-java" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-java-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">bfc05f2dc57991bad44654221ea88f653c916e80637290b69c96e3e0f5aa55a8</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="6.2.0" release="49.module_el8.10.0+3839+c94ce74b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-49.module_el8.10.0+3839+c94ce74b.src.rpm">
          <filename>qemu-kvm-block-rbd-6.2.0-49.module_el8.10.0+3839+c94ce74b.s390x.rpm</filename>
          <sum type="sha256">c06bcb01024451e3c3a55f6997a39bec1a535db11cd40dcfd403ecc09f7709d7</sum>
        </package>
        <package name="libvirt-nss" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-nss-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">c1469eac4d0088ca6b395e318562674539b2174257260c4f8b2db644e4a60b3c</sum>
        </package>
        <package name="libvirt-dbus" version="1.3.0" release="2.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libvirt-dbus-1.3.0-2.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libvirt-dbus-1.3.0-2.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">c20042be5784c1f4323e5590891be2a0e33244acff6b45149f36a2eef834064b</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-network-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">c3c0a9b2f00b1174b43b48149b89ad8d0d1019d36a68c3b7853ca14d3c124c96</sum>
        </package>
        <package name="libtpms" version="0.9.1" release="2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3" epoch="0" arch="s390x" src="libtpms-0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3.src.rpm">
          <filename>libtpms-0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3.s390x.rpm</filename>
          <sum type="sha256">c3ffd3692f5d8a7b71c37dad7b8413e74a7099fbb3af07604cec46ee00eb50fd</sum>
        </package>
        <package name="libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">c685dcd2fb41a700a866919788441d7c80c9a10b9757ea843e7a56c67a5d4be2</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-config-nwfilter-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">c8ead4f23780756f437c40b13e61ac634f1f26c63c83693d2a653d645df56194</sum>
        </package>
        <package name="libguestfs-winsupport" version="8.10" release="1.module_el8.10.0+3768+dfd76e10" epoch="0" arch="s390x" src="libguestfs-winsupport-8.10-1.module_el8.10.0+3768+dfd76e10.src.rpm">
          <filename>libguestfs-winsupport-8.10-1.module_el8.10.0+3768+dfd76e10.s390x.rpm</filename>
          <sum type="sha256">ccf203e75a1c0f0de8598ecc0fce3f409a12f34189a7fae21d58c8311062f236</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-storage-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">ce1dcf95e7d39a4bb15be839a0fdd1118afcc6deceb515020be5ab9d58197470</sum>
        </package>
        <package name="swtpm-libs" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-libs-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">d077f2d1f54aa47907a883e12d46f0632e33ad5141bd16a25759a580f851b91c</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-gluster" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-storage-gluster-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">d1aa04740a002affd26b13260e7847c14ea849b786f1583b88861b7b10c4258e</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="6.2.0" release="49.module_el8.10.0+3839+c94ce74b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-49.module_el8.10.0+3839+c94ce74b.src.rpm">
          <filename>qemu-kvm-block-ssh-6.2.0-49.module_el8.10.0+3839+c94ce74b.s390x.rpm</filename>
          <sum type="sha256">d43af1c3c9a02cad0b0cad59a74655f69457efe60e735e2c896b2eb179083959</sum>
        </package>
        <package name="libiscsi-devel" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-devel-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">d45a7d8438477f375ed86276eea276fd3bb0965844cb8733a09691fc68d730db</sum>
        </package>
        <package name="nbdkit-devel" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-devel-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">d5bc58eda3110ad1589ab9d239e347e155bf59eaee69e0bea028f67d9e0ea216</sum>
        </package>
        <package name="swtpm-devel" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-devel-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">d69840154560e2ca3f4ea1315bfcca103b2260692f2c3d5fa1a76dbed7ddfbe1</sum>
        </package>
        <package name="libvirt-devel" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-devel-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">db045ac10b55beaaecb34b845985f7edc9c34f3eb2ccaa07ee42b260e448b9e1</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="6.2.0" release="49.module_el8.10.0+3839+c94ce74b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-49.module_el8.10.0+3839+c94ce74b.src.rpm">
          <filename>qemu-kvm-block-iscsi-6.2.0-49.module_el8.10.0+3839+c94ce74b.s390x.rpm</filename>
          <sum type="sha256">dbbc1e76c54070550dc31fca631f2e3c86d4c277ac31ec1395db03324884d44d</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-storage-disk-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">de7b0981e08e2e31b36a792113f40200c7aa8d33d716c515c5923321405b8aca</sum>
        </package>
        <package name="supermin" version="5.2.1" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="supermin-5.2.1-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>supermin-5.2.1-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">e15b529769bbaa1d035eb7e4d4f58f4757e58772523d45cb07cc7533eeef0057</sum>
        </package>
        <package name="python3-libvirt" version="8.0.0" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="libvirt-python-8.0.0-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>python3-libvirt-8.0.0-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">e36c5a8c03f3393622b5dd5badefcd4a05ee01b8de17de28812017ddfda63954</sum>
        </package>
        <package name="qemu-kvm-docs" version="6.2.0" release="49.module_el8.10.0+3839+c94ce74b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-49.module_el8.10.0+3839+c94ce74b.src.rpm">
          <filename>qemu-kvm-docs-6.2.0-49.module_el8.10.0+3839+c94ce74b.s390x.rpm</filename>
          <sum type="sha256">e4951151a4c225c4d90ac11feeffc9779b599090516e3e30ed623551d12fe163</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">e8fc8e7fb95aaf6528729420fc18206dbeb55eec274769d17da8f89981796875</sum>
        </package>
        <package name="python3-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>python3-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">ec11102e66953715d97704c820c0effcd80944fdd525efca9645f70b1cfa2fa9</sum>
        </package>
        <package name="libguestfs-inspect-icons" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-inspect-icons-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">ece57f7c833d85599725786783875d496fd9d38644cdc96ce23e4d73c6d5e4c9</sum>
        </package>
        <package name="nbdkit-gzip-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-gzip-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">f3befb065571d5207296b7d7f2db60348cb935ec26b3fcf7a5db2f66dbec7dc5</sum>
        </package>
        <package name="libvirt-docs" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-docs-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">f97fd040aebd5aef045149e684d54a32a8ab5f506aadd8fbc47ec9592eba81c6</sum>
        </package>
        <package name="libguestfs-xfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-xfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">fa8ce4ce15f9b8d5753db18aa569fdbb4c636e16d88c6bb83fc588c594c1ee90</sum>
        </package>
        <package name="perl-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>perl-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">fcc1bade9f3d715b09d2679d6efc9fd94b2faa9e912dcae68dbc372613f90965</sum>
        </package>
        <package name="libguestfs-tools-c" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-tools-c-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">fce060540b90878b0d21bfa525965ac06b8622b0a7cf824c54761c92b79f0764</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4367</id>
    <title>Important: pki-core security update</title>
    <issued date="2024-07-08 00:00:00"/>
    <updated date="2024-07-08 19:24:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pki-core security update</summary>
    <description>The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.

Security Fix(es):

* dogtag ca: token authentication bypass vulnerability (CVE-2023-4727)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4367" id="RHSA-2024:4367" type="rhsa" title="RHSA-2024:4367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4727" id="CVE-2023-4727" type="cve" title="CVE-2023-4727"/>
      <reference href="https://bugzilla.redhat.com/2232218" id="2232218" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4367.html" id="ALSA-2024:4367" type="self" title="ALSA-2024:4367"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="pki-core" stream="10.6" version="8100020240708135903" context="338751f5" arch="s390x"/>
        <package name="idm-ldapjdk" version="4.24.0" release="1.module_el8.10.0+3801+17b19a60" epoch="0" arch="noarch" src="ldapjdk-4.24.0-1.module_el8.10.0+3801+17b19a60.src.rpm">
          <filename>idm-ldapjdk-4.24.0-1.module_el8.10.0+3801+17b19a60.noarch.rpm</filename>
          <sum type="sha256">212b1dd839288754fef1aba3419ce1e964d6dc05d61ae765e97e877f853b4b99</sum>
        </package>
        <package name="resteasy" version="3.0.26" release="7.module_el8.10.0+3808+9d4ab1fb" epoch="0" arch="noarch" src="resteasy-3.0.26-7.module_el8.10.0+3808+9d4ab1fb.src.rpm">
          <filename>resteasy-3.0.26-7.module_el8.10.0+3808+9d4ab1fb.noarch.rpm</filename>
          <sum type="sha256">2316e241bb8308ec3e4fe00bedbc6a3deae45d16deda86b87eff74851d884bf9</sum>
        </package>
        <package name="idm-tomcatjss" version="7.8.0" release="1.module_el8.10.0+3801+17b19a60" epoch="0" arch="noarch" src="tomcatjss-7.8.0-1.module_el8.10.0+3801+17b19a60.src.rpm">
          <filename>idm-tomcatjss-7.8.0-1.module_el8.10.0+3801+17b19a60.noarch.rpm</filename>
          <sum type="sha256">24c68def3c9e3ba9f33e97fc4b371717f3a5cc8b6be3f23680865bf9dbe036e6</sum>
        </package>
        <package name="idm-pki-kra" version="10.15.1" release="1.module_el8.10.0+3868+cdab0fd8" epoch="0" arch="noarch" src="pki-core-10.15.1-1.module_el8.10.0+3868+cdab0fd8.src.rpm">
          <filename>idm-pki-kra-10.15.1-1.module_el8.10.0+3868+cdab0fd8.noarch.rpm</filename>
          <sum type="sha256">26441f9f07806c7c004e8902137886c9e2f09e14d9266b98bc33603129da7641</sum>
        </package>
        <package name="idm-pki-acme" version="10.15.1" release="1.module_el8.10.0+3868+cdab0fd8" epoch="0" arch="noarch" src="pki-core-10.15.1-1.module_el8.10.0+3868+cdab0fd8.src.rpm">
          <filename>idm-pki-acme-10.15.1-1.module_el8.10.0+3868+cdab0fd8.noarch.rpm</filename>
          <sum type="sha256">596b818e641152736543c7986892ebf9bd93b55acee734f6612b2df84308897a</sum>
        </package>
        <package name="idm-jss" version="4.11.0" release="1.module_el8.10.0+3801+17b19a60" epoch="0" arch="s390x" src="jss-4.11.0-1.module_el8.10.0+3801+17b19a60.src.rpm">
          <filename>idm-jss-4.11.0-1.module_el8.10.0+3801+17b19a60.s390x.rpm</filename>
          <sum type="sha256">899b671cc3237e63569da7c48ef382bcae636ed37835a2903d37e232c88bfb36</sum>
        </package>
        <package name="idm-pki-ca" version="10.15.1" release="1.module_el8.10.0+3868+cdab0fd8" epoch="0" arch="noarch" src="pki-core-10.15.1-1.module_el8.10.0+3868+cdab0fd8.src.rpm">
          <filename>idm-pki-ca-10.15.1-1.module_el8.10.0+3868+cdab0fd8.noarch.rpm</filename>
          <sum type="sha256">9e43699e806fb44e0b6fd7ba1573451000253642d17953aad99ef19976302c9c</sum>
        </package>
        <package name="idm-pki-base-java" version="10.15.1" release="1.module_el8.10.0+3868+cdab0fd8" epoch="0" arch="noarch" src="pki-core-10.15.1-1.module_el8.10.0+3868+cdab0fd8.src.rpm">
          <filename>idm-pki-base-java-10.15.1-1.module_el8.10.0+3868+cdab0fd8.noarch.rpm</filename>
          <sum type="sha256">a10baa7b866ba21a4067eb262b6a04658d7ec6b48aea48f4a63230b430a17343</sum>
        </package>
        <package name="idm-ldapjdk-javadoc" version="4.24.0" release="1.module_el8.10.0+3801+17b19a60" epoch="0" arch="noarch" src="ldapjdk-4.24.0-1.module_el8.10.0+3801+17b19a60.src.rpm">
          <filename>idm-ldapjdk-javadoc-4.24.0-1.module_el8.10.0+3801+17b19a60.noarch.rpm</filename>
          <sum type="sha256">c25a1b231ea90350db746ba0af552da28a75af93f9f8be2c9f1e0aefa308e6ec</sum>
        </package>
        <package name="python3-idm-pki" version="10.15.1" release="1.module_el8.10.0+3868+cdab0fd8" epoch="0" arch="noarch" src="pki-core-10.15.1-1.module_el8.10.0+3868+cdab0fd8.src.rpm">
          <filename>python3-idm-pki-10.15.1-1.module_el8.10.0+3868+cdab0fd8.noarch.rpm</filename>
          <sum type="sha256">c78e251858cb0d0e0cae194ef5ed55907f6e7a74a7fa22b8ad1b0edeaafd7c37</sum>
        </package>
        <package name="idm-pki-tools" version="10.15.1" release="1.module_el8.10.0+3868+cdab0fd8" epoch="0" arch="s390x" src="pki-core-10.15.1-1.module_el8.10.0+3868+cdab0fd8.src.rpm">
          <filename>idm-pki-tools-10.15.1-1.module_el8.10.0+3868+cdab0fd8.s390x.rpm</filename>
          <sum type="sha256">d091cb8c4591ff227817465087f25b8ace6f8099a84488fc20e6838ecfdb0c37</sum>
        </package>
        <package name="resteasy-javadoc" version="3.0.26" release="7.module_el8.10.0+3808+9d4ab1fb" epoch="0" arch="noarch" src="resteasy-3.0.26-7.module_el8.10.0+3808+9d4ab1fb.src.rpm">
          <filename>resteasy-javadoc-3.0.26-7.module_el8.10.0+3808+9d4ab1fb.noarch.rpm</filename>
          <sum type="sha256">da6187c62aea4bd9db4c5b134feffd6f88f229d87731928ae098cbd218752e1c</sum>
        </package>
        <package name="idm-pki-server" version="10.15.1" release="1.module_el8.10.0+3868+cdab0fd8" epoch="0" arch="noarch" src="pki-core-10.15.1-1.module_el8.10.0+3868+cdab0fd8.src.rpm">
          <filename>idm-pki-server-10.15.1-1.module_el8.10.0+3868+cdab0fd8.noarch.rpm</filename>
          <sum type="sha256">f55111e9799dfaf3638439c6182f9ea4a00196d61b149cc27b9bf2192c2d4a8d</sum>
        </package>
        <package name="idm-jss-javadoc" version="4.11.0" release="1.module_el8.10.0+3801+17b19a60" epoch="0" arch="s390x" src="jss-4.11.0-1.module_el8.10.0+3801+17b19a60.src.rpm">
          <filename>idm-jss-javadoc-4.11.0-1.module_el8.10.0+3801+17b19a60.s390x.rpm</filename>
          <sum type="sha256">f716dc61b5907e1e6c1bf6de5d13cc0768e84b284363b5a90b8b077fcc25be56</sum>
        </package>
        <package name="idm-pki-base" version="10.15.1" release="1.module_el8.10.0+3868+cdab0fd8" epoch="0" arch="noarch" src="pki-core-10.15.1-1.module_el8.10.0+3868+cdab0fd8.src.rpm">
          <filename>idm-pki-base-10.15.1-1.module_el8.10.0+3868+cdab0fd8.noarch.rpm</filename>
          <sum type="sha256">f76b7a56e96b64d1f59dafbe4516851b7142012ecdcdcb4d66d67369904d88b5</sum>
        </package>
        <package name="idm-pki-symkey" version="10.15.1" release="1.module_el8.10.0+3868+cdab0fd8" epoch="0" arch="s390x" src="pki-core-10.15.1-1.module_el8.10.0+3868+cdab0fd8.src.rpm">
          <filename>idm-pki-symkey-10.15.1-1.module_el8.10.0+3868+cdab0fd8.s390x.rpm</filename>
          <sum type="sha256">fe0c13b737ef4f9ed59f613fb79803a68cd5c3bc8bbb364538a88d46cf730304</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4376</id>
    <title>Moderate: libreswan security update</title>
    <issued date="2024-07-08 00:00:00"/>
    <updated date="2024-07-09 12:36:52"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libreswan security update</summary>
    <description>Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).

Security Fix(es):

* libreswan: IKEv1 default AH/ESP responder can crash and restart (CVE-2024-3652)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4376" id="RHSA-2024:4376" type="rhsa" title="RHSA-2024:4376"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3652" id="CVE-2024-3652" type="cve" title="CVE-2024-3652"/>
      <reference href="https://bugzilla.redhat.com/2274448" id="2274448" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4376.html" id="ALSA-2024:4376" type="self" title="ALSA-2024:4376"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libreswan" version="4.12" release="2.el8_10.4" epoch="0" arch="s390x" src="libreswan-4.12-2.el8_10.4.src.rpm">
          <filename>libreswan-4.12-2.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">d8d986d3723c1f7c2ed89137ab5e7bdf34c2c3e83046a492b37453497d1e0173</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4420</id>
    <title>Important: virt:rhel and virt-devel:rhel security update</title>
    <issued date="2024-07-09 00:00:00"/>
    <updated date="2024-07-10 13:18:27"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>virt:rhel and virt-devel:rhel security update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for
Linux on numerous hardware platforms. The virt:rhel module contains packages
which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* qemu-kvm: QEMU: 'qemu-img info' leads to host file read/write (CVE-2024-4467)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4420" id="RHSA-2024:4420" type="rhsa" title="RHSA-2024:4420"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4467" id="CVE-2024-4467" type="cve" title="CVE-2024-4467"/>
      <reference href="https://bugzilla.redhat.com/2278875" id="2278875" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4420.html" id="ALSA-2024:4420" type="self" title="ALSA-2024:4420"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="virt" stream="rhel" version="8100020240407121213" context="9edba152" arch="s390x"/>
        <package name="nbdkit-basic-plugins" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-basic-plugins-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">04adc669a1655a4f4dcadbdd520afd5f6f5dc82b44738fcabde3a280f36fb90f</sum>
        </package>
        <package name="libvirt-lock-sanlock" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-lock-sanlock-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">04b93c90b570cb26cceb6ace46d34f291a693fcce90bad3e12e6fd5904d90945</sum>
        </package>
        <package name="python3-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>python3-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">05372f9ad377c74c0d221dacf23c7510171afbb751c03585fd3c09513d7e1bde</sum>
        </package>
        <package name="libnbd-devel" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libnbd-devel-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">0c1f0ee145a6b54bb1a2b502a47bc75e63b75d7e6b2e8c60a6c053988fc3b6ab</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-driver-storage-core-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">0f32cd2b6825a9aeebf64eea97bfdf979b65500878c17dd55278e3fc150c5e7f</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-kvm-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">10ec61404501442db80d756066e5da09ab9d7f27882ab30fe7827c4ccdff62c8</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="6.2.0" release="50.module_el8.10.0+3869+b8959270" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-50.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>qemu-kvm-block-curl-6.2.0-50.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">1117df5b898d494c41e494b7477eec64702c72c9e4d333144d486a47c4eccfbb</sum>
        </package>
        <package name="libguestfs-tools" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-tools-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">116835a3e003417d7186479fbf47960a09588a3ace207d4f34da6a19ab8c07de</sum>
        </package>
        <package name="netcf-devel" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-devel-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1888edc09e8d44539c2c7b84b7a8df91477b8a725fe93436ac4d71106e177d48</sum>
        </package>
        <package name="libguestfs-javadoc" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-javadoc-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">18b9d6c98999a3b289a865504944fb3dc9b2994eff5461933549add50c6faa5b</sum>
        </package>
        <package name="nbdkit" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">1a6f5649d6acd35dd28d2d99042056bc8308fe0910ce6322bf27b0ec71bbee4f</sum>
        </package>
        <package name="hivex-devel" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>hivex-devel-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1aa145aa6a3f900531fc1c8f1c161197f37539d113d47c14efd9c66def20940a</sum>
        </package>
        <package name="nbdfuse" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>nbdfuse-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1d3157c38399bbfb00c7e7762135285383554b08b780fcf5eb390ce2f5845d23</sum>
        </package>
        <package name="libnbd" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">2220e7631c2178fe00b6e20d56043e2efc51bec8ccbe9c14dabccdb05ec81abf</sum>
        </package>
        <package name="qemu-kvm" version="6.2.0" release="50.module_el8.10.0+3869+b8959270" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-50.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>qemu-kvm-6.2.0-50.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">225b3c946eaa4ec33b463ecf846730308a5540fbcce2904de4641d6e1ff42443</sum>
        </package>
        <package name="nbdkit-python-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-python-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">23c394ecc23e544232d78956b610b1403324cb6a46a3d46adc0fd256f19a1e4b</sum>
        </package>
        <package name="nbdkit-tar-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tar-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">2521bcc64ce8e24df611cf9194277fd5f7856f3df3f72be3276748b10d23beb3</sum>
        </package>
        <package name="nbdkit-bash-completion" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="noarch" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-bash-completion-1.24.0-5.module_el8.8.0+3485+7cffc4a3.noarch.rpm</filename>
          <sum type="sha256">254dfbf64036ae05d930d81be90202718fba7b341f0457de4a29ecfca3aea646</sum>
        </package>
        <package name="nbdkit-xz-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-xz-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">263ad615e21aaba0dce020cf1ad8b569c3860640d8074e9f74035ff925c409d0</sum>
        </package>
        <package name="libtpms-devel" version="0.9.1" release="2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3" epoch="0" arch="s390x" src="libtpms-0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3.src.rpm">
          <filename>libtpms-devel-0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3.s390x.rpm</filename>
          <sum type="sha256">269f20560a0beff0b38ed88964a0be1d0318c9057569bd209332e0a87ddbae0b</sum>
        </package>
        <package name="nbdkit-gzip-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-gzip-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">27675a3171d769e7f9ea9b7fa63303b3e51f8221a68feaee1f16aeb7d658dccb</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-gluster" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-driver-storage-gluster-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">28a6d018fa346678264dd6795f440bb4b74832bd6991870a7498ef54b5d319d3</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">2a16b71ccb61cf973f228b9527379cdcdac7e779c9d8a850aac7b33dc3e741db</sum>
        </package>
        <package name="qemu-kvm-core" version="6.2.0" release="50.module_el8.10.0+3869+b8959270" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-50.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>qemu-kvm-core-6.2.0-50.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">2ac8acc25fbd3aea19983cd026fbb28fec79cc8fa0b3bb05b9e5963b0aab050b</sum>
        </package>
        <package name="qemu-kvm-docs" version="6.2.0" release="50.module_el8.10.0+3869+b8959270" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-50.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>qemu-kvm-docs-6.2.0-50.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">3025e94d5163c058bfbbc4e6d4b1d1c368fb7f4a400a248e7ef64a4c97008a3a</sum>
        </package>
        <package name="lua-guestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>lua-guestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">36d15a85e154608cf2bc661120c8a573356cb3e0e1dc77a94387aa3c8bce90ef</sum>
        </package>
        <package name="libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">40e3ffa7c3e67b0fe9a110dbe8bf267fa9906f358a3bd81135b33a624e6429ba</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-driver-nodedev-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">41655f51e90a84a030e812c455ad7eeb5a6ac5c5527f4648f534860836942f8e</sum>
        </package>
        <package name="ruby-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ruby-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">4428b40d29de3a3eda15340b2cbacebe838ba363b3897a1a91f904b9f2b4f8b9</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-driver-network-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">486498043aa9a422519a563adb1430de8e9f2086a89d0c9ef91cdbb2ff53bf46</sum>
        </package>
        <package name="nbdkit-basic-filters" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-basic-filters-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">494ad345b2b9b009436ba9a8c8c6bb245e8617e921dae51ab6d9281e95999f31</sum>
        </package>
        <package name="nbdkit-curl-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-curl-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">4fd1a6bbe855d7c4068fcf080b4b0b15b367ef7f635ac869b7bddb1698dafa01</sum>
        </package>
        <package name="libguestfs-bash-completion" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-bash-completion-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">5a67ce33e944ee07d6ea976afa13f8c832ce4be22f124591ace620dfe08b5178</sum>
        </package>
        <package name="libguestfs-gobject-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gobject-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">5e05d955e58bc16ccb3e4097f338dd34af18225ef9bcd2b420d794a9efdd269b</sum>
        </package>
        <package name="python3-libnbd" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>python3-libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">5e93f1875db0f5a6e64e8d785a745072133d63b53e30cf6a7984ebd2e8119320</sum>
        </package>
        <package name="nbdkit-tmpdisk-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tmpdisk-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">6f4728c5aa7cc03d70b241d6947aff1fe49546aac4cc62bd01a59c1b1b73ba35</sum>
        </package>
        <package name="libguestfs-java-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-java-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">6fc6fe19b2e83d70d5f240d776ccc00a181870a485d39667fccb62ec0b851f02</sum>
        </package>
        <package name="nbdkit-server" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-server-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">706c1dd5780f1e48f883702f6c86a985bd057078fcd41326947b283625a77e05</sum>
        </package>
        <package name="libvirt-nss" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-nss-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">71dd8d429d37ca9d8b7b65204b6b052994279e235bfba9fb723e537ab92a46b5</sum>
        </package>
        <package name="qemu-img" version="6.2.0" release="50.module_el8.10.0+3869+b8959270" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-50.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>qemu-img-6.2.0-50.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">74175e024f54e7795112bb652f42fd72b4d11b067a5222b726d4b23709795264</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-driver-secret-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">75a15044807d6e3c1220c45dd4cf1bf48d3d3c9708dc4303c07c1ba781716fec</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-driver-storage-disk-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">76276da4e850c1166b37c1e0682841ebf957e7f62abed6566353e5626ead1a44</sum>
        </package>
        <package name="perl-Sys-Guestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>perl-Sys-Guestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">77c035cdcf2f7e819dcb6d76b9ba12ae63a6f07d615a9a435b7ec2dc8ca93330</sum>
        </package>
        <package name="libguestfs-gfs2" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gfs2-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">7ee36ba216591f26a055c687e5e75e054585c69c86b085d8966cb419ddeb3362</sum>
        </package>
        <package name="libvirt-client" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-client-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">8185a409aec4f91d39063397c41b5fc03b2efb0f44f8ad92dcc607a573d9aadf</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-config-nwfilter-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">81fb403e54b00820f9023f163b172486d96c8c644432df41457f2847ed56e0b3</sum>
        </package>
        <package name="libguestfs-gobject" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gobject-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">8292ca96b97184b2ca5475901b46b09f715adbe99d1a5983c9ad4a0d2b3d72bb</sum>
        </package>
        <package name="netcf-libs" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-libs-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">843b61e4019e8cec44d5f5823d3c8c0b803997791aecef6ff1023224147cd6f8</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="6.2.0" release="50.module_el8.10.0+3869+b8959270" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-50.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>qemu-kvm-block-iscsi-6.2.0-50.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">84b09632109af9ee5afe18beb5a6e9d152a01edc2422ed2dd01417f6d7746987</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-driver-storage-logical-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">851a5240f186a9e7782c1d2e0e52fa4914238d0d2f3d9a3ca53859dce3d67189</sum>
        </package>
        <package name="nbdkit-linuxdisk-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-linuxdisk-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">8673003aa4610f82cbe152021387ac3c6c59d730a79b446aad432030e20f5eff</sum>
        </package>
        <package name="swtpm-tools" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-tools-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">87ce1c2ecc368965a92cf71a29a7cb1331508c7c86394cfaa7e4e87d20897d7b</sum>
        </package>
        <package name="nbdkit-tar-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tar-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">87ec102223607b5d8760ee3d8998a48b3fbce6a1abe6d8056782c1d9f94513ad</sum>
        </package>
        <package name="supermin-devel" version="5.2.1" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="supermin-5.2.1-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>supermin-devel-5.2.1-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">8a47307269cf95719225e1e27dcd1cebdf6a0481948e4a044db972af12de9ce3</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-driver-storage-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">8c9360889cffa607ab7597b5b39d6a1765406030c823d970fab80ba8b513b647</sum>
        </package>
        <package name="libguestfs-man-pages-uk" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-man-pages-uk-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">8cd1a80b657a0373e6dcf0b6699e7574c9874db489201985b16bc1d1d78cc55b</sum>
        </package>
        <package name="swtpm-tools-pkcs11" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-tools-pkcs11-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">8e7eeb060f1253ff8a48085d0b452c2ba2c1837e286fd23d91426f255d72398a</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-config-network-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">8ec08a076c72af7a2cee08724f4cc62c762d02370cb79721c351ed76bd866b17</sum>
        </package>
        <package name="libguestfs-rescue" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-rescue-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">92093c28f6226504668df61e0bc2c5d1e7d8bf505a8bf762cdd5d2e7a50bb52f</sum>
        </package>
        <package name="netcf" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">9268b4ab854af88a5e511f78b47cf3c4acd66d76f7ea901452f6efd3f9c8bc7c</sum>
        </package>
        <package name="libguestfs-man-pages-ja" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-man-pages-ja-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">968dd115e865d941a07d1728940d84bdfef4f26d43d39aa225f4f4a5a821c89d</sum>
        </package>
        <package name="libguestfs-rsync" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-rsync-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">9cc94d5cec35a9f048fa74c69a8b7d6a0ec48c14074297bb564b91f4cdc4c54f</sum>
        </package>
        <package name="libvirt-wireshark" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-wireshark-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">9d0b2c36edbdc8982333aadef3a358264093ff35a158afe1919bcc1a4229ac08</sum>
        </package>
        <package name="hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">9d259d5ff0ee30b3a2a8e5f897675750f74741ed06d50d3623cf469d1d0f01d8</sum>
        </package>
        <package name="libiscsi" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">a1c871e87ebd136bfd498f13824563fd7428fcaf66bcffb341cfbb8370c2a18d</sum>
        </package>
        <package name="swtpm" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">a7fbed17619ce4d6d7d43a459be652ec92882b41903ac386ebfd9815806bc622</sum>
        </package>
        <package name="perl-Sys-Virt" version="8.0.0" release="1.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="perl-Sys-Virt-8.0.0-1.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>perl-Sys-Virt-8.0.0-1.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">a8b115eb9ca2707d1d7f800ac1b7730dcc6718168ff355f065464e6778ef5929</sum>
        </package>
        <package name="nbdkit-nbd-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-nbd-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">a9427bee7f157a63f2acd2357032ce829e0561b24193d204072502adad4aa52e</sum>
        </package>
        <package name="qemu-guest-agent" version="6.2.0" release="50.module_el8.10.0+3869+b8959270" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-50.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>qemu-guest-agent-6.2.0-50.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">ac02b6705f2c2a1fd141e0201be88081d347c94b47774929b55870e7ede9b39e</sum>
        </package>
        <package name="nbdkit-example-plugins" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-example-plugins-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">b10c0d094e84d5c035dae70b4db36c311eb7ff9cbee00c8443848f049a600ae4</sum>
        </package>
        <package name="qemu-kvm-common" version="6.2.0" release="50.module_el8.10.0+3869+b8959270" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-50.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>qemu-kvm-common-6.2.0-50.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">b49bf5a7c05b865c82f2c0c38406c7e303895d181bb68abe9f756dea213f16de</sum>
        </package>
        <package name="libguestfs-appliance" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-appliance-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">b5add06502e5bda5f39f712640e2ab0e8cf539b7a90370c6c1fd963bb73bc7d7</sum>
        </package>
        <package name="libiscsi-utils" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-utils-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">b6eb101dc2787a7d79b4fe51913319933f5927d1816ea03592d2be849ce21faf</sum>
        </package>
        <package name="ruby-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ruby-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">b8696f7658b7872cb5f4e9fe2319e00ec6b668fe0e9adea787890cb9500e0223</sum>
        </package>
        <package name="nbdkit-ssh-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-ssh-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">b9b590364d69f18da851dea269d4774ff711f44e3ace9b3304e87fe25f26aaa5</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="6.2.0" release="50.module_el8.10.0+3869+b8959270" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-50.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>qemu-kvm-block-ssh-6.2.0-50.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">ba8f142db39a01a539b74a6f152ee6cd00b178074e5aeecbbcf356edb21ad30a</sum>
        </package>
        <package name="libvirt-libs" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-libs-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">bc4094bfc0c58c695c2689c176d24ffb51a958735017177d881019bb364845d6</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">be916d7f7b406938b8afdb264e85e63b06ddd285ca213e00d6b4ba42601ba933</sum>
        </package>
        <package name="virt-dib" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>virt-dib-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">bf4b5929cf910fb7e4671e32c9ac2ce2f456e8b1e577cb0f4f33a0df8d316c27</sum>
        </package>
        <package name="libguestfs-java" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-java-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">bfc05f2dc57991bad44654221ea88f653c916e80637290b69c96e3e0f5aa55a8</sum>
        </package>
        <package name="libvirt-daemon" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">c196d2c777fb66eaf72df5768663b66f98fd3b3722fe8640b3295c9e480117aa</sum>
        </package>
        <package name="libvirt-dbus" version="1.3.0" release="2.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libvirt-dbus-1.3.0-2.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libvirt-dbus-1.3.0-2.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">c20042be5784c1f4323e5590891be2a0e33244acff6b45149f36a2eef834064b</sum>
        </package>
        <package name="libtpms" version="0.9.1" release="2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3" epoch="0" arch="s390x" src="libtpms-0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3.src.rpm">
          <filename>libtpms-0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3.s390x.rpm</filename>
          <sum type="sha256">c3ffd3692f5d8a7b71c37dad7b8413e74a7099fbb3af07604cec46ee00eb50fd</sum>
        </package>
        <package name="libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">c685dcd2fb41a700a866919788441d7c80c9a10b9757ea843e7a56c67a5d4be2</sum>
        </package>
        <package name="libvirt-devel" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-devel-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">c690937f0776428e7ac71ec988e4d49cc7afd2212eb60e98b701b7e165e32bf8</sum>
        </package>
        <package name="libvirt-docs" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-docs-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">cb4605906bd1d2cc34e781ee4aee3593ef5ee3d2d0dc1cf769b667d8e8c76eb1</sum>
        </package>
        <package name="libguestfs-winsupport" version="8.10" release="1.module_el8.10.0+3768+dfd76e10" epoch="0" arch="s390x" src="libguestfs-winsupport-8.10-1.module_el8.10.0+3768+dfd76e10.src.rpm">
          <filename>libguestfs-winsupport-8.10-1.module_el8.10.0+3768+dfd76e10.s390x.rpm</filename>
          <sum type="sha256">ccf203e75a1c0f0de8598ecc0fce3f409a12f34189a7fae21d58c8311062f236</sum>
        </package>
        <package name="swtpm-libs" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-libs-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">d077f2d1f54aa47907a883e12d46f0632e33ad5141bd16a25759a580f851b91c</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">d20ee2d8299b66517d6847b638dcf44a6d0da52b83c5311fba3c22f5f10568d3</sum>
        </package>
        <package name="libiscsi-devel" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-devel-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">d45a7d8438477f375ed86276eea276fd3bb0965844cb8733a09691fc68d730db</sum>
        </package>
        <package name="nbdkit-devel" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-devel-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">d5bc58eda3110ad1589ab9d239e347e155bf59eaee69e0bea028f67d9e0ea216</sum>
        </package>
        <package name="swtpm-devel" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-devel-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">d69840154560e2ca3f4ea1315bfcca103b2260692f2c3d5fa1a76dbed7ddfbe1</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-driver-nwfilter-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">dc67879098772e3b952244852e61d909c35ba6b11cfc8331baa85709b34858b6</sum>
        </package>
        <package name="supermin" version="5.2.1" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="supermin-5.2.1-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>supermin-5.2.1-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">e15b529769bbaa1d035eb7e4d4f58f4757e58772523d45cb07cc7533eeef0057</sum>
        </package>
        <package name="python3-libvirt" version="8.0.0" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="libvirt-python-8.0.0-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>python3-libvirt-8.0.0-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">e36c5a8c03f3393622b5dd5badefcd4a05ee01b8de17de28812017ddfda63954</sum>
        </package>
        <package name="libvirt" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">e4f798b5b68b7544b99781579cac2ae0eda08df09c3fc801293c60e8ce5d9e24</sum>
        </package>
        <package name="python3-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>python3-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">ec11102e66953715d97704c820c0effcd80944fdd525efca9645f70b1cfa2fa9</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">ec6ec75b44f33b8e7fe762629d19f95267f8b84c0d2f3b3cd99f3f71640472f2</sum>
        </package>
        <package name="libguestfs-inspect-icons" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-inspect-icons-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">ece57f7c833d85599725786783875d496fd9d38644cdc96ce23e4d73c6d5e4c9</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="6.2.0" release="50.module_el8.10.0+3869+b8959270" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-50.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>qemu-kvm-block-rbd-6.2.0-50.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">ecec7e6e40eb890e1c3fddf2e3583dc6511bf1a3f6a2d4d86709e5b24892f917</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-driver-qemu-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">f223dc638a874e751e57aae9bce8c6cd2094eb7dc1ae8b79d0324eb19a727697</sum>
        </package>
        <package name="nbdkit-gzip-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-gzip-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">f3befb065571d5207296b7d7f2db60348cb935ec26b3fcf7a5db2f66dbec7dc5</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-driver-interface-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">f643f2073be4de6c72dd55c2643aa6545240dced4f24ee34e0eecf60fd387b28</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">f78d31efa92710ec640c5384937807aa91c15a0c0add3f8b6d3899d47ea66bf8</sum>
        </package>
        <package name="libguestfs-xfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-xfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">fa8ce4ce15f9b8d5753db18aa569fdbb4c636e16d88c6bb83fc588c594c1ee90</sum>
        </package>
        <package name="perl-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>perl-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">fcc1bade9f3d715b09d2679d6efc9fd94b2faa9e912dcae68dbc372613f90965</sum>
        </package>
        <package name="libguestfs-tools-c" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-tools-c-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">fce060540b90878b0d21bfa525965ac06b8622b0a7cf824c54761c92b79f0764</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4438</id>
    <title>Moderate: dotnet6.0 security update</title>
    <issued date="2024-07-09 00:00:00"/>
    <updated date="2024-07-10 09:06:43"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.132 and Runtime 6.0.32.

Security Fix(es):

* dotnet: DoS when parsing X.509 Content and ObjectIdentifiers (CVE-2024-38095)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4438" id="RHSA-2024:4438" type="rhsa" title="RHSA-2024:4438"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38095" id="CVE-2024-38095" type="cve" title="CVE-2024-38095"/>
      <reference href="https://bugzilla.redhat.com/2295323" id="2295323" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4438.html" id="ALSA-2024:4438" type="self" title="ALSA-2024:4438"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="dotnet-hostfxr-6.0" version="6.0.32" release="1.el8_10" epoch="0" arch="s390x" src="dotnet6.0-6.0.132-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.32-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0021e812a54c99bbc43b38dd71678b978e057497cedad0f342269b8c63ea696e</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.32" release="1.el8_10" epoch="0" arch="s390x" src="dotnet6.0-6.0.132-1.el8_10.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.32-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">050c139cb2b9ef440efb2c91bcf23903717740d60977e77400344020c478822a</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.32" release="1.el8_10" epoch="0" arch="s390x" src="dotnet6.0-6.0.132-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.32-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">21fce97fea0ca145870cd301d92d16076f6bf93bfc6b2d7b2ce92e98da84b384</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.32" release="1.el8_10" epoch="0" arch="s390x" src="dotnet6.0-6.0.132-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.32-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5633e0bdd461145294750ffc14d7903d981b1cff96f96efd0af50ae0c40b246d</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.132" release="1.el8_10" epoch="0" arch="s390x" src="dotnet6.0-6.0.132-1.el8_10.src.rpm">
          <filename>dotnet-templates-6.0-6.0.132-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5b42689786e88d36ff4f788ed72edcaed9a1b7f2460e0d8db2780d2eae35883c</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.132" release="1.el8_10" epoch="0" arch="s390x" src="dotnet6.0-6.0.132-1.el8_10.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.132-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">9bd86fa7aacafc99056c471e7beb05cd17fc3d316f473973756158422d119432</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.32" release="1.el8_10" epoch="0" arch="s390x" src="dotnet6.0-6.0.132-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.32-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">e17fd29cab016e07ac4252eb163598fcc2a58f93deff3a545df12ca28d40afb5</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.32" release="1.el8_10" epoch="0" arch="s390x" src="dotnet6.0-6.0.132-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.32-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">eafe2ecb091e59371d82f5106aae86e241981f0237d4221f80a36b1b76c0c303</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4451</id>
    <title>Important: dotnet8.0 security update</title>
    <issued date="2024-07-10 00:00:00"/>
    <updated date="2024-07-11 08:44:06"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK  8.0.107 and Runtime 8.0.7.

Security Fix(es):

* dotnet: DoS in System.Text.Json (CVE-2024-30105)
* dotnet: DoS in ASP.NET Core 8 (CVE-2024-35264)
* dotnet: DoS when parsing X.509 Content and ObjectIdentifiers (CVE-2024-38095)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4451" id="RHSA-2024:4451" type="rhsa" title="RHSA-2024:4451"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30105" id="CVE-2024-30105" type="cve" title="CVE-2024-30105"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35264" id="CVE-2024-35264" type="cve" title="CVE-2024-35264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38095" id="CVE-2024-38095" type="cve" title="CVE-2024-38095"/>
      <reference href="https://bugzilla.redhat.com/2295320" id="2295320" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295321" id="2295321" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295323" id="2295323" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4451.html" id="ALSA-2024:4451" type="self" title="ALSA-2024:4451"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="netstandard-targeting-pack-2.1" version="8.0.107" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el8_10.src.rpm">
          <filename>netstandard-targeting-pack-2.1-8.0.107-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">132e0b3ef0d48b9e22c16f488708877dc4bac6457ec8cf1ba0b80220ff3bf5e6</sum>
        </package>
        <package name="dotnet-host" version="8.0.7" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el8_10.src.rpm">
          <filename>dotnet-host-8.0.7-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">18efe21250fd61331cd278999629d6ed0f8c6fdb96214fc078b784e1ffb2fa7f</sum>
        </package>
        <package name="dotnet" version="8.0.107" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el8_10.src.rpm">
          <filename>dotnet-8.0.107-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">1c6091d691aa02d271282804cfb2a8d7046700ea557831e72274ab76091d274b</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.7" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.7-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">272884199ec26e2994b133f6b42f46dd257a01db9d2151c8b2e1a4d564c65804</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.7" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.7-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">37414ae07f271793f8b4aa50552c1112d2e5a716f3120789c36c182f924c2dea</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.107" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el8_10.src.rpm">
          <filename>dotnet-templates-8.0-8.0.107-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">7d717e0587ce8a92d0e194ec7100e8f0400c35b84bac1a98edf2ce021557ac73</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.7" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.7-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">87aaf3d0c92c6693b1b2dd6d291a2d317e1d424c694a9cc42f2788dad9955268</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.7" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el8_10.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.7-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">9b483638ff022bf3d6f8fc31a9466223ce0bf63d37f83b2be8d92243ee4b8088</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.7" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.7-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">e999b0f237df69a8db9ba54a58083feff9f34a94dc193db31da20a1d28537617</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.7" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.7-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">f3057e3408ffa46b6187e60dca5289813e1d9b9ff3c16386cf65c0f212b74dfb</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.107" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.107-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">fc43e99042da6a5a0ee9051c98b9cf82a8492b5164e6e20c1d2a0869f90f7f52</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4499</id>
    <title>Moderate: ruby security update</title>
    <issued date="2024-07-11 00:00:00"/>
    <updated date="2024-07-17 14:48:14"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

* rubygem-uri: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)
* ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
* ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
* ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)
* REXML: DoS parsing an XML with many `&lt;`s in an attribute value (CVE-2024-35176)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4499" id="RHSA-2024:4499" type="rhsa" title="RHSA-2024:4499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36617" id="CVE-2023-36617" type="cve" title="CVE-2023-36617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27280" id="CVE-2024-27280" type="cve" title="CVE-2024-27280"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27281" id="CVE-2024-27281" type="cve" title="CVE-2024-27281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27282" id="CVE-2024-27282" type="cve" title="CVE-2024-27282"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35176" id="CVE-2024-35176" type="cve" title="CVE-2024-35176"/>
      <reference href="https://bugzilla.redhat.com/2218614" id="2218614" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270749" id="2270749" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270750" id="2270750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2276810" id="2276810" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280894" id="2280894" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4499.html" id="ALSA-2024:4499" type="self" title="ALSA-2024:4499"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="ruby" stream="2.5" version="8100020240711143328" context="9edba152" arch="s390x"/>
        <package name="rubygem-bigdecimal" version="1.3.4" release="112.module_el8.10.0+3871+342e2c2f" epoch="0" arch="s390x" src="ruby-2.5.9-112.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>rubygem-bigdecimal-1.3.4-112.module_el8.10.0+3871+342e2c2f.s390x.rpm</filename>
          <sum type="sha256">06289c2ada001cdcf9faca3a53563a5a70c682abd78b2683ec02e51cb7787ac5</sum>
        </package>
        <package name="rubygem-net-telnet" version="0.1.1" release="112.module_el8.10.0+3871+342e2c2f" epoch="0" arch="noarch" src="ruby-2.5.9-112.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>rubygem-net-telnet-0.1.1-112.module_el8.10.0+3871+342e2c2f.noarch.rpm</filename>
          <sum type="sha256">0c303c5ba458f6d9bb80bb50455cd118e01e0360e7ee8aaaf2299cfd3219bf45</sum>
        </package>
        <package name="rubygem-did_you_mean" version="1.2.0" release="112.module_el8.10.0+3871+342e2c2f" epoch="0" arch="noarch" src="ruby-2.5.9-112.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>rubygem-did_you_mean-1.2.0-112.module_el8.10.0+3871+342e2c2f.noarch.rpm</filename>
          <sum type="sha256">158e45006c9edaef3fd4b286b163e04a145e967d4594996ee30012af36f02758</sum>
        </package>
        <package name="rubygem-bundler" version="1.16.1" release="4.module_el8.10.0+3871+342e2c2f" epoch="0" arch="noarch" src="rubygem-bundler-1.16.1-4.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>rubygem-bundler-1.16.1-4.module_el8.10.0+3871+342e2c2f.noarch.rpm</filename>
          <sum type="sha256">186feaa413e45c36467068a22b04de47541aafc70923a531fe583d9d131263d4</sum>
        </package>
        <package name="rubygem-power_assert" version="1.1.1" release="112.module_el8.10.0+3871+342e2c2f" epoch="0" arch="noarch" src="ruby-2.5.9-112.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>rubygem-power_assert-1.1.1-112.module_el8.10.0+3871+342e2c2f.noarch.rpm</filename>
          <sum type="sha256">208bfce065c6540c12d437348a7f7e4fa934dfb14ef3049711fd790dd086d5f2</sum>
        </package>
        <package name="rubygem-abrt-doc" version="0.3.0" release="4.module_el8.10.0+3871+342e2c2f" epoch="0" arch="noarch" src="rubygem-abrt-0.3.0-4.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>rubygem-abrt-doc-0.3.0-4.module_el8.10.0+3871+342e2c2f.noarch.rpm</filename>
          <sum type="sha256">23f4e5352303fbe382eb4c6194887ff9e2dad8797516dd85ae0efd8eff375c61</sum>
        </package>
        <package name="rubygem-test-unit" version="3.2.7" release="112.module_el8.10.0+3871+342e2c2f" epoch="0" arch="noarch" src="ruby-2.5.9-112.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>rubygem-test-unit-3.2.7-112.module_el8.10.0+3871+342e2c2f.noarch.rpm</filename>
          <sum type="sha256">277eb6e8b97f2b2635a17668ccf6874b6ca1255f12965378994b7e19bb16bb42</sum>
        </package>
        <package name="ruby-devel" version="2.5.9" release="112.module_el8.10.0+3871+342e2c2f" epoch="0" arch="s390x" src="ruby-2.5.9-112.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>ruby-devel-2.5.9-112.module_el8.10.0+3871+342e2c2f.s390x.rpm</filename>
          <sum type="sha256">2793a8420735e4e832600c28f740871aef115b664a68413ef825738047d6548e</sum>
        </package>
        <package name="ruby-libs" version="2.5.9" release="112.module_el8.10.0+3871+342e2c2f" epoch="0" arch="s390x" src="ruby-2.5.9-112.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>ruby-libs-2.5.9-112.module_el8.10.0+3871+342e2c2f.s390x.rpm</filename>
          <sum type="sha256">564f04a781d45baea7fb29fbb254dc42bd67c9a388589627c5e3a0ca91e18c41</sum>
        </package>
        <package name="ruby" version="2.5.9" release="112.module_el8.10.0+3871+342e2c2f" epoch="0" arch="s390x" src="ruby-2.5.9-112.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>ruby-2.5.9-112.module_el8.10.0+3871+342e2c2f.s390x.rpm</filename>
          <sum type="sha256">6c8e10a7bf5a16a5a42da88393db496295c6988fb85a127eacf6814fc3e343ed</sum>
        </package>
        <package name="rubygem-bundler-doc" version="1.16.1" release="4.module_el8.10.0+3871+342e2c2f" epoch="0" arch="noarch" src="rubygem-bundler-1.16.1-4.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>rubygem-bundler-doc-1.16.1-4.module_el8.10.0+3871+342e2c2f.noarch.rpm</filename>
          <sum type="sha256">6cf4f6e6d918e4dddcd51d124e0d055f3993d6ca4fbf1a8b9ba60534fe01a816</sum>
        </package>
        <package name="rubygem-json" version="2.1.0" release="112.module_el8.10.0+3871+342e2c2f" epoch="0" arch="s390x" src="ruby-2.5.9-112.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>rubygem-json-2.1.0-112.module_el8.10.0+3871+342e2c2f.s390x.rpm</filename>
          <sum type="sha256">8357972b615147adaab1e77a863f2d08fcba60f293a66af3e95ff0b0aff9a9bc</sum>
        </package>
        <package name="rubygem-bson" version="4.3.0" release="2.module_el8.6.0+3170+4b08f9d4" epoch="0" arch="s390x" src="rubygem-bson-4.3.0-2.module_el8.6.0+3170+4b08f9d4.src.rpm">
          <filename>rubygem-bson-4.3.0-2.module_el8.6.0+3170+4b08f9d4.s390x.rpm</filename>
          <sum type="sha256">871397eff83a497bf29db2e02e81837d1648c1813afa6030e2bab44d3f0db282</sum>
        </package>
        <package name="rubygems-devel" version="2.7.6.3" release="112.module_el8.10.0+3871+342e2c2f" epoch="0" arch="noarch" src="ruby-2.5.9-112.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>rubygems-devel-2.7.6.3-112.module_el8.10.0+3871+342e2c2f.noarch.rpm</filename>
          <sum type="sha256">8bcb7b587cc4e70a12209da45254f5970e70e2058658e5d7a230ed813196cbd0</sum>
        </package>
        <package name="rubygem-pg-doc" version="1.0.0" release="3.module_el8.9.0+3635+c6f99506" epoch="0" arch="noarch" src="rubygem-pg-1.0.0-3.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygem-pg-doc-1.0.0-3.module_el8.9.0+3635+c6f99506.noarch.rpm</filename>
          <sum type="sha256">8d04b2fdb59f2b51995d4fc57a412831e5d4d1c9d80fea1bcd0a7f5beaa55ab7</sum>
        </package>
        <package name="rubygem-rdoc" version="6.0.1.1" release="112.module_el8.10.0+3871+342e2c2f" epoch="0" arch="noarch" src="ruby-2.5.9-112.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>rubygem-rdoc-6.0.1.1-112.module_el8.10.0+3871+342e2c2f.noarch.rpm</filename>
          <sum type="sha256">9995050c1748ab17cfe9b5104bd1fa6775a93ee3d90a7f923035eca0b37d84bd</sum>
        </package>
        <package name="rubygem-io-console" version="0.4.6" release="112.module_el8.10.0+3871+342e2c2f" epoch="0" arch="s390x" src="ruby-2.5.9-112.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>rubygem-io-console-0.4.6-112.module_el8.10.0+3871+342e2c2f.s390x.rpm</filename>
          <sum type="sha256">aa52150393cda14980a7f6ea70e0c42ffa7cba3d43920d0de76f064ae75f5759</sum>
        </package>
        <package name="rubygems" version="2.7.6.3" release="112.module_el8.10.0+3871+342e2c2f" epoch="0" arch="noarch" src="ruby-2.5.9-112.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>rubygems-2.7.6.3-112.module_el8.10.0+3871+342e2c2f.noarch.rpm</filename>
          <sum type="sha256">b48e53d39ee58f8fa5b333f57af369a78b8a2cb7de0e3e6749a08ae6fa151d60</sum>
        </package>
        <package name="rubygem-minitest" version="5.10.3" release="112.module_el8.10.0+3871+342e2c2f" epoch="0" arch="noarch" src="ruby-2.5.9-112.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>rubygem-minitest-5.10.3-112.module_el8.10.0+3871+342e2c2f.noarch.rpm</filename>
          <sum type="sha256">cb46b02e4f00096b3cb657ed9e9fc5bcd8d98910c12916da1d4d0aafd89bb626</sum>
        </package>
        <package name="rubygem-abrt" version="0.3.0" release="4.module_el8.10.0+3871+342e2c2f" epoch="0" arch="noarch" src="rubygem-abrt-0.3.0-4.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>rubygem-abrt-0.3.0-4.module_el8.10.0+3871+342e2c2f.noarch.rpm</filename>
          <sum type="sha256">ccc530c3d8881ab2b41234ee0babcf20043b53051f92259b91d3f66a0d5d8a41</sum>
        </package>
        <package name="rubygem-pg" version="1.0.0" release="3.module_el8.9.0+3635+c6f99506" epoch="0" arch="s390x" src="rubygem-pg-1.0.0-3.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygem-pg-1.0.0-3.module_el8.9.0+3635+c6f99506.s390x.rpm</filename>
          <sum type="sha256">d52a51f8cfdbeb3099ce92946748481f426b77c9da23f77737fe3d4fcd1b245c</sum>
        </package>
        <package name="rubygem-openssl" version="2.1.2" release="112.module_el8.10.0+3871+342e2c2f" epoch="0" arch="s390x" src="ruby-2.5.9-112.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>rubygem-openssl-2.1.2-112.module_el8.10.0+3871+342e2c2f.s390x.rpm</filename>
          <sum type="sha256">d5ebe4e4c1453a78990df9a1eb21d72963f280b596507fd06b81e7a937fb879d</sum>
        </package>
        <package name="rubygem-mysql2" version="0.4.10" release="4.module_el8.6.0+3170+4b08f9d4" epoch="0" arch="s390x" src="rubygem-mysql2-0.4.10-4.module_el8.6.0+3170+4b08f9d4.src.rpm">
          <filename>rubygem-mysql2-0.4.10-4.module_el8.6.0+3170+4b08f9d4.s390x.rpm</filename>
          <sum type="sha256">e8ee63b6046ba22292c8ac7eb85440ace9fe11b17fef5bf5f590b754f4c7aadb</sum>
        </package>
        <package name="ruby-irb" version="2.5.9" release="112.module_el8.10.0+3871+342e2c2f" epoch="0" arch="noarch" src="ruby-2.5.9-112.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>ruby-irb-2.5.9-112.module_el8.10.0+3871+342e2c2f.noarch.rpm</filename>
          <sum type="sha256">eb9c23b5cb8ab1ba6d8cffada269a33591daef474425e05c321a3f274e49483d</sum>
        </package>
        <package name="rubygem-xmlrpc" version="0.3.0" release="112.module_el8.10.0+3871+342e2c2f" epoch="0" arch="noarch" src="ruby-2.5.9-112.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>rubygem-xmlrpc-0.3.0-112.module_el8.10.0+3871+342e2c2f.noarch.rpm</filename>
          <sum type="sha256">efc328554feea1306bfb3ed6f2a239ce9abb2468eaa7bb24dacaf5c78648678a</sum>
        </package>
        <package name="rubygem-rake" version="12.3.3" release="112.module_el8.10.0+3871+342e2c2f" epoch="0" arch="noarch" src="ruby-2.5.9-112.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>rubygem-rake-12.3.3-112.module_el8.10.0+3871+342e2c2f.noarch.rpm</filename>
          <sum type="sha256">f32411bdaff630ffa4096ae258e3afc3e2f426132dbab7fd215c82b54b8c1344</sum>
        </package>
        <package name="ruby-doc" version="2.5.9" release="112.module_el8.10.0+3871+342e2c2f" epoch="0" arch="noarch" src="ruby-2.5.9-112.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>ruby-doc-2.5.9-112.module_el8.10.0+3871+342e2c2f.noarch.rpm</filename>
          <sum type="sha256">f468e432f9d5310e3ea9b58375f60a293573d2aa47162d137ee214a54a208479</sum>
        </package>
        <package name="rubygem-psych" version="3.0.2" release="112.module_el8.10.0+3871+342e2c2f" epoch="0" arch="s390x" src="ruby-2.5.9-112.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>rubygem-psych-3.0.2-112.module_el8.10.0+3871+342e2c2f.s390x.rpm</filename>
          <sum type="sha256">fb8b003da8ca741343c8e49701f697110d6eb405a1c203bafd1be794b1689a65</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4517</id>
    <title>Important: firefox security update</title>
    <issued date="2024-07-11 00:00:00"/>
    <updated date="2024-07-17 14:39:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* Mozilla: Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, and Thunderbird 115.13 (CVE-2024-6604)
* Mozilla: Race condition in permission assignment (CVE-2024-6601)
* Mozilla: Memory corruption in thread creation (CVE-2024-6603)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4517" id="RHSA-2024:4517" type="rhsa" title="RHSA-2024:4517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6601" id="CVE-2024-6601" type="cve" title="CVE-2024-6601"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6603" id="CVE-2024-6603" type="cve" title="CVE-2024-6603"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6604" id="CVE-2024-6604" type="cve" title="CVE-2024-6604"/>
      <reference href="https://bugzilla.redhat.com/2296636" id="2296636" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2296638" id="2296638" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2296639" id="2296639" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4517.html" id="ALSA-2024:4517" type="self" title="ALSA-2024:4517"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="115.13.0" release="3.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-115.13.0-3.el8_10.alma.1.src.rpm">
          <filename>firefox-115.13.0-3.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">8de268860e948bba9a6a115f8dfc65e361f35042794f953b74cb5beebbdf7921</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4563</id>
    <title>Important: java-1.8.0-openjdk security update</title>
    <issued date="2024-07-17 00:00:00"/>
    <updated date="2024-07-18 15:14:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147)
* OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131)
* OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138)
* OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140)
* OpenJDK: Pack200 increase loading time due to improper header validation (8322106) (CVE-2024-21144)
* OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4563" id="RHSA-2024:4563" type="rhsa" title="RHSA-2024:4563"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21131" id="CVE-2024-21131" type="cve" title="CVE-2024-21131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21138" id="CVE-2024-21138" type="cve" title="CVE-2024-21138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21140" id="CVE-2024-21140" type="cve" title="CVE-2024-21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21144" id="CVE-2024-21144" type="cve" title="CVE-2024-21144"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21145" id="CVE-2024-21145" type="cve" title="CVE-2024-21145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21147" id="CVE-2024-21147" type="cve" title="CVE-2024-21147"/>
      <reference href="https://bugzilla.redhat.com/2297961" id="2297961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297962" id="2297962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297963" id="2297963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297964" id="2297964" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297976" id="2297976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297977" id="2297977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4563.html" id="ALSA-2024:4563" type="self" title="ALSA-2024:4563"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.422.b05" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.422.b05-2.el8.s390x.rpm</filename>
          <sum type="sha256">2dac7d7198351711f445059de836de7e2589594efa93ebfd3b65ae687c27424a</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.422.b05" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.422.b05-2.el8.s390x.rpm</filename>
          <sum type="sha256">3972b358011c7c1c86567f84ef008fb4352814b5040ea60c9409c2f7aeee8747</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.422.b05" release="2.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.422.b05-2.el8.noarch.rpm</filename>
          <sum type="sha256">5415f4834bc1b1ac1d93889c0aff69e28e126336d44ff14ff047a30dd7ea1e12</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.422.b05" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.422.b05-2.el8.s390x.rpm</filename>
          <sum type="sha256">851ae5b168aff7c2f783719cfff87f0988a7d63939580349ce085a3ba032d555</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.422.b05" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.422.b05-2.el8.s390x.rpm</filename>
          <sum type="sha256">a50accc9291f58534c734f921ac9431ed5f17b669bb3c7cd03e9b2e16b007be2</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.422.b05" release="2.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.422.b05-2.el8.noarch.rpm</filename>
          <sum type="sha256">a9677c6dda2a912eba84f591d8e102625ff777e97c6b48ee53fba0b8cc65c966</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility" version="1.8.0.422.b05" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-1.8.0.422.b05-2.el8.s390x.rpm</filename>
          <sum type="sha256">aec3f019ebf97c2f0d4092ac4451b41c59f963abe9fb4746de3b0a690a81d95a</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.422.b05" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.422.b05-2.el8.s390x.rpm</filename>
          <sum type="sha256">b3d42d27088b59adfbcd381c221d6c8a874dcd23a53805a9da2b4416eb08a6c8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4567</id>
    <title>Important: java-11-openjdk security update</title>
    <issued date="2024-07-16 00:00:00"/>
    <updated date="2024-07-26 15:17:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-11-openjdk security update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147)
* OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131)
* OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138)
* OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140)
* OpenJDK: Pack200 increase loading time due to improper header validation (8322106) (CVE-2024-21144)
* OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4567" id="RHSA-2024:4567" type="rhsa" title="RHSA-2024:4567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21131" id="CVE-2024-21131" type="cve" title="CVE-2024-21131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21138" id="CVE-2024-21138" type="cve" title="CVE-2024-21138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21140" id="CVE-2024-21140" type="cve" title="CVE-2024-21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21144" id="CVE-2024-21144" type="cve" title="CVE-2024-21144"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21145" id="CVE-2024-21145" type="cve" title="CVE-2024-21145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21147" id="CVE-2024-21147" type="cve" title="CVE-2024-21147"/>
      <reference href="https://bugzilla.redhat.com/2297961" id="2297961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297962" id="2297962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297963" id="2297963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297964" id="2297964" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297976" id="2297976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297977" id="2297977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4567.html" id="ALSA-2024:4567" type="self" title="ALSA-2024:4567"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-11-openjdk-jmods" version="11.0.24.0.8" release="3.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-jmods-11.0.24.0.8-3.el8.s390x.rpm</filename>
          <sum type="sha256">0d00b409ccd92dd9c4fa183fb64b1dc7061fa20038c2099099cc20c35a612b63</sum>
        </package>
        <package name="java-11-openjdk-demo" version="11.0.24.0.8" release="3.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-demo-11.0.24.0.8-3.el8.s390x.rpm</filename>
          <sum type="sha256">28eb435f890f5959a26fa60f4e36b0a1f547accacef8f8dfd1b0bc4fa68c3652</sum>
        </package>
        <package name="java-11-openjdk-headless" version="11.0.24.0.8" release="3.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-headless-11.0.24.0.8-3.el8.s390x.rpm</filename>
          <sum type="sha256">294e78bd049245d7cc3b7311474a459319f87274d1dc55a408e997d33b8653f1</sum>
        </package>
        <package name="java-11-openjdk-javadoc-zip" version="11.0.24.0.8" release="3.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-javadoc-zip-11.0.24.0.8-3.el8.s390x.rpm</filename>
          <sum type="sha256">5f3cd32ee6d6b8d1d10990486dd6085612569a6a0e2627923b4d34f6c8fb6788</sum>
        </package>
        <package name="java-11-openjdk-static-libs" version="11.0.24.0.8" release="3.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-static-libs-11.0.24.0.8-3.el8.s390x.rpm</filename>
          <sum type="sha256">7578b55e984772b7801ffb852171f694c03d7555c93b8b4fd02f8e967e122782</sum>
        </package>
        <package name="java-11-openjdk-src" version="11.0.24.0.8" release="3.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-src-11.0.24.0.8-3.el8.s390x.rpm</filename>
          <sum type="sha256">9b343bfff5cc46d96154687d48506bd24f22d8cd936efd4670a44124777642ff</sum>
        </package>
        <package name="java-11-openjdk-javadoc" version="11.0.24.0.8" release="3.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-javadoc-11.0.24.0.8-3.el8.s390x.rpm</filename>
          <sum type="sha256">af1f9a1568d07edcb7115c09875d62b60a4b4dd213a4a6b332b5bfef65d8eca1</sum>
        </package>
        <package name="java-11-openjdk" version="11.0.24.0.8" release="3.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-11.0.24.0.8-3.el8.s390x.rpm</filename>
          <sum type="sha256">ee0e2ccb0140c82c00e901e6e050cb33748ddd5de9726891eea9eb0e0d7b1c64</sum>
        </package>
        <package name="java-11-openjdk-devel" version="11.0.24.0.8" release="3.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-devel-11.0.24.0.8-3.el8.s390x.rpm</filename>
          <sum type="sha256">f313a02579c7260320365530634f7c5376748576247b0d5e9b02e216e9d1603b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4568</id>
    <title>Important: java-17-openjdk security update</title>
    <issued date="2024-07-17 00:00:00"/>
    <updated date="2024-07-18 14:15:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147)
* OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131)
* OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138)
* OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140)
* OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4568" id="RHSA-2024:4568" type="rhsa" title="RHSA-2024:4568"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21131" id="CVE-2024-21131" type="cve" title="CVE-2024-21131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21138" id="CVE-2024-21138" type="cve" title="CVE-2024-21138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21140" id="CVE-2024-21140" type="cve" title="CVE-2024-21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21145" id="CVE-2024-21145" type="cve" title="CVE-2024-21145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21147" id="CVE-2024-21147" type="cve" title="CVE-2024-21147"/>
      <reference href="https://bugzilla.redhat.com/2297961" id="2297961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297962" id="2297962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297963" id="2297963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297976" id="2297976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297977" id="2297977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4568.html" id="ALSA-2024:4568" type="self" title="ALSA-2024:4568"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-17-openjdk-src" version="17.0.12.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-src-17.0.12.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">3cabef03eedee4495a45ea5f8d8d35e09da1d28160ea6bf869c36d2db573abf9</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.12.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-17.0.12.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">59d1dea56683c07fbbf5c2456fc747ff722a5fe843d2730e33cc63af6c47c516</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.12.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.12.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">67a3c7f5808c1fcd07f7eb4935dc599afbb955ee4034466abe35b4c6fa75e491</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.12.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.12.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">6d9791d2f3613fdcf37c53c5ecee948bc5dfd6c958c1d0266d4d1fc30ab5863c</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.12.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-17.0.12.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">814f9aeea64b78382f528893252900f654b38670cd26a95dfd0965b73da70952</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.12.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-17.0.12.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">a5455413415729dc6f74fbec8800551e227d9d12587c97a436e85df7bedf0c07</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.12.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.12.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">aa122c0882bb135d0fe4de5b5f2514eef2d69e1da015b0738465910aedcda028</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.12.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.12.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">e2841fc8a8a14b25886669797aab3888f3a2b534a970eb7a622cdcc89cacfb50</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.12.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-17.0.12.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">f8d0b56f971bea94191cc0de7cc4aec6cfc82086989cc935568a43942fcc2e52</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4573</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2024-07-17 00:00:00"/>
    <updated date="2024-07-18 14:17:58"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147)
* OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131)
* OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138)
* OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140)
* OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4573" id="RHSA-2024:4573" type="rhsa" title="RHSA-2024:4573"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21131" id="CVE-2024-21131" type="cve" title="CVE-2024-21131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21138" id="CVE-2024-21138" type="cve" title="CVE-2024-21138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21140" id="CVE-2024-21140" type="cve" title="CVE-2024-21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21145" id="CVE-2024-21145" type="cve" title="CVE-2024-21145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21147" id="CVE-2024-21147" type="cve" title="CVE-2024-21147"/>
      <reference href="https://bugzilla.redhat.com/2297961" id="2297961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297962" id="2297962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297963" id="2297963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297976" id="2297976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297977" id="2297977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4573.html" id="ALSA-2024:4573" type="self" title="ALSA-2024:4573"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-21-openjdk-headless" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-21.0.4.0.7-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">1ab9124a41e5026c65bc7570419e3b48c272e546e112913181c4b535c364e554</sum>
        </package>
        <package name="java-21-openjdk-javadoc" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-21.0.4.0.7-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">1bc3d663c061d40d9770da7da3779bd48bbcda9290de0a1924ac840811f4c3be</sum>
        </package>
        <package name="java-21-openjdk-static-libs" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-21.0.4.0.7-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">2147a8efed3cef443124d9a3a32b2283d78c14633a2d92fbd5c17cabe15b479a</sum>
        </package>
        <package name="java-21-openjdk-demo" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-21.0.4.0.7-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">2cefd797e3073100459603093eb55894bd1ed87c57b4a78b9f87fa0edb96e78e</sum>
        </package>
        <package name="java-21-openjdk" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-21.0.4.0.7-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">43071595a6072254bc647050fc802609ffa38b358823d22b0c35fb2bb2fa79d6</sum>
        </package>
        <package name="java-21-openjdk-devel" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-21.0.4.0.7-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">7c535ebfe0238e808cc677e155787b3d1da735d0a97286e9f1eda21a12cf8beb</sum>
        </package>
        <package name="java-21-openjdk-jmods" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-21.0.4.0.7-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">87bf9b356587c9c17b2403b87d03a128d6b6988a65c2b2170a3c479bc781d1a9</sum>
        </package>
        <package name="java-21-openjdk-src" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-src-21.0.4.0.7-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">ad55606771edc71a828016b8aca311162d2057aa3faa5380ba3afeca39d6c004</sum>
        </package>
        <package name="java-21-openjdk-javadoc-zip" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-zip-21.0.4.0.7-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">bb2dcb9e6a037d1dd9801197e67936e9ceaa5378c45fe4efe18f9c40b975e967</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4617</id>
    <title>Important: qt5-qtbase security update</title>
    <issued date="2024-07-18 00:00:00"/>
    <updated date="2024-07-19 10:26:56"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>qt5-qtbase security update</summary>
    <description>Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. 

Security Fix(es):

* qtbase: qtbase: Delay any communication until encrypted() can be responded to (CVE-2024-39936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4617" id="RHSA-2024:4617" type="rhsa" title="RHSA-2024:4617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39936" id="CVE-2024-39936" type="cve" title="CVE-2024-39936"/>
      <reference href="https://bugzilla.redhat.com/2295867" id="2295867" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4617.html" id="ALSA-2024:4617" type="self" title="ALSA-2024:4617"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="qt5-qtbase-common" version="5.15.3" release="8.el8_10" epoch="0" arch="noarch" src="qt5-qtbase-5.15.3-8.el8_10.src.rpm">
          <filename>qt5-qtbase-common-5.15.3-8.el8_10.noarch.rpm</filename>
          <sum type="sha256">2e4519e82c76b357513ba542c204798e08d12bbaa78452e29722ddcbe1de11fa</sum>
        </package>
        <package name="qt5-qtbase-odbc" version="5.15.3" release="8.el8_10" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-8.el8_10.src.rpm">
          <filename>qt5-qtbase-odbc-5.15.3-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">3d7b6c10abdc0c135a2fd4c682f5fe3a32c7aa9fa7018d6748ca1bd0af8522b4</sum>
        </package>
        <package name="qt5-qtbase" version="5.15.3" release="8.el8_10" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-8.el8_10.src.rpm">
          <filename>qt5-qtbase-5.15.3-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">658d0c7b44f389035c92a97f5482e21a5ae15cff7bcc8d3c68d14f8813ff915b</sum>
        </package>
        <package name="qt5-qtbase-mysql" version="5.15.3" release="8.el8_10" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-8.el8_10.src.rpm">
          <filename>qt5-qtbase-mysql-5.15.3-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">833b9a4592efc8a9cb247b2ad7f443e94c9e315d9923035e6bb329f344c90d4c</sum>
        </package>
        <package name="qt5-qtbase-gui" version="5.15.3" release="8.el8_10" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-8.el8_10.src.rpm">
          <filename>qt5-qtbase-gui-5.15.3-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">955132da4b3cd36b3d372f16cfd8973d384d9f2b7248d97a203874b97e6cd94d</sum>
        </package>
        <package name="qt5-qtbase-examples" version="5.15.3" release="8.el8_10" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-8.el8_10.src.rpm">
          <filename>qt5-qtbase-examples-5.15.3-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">9e55f6118ecda0014fad9ee240d75440274f5503ba11dd851dca957f09a19957</sum>
        </package>
        <package name="qt5-qtbase-private-devel" version="5.15.3" release="8.el8_10" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-8.el8_10.src.rpm">
          <filename>qt5-qtbase-private-devel-5.15.3-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">b7191f0b6bf1cd7d2812aba61a9f5a0162bc16db5a4a29d64dc4102b52a8eab7</sum>
        </package>
        <package name="qt5-qtbase-devel" version="5.15.3" release="8.el8_10" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-8.el8_10.src.rpm">
          <filename>qt5-qtbase-devel-5.15.3-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">d54554582a009879511d4cd6aaa2ec6ece4ac00bb12514efefb79a57333740d3</sum>
        </package>
        <package name="qt5-qtbase-postgresql" version="5.15.3" release="8.el8_10" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-8.el8_10.src.rpm">
          <filename>qt5-qtbase-postgresql-5.15.3-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">f881032298200c5b8b8d935059025fed764f0e9fcba1f21ff1335269e0c762fa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4635</id>
    <title>Important: thunderbird security update</title>
    <issued date="2024-07-18 00:00:00"/>
    <updated date="2024-07-19 10:20:07"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

* Mozilla: Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, and Thunderbird 115.13 (CVE-2024-6604)
* Mozilla: Race condition in permission assignment (CVE-2024-6601)
* Mozilla: Memory corruption in thread creation (CVE-2024-6603)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4635" id="RHSA-2024:4635" type="rhsa" title="RHSA-2024:4635"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6601" id="CVE-2024-6601" type="cve" title="CVE-2024-6601"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6603" id="CVE-2024-6603" type="cve" title="CVE-2024-6603"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6604" id="CVE-2024-6604" type="cve" title="CVE-2024-6604"/>
      <reference href="https://bugzilla.redhat.com/2296636" id="2296636" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2296638" id="2296638" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2296639" id="2296639" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4635.html" id="ALSA-2024:4635" type="self" title="ALSA-2024:4635"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="115.13.0" release="3.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-115.13.0-3.el8_10.alma.1.src.rpm">
          <filename>thunderbird-115.13.0-3.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">79ab05f4a031345aa441c4b6a5133e961af06efaf234e1e857867205f8ad70cf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4720</id>
    <title>Important: httpd:2.4 security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-23 22:13:25"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>httpd:2.4 security update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: Encoding problem in mod_proxy (CVE-2024-38473)
* httpd: Substitution encoding issue in mod_rewrite (CVE-2024-38474)
* httpd: Improper escaping of output in mod_rewrite (CVE-2024-38475)
* httpd: NULL pointer dereference in mod_proxy (CVE-2024-38477)
* httpd: Potential SSRF in mod_rewrite (CVE-2024-39573)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4720" id="RHSA-2024:4720" type="rhsa" title="RHSA-2024:4720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38473" id="CVE-2024-38473" type="cve" title="CVE-2024-38473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38474" id="CVE-2024-38474" type="cve" title="CVE-2024-38474"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38475" id="CVE-2024-38475" type="cve" title="CVE-2024-38475"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38477" id="CVE-2024-38477" type="cve" title="CVE-2024-38477"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39573" id="CVE-2024-39573" type="cve" title="CVE-2024-39573"/>
      <reference href="https://bugzilla.redhat.com/2295012" id="2295012" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295013" id="2295013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295014" id="2295014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295016" id="2295016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295022" id="2295022" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4720.html" id="ALSA-2024:4720" type="self" title="ALSA-2024:4720"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="httpd" stream="2.4" version="8100020240723141950" context="9edba152" arch="s390x"/>
        <package name="httpd-tools" version="2.4.37" release="65.module_el8.10.0+3872+9b8ab21e.1" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+3872+9b8ab21e.1.src.rpm">
          <filename>httpd-tools-2.4.37-65.module_el8.10.0+3872+9b8ab21e.1.s390x.rpm</filename>
          <sum type="sha256">18f4e2ed1407e2aabace657fcda17ae49959040377fea431dc53df9e492615c8</sum>
        </package>
        <package name="mod_session" version="2.4.37" release="65.module_el8.10.0+3872+9b8ab21e.1" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+3872+9b8ab21e.1.src.rpm">
          <filename>mod_session-2.4.37-65.module_el8.10.0+3872+9b8ab21e.1.s390x.rpm</filename>
          <sum type="sha256">4632fc1e96be9de84fcc26e7ad59f6bd04d703c598cf4af3923fd7275aafa4d8</sum>
        </package>
        <package name="mod_ldap" version="2.4.37" release="65.module_el8.10.0+3872+9b8ab21e.1" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+3872+9b8ab21e.1.src.rpm">
          <filename>mod_ldap-2.4.37-65.module_el8.10.0+3872+9b8ab21e.1.s390x.rpm</filename>
          <sum type="sha256">46637dad500a87ada48cf42e4d22da3b84687410421a29d346d7577e9b8c0d7e</sum>
        </package>
        <package name="mod_proxy_html" version="2.4.37" release="65.module_el8.10.0+3872+9b8ab21e.1" epoch="1" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+3872+9b8ab21e.1.src.rpm">
          <filename>mod_proxy_html-2.4.37-65.module_el8.10.0+3872+9b8ab21e.1.s390x.rpm</filename>
          <sum type="sha256">617865c0f4111f823f0e0ec681aba073f461410f39230c8dad3498d0389bb2cf</sum>
        </package>
        <package name="mod_ssl" version="2.4.37" release="65.module_el8.10.0+3872+9b8ab21e.1" epoch="1" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+3872+9b8ab21e.1.src.rpm">
          <filename>mod_ssl-2.4.37-65.module_el8.10.0+3872+9b8ab21e.1.s390x.rpm</filename>
          <sum type="sha256">729bb2fc778cb5feaaf98e0b064cdbfe6a9cff6cf99218a054d3d1d488e5dbaf</sum>
        </package>
        <package name="httpd-filesystem" version="2.4.37" release="65.module_el8.10.0+3872+9b8ab21e.1" epoch="0" arch="noarch" src="httpd-2.4.37-65.module_el8.10.0+3872+9b8ab21e.1.src.rpm">
          <filename>httpd-filesystem-2.4.37-65.module_el8.10.0+3872+9b8ab21e.1.noarch.rpm</filename>
          <sum type="sha256">aa2eb2950a186be42f28ae088dcdcd5edb7aa5f1182b1f11f0a20331995d5d02</sum>
        </package>
        <package name="httpd" version="2.4.37" release="65.module_el8.10.0+3872+9b8ab21e.1" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+3872+9b8ab21e.1.src.rpm">
          <filename>httpd-2.4.37-65.module_el8.10.0+3872+9b8ab21e.1.s390x.rpm</filename>
          <sum type="sha256">ca4860f9756221fa484984309c356ec358bc9252e7e73840ecc93baedd06ba7b</sum>
        </package>
        <package name="mod_http2" version="1.15.7" release="10.module_el8.10.0+3832+564e7653" epoch="0" arch="s390x" src="mod_http2-1.15.7-10.module_el8.10.0+3832+564e7653.src.rpm">
          <filename>mod_http2-1.15.7-10.module_el8.10.0+3832+564e7653.s390x.rpm</filename>
          <sum type="sha256">ced86530fe3d6ef0042ef1f6483b8f83f8e28834e2495e5368934e8c1ffcf36c</sum>
        </package>
        <package name="httpd-devel" version="2.4.37" release="65.module_el8.10.0+3872+9b8ab21e.1" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+3872+9b8ab21e.1.src.rpm">
          <filename>httpd-devel-2.4.37-65.module_el8.10.0+3872+9b8ab21e.1.s390x.rpm</filename>
          <sum type="sha256">db3c7cbd392a60c09a8bbbc186566ca0b124b849bb6d8613c75810463a059b65</sum>
        </package>
        <package name="mod_md" version="2.0.8" release="8.module_el8.6.0+3031+fb177b09" epoch="1" arch="s390x" src="mod_md-2.0.8-8.module_el8.6.0+3031+fb177b09.src.rpm">
          <filename>mod_md-2.0.8-8.module_el8.6.0+3031+fb177b09.s390x.rpm</filename>
          <sum type="sha256">e47754aea99df8718074dd3d1df288b448b0af9d0ba4f0f8c6a3b5c8a164a1a7</sum>
        </package>
        <package name="httpd-manual" version="2.4.37" release="65.module_el8.10.0+3872+9b8ab21e.1" epoch="0" arch="noarch" src="httpd-2.4.37-65.module_el8.10.0+3872+9b8ab21e.1.src.rpm">
          <filename>httpd-manual-2.4.37-65.module_el8.10.0+3872+9b8ab21e.1.noarch.rpm</filename>
          <sum type="sha256">e4e45cf9200a4e2308e7d851d7749de1157383127af8732507334f5f71f0448c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4936</id>
    <title>Important: freeradius:3.0 security update</title>
    <issued date="2024-07-31 00:00:00"/>
    <updated date="2024-08-06 20:56:46"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freeradius:3.0 security update</summary>
    <description>FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network.

Security Fix(es):

* freeradius: forgery attack (CVE-2024-3596)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4936" id="RHSA-2024:4936" type="rhsa" title="RHSA-2024:4936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3596" id="CVE-2024-3596" type="cve" title="CVE-2024-3596"/>
      <reference href="https://bugzilla.redhat.com/2263240" id="2263240" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4936.html" id="ALSA-2024:4936" type="self" title="ALSA-2024:4936"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="freeradius" stream="3.0" version="8100020240731125246" context="fbe42456" arch="s390x"/>
        <package name="freeradius-devel" version="3.0.20" release="15.module_el8.10.0+3873+5b7fed0f" epoch="0" arch="s390x" src="freeradius-3.0.20-15.module_el8.10.0+3873+5b7fed0f.src.rpm">
          <filename>freeradius-devel-3.0.20-15.module_el8.10.0+3873+5b7fed0f.s390x.rpm</filename>
          <sum type="sha256">05375ae61dcc6f280ac486c50ca0b9892e0a880855d80c6b41f0b061f9ec8340</sum>
        </package>
        <package name="freeradius-doc" version="3.0.20" release="15.module_el8.10.0+3873+5b7fed0f" epoch="0" arch="s390x" src="freeradius-3.0.20-15.module_el8.10.0+3873+5b7fed0f.src.rpm">
          <filename>freeradius-doc-3.0.20-15.module_el8.10.0+3873+5b7fed0f.s390x.rpm</filename>
          <sum type="sha256">249ef3e3535aae9267fddc7e8d20783e717cd9d52b30bbebc5f0245c01bf33f6</sum>
        </package>
        <package name="freeradius-perl" version="3.0.20" release="15.module_el8.10.0+3873+5b7fed0f" epoch="0" arch="s390x" src="freeradius-3.0.20-15.module_el8.10.0+3873+5b7fed0f.src.rpm">
          <filename>freeradius-perl-3.0.20-15.module_el8.10.0+3873+5b7fed0f.s390x.rpm</filename>
          <sum type="sha256">29f57af0887fc449be81a293c95f190307ec7a8625448ac93c9676c945c40892</sum>
        </package>
        <package name="freeradius-postgresql" version="3.0.20" release="15.module_el8.10.0+3873+5b7fed0f" epoch="0" arch="s390x" src="freeradius-3.0.20-15.module_el8.10.0+3873+5b7fed0f.src.rpm">
          <filename>freeradius-postgresql-3.0.20-15.module_el8.10.0+3873+5b7fed0f.s390x.rpm</filename>
          <sum type="sha256">4a931df3d6cf4d5869c49ca94ac582934031d960c63a6468b8806730428dd884</sum>
        </package>
        <package name="freeradius-utils" version="3.0.20" release="15.module_el8.10.0+3873+5b7fed0f" epoch="0" arch="s390x" src="freeradius-3.0.20-15.module_el8.10.0+3873+5b7fed0f.src.rpm">
          <filename>freeradius-utils-3.0.20-15.module_el8.10.0+3873+5b7fed0f.s390x.rpm</filename>
          <sum type="sha256">5f3d495a008758829cfaf55d3a682de98e766d71ca32e5f40cb2d6daf3111764</sum>
        </package>
        <package name="freeradius-sqlite" version="3.0.20" release="15.module_el8.10.0+3873+5b7fed0f" epoch="0" arch="s390x" src="freeradius-3.0.20-15.module_el8.10.0+3873+5b7fed0f.src.rpm">
          <filename>freeradius-sqlite-3.0.20-15.module_el8.10.0+3873+5b7fed0f.s390x.rpm</filename>
          <sum type="sha256">70a945a4c55912adc9b9155506ae9e4aa53c0d391bf124690e0847ef5da085a4</sum>
        </package>
        <package name="freeradius-unixODBC" version="3.0.20" release="15.module_el8.10.0+3873+5b7fed0f" epoch="0" arch="s390x" src="freeradius-3.0.20-15.module_el8.10.0+3873+5b7fed0f.src.rpm">
          <filename>freeradius-unixODBC-3.0.20-15.module_el8.10.0+3873+5b7fed0f.s390x.rpm</filename>
          <sum type="sha256">779a9ef03a8b175200fa73ff36cbb9243eb7d3eaad0fc68825deeb6a3137d360</sum>
        </package>
        <package name="python3-freeradius" version="3.0.20" release="15.module_el8.10.0+3873+5b7fed0f" epoch="0" arch="s390x" src="freeradius-3.0.20-15.module_el8.10.0+3873+5b7fed0f.src.rpm">
          <filename>python3-freeradius-3.0.20-15.module_el8.10.0+3873+5b7fed0f.s390x.rpm</filename>
          <sum type="sha256">7fb69d8c0dfd7cb471d36fb41ffda4145720c82b61a72d7b68c9481f7a110fa7</sum>
        </package>
        <package name="freeradius" version="3.0.20" release="15.module_el8.10.0+3873+5b7fed0f" epoch="0" arch="s390x" src="freeradius-3.0.20-15.module_el8.10.0+3873+5b7fed0f.src.rpm">
          <filename>freeradius-3.0.20-15.module_el8.10.0+3873+5b7fed0f.s390x.rpm</filename>
          <sum type="sha256">917b564dc4d5dd3ff90c9947c0545459e5685f66a03ff9fdcf59806004bcfa28</sum>
        </package>
        <package name="freeradius-ldap" version="3.0.20" release="15.module_el8.10.0+3873+5b7fed0f" epoch="0" arch="s390x" src="freeradius-3.0.20-15.module_el8.10.0+3873+5b7fed0f.src.rpm">
          <filename>freeradius-ldap-3.0.20-15.module_el8.10.0+3873+5b7fed0f.s390x.rpm</filename>
          <sum type="sha256">bc1c3e61ef0e3f0eab0800e7ec6dc17b9dbdae82af6f6b852c33edaff53252db</sum>
        </package>
        <package name="freeradius-krb5" version="3.0.20" release="15.module_el8.10.0+3873+5b7fed0f" epoch="0" arch="s390x" src="freeradius-3.0.20-15.module_el8.10.0+3873+5b7fed0f.src.rpm">
          <filename>freeradius-krb5-3.0.20-15.module_el8.10.0+3873+5b7fed0f.s390x.rpm</filename>
          <sum type="sha256">c30c600fb8be8b8750fb9cc0c8d73fbb9201591bff4daf8ad42f3daa80ea18e9</sum>
        </package>
        <package name="freeradius-rest" version="3.0.20" release="15.module_el8.10.0+3873+5b7fed0f" epoch="0" arch="s390x" src="freeradius-3.0.20-15.module_el8.10.0+3873+5b7fed0f.src.rpm">
          <filename>freeradius-rest-3.0.20-15.module_el8.10.0+3873+5b7fed0f.s390x.rpm</filename>
          <sum type="sha256">d2a5321aefca6551fb2ff73fc870f03275b2ba04c325f9e598c0a71f4e10af4d</sum>
        </package>
        <package name="freeradius-mysql" version="3.0.20" release="15.module_el8.10.0+3873+5b7fed0f" epoch="0" arch="s390x" src="freeradius-3.0.20-15.module_el8.10.0+3873+5b7fed0f.src.rpm">
          <filename>freeradius-mysql-3.0.20-15.module_el8.10.0+3873+5b7fed0f.s390x.rpm</filename>
          <sum type="sha256">d885c62ac686959b7a8ace9aa5cfead9cf9a718044e1f14afe927c1dfe93abef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5079</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2024-08-07 00:00:00"/>
    <updated date="2024-08-08 08:54:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c (CVE-2018-15209)
* libtiff: Buffer Overflow via /libtiff/tools/tiffcrop.c (CVE-2023-25433)
* libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c (CVE-2023-6228)
* libtiff: Segment fault in libtiff  in TIFFReadRGBATileExt() leading to denial of service (CVE-2023-52356)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5079" id="RHSA-2024:5079" type="rhsa" title="RHSA-2024:5079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2018-15209" id="CVE-2018-15209" type="cve" title="CVE-2018-15209"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25433" id="CVE-2023-25433" type="cve" title="CVE-2023-25433"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52356" id="CVE-2023-52356" type="cve" title="CVE-2023-52356"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6228" id="CVE-2023-6228" type="cve" title="CVE-2023-6228"/>
      <reference href="https://bugzilla.redhat.com/1614051" id="1614051" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218744" id="2218744" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2240995" id="2240995" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2251344" id="2251344" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5079.html" id="ALSA-2024:5079" type="self" title="ALSA-2024:5079"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libtiff" version="4.0.9" release="32.el8_10" epoch="0" arch="s390x" src="libtiff-4.0.9-32.el8_10.src.rpm">
          <filename>libtiff-4.0.9-32.el8_10.s390x.rpm</filename>
          <sum type="sha256">4ad0ada3a26d00e5237c6f958aadbe786ae36499dabbe6f2eb97642b04fa4ee6</sum>
        </package>
        <package name="libtiff-devel" version="4.0.9" release="32.el8_10" epoch="0" arch="s390x" src="libtiff-4.0.9-32.el8_10.src.rpm">
          <filename>libtiff-devel-4.0.9-32.el8_10.s390x.rpm</filename>
          <sum type="sha256">d2968bd1ecaaf326c73dc2b5eb075d55c5efe256626427370de4cca3b42746c8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5193</id>
    <title>Important: httpd:2.4 security update</title>
    <issued date="2024-08-12 00:00:00"/>
    <updated date="2024-08-12 08:10:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>httpd:2.4 security update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: Security issues via?backend applications whose response headers are malicious or exploitable (CVE-2024-38476)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5193" id="RHSA-2024:5193" type="rhsa" title="RHSA-2024:5193"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38476" id="CVE-2024-38476" type="cve" title="CVE-2024-38476"/>
      <reference href="https://bugzilla.redhat.com/2295015" id="2295015" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5193.html" id="ALSA-2024:5193" type="self" title="ALSA-2024:5193"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="httpd" stream="2.4" version="8100020240522113918" context="9edba152" arch="s390x"/>
        <package name="mod_proxy_html" version="2.4.37" release="65.module_el8.10.0+3874+c2064c23.2" epoch="1" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+3874+c2064c23.2.src.rpm">
          <filename>mod_proxy_html-2.4.37-65.module_el8.10.0+3874+c2064c23.2.s390x.rpm</filename>
          <sum type="sha256">2350e742de672e43b5c4aa04048e1e4a4bbad756492c50aa9679fb33444f684c</sum>
        </package>
        <package name="mod_session" version="2.4.37" release="65.module_el8.10.0+3874+c2064c23.2" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+3874+c2064c23.2.src.rpm">
          <filename>mod_session-2.4.37-65.module_el8.10.0+3874+c2064c23.2.s390x.rpm</filename>
          <sum type="sha256">2d0dd047c3d2e63e2f6216dab451d4267146f0de2a21e72fb4bfb2a00da82f09</sum>
        </package>
        <package name="httpd-tools" version="2.4.37" release="65.module_el8.10.0+3874+c2064c23.2" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+3874+c2064c23.2.src.rpm">
          <filename>httpd-tools-2.4.37-65.module_el8.10.0+3874+c2064c23.2.s390x.rpm</filename>
          <sum type="sha256">61397291f27469cdc884b991df3db8329bea05c5edc67f369cb4192c296767eb</sum>
        </package>
        <package name="httpd-devel" version="2.4.37" release="65.module_el8.10.0+3874+c2064c23.2" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+3874+c2064c23.2.src.rpm">
          <filename>httpd-devel-2.4.37-65.module_el8.10.0+3874+c2064c23.2.s390x.rpm</filename>
          <sum type="sha256">81a745fa58ea29409a58408f237066c31cf406fddc598960d952f4e2b390d3ed</sum>
        </package>
        <package name="mod_ldap" version="2.4.37" release="65.module_el8.10.0+3874+c2064c23.2" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+3874+c2064c23.2.src.rpm">
          <filename>mod_ldap-2.4.37-65.module_el8.10.0+3874+c2064c23.2.s390x.rpm</filename>
          <sum type="sha256">9d606975e2f97c687b0d13feac8913be2be382bd1c9787dc88de22338aee507e</sum>
        </package>
        <package name="mod_ssl" version="2.4.37" release="65.module_el8.10.0+3874+c2064c23.2" epoch="1" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+3874+c2064c23.2.src.rpm">
          <filename>mod_ssl-2.4.37-65.module_el8.10.0+3874+c2064c23.2.s390x.rpm</filename>
          <sum type="sha256">c93f12e9ddbacfc7a8179d32d59a468769d5c5c015c1521f376a15adf2b71c25</sum>
        </package>
        <package name="mod_http2" version="1.15.7" release="10.module_el8.10.0+3832+564e7653" epoch="0" arch="s390x" src="mod_http2-1.15.7-10.module_el8.10.0+3832+564e7653.src.rpm">
          <filename>mod_http2-1.15.7-10.module_el8.10.0+3832+564e7653.s390x.rpm</filename>
          <sum type="sha256">ced86530fe3d6ef0042ef1f6483b8f83f8e28834e2495e5368934e8c1ffcf36c</sum>
        </package>
        <package name="mod_md" version="2.0.8" release="8.module_el8.6.0+3031+fb177b09" epoch="1" arch="s390x" src="mod_md-2.0.8-8.module_el8.6.0+3031+fb177b09.src.rpm">
          <filename>mod_md-2.0.8-8.module_el8.6.0+3031+fb177b09.s390x.rpm</filename>
          <sum type="sha256">e47754aea99df8718074dd3d1df288b448b0af9d0ba4f0f8c6a3b5c8a164a1a7</sum>
        </package>
        <package name="httpd-manual" version="2.4.37" release="65.module_el8.10.0+3874+c2064c23.2" epoch="0" arch="noarch" src="httpd-2.4.37-65.module_el8.10.0+3874+c2064c23.2.src.rpm">
          <filename>httpd-manual-2.4.37-65.module_el8.10.0+3874+c2064c23.2.noarch.rpm</filename>
          <sum type="sha256">f2b27c53bc1f7f073ba47fe22dcfde3e061c987d48340d51fd74969730b74fac</sum>
        </package>
        <package name="httpd-filesystem" version="2.4.37" release="65.module_el8.10.0+3874+c2064c23.2" epoch="0" arch="noarch" src="httpd-2.4.37-65.module_el8.10.0+3874+c2064c23.2.src.rpm">
          <filename>httpd-filesystem-2.4.37-65.module_el8.10.0+3874+c2064c23.2.noarch.rpm</filename>
          <sum type="sha256">f7e7c6f6ffef0871b2a4628289b284ca0b308bd5a82f077c4a1638be7490d18d</sum>
        </package>
        <package name="httpd" version="2.4.37" release="65.module_el8.10.0+3874+c2064c23.2" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+3874+c2064c23.2.src.rpm">
          <filename>httpd-2.4.37-65.module_el8.10.0+3874+c2064c23.2.s390x.rpm</filename>
          <sum type="sha256">fbc402db36370be4018238cee2efc996675df8b890bbd37fa8c069c108ad7e2d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5258</id>
    <title>Important: container-tools:rhel8 security update</title>
    <issued date="2024-08-13 00:00:00"/>
    <updated date="2024-08-14 16:09:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>container-tools:rhel8 security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)
* golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)
* golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)
* golang: net/mail: comments in display names are incorrectly handled (CVE-2024-24784)
* containers/image: digest type does not guarantee valid type (CVE-2024-3727)
* golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)
* go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)
* gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5258" id="RHSA-2024:5258" type="rhsa" title="RHSA-2024:5258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45290" id="CVE-2023-45290" type="cve" title="CVE-2023-45290"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1394" id="CVE-2024-1394" type="cve" title="CVE-2024-1394"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24783" id="CVE-2024-24783" type="cve" title="CVE-2024-24783"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24784" id="CVE-2024-24784" type="cve" title="CVE-2024-24784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24789" id="CVE-2024-24789" type="cve" title="CVE-2024-24789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3727" id="CVE-2024-3727" type="cve" title="CVE-2024-3727"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37298" id="CVE-2024-37298" type="cve" title="CVE-2024-37298"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6104" id="CVE-2024-6104" type="cve" title="CVE-2024-6104"/>
      <reference href="https://bugzilla.redhat.com/2262921" id="2262921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268017" id="2268017" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268019" id="2268019" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268021" id="2268021" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2274767" id="2274767" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2292668" id="2292668" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2294000" id="2294000" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295010" id="2295010" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5258.html" id="ALSA-2024:5258" type="self" title="ALSA-2024:5258"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="container-tools" stream="rhel8" version="8100020240813140059" context="20125149" arch="s390x"/>
        <package name="podman-plugins" version="4.9.4" release="12.module_el8.10.0+3876+e55593a8" epoch="4" arch="s390x" src="podman-4.9.4-12.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>podman-plugins-4.9.4-12.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">0a5383f1915f32d50fdca51bf797e32e373f4312485de462bf62211154039baa</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="12.module_el8.10.0+3876+e55593a8" epoch="4" arch="noarch" src="podman-4.9.4-12.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>podman-docker-4.9.4-12.module_el8.10.0+3876+e55593a8.noarch.rpm</filename>
          <sum type="sha256">15d10a61d24ea8ebfcb13383dc85823db674aea76225806c6eadc2e266d9aedb</sum>
        </package>
        <package name="criu-libs" version="3.18" release="5.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>criu-libs-3.18-5.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">1962469cfa08c792359c82d44b5410abab23b62f897edccd5283944edabe867a</sum>
        </package>
        <package name="netavark" version="1.10.3" release="1.module_el8.10.0+3876+e55593a8" epoch="2" arch="s390x" src="netavark-1.10.3-1.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>netavark-1.10.3-1.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">22f05aa438e94dcdf27f2a11498a91bafbc680d2eb3e7949e845aa8bf051a0f5</sum>
        </package>
        <package name="skopeo-tests" version="1.14.5" release="3.module_el8.10.0+3876+e55593a8" epoch="2" arch="s390x" src="skopeo-1.14.5-3.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>skopeo-tests-1.14.5-3.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">29a7b74a18e0a1b63825ee2eb5c3f36a2a3971da39a546401e9c9d07b00cd50e</sum>
        </package>
        <package name="fuse-overlayfs" version="1.13" release="1.module_el8.10.0+3859+6ae70a0e" epoch="0" arch="s390x" src="fuse-overlayfs-1.13-1.module_el8.10.0+3859+6ae70a0e.src.rpm">
          <filename>fuse-overlayfs-1.13-1.module_el8.10.0+3859+6ae70a0e.s390x.rpm</filename>
          <sum type="sha256">29b30d0c5708c9391957eaf454601ebef98ef92f93cfcf35fc2ac68ca6e95c87</sum>
        </package>
        <package name="python3-criu" version="3.18" release="5.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>python3-criu-3.18-5.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">311d1d5a7cbbe515f773456c7925176b0f726957791911831a4f418e1fdf7b3b</sum>
        </package>
        <package name="containers-common" version="1" release="82.module_el8.10.0+3876+e55593a8" epoch="2" arch="s390x" src="containers-common-1-82.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>containers-common-1-82.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">4213618237f4e9c274bf08dbbccaaf202cbb700ea739218d364bb09c06221925</sum>
        </package>
        <package name="python3-podman" version="4.9.0" release="2.module_el8.10.0+3876+e55593a8" epoch="0" arch="noarch" src="python-podman-4.9.0-2.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>python3-podman-4.9.0-2.module_el8.10.0+3876+e55593a8.noarch.rpm</filename>
          <sum type="sha256">437316c120844707bd3e7921d302269491e58d4266339b9e5dd59fd6ad67d5a1</sum>
        </package>
        <package name="slirp4netns" version="1.2.3" release="1.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="slirp4netns-1.2.3-1.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>slirp4netns-1.2.3-1.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">47e064f66ebe5ddf06943af427f7e84b1bfe6139ff8bfd3f03d60c6be4ac9be1</sum>
        </package>
        <package name="runc" version="1.1.12" release="4.module_el8.10.0+3876+e55593a8" epoch="1" arch="s390x" src="runc-1.1.12-4.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>runc-1.1.12-4.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">4ee01b09e2843e732538233fa8c3026de312a0db5ff95c91bf2ff7b52ccf6fdb</sum>
        </package>
        <package name="skopeo" version="1.14.5" release="3.module_el8.10.0+3876+e55593a8" epoch="2" arch="s390x" src="skopeo-1.14.5-3.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>skopeo-1.14.5-3.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">50b8cf3c6219a9c8669cf6689c25f51511d933ab1bdba7d06e67d30919034939</sum>
        </package>
        <package name="container-selinux" version="2.229.0" release="2.module_el8.10.0+3876+e55593a8" epoch="2" arch="noarch" src="container-selinux-2.229.0-2.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>container-selinux-2.229.0-2.module_el8.10.0+3876+e55593a8.noarch.rpm</filename>
          <sum type="sha256">58167ed169ed600019e514e0d6d861314bbc86583f8b25692a7a6597292f62cf</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.5" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>toolbox-tests-0.0.99.5-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">6f3afa8d1e85355c8b298eb28c01fa395e12e6268471b962b0987703f32210e9</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="2.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>libslirp-4.4.0-2.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">73cf1d62af4216a02d4c73012417aa34facbeca42f72a37dacf5a3cc79f96e6e</sum>
        </package>
        <package name="podman" version="4.9.4" release="12.module_el8.10.0+3876+e55593a8" epoch="4" arch="s390x" src="podman-4.9.4-12.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>podman-4.9.4-12.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">77b800fa90bf3f8d3d4f30636e302b54871340ef5bcf93dac978520c084f912c</sum>
        </package>
        <package name="cockpit-podman" version="84.1" release="1.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="noarch" src="cockpit-podman-84.1-1.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>cockpit-podman-84.1-1.module_el8.10.0+3858+6ad51f9f.noarch.rpm</filename>
          <sum type="sha256">7915999cb1ee8e09a70de43499543840abebc7d5a924567453d192a165b02427</sum>
        </package>
        <package name="podman-gvproxy" version="4.9.4" release="12.module_el8.10.0+3876+e55593a8" epoch="4" arch="s390x" src="podman-4.9.4-12.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>podman-gvproxy-4.9.4-12.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">841fb16975c3ee9b3f0c148ccff6942f633cc685df60c455e0f3ab3570371885</sum>
        </package>
        <package name="aardvark-dns" version="1.10.0" release="1.module_el8.10.0+3858+6ad51f9f" epoch="2" arch="s390x" src="aardvark-dns-1.10.0-1.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>aardvark-dns-1.10.0-1.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">8930e60873726395a1b7b7b675fa0aa66538198c06fb483ea9f24ae795ca8a1d</sum>
        </package>
        <package name="udica" version="0.2.6" release="21.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="noarch" src="udica-0.2.6-21.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>udica-0.2.6-21.module_el8.10.0+3858+6ad51f9f.noarch.rpm</filename>
          <sum type="sha256">8d98a1794f4f68669a824ce7988ed1fd46c307ec693bba17b3a0fe11d7e0665d</sum>
        </package>
        <package name="toolbox" version="0.0.99.5" release="2.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>toolbox-0.0.99.5-2.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">8df71d94e465a66228dced33f5189e4789bc2ac13946b5e79a11e8091af4f33e</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="2.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>libslirp-devel-4.4.0-2.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">8e619da0a95c4f17206294099001540f08000d56a3e433f027055d84dabef841</sum>
        </package>
        <package name="crit" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>crit-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">aeb27c5bcec90a9452f93ad79ef0d4f00ecedf4442f32f9bedb481509db12683</sum>
        </package>
        <package name="containernetworking-plugins" version="1.4.0" release="5.module_el8.10.0+3876+e55593a8" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-5.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>containernetworking-plugins-1.4.0-5.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">b0f6d94b26b1b34fa0d367d6092dd09a4f7abf5e815627bc96b1c060b1aaea17</sum>
        </package>
        <package name="buildah-tests" version="1.33.8" release="4.module_el8.10.0+3876+e55593a8" epoch="2" arch="s390x" src="buildah-1.33.8-4.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>buildah-tests-1.33.8-4.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">babcea9dce0eaa42aef9f6dc138275c2fde1ccc4772c41013eb58af042605e52</sum>
        </package>
        <package name="criu" version="3.18" release="5.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>criu-3.18-5.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">bdaddee931f3746ac7472d9ccee504acd0be805433b3d160b1e7caf8bf361cb8</sum>
        </package>
        <package name="crun" version="1.14.3" release="2.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="crun-1.14.3-2.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>crun-1.14.3-2.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">d07a292ed62fb537ef65dee1cce03a0dfb3eb95bb4967ff688f1d3332fabe47b</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="12.module_el8.10.0+3876+e55593a8" epoch="4" arch="s390x" src="podman-4.9.4-12.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>podman-remote-4.9.4-12.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">da161b504f100422b947e91fa0d1fb7fcfd6cda62b17670e5ffc02f4cc9a9f43</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.10" release="1.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">e80883fe6389cab87bbab36264467f6f22350aee4fec71f2366bb4afb66292e6</sum>
        </package>
        <package name="buildah" version="1.33.8" release="4.module_el8.10.0+3876+e55593a8" epoch="2" arch="s390x" src="buildah-1.33.8-4.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>buildah-1.33.8-4.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">ecf331e74afe7a15c0fe6c74f99b0982aaf86172c6e585abd62988360715aa23</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="12.module_el8.10.0+3876+e55593a8" epoch="4" arch="s390x" src="podman-4.9.4-12.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>podman-tests-4.9.4-12.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">ed704bedf13445e0437b0c33b412aa96ac20478c2f4e9783bea00cb22ac0f21b</sum>
        </package>
        <package name="podman-catatonit" version="4.9.4" release="12.module_el8.10.0+3876+e55593a8" epoch="4" arch="s390x" src="podman-4.9.4-12.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>podman-catatonit-4.9.4-12.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">f8ddeabd93817177a27c26b13c72336683965db3b1f63d94ad6ac3881880d873</sum>
        </package>
        <package name="conmon" version="2.1.10" release="1.module_el8.10.0+3845+87b84552" epoch="3" arch="s390x" src="conmon-2.1.10-1.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>conmon-2.1.10-1.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">f8f7e631b6103852487fcb99e1c6baaf8c5e60e3654c2f5a4bddc238ed708563</sum>
        </package>
        <package name="criu-devel" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>criu-devel-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">ffa71276e65ae92bb9c7b93241ba28ad74337aa5770f3cf3390d73b2552e73ae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5289</id>
    <title>Moderate: mod_auth_openidc:2.3 security update</title>
    <issued date="2024-08-13 00:00:00"/>
    <updated date="2024-08-21 11:58:06"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mod_auth_openidc:2.3 security update</summary>
    <description>The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. 

Security Fix(es):

* mod_auth_openidc: DoS when using `OIDCSessionType client-cookie` and manipulating cookies (CVE-2024-24814)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5289" id="RHSA-2024:5289" type="rhsa" title="RHSA-2024:5289"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24814" id="CVE-2024-24814" type="cve" title="CVE-2024-24814"/>
      <reference href="https://bugzilla.redhat.com/2264092" id="2264092" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5289.html" id="ALSA-2024:5289" type="self" title="ALSA-2024:5289"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="mod_auth_openidc" stream="2.3" version="8100020240814160950" context="9edba152" arch="s390x"/>
        <package name="mod_auth_openidc" version="2.4.9.4" release="6.module_el8.10.0+3881+234adf82" epoch="0" arch="s390x" src="mod_auth_openidc-2.4.9.4-6.module_el8.10.0+3881+234adf82.src.rpm">
          <filename>mod_auth_openidc-2.4.9.4-6.module_el8.10.0+3881+234adf82.s390x.rpm</filename>
          <sum type="sha256">3b9b306581f449878735b99c2f759ed8fbbf795f95011939b33b1bf15719ef67</sum>
        </package>
        <package name="cjose-devel" version="0.6.1" release="4.module_el8.10.0+3881+234adf82" epoch="0" arch="s390x" src="cjose-0.6.1-4.module_el8.10.0+3881+234adf82.src.rpm">
          <filename>cjose-devel-0.6.1-4.module_el8.10.0+3881+234adf82.s390x.rpm</filename>
          <sum type="sha256">559c2230cf633477f6087a021e6c86fcc10f9ddd90a75eff6a9a97e1e9e6462e</sum>
        </package>
        <package name="cjose" version="0.6.1" release="4.module_el8.10.0+3881+234adf82" epoch="0" arch="s390x" src="cjose-0.6.1-4.module_el8.10.0+3881+234adf82.src.rpm">
          <filename>cjose-0.6.1-4.module_el8.10.0+3881+234adf82.s390x.rpm</filename>
          <sum type="sha256">f2276b80986159e6c98c20e7b1f84a175e9f21a5ed4a7bd1e4530f03dd3c3001</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5291</id>
    <title>Moderate: grafana security update</title>
    <issued date="2024-08-13 00:00:00"/>
    <updated date="2024-08-21 11:59:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB. 

Security Fix(es):

* golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)
* golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)
* golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5291" id="RHSA-2024:5291" type="rhsa" title="RHSA-2024:5291"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24788" id="CVE-2024-24788" type="cve" title="CVE-2024-24788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24789" id="CVE-2024-24789" type="cve" title="CVE-2024-24789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24790" id="CVE-2024-24790" type="cve" title="CVE-2024-24790"/>
      <reference href="https://bugzilla.redhat.com/2279814" id="2279814" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2292668" id="2292668" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2292787" id="2292787" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5291.html" id="ALSA-2024:5291" type="self" title="ALSA-2024:5291"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="grafana-selinux" version="9.2.10" release="17.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-17.el8_10.src.rpm">
          <filename>grafana-selinux-9.2.10-17.el8_10.s390x.rpm</filename>
          <sum type="sha256">72a7df974126f5933bc7e00b9a10513701c694325f15a85bad5d62267c4cb27d</sum>
        </package>
        <package name="grafana" version="9.2.10" release="17.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-17.el8_10.src.rpm">
          <filename>grafana-9.2.10-17.el8_10.s390x.rpm</filename>
          <sum type="sha256">86539f9daa74ed60f3be6c721c9b388eea31c6bb428f9bffbc549be8e37a283c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5294</id>
    <title>Moderate: jose security update</title>
    <issued date="2024-08-13 00:00:00"/>
    <updated date="2024-08-21 12:01:41"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>jose security update</summary>
    <description>Jose is a C-language implementation of the Javascript Object Signing and Encryption standards. The jose package is a dependency of the clevis and tang packages, together providing Network Bound Disk Encryption (NBDE) in AlmaLinux.

Security Fix(es):

* jose: resource exhaustion (CVE-2024-28176)
* jose: Denial of service due to uncontrolled CPU consumption (CVE-2023-50967)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5294" id="RHSA-2024:5294" type="rhsa" title="RHSA-2024:5294"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50967" id="CVE-2023-50967" type="cve" title="CVE-2023-50967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28176" id="CVE-2024-28176" type="cve" title="CVE-2024-28176"/>
      <reference href="https://bugzilla.redhat.com/2268820" id="2268820" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270538" id="2270538" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5294.html" id="ALSA-2024:5294" type="self" title="ALSA-2024:5294"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libjose-devel" version="10" release="2.el8_10.3" epoch="0" arch="s390x" src="jose-10-2.el8_10.3.src.rpm">
          <filename>libjose-devel-10-2.el8_10.3.s390x.rpm</filename>
          <sum type="sha256">25e0de4844b70a9b2341ee2774ad0987e8166cdcb73d0a0441a492518316909f</sum>
        </package>
        <package name="libjose" version="10" release="2.el8_10.3" epoch="0" arch="s390x" src="jose-10-2.el8_10.3.src.rpm">
          <filename>libjose-10-2.el8_10.3.s390x.rpm</filename>
          <sum type="sha256">695fbff857abf22161a8bd1987805865945dd6d1c015eed92c1ba50c053d4b4d</sum>
        </package>
        <package name="jose" version="10" release="2.el8_10.3" epoch="0" arch="s390x" src="jose-10-2.el8_10.3.src.rpm">
          <filename>jose-10-2.el8_10.3.s390x.rpm</filename>
          <sum type="sha256">8faa96d06cc9de8f63919103488712d715cc8b5300b885acfb8f2510b465c684</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5297</id>
    <title>Moderate: edk2 security update</title>
    <issued date="2024-08-13 00:00:00"/>
    <updated date="2024-08-21 12:03:25"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>edk2 security update</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. 

Security Fix(es):

* edk2: Predictable TCP Initial Sequence Numbers (CVE-2023-45236)
* edk2: Use of a Weak PseudoRandom Number Generator (CVE-2023-45237)
* edk2: Temporary DoS vulnerability (CVE-2024-1298)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5297" id="RHSA-2024:5297" type="rhsa" title="RHSA-2024:5297"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45236" id="CVE-2023-45236" type="cve" title="CVE-2023-45236"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45237" id="CVE-2023-45237" type="cve" title="CVE-2023-45237"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1298" id="CVE-2024-1298" type="cve" title="CVE-2024-1298"/>
      <reference href="https://bugzilla.redhat.com/2258703" id="2258703" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258706" id="2258706" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284243" id="2284243" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5297.html" id="ALSA-2024:5297" type="self" title="ALSA-2024:5297"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="edk2-ovmf" version="20220126gitbb1bba3d77" release="13.el8_10.2" epoch="0" arch="noarch" src="edk2-20220126gitbb1bba3d77-13.el8_10.2.src.rpm">
          <filename>edk2-ovmf-20220126gitbb1bba3d77-13.el8_10.2.noarch.rpm</filename>
          <sum type="sha256">b2d743d54119801c3e05b9db55a01712d616c849f3625d7e774d790dc1593199</sum>
        </package>
        <package name="edk2-aarch64" version="20220126gitbb1bba3d77" release="13.el8_10.2" epoch="0" arch="noarch" src="edk2-20220126gitbb1bba3d77-13.el8_10.2.src.rpm">
          <filename>edk2-aarch64-20220126gitbb1bba3d77-13.el8_10.2.noarch.rpm</filename>
          <sum type="sha256">b5500f40005f40c522937bc18a6f63937da2e6d0ade658821d580d941b886987</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5298</id>
    <title>Moderate: gnome-shell security update</title>
    <issued date="2024-08-13 00:00:00"/>
    <updated date="2024-08-21 12:08:50"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnome-shell security update</summary>
    <description>GNOME Shell acts as a compositing manager for the desktop, and displays both application windows and other objects. It provides core interface functions like switching windows, launching applications, and notifications. It takes advantage of the capabilities of modern graphics hardware and introduces innovative user interface concepts. 

Security Fix(es):

* gnome-shell: code execution in portal helper (CVE-2024-36472)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5298" id="RHSA-2024:5298" type="rhsa" title="RHSA-2024:5298"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36472" id="CVE-2024-36472" type="cve" title="CVE-2024-36472"/>
      <reference href="https://bugzilla.redhat.com/2283750" id="2283750" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5298.html" id="ALSA-2024:5298" type="self" title="ALSA-2024:5298"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="gnome-shell" version="3.32.2" release="56.el8_10" epoch="0" arch="s390x" src="gnome-shell-3.32.2-56.el8_10.src.rpm">
          <filename>gnome-shell-3.32.2-56.el8_10.s390x.rpm</filename>
          <sum type="sha256">4ae9f92b796da74db01f80884ab52f698072957202f69b76d94b0ad1c76a55ed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5299</id>
    <title>Moderate: wget security update</title>
    <issued date="2024-08-13 00:00:00"/>
    <updated date="2024-08-21 12:05:01"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>wget security update</summary>
    <description>The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols.

Security Fix(es):

* wget: Misinterpretation of input may lead to improper behavior (CVE-2024-38428)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5299" id="RHSA-2024:5299" type="rhsa" title="RHSA-2024:5299"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38428" id="CVE-2024-38428" type="cve" title="CVE-2024-38428"/>
      <reference href="https://bugzilla.redhat.com/2292836" id="2292836" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5299.html" id="ALSA-2024:5299" type="self" title="ALSA-2024:5299"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="wget" version="1.19.5" release="12.el8_10" epoch="0" arch="s390x" src="wget-1.19.5-12.el8_10.src.rpm">
          <filename>wget-1.19.5-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">753fc225e1309ed0084125ee03811449db0ec927cb8673725bb2de78441689c0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5305</id>
    <title>Moderate: poppler security update</title>
    <issued date="2024-08-13 00:00:00"/>
    <updated date="2024-08-21 12:07:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

* poppler: pdfinfo: crash in broken documents when using -dests parameter (CVE-2024-6239)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5305" id="RHSA-2024:5305" type="rhsa" title="RHSA-2024:5305"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6239" id="CVE-2024-6239" type="cve" title="CVE-2024-6239"/>
      <reference href="https://bugzilla.redhat.com/2293594" id="2293594" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5305.html" id="ALSA-2024:5305" type="self" title="ALSA-2024:5305"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="poppler-glib" version="20.11.0" release="12.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-12.el8_10.src.rpm">
          <filename>poppler-glib-20.11.0-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">5dea611963d1307fa0a5b72ce5c7d668a94906345b5ef63a4d6be80d534920b4</sum>
        </package>
        <package name="poppler" version="20.11.0" release="12.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-12.el8_10.src.rpm">
          <filename>poppler-20.11.0-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">bd92024782678615f1c120de8049fb0dd6bb45bbe12aec2c3614e38b9ce50f30</sum>
        </package>
        <package name="poppler-qt5" version="20.11.0" release="12.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-12.el8_10.src.rpm">
          <filename>poppler-qt5-20.11.0-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">bdb80c30994c30fd967efb434d84364981f7b84fb7eae4aca29f02678abee48a</sum>
        </package>
        <package name="poppler-utils" version="20.11.0" release="12.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-12.el8_10.src.rpm">
          <filename>poppler-utils-20.11.0-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">e164c5219eb1c92475942c50b4dc5700711404fedaeebee6886da7d634941310</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5306</id>
    <title>Moderate: orc security update</title>
    <issued date="2024-08-13 00:00:00"/>
    <updated date="2024-08-21 12:10:31"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>orc security update</summary>
    <description>Orc is a library and set of tools for compiling and executing very simple programs that operate on arrays of data.  The "language" is a generic assembly language that represents many of the features available in SIMD architectures, including saturated addition and subtraction, and many arithmetic operations.

Security Fix(es):

* orc: Stack-based buffer overflow vulnerability in ORC (CVE-2024-40897)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5306" id="RHSA-2024:5306" type="rhsa" title="RHSA-2024:5306"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40897" id="CVE-2024-40897" type="cve" title="CVE-2024-40897"/>
      <reference href="https://bugzilla.redhat.com/2300010" id="2300010" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5306.html" id="ALSA-2024:5306" type="self" title="ALSA-2024:5306"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="orc-compiler" version="0.4.28" release="4.el8_10" epoch="0" arch="s390x" src="orc-0.4.28-4.el8_10.src.rpm">
          <filename>orc-compiler-0.4.28-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">019f8361eea7281536797429c6860b96ab82421a6a40039de0b63a4ff5de8b30</sum>
        </package>
        <package name="orc" version="0.4.28" release="4.el8_10" epoch="0" arch="s390x" src="orc-0.4.28-4.el8_10.src.rpm">
          <filename>orc-0.4.28-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">2a0fbc02f3399ae91f4f3a8b31dec822329d2f2c6846a30432b41310bbebb0d2</sum>
        </package>
        <package name="orc-devel" version="0.4.28" release="4.el8_10" epoch="0" arch="s390x" src="orc-0.4.28-4.el8_10.src.rpm">
          <filename>orc-devel-0.4.28-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">3a21415561a282bb99e7075998fa4dd914771e59dc39a6581cd9e2405d2b3e19</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5337</id>
    <title>Moderate: .NET 8.0 security update</title>
    <issued date="2024-08-13 00:00:00"/>
    <updated date="2024-08-21 12:19:33"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.108 and .NET Runtime 8.0.8.

Security Fix(es):

* dotnet: Information disclosure vulnerability in TlsStream (CVE-2024-38167)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

* EMBARGOED CVE-2024-38167 dotnet8.0: Information disclosure vulnerability in TlsStream (CVE-2024-38167)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5337" id="RHSA-2024:5337" type="rhsa" title="RHSA-2024:5337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38167" id="CVE-2024-38167" type="cve" title="CVE-2024-38167"/>
      <reference href="https://bugzilla.redhat.com/2302428" id="2302428" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5337.html" id="ALSA-2024:5337" type="self" title="ALSA-2024:5337"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="dotnet-apphost-pack-8.0" version="8.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0052e3b5c51bb11a18481046a2aae8f4bde97d8308f97d7ebf1cf8927302f2bb</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.108" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.108-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">065302993f1594961916b8b623b74ec359bf15a6a73df8b1c24e3ff89f2114e7</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el8_10.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0fb9ed8a03e492266c2bf033b28cd42208e2e595fb9eb69ee0428983f9786fd0</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="8.0.108" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el8_10.src.rpm">
          <filename>netstandard-targeting-pack-2.1-8.0.108-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">12efdb14ceee33640ea42a372e350a04bc5ca72e340c405eef86ad0e7dd6f05a</sum>
        </package>
        <package name="dotnet" version="8.0.108" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el8_10.src.rpm">
          <filename>dotnet-8.0.108-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">285b46aba53bb37967379c5f44130b57854dd3ef0b1c06db417cb709e5f5b3d4</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">37cd6a03a4ea95a0f720060b32540d7ad328b7df37401d32356dae849d48e9ca</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">62c368442179975559a8f7c8a036604580738ba18a68a8bb0cddf59234cf6e1c</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.108" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el8_10.src.rpm">
          <filename>dotnet-templates-8.0-8.0.108-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">830f75746e565ad8d995a476c2ac2f38feb0b89656398c6ff004e04c46f470eb</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a361c7b2f2a88311f37e69be07a142e2595749a18d53d6f1c89cb1d173fabf93</sum>
        </package>
        <package name="dotnet-host" version="8.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el8_10.src.rpm">
          <filename>dotnet-host-8.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">d8960915b648652169a841f9c1189f5d723b08f714a1a65dc4b98b2f6c512ba1</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">fada74b988981f7585c750e37b00eea553be333d78ff0efcff380e6c436eb7db</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5390</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2024-08-14 00:00:00"/>
    <updated date="2024-08-21 12:23:01"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam (CVE-2024-1737)
* bind9: bind: SIG(0) can be used to exhaust CPU resources (CVE-2024-1975)
* bind: bind9: Assertion failure when serving both stale cache data and authoritative zone content (CVE-2024-4076)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5390" id="RHSA-2024:5390" type="rhsa" title="RHSA-2024:5390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1737" id="CVE-2024-1737" type="cve" title="CVE-2024-1737"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1975" id="CVE-2024-1975" type="cve" title="CVE-2024-1975"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4076" id="CVE-2024-4076" type="cve" title="CVE-2024-4076"/>
      <reference href="https://bugzilla.redhat.com/2298893" id="2298893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2298901" id="2298901" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2298904" id="2298904" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5390.html" id="ALSA-2024:5390" type="self" title="ALSA-2024:5390"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="bind9.16" version="9.16.23" release="0.22.el8_10" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.src.rpm">
          <filename>bind9.16-9.16.23-0.22.el8_10.s390x.rpm</filename>
          <sum type="sha256">18aafd5bfdd80b04448d1b6c70aa00c0e5f467e3ed9b7f57f546b56f7dc7152b</sum>
        </package>
        <package name="bind9.16-license" version="9.16.23" release="0.22.el8_10" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.22.el8_10.src.rpm">
          <filename>bind9.16-license-9.16.23-0.22.el8_10.noarch.rpm</filename>
          <sum type="sha256">57f1413669381aea481f56905843c99ff543e2d505f1791fb787923aa11d0636</sum>
        </package>
        <package name="bind9.16-utils" version="9.16.23" release="0.22.el8_10" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.src.rpm">
          <filename>bind9.16-utils-9.16.23-0.22.el8_10.s390x.rpm</filename>
          <sum type="sha256">717b227346cccb033764fc893e2858cc47ab12022e94f912047e59b01093b042</sum>
        </package>
        <package name="python3-bind9.16" version="9.16.23" release="0.22.el8_10" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.22.el8_10.src.rpm">
          <filename>python3-bind9.16-9.16.23-0.22.el8_10.noarch.rpm</filename>
          <sum type="sha256">9e82753d06e103e65092d370b0deac2fec9ca0ffb9b1aa0288b46f2037cd43ad</sum>
        </package>
        <package name="bind9.16-chroot" version="9.16.23" release="0.22.el8_10" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.src.rpm">
          <filename>bind9.16-chroot-9.16.23-0.22.el8_10.s390x.rpm</filename>
          <sum type="sha256">bae0260f38db6f5524b0ea80f1facc88af33266305c6e759df5d034841dd5e45</sum>
        </package>
        <package name="bind9.16-libs" version="9.16.23" release="0.22.el8_10" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.src.rpm">
          <filename>bind9.16-libs-9.16.23-0.22.el8_10.s390x.rpm</filename>
          <sum type="sha256">e1c66c03d7855142677de08e7a210c4677bd94d7ba1379db6fa4c12082b8be03</sum>
        </package>
        <package name="bind9.16-dnssec-utils" version="9.16.23" release="0.22.el8_10" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.src.rpm">
          <filename>bind9.16-dnssec-utils-9.16.23-0.22.el8_10.s390x.rpm</filename>
          <sum type="sha256">fd8d678284926f066702c992538ee51573b79fcd5de07825e9ca638c9c8195a5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5391</id>
    <title>Important: firefox security update</title>
    <issued date="2024-08-14 00:00:00"/>
    <updated date="2024-08-21 12:24:40"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* Firefox: 115.14/128.1 ESR ()
* mozilla: Fullscreen notification dialog can be obscured by document content (CVE-2024-7518)
* mozilla: Out of bounds memory access in graphics shared memory handling (CVE-2024-7519)
* mozilla: Type confusion in WebAssembly (CVE-2024-7520)
* mozilla: Incomplete WebAssembly exception handing (CVE-2024-7521)
* mozilla: Out of bounds read in editor component (CVE-2024-7522)
* mozilla: CSP strict-dynamic bypass using web-compatibility shims (CVE-2024-7524)
* mozilla: Missing permission check when creating a StreamFilter (CVE-2024-7525)
* mozilla: Uninitialized memory used by WebGL (CVE-2024-7526)
* mozilla: Use-after-free in JavaScript garbage collection (CVE-2024-7527)
* mozilla: Use-after-free in IndexedDB (CVE-2024-7528)
* mozilla: Document content could partially obscure security prompts (CVE-2024-7529)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5391" id="RHSA-2024:5391" type="rhsa" title="RHSA-2024:5391"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7518" id="CVE-2024-7518" type="cve" title="CVE-2024-7518"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7519" id="CVE-2024-7519" type="cve" title="CVE-2024-7519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7520" id="CVE-2024-7520" type="cve" title="CVE-2024-7520"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7521" id="CVE-2024-7521" type="cve" title="CVE-2024-7521"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7522" id="CVE-2024-7522" type="cve" title="CVE-2024-7522"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7524" id="CVE-2024-7524" type="cve" title="CVE-2024-7524"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7525" id="CVE-2024-7525" type="cve" title="CVE-2024-7525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7526" id="CVE-2024-7526" type="cve" title="CVE-2024-7526"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7527" id="CVE-2024-7527" type="cve" title="CVE-2024-7527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7528" id="CVE-2024-7528" type="cve" title="CVE-2024-7528"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7529" id="CVE-2024-7529" type="cve" title="CVE-2024-7529"/>
      <reference href="https://bugzilla.redhat.com/2303135" id="2303135" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303136" id="2303136" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303137" id="2303137" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303138" id="2303138" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303139" id="2303139" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303141" id="2303141" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303142" id="2303142" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303143" id="2303143" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303144" id="2303144" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303145" id="2303145" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303146" id="2303146" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5391.html" id="ALSA-2024:5391" type="self" title="ALSA-2024:5391"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="115.14.0" release="2.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-115.14.0-2.el8_10.alma.1.src.rpm">
          <filename>firefox-115.14.0-2.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">bc9d9aeb6042516b2863b3e31f04f3a00a911bc90571c4ff318b745a9aa9f55d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5402</id>
    <title>Important: thunderbird security update</title>
    <issued date="2024-08-14 00:00:00"/>
    <updated date="2024-08-21 12:27:11"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

* Thunderbird: 115.14/128.1 ()
* mozilla: Fullscreen notification dialog can be obscured by document content (CVE-2024-7518)
* mozilla: Out of bounds memory access in graphics shared memory handling (CVE-2024-7519)
* mozilla: Type confusion in WebAssembly (CVE-2024-7520)
* mozilla: Incomplete WebAssembly exception handing (CVE-2024-7521)
* mozilla: Out of bounds read in editor component (CVE-2024-7522)
* mozilla: Missing permission check when creating a StreamFilter (CVE-2024-7525)
* mozilla: Uninitialized memory used by WebGL (CVE-2024-7526)
* mozilla: Use-after-free in JavaScript garbage collection (CVE-2024-7527)
* mozilla: Use-after-free in IndexedDB (CVE-2024-7528)
* mozilla: Document content could partially obscure security prompts (CVE-2024-7529)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5402" id="RHSA-2024:5402" type="rhsa" title="RHSA-2024:5402"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7518" id="CVE-2024-7518" type="cve" title="CVE-2024-7518"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7519" id="CVE-2024-7519" type="cve" title="CVE-2024-7519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7520" id="CVE-2024-7520" type="cve" title="CVE-2024-7520"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7521" id="CVE-2024-7521" type="cve" title="CVE-2024-7521"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7522" id="CVE-2024-7522" type="cve" title="CVE-2024-7522"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7525" id="CVE-2024-7525" type="cve" title="CVE-2024-7525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7526" id="CVE-2024-7526" type="cve" title="CVE-2024-7526"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7527" id="CVE-2024-7527" type="cve" title="CVE-2024-7527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7528" id="CVE-2024-7528" type="cve" title="CVE-2024-7528"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7529" id="CVE-2024-7529" type="cve" title="CVE-2024-7529"/>
      <reference href="https://bugzilla.redhat.com/2303135" id="2303135" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303136" id="2303136" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303137" id="2303137" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303138" id="2303138" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303139" id="2303139" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303142" id="2303142" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303143" id="2303143" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303144" id="2303144" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303145" id="2303145" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303146" id="2303146" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5402.html" id="ALSA-2024:5402" type="self" title="ALSA-2024:5402"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="115.14.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-115.14.0-1.el8_10.alma.1.src.rpm">
          <filename>thunderbird-115.14.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">713a067ca40b18f7c410be01501c862649ddfeae9d2bde163496b0cc8d9bf0c8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5524</id>
    <title>Important: bind security update</title>
    <issued date="2024-08-19 00:00:00"/>
    <updated date="2024-08-21 12:29:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam (CVE-2024-1737)
* bind9: bind: SIG(0) can be used to exhaust CPU resources (CVE-2024-1975)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5524" id="RHSA-2024:5524" type="rhsa" title="RHSA-2024:5524"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1737" id="CVE-2024-1737" type="cve" title="CVE-2024-1737"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1975" id="CVE-2024-1975" type="cve" title="CVE-2024-1975"/>
      <reference href="https://bugzilla.redhat.com/2298893" id="2298893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2298901" id="2298901" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5524.html" id="ALSA-2024:5524" type="self" title="ALSA-2024:5524"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="bind-lite-devel" version="9.11.36" release="16.el8_10.2" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.2.src.rpm">
          <filename>bind-lite-devel-9.11.36-16.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">07195da3cd20ed22f405ed13dfa9cbafeffb3a2839572d39857c026b5d183cc4</sum>
        </package>
        <package name="python3-bind" version="9.11.36" release="16.el8_10.2" epoch="32" arch="noarch" src="bind-9.11.36-16.el8_10.2.src.rpm">
          <filename>python3-bind-9.11.36-16.el8_10.2.noarch.rpm</filename>
          <sum type="sha256">26b3ced74ad41c787dcf8eee2ac6cd0c9a1a010777dd00fa8c8cd99c19816b41</sum>
        </package>
        <package name="bind-sdb" version="9.11.36" release="16.el8_10.2" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.2.src.rpm">
          <filename>bind-sdb-9.11.36-16.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">31b5dfe1bbdd17e14f88d3b5ea818a6da85b13f7afb4212078db5352c0b6d0b5</sum>
        </package>
        <package name="bind" version="9.11.36" release="16.el8_10.2" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.2.src.rpm">
          <filename>bind-9.11.36-16.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">34aa66e181cdc3dfaf502a7a8c8952f819eb4252a69cb65a3030d92de2c6490e</sum>
        </package>
        <package name="bind-utils" version="9.11.36" release="16.el8_10.2" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.2.src.rpm">
          <filename>bind-utils-9.11.36-16.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">3835e9c56a53c32c4242a0d7afafabba9b5436eb511f63a4a825825e8736fd19</sum>
        </package>
        <package name="bind-sdb-chroot" version="9.11.36" release="16.el8_10.2" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.2.src.rpm">
          <filename>bind-sdb-chroot-9.11.36-16.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">3af7ad66fb11d99a233765270d200fd8223258534ef7a9ff06163fff66361c7c</sum>
        </package>
        <package name="bind-libs" version="9.11.36" release="16.el8_10.2" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.2.src.rpm">
          <filename>bind-libs-9.11.36-16.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">4399391db9f2287e036e2417e871e20804377699f5a7cc44a20d7f7dc2a37dfb</sum>
        </package>
        <package name="bind-libs-lite" version="9.11.36" release="16.el8_10.2" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.2.src.rpm">
          <filename>bind-libs-lite-9.11.36-16.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">507004a180ef58e283dcec0f0926d36229c2a5ebd18826c28d5c5bf2add77793</sum>
        </package>
        <package name="bind-devel" version="9.11.36" release="16.el8_10.2" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.2.src.rpm">
          <filename>bind-devel-9.11.36-16.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">6e13d46ac3c4bb81c4aa20da3d6d59e4ae95a7e3c706c2f5d9bbe8c5bb911a2c</sum>
        </package>
        <package name="bind-pkcs11" version="9.11.36" release="16.el8_10.2" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.2.src.rpm">
          <filename>bind-pkcs11-9.11.36-16.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">7543e776d9d503e267a28146edc4d2cf6a4e35bca9463a3557621fc25f31ad1a</sum>
        </package>
        <package name="bind-pkcs11-libs" version="9.11.36" release="16.el8_10.2" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.2.src.rpm">
          <filename>bind-pkcs11-libs-9.11.36-16.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">80eb4344dfc825cad9f1755bb8143c2534cbe659abd1b3915554220fdef9a7aa</sum>
        </package>
        <package name="bind-license" version="9.11.36" release="16.el8_10.2" epoch="32" arch="noarch" src="bind-9.11.36-16.el8_10.2.src.rpm">
          <filename>bind-license-9.11.36-16.el8_10.2.noarch.rpm</filename>
          <sum type="sha256">9688fcc86bc9a7bb6aee8b71a9768aaf9bd6de2585d89c9a5d1baba552c99e50</sum>
        </package>
        <package name="bind-pkcs11-devel" version="9.11.36" release="16.el8_10.2" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.2.src.rpm">
          <filename>bind-pkcs11-devel-9.11.36-16.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">e6fe2d2928703522d1d79b9507e00525ec99fc7a56dff243f911f110d27abdb3</sum>
        </package>
        <package name="bind-chroot" version="9.11.36" release="16.el8_10.2" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.2.src.rpm">
          <filename>bind-chroot-9.11.36-16.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">f6b182adc66cf6d0981e49d064e9751b8b9a06d212b0124fe8fa06f813f0e2ce</sum>
        </package>
        <package name="bind-pkcs11-utils" version="9.11.36" release="16.el8_10.2" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.2.src.rpm">
          <filename>bind-pkcs11-utils-9.11.36-16.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">fbafea9c7ae8c694bb0ced29a91a3bc93a6f287a8dc5c0cd1a57f0c36847e1e6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5531</id>
    <title>Important: python3.12-setuptools security update</title>
    <issued date="2024-08-19 00:00:00"/>
    <updated date="2024-08-21 12:36:59"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12-setuptools security update</summary>
    <description>Setuptools is a collection of enhancements to the Python 3 distutils that allow you to more easily build and distribute Python 3 packages, especially ones that have dependencies on other packages.  This package also contains the runtime components of setuptools, necessary to execute the software that requires pkg_resources.

Security Fix(es):

* pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5531" id="RHSA-2024:5531" type="rhsa" title="RHSA-2024:5531"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6345" id="CVE-2024-6345" type="cve" title="CVE-2024-6345"/>
      <reference href="https://bugzilla.redhat.com/2297771" id="2297771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5531.html" id="ALSA-2024:5531" type="self" title="ALSA-2024:5531"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.12-setuptools" version="68.2.2" release="4.el8_10" epoch="0" arch="noarch" src="python3.12-setuptools-68.2.2-4.el8_10.src.rpm">
          <filename>python3.12-setuptools-68.2.2-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">a11f5cbedf4187bed34a180e46a1ccfda34c250e83104b1a4bcf564d81a83139</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5532</id>
    <title>Important: python3.11-setuptools security update</title>
    <issued date="2024-08-19 00:00:00"/>
    <updated date="2024-08-21 12:38:58"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11-setuptools security update</summary>
    <description>Setuptools is a collection of enhancements to the Python 3 distutils that allow you to more easily build and distribute Python 3 packages, especially ones that have dependencies on other packages.  This package also contains the runtime components of setuptools, necessary to execute the software that requires pkg_resources.

Security Fix(es):

* pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5532" id="RHSA-2024:5532" type="rhsa" title="RHSA-2024:5532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6345" id="CVE-2024-6345" type="cve" title="CVE-2024-6345"/>
      <reference href="https://bugzilla.redhat.com/2297771" id="2297771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5532.html" id="ALSA-2024:5532" type="self" title="ALSA-2024:5532"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.11-setuptools" version="65.5.1" release="3.el8_10" epoch="0" arch="noarch" src="python3.11-setuptools-65.5.1-3.el8_10.src.rpm">
          <filename>python3.11-setuptools-65.5.1-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">11eff0251416567b1e5647fd5168ab28590e64d3d020ec6896beb22208d2d3a5</sum>
        </package>
        <package name="python3.11-setuptools-wheel" version="65.5.1" release="3.el8_10" epoch="0" arch="noarch" src="python3.11-setuptools-65.5.1-3.el8_10.src.rpm">
          <filename>python3.11-setuptools-wheel-65.5.1-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">66b58ab7ca8cc6f52c700113379aebb6e91fb33a9d368279a6e0597e4505406e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5598</id>
    <title>Moderate: libreoffice security update</title>
    <issued date="2024-08-20 00:00:00"/>
    <updated date="2024-08-21 13:11:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libreoffice security update</summary>
    <description>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.

Security Fix(es):

* libreoffice: bility to trust not validated macro signatures removed in high security mode (CVE-2024-6472)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5598" id="RHSA-2024:5598" type="rhsa" title="RHSA-2024:5598"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6472" id="CVE-2024-6472" type="cve" title="CVE-2024-6472"/>
      <reference href="https://bugzilla.redhat.com/2302866" id="2302866" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5598.html" id="ALSA-2024:5598" type="self" title="ALSA-2024:5598"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="autocorr-fr" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-fr-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">13f919ff84ec8a4802afbe8ed947660515b6caef086a8d64164aee36073691e4</sum>
        </package>
        <package name="libreoffice-graphicfilter" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>libreoffice-graphicfilter-6.4.7.2-18.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">1a6f9d9b9b4dda9e08c6d2ad458b599153ff3243b3836f97694ff08c87715c74</sum>
        </package>
        <package name="autocorr-lb" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-lb-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">1b66a19ed0980eed3b5e3ccebef2b794bfdb62deb71477f135db94be38bf2af5</sum>
        </package>
        <package name="autocorr-es" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-es-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">249efe54c9771175486d4989f7bbb0879b55f1b096c09f492e345ffef2bf039b</sum>
        </package>
        <package name="libreoffice-impress" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>libreoffice-impress-6.4.7.2-18.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">26a34de2f157599e0bcb50017290ff543ed1ae311b6e3a05e2a7e20b484c6456</sum>
        </package>
        <package name="autocorr-ja" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-ja-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">2fd9b2cedfb1bcd9bdd3b8ac67fcd2db3fde9fbc7b6a2f8ee9a5f1b51b6daa4e</sum>
        </package>
        <package name="autocorr-tr" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-tr-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">399d7f9f33f83219f60c3d67fc979cb4121a42770d7048320a347b4d80d8432c</sum>
        </package>
        <package name="autocorr-cs" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-cs-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">3d12ff53ccc4a3342b1ba9a6194be4f1248e03e3fdf24918aa65c57e6223d276</sum>
        </package>
        <package name="autocorr-hu" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-hu-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">42d299ac2b43e73f9c575d1bcf376e6315cb67f9f7d9e80aab315e30a842ec95</sum>
        </package>
        <package name="autocorr-vi" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-vi-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">4a1f041d06e7aa2d3fb05fcc68d44eecf8d893dd99ce1ff42b6709d10b8ba068</sum>
        </package>
        <package name="libreoffice-ure-common" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>libreoffice-ure-common-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">4e8d860e1808b656d863f13d9513acdb4835c467805bf23cf597b7771f7a1a21</sum>
        </package>
        <package name="autocorr-ga" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-ga-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">52ec9c57b4813200c89c98c6ebd80b50814645f7d3a35a457ea403c7c758ed39</sum>
        </package>
        <package name="libreoffice-help-en" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>libreoffice-help-en-6.4.7.2-18.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">53f4f7b87623746caa1560e5c88c68bc3604204f83d36c03422281858debb63d</sum>
        </package>
        <package name="autocorr-ca" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-ca-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">66eff3a096132f7bf932b0b1795401b1b7d940efa51c0dda524048c778c0ef6c</sum>
        </package>
        <package name="libreoffice-ogltrans" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>libreoffice-ogltrans-6.4.7.2-18.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">6c1116376d91f3afe5907210ef1bb6640713de4d6665bfaa360c7dafe2b54a66</sum>
        </package>
        <package name="autocorr-pl" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-pl-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">7a1b2311e54e23c004fb094feb29f33637eaed2131a82e1228526b8ab9b8b39f</sum>
        </package>
        <package name="autocorr-en" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-en-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">7aa174272cd8b1c66b6a4efe02053c6529bbd02368d7162a64571030198d2708</sum>
        </package>
        <package name="autocorr-lt" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-lt-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">7bdf6976b6f8c9cde1dbbdc9dbe19cd172114269d63ebcb0fe8950ac0ef9493e</sum>
        </package>
        <package name="autocorr-sr" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-sr-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">7c1109911ce7ecc698b0489a53dee625a5e06b705a2de74ea773536383e1b595</sum>
        </package>
        <package name="libreoffice-data" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>libreoffice-data-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">80d93c5df9f995aedffd7c09ad16fbf2bd0725e813620f5313f962ae2565e10c</sum>
        </package>
        <package name="autocorr-hr" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-hr-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">83b5a3113ef1c18146432226d51df6bf39e39b67747f65020c47902ac5c155de</sum>
        </package>
        <package name="autocorr-mn" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-mn-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">89ebf8b6ef2bcfdad8a43a28e1ef08e9846851470d25a05cda66123a97d3533b</sum>
        </package>
        <package name="autocorr-af" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-af-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">8de7e97a22dca0631108290b9bd90f45c32ee3ecb70d5cf8d8827eb4977537ea</sum>
        </package>
        <package name="autocorr-da" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-da-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">97a4079d1716382745ef77a45d94d761a7fbf6080bc7afec25507a529cb5fcad</sum>
        </package>
        <package name="autocorr-sl" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-sl-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">994b1aa1aa204ba5c0a3dcfce4b3ae2487fbd64f7f1b29f70ed9510491cf4780</sum>
        </package>
        <package name="autocorr-pt" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-pt-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">9adc385d4d0b430fa7178697185ef569ea4d5129cadc03593fc111398cbc8850</sum>
        </package>
        <package name="libreoffice-calc" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>libreoffice-calc-6.4.7.2-18.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">a09249290efa0113c4702b503593791162e6e9ca70da6bf7f0a4e4dada133064</sum>
        </package>
        <package name="autocorr-sk" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-sk-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">a15e8c5f28159214df00cd398966480ee66940610d272be5559d064fd37880f8</sum>
        </package>
        <package name="libreoffice-core" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>libreoffice-core-6.4.7.2-18.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">aec8f242823145abbfe510a925ad0ed39efc78b2c6db1dfc83a1162fba983922</sum>
        </package>
        <package name="libreoffice-ure" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>libreoffice-ure-6.4.7.2-18.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">b5adb51aa1c8507558b580c4de738049977b86ceec3699f9e57dcdc3999e8ade</sum>
        </package>
        <package name="autocorr-sv" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-sv-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">c256fd5f2af12a78d1273c6607759b08040e23738af7b5f842b5b57fce773e58</sum>
        </package>
        <package name="autocorr-it" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-it-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">c7dc9b1566c01e9c014067512ed729f744c2a024cd766cf6e941fd12534170e4</sum>
        </package>
        <package name="autocorr-bg" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-bg-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">c8493f842adcbb5c5cc9ef5cf674388e5eece9739a2a2f444372709a43c44f75</sum>
        </package>
        <package name="libreoffice-writer" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>libreoffice-writer-6.4.7.2-18.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">cc57d1bcb2343e5ce9af668548c9307e5aa8480f7c328c155cfb9bb811dbd701</sum>
        </package>
        <package name="libreoffice-langpack-en" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>libreoffice-langpack-en-6.4.7.2-18.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">cc67f63966bfea1ab14549b0bcb7f2c7fcc1da4b5649ed1f08aadc386effb147</sum>
        </package>
        <package name="autocorr-fi" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-fi-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">cfcb28334eeef97e79a48c98943ba92a9c45bbf1af68ec4614395c57199d27b3</sum>
        </package>
        <package name="libreoffice-pyuno" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>libreoffice-pyuno-6.4.7.2-18.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">d5b3866f3a62d29e24e4764b6e45f02e4016b7a5329bd39949f13bf5eb5561c2</sum>
        </package>
        <package name="autocorr-fa" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-fa-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">d72a798c59b3684a5b4776bb8aa4dcd37e30d1efa1c0ba51b864995a6bcedd9b</sum>
        </package>
        <package name="autocorr-ru" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-ru-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">d7a320335625e39f8520ea0aa552fc0fd00b03ec7f75a2c9461152c194271988</sum>
        </package>
        <package name="libreoffice-pdfimport" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>libreoffice-pdfimport-6.4.7.2-18.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">e02a10a3a17cdf382b081d1f066dd1b744c5acdf2cdcf0f6490f5151189acda7</sum>
        </package>
        <package name="libreoffice-opensymbol-fonts" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>libreoffice-opensymbol-fonts-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">e4803696acdec5780c041426dddff816fc7d6409ae3b8bef79e8107da2b80b20</sum>
        </package>
        <package name="autocorr-ko" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-ko-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">e63f62ba01833af39928c48dd77f727aede285b301bbed20886d0ae75c6b2639</sum>
        </package>
        <package name="autocorr-nl" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-nl-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">e81412bae11c6f9f74a6558cb2e126bab52b32f3210429ede86995d22c703ca6</sum>
        </package>
        <package name="autocorr-zh" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-zh-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">ebf0b1119594742a794ea02937550d17d060c585e4ddac069fbd22596bfbe63d</sum>
        </package>
        <package name="autocorr-de" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-de-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">ef55307cd7574958352497c2a0fbaca937b801eb1ddb09dd9a343771c154a6ed</sum>
        </package>
        <package name="autocorr-is" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-is-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">f3a8daaf8e4d2ac90f26eecac45c06bb8583f1b24308ee14daf0e97aa0a3f5ef</sum>
        </package>
        <package name="autocorr-ro" version="6.4.7.2" release="18.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-18.el8_10.alma.1.src.rpm">
          <filename>autocorr-ro-6.4.7.2-18.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">f635e42ee87341e35b079a6936c92b3a9e2a2129f4e824066f0f3608d10ae29f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5694</id>
    <title>Important: tomcat security update</title>
    <issued date="2024-08-21 00:00:00"/>
    <updated date="2024-08-21 13:21:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tomcat security update</summary>
    <description>Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.

Security Fix(es):

* tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5694" id="RHSA-2024:5694" type="rhsa" title="RHSA-2024:5694"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34750" id="CVE-2024-34750" type="cve" title="CVE-2024-34750"/>
      <reference href="https://bugzilla.redhat.com/2295651" id="2295651" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5694.html" id="ALSA-2024:5694" type="self" title="ALSA-2024:5694"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="tomcat" version="9.0.87" release="1.el8_10.2" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.2.src.rpm">
          <filename>tomcat-9.0.87-1.el8_10.2.noarch.rpm</filename>
          <sum type="sha256">088f3d951190c43a20c26bf0fd0e771e663dda5caa27069b0387d3807fc2b7b1</sum>
        </package>
        <package name="tomcat-el-3.0-api" version="9.0.87" release="1.el8_10.2" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.2.src.rpm">
          <filename>tomcat-el-3.0-api-9.0.87-1.el8_10.2.noarch.rpm</filename>
          <sum type="sha256">4423ad61dfd65d3748d0a9e87ac87c060bb485984303fd759ac85cabe59f075d</sum>
        </package>
        <package name="tomcat-webapps" version="9.0.87" release="1.el8_10.2" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.2.src.rpm">
          <filename>tomcat-webapps-9.0.87-1.el8_10.2.noarch.rpm</filename>
          <sum type="sha256">47c1130d686f20e3a5d734e6d1bbda40037c52ee8f3c4a802148cac73ab120e1</sum>
        </package>
        <package name="tomcat-docs-webapp" version="9.0.87" release="1.el8_10.2" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.2.src.rpm">
          <filename>tomcat-docs-webapp-9.0.87-1.el8_10.2.noarch.rpm</filename>
          <sum type="sha256">73a70d18cfc63b84e22a8bfefbe1953050033fcfa5cb97067bd9be2cab9f477b</sum>
        </package>
        <package name="tomcat-jsp-2.3-api" version="9.0.87" release="1.el8_10.2" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.2.src.rpm">
          <filename>tomcat-jsp-2.3-api-9.0.87-1.el8_10.2.noarch.rpm</filename>
          <sum type="sha256">7e6687309eba50c6cd340d8fbc43e2526ed16107e6c3f7e20784e544deeff59e</sum>
        </package>
        <package name="tomcat-servlet-4.0-api" version="9.0.87" release="1.el8_10.2" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.2.src.rpm">
          <filename>tomcat-servlet-4.0-api-9.0.87-1.el8_10.2.noarch.rpm</filename>
          <sum type="sha256">8403f65eded173fc2553195fb36a1c78bb061447abfaf5cc61a68404ca1eb2d9</sum>
        </package>
        <package name="tomcat-admin-webapps" version="9.0.87" release="1.el8_10.2" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.2.src.rpm">
          <filename>tomcat-admin-webapps-9.0.87-1.el8_10.2.noarch.rpm</filename>
          <sum type="sha256">db6fa93a90de8aa30752a4e6ebd44eb7fdcd48e3373926419044e7fd046da85c</sum>
        </package>
        <package name="tomcat-lib" version="9.0.87" release="1.el8_10.2" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.2.src.rpm">
          <filename>tomcat-lib-9.0.87-1.el8_10.2.noarch.rpm</filename>
          <sum type="sha256">e6d642a0315d40504a384351f05db6131c25c6363b5dd806d7a239b0b776513a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5814</id>
    <title>Moderate: nodejs:20 security update</title>
    <issued date="2024-08-26 00:00:00"/>
    <updated date="2024-08-26 18:53:15"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs:20 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

Security Fix(es):

* node-tar: denial of service while parsing a tar file due to lack of folders depth validation (CVE-2024-28863)
* nodejs: Bypass network import restriction via data URL (CVE-2024-22020)
* nodejs: fs.lstat bypasses permission model (CVE-2024-22018)
* nodejs: fs.fchown/fchmod bypasses permission model (CVE-2024-36137)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5814" id="RHSA-2024:5814" type="rhsa" title="RHSA-2024:5814"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22018" id="CVE-2024-22018" type="cve" title="CVE-2024-22018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22020" id="CVE-2024-22020" type="cve" title="CVE-2024-22020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28863" id="CVE-2024-28863" type="cve" title="CVE-2024-28863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36137" id="CVE-2024-36137" type="cve" title="CVE-2024-36137"/>
      <reference href="https://bugzilla.redhat.com/2293200" id="2293200" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2296417" id="2296417" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2296990" id="2296990" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2299281" id="2299281" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5814.html" id="ALSA-2024:5814" type="self" title="ALSA-2024:5814"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="nodejs" stream="20" version="8100020240826131644" context="9edba152" arch="s390x"/>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el8.9.0+3775+d8460d35" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.9.0+3775+d8460d35.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el8.9.0+3775+d8460d35.noarch.rpm</filename>
          <sum type="sha256">333e36e8c51dc591d2757dbd45974e0565aa60a9e3bbe163fb72336963e2337d</sum>
        </package>
        <package name="nodejs-devel" version="20.16.0" release="1.module_el8.10.0+3882+e12e42db" epoch="1" arch="s390x" src="nodejs-20.16.0-1.module_el8.10.0+3882+e12e42db.src.rpm">
          <filename>nodejs-devel-20.16.0-1.module_el8.10.0+3882+e12e42db.s390x.rpm</filename>
          <sum type="sha256">5bcb373eb7aa196bdb4d30c4abec3c60637f2caece5afdc9e902f2924930c20d</sum>
        </package>
        <package name="npm" version="10.8.1" release="1.20.16.0.1.module_el8.10.0+3882+e12e42db" epoch="1" arch="s390x" src="nodejs-20.16.0-1.module_el8.10.0+3882+e12e42db.src.rpm">
          <filename>npm-10.8.1-1.20.16.0.1.module_el8.10.0+3882+e12e42db.s390x.rpm</filename>
          <sum type="sha256">6ac993687e76daba24592f9d6048026f828d56d0cbff305be78f5c45d439457c</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el8.9.0+3775+d8460d35" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.9.0+3775+d8460d35.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el8.9.0+3775+d8460d35.noarch.rpm</filename>
          <sum type="sha256">7c7586553a465705e48a39065046db3c58e2ad24248d905a05639b804e463a77</sum>
        </package>
        <package name="nodejs-docs" version="20.16.0" release="1.module_el8.10.0+3882+e12e42db" epoch="1" arch="noarch" src="nodejs-20.16.0-1.module_el8.10.0+3882+e12e42db.src.rpm">
          <filename>nodejs-docs-20.16.0-1.module_el8.10.0+3882+e12e42db.noarch.rpm</filename>
          <sum type="sha256">7d8336bfe35f4a42b2501b51495196c8c8d8dc8eb1032bc8cd10cfc04fe21797</sum>
        </package>
        <package name="nodejs" version="20.16.0" release="1.module_el8.10.0+3882+e12e42db" epoch="1" arch="s390x" src="nodejs-20.16.0-1.module_el8.10.0+3882+e12e42db.src.rpm">
          <filename>nodejs-20.16.0-1.module_el8.10.0+3882+e12e42db.s390x.rpm</filename>
          <sum type="sha256">7db0000973ef0e8fbc147ba2c8eee69158da5766b0f78c0f94b05ca38682d6b9</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.9.0+3731+490e3ce5" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.9.0+3731+490e3ce5.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.9.0+3731+490e3ce5.noarch.rpm</filename>
          <sum type="sha256">8aef59eb02816fbfcc43df6a4074cc51485b810317c50f44739b0798ac8065de</sum>
        </package>
        <package name="nodejs-full-i18n" version="20.16.0" release="1.module_el8.10.0+3882+e12e42db" epoch="1" arch="s390x" src="nodejs-20.16.0-1.module_el8.10.0+3882+e12e42db.src.rpm">
          <filename>nodejs-full-i18n-20.16.0-1.module_el8.10.0+3882+e12e42db.s390x.rpm</filename>
          <sum type="sha256">9f026f133c5ce66298b047151e96c926e46b8fd0777b90d46c219d9b4b135ada</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5927</id>
    <title>Important: postgresql:16 security update</title>
    <issued date="2024-08-28 00:00:00"/>
    <updated date="2024-08-30 12:36:27"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:16 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checks (CVE-2024-4317)
* postgresql: PostgreSQL relation replacement during pg_dump executes arbitrary SQL (CVE-2024-7348)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5927" id="RHSA-2024:5927" type="rhsa" title="RHSA-2024:5927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4317" id="CVE-2024-4317" type="cve" title="CVE-2024-4317"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7348" id="CVE-2024-7348" type="cve" title="CVE-2024-7348"/>
      <reference href="https://bugzilla.redhat.com/2279935" id="2279935" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303682" id="2303682" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5927.html" id="ALSA-2024:5927" type="self" title="ALSA-2024:5927"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="16" version="8100020240828123336" context="9edba152" arch="s390x"/>
        <package name="postgresql-test" version="16.4" release="1.module_el8.10.0+3884+a79fbae6" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el8.10.0+3884+a79fbae6.src.rpm">
          <filename>postgresql-test-16.4-1.module_el8.10.0+3884+a79fbae6.s390x.rpm</filename>
          <sum type="sha256">0ee3066ff8b5d5f8d56a9c824758d9b009210c025d1cda4c4daa8a4339a4644c</sum>
        </package>
        <package name="postgresql" version="16.4" release="1.module_el8.10.0+3884+a79fbae6" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el8.10.0+3884+a79fbae6.src.rpm">
          <filename>postgresql-16.4-1.module_el8.10.0+3884+a79fbae6.s390x.rpm</filename>
          <sum type="sha256">23b8a2d8b8f461b1d3f864d79e1d272d2c8d0db23fea80eab1339d32e49c886d</sum>
        </package>
        <package name="pg_repack" version="1.4.8" release="1.module_el8.10.0+3798+606ebb9f" epoch="0" arch="s390x" src="pg_repack-1.4.8-1.module_el8.10.0+3798+606ebb9f.src.rpm">
          <filename>pg_repack-1.4.8-1.module_el8.10.0+3798+606ebb9f.s390x.rpm</filename>
          <sum type="sha256">403fce9258b6a37fc992bfee55b91b0c759580a8c9fe8ae5dd2e71f610189a24</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="16.4" release="1.module_el8.10.0+3884+a79fbae6" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el8.10.0+3884+a79fbae6.src.rpm">
          <filename>postgresql-upgrade-devel-16.4-1.module_el8.10.0+3884+a79fbae6.s390x.rpm</filename>
          <sum type="sha256">4447721694594b1fd2306c8e47d26ae723f4e793d27aa17991103f41d1efe366</sum>
        </package>
        <package name="postgresql-plpython3" version="16.4" release="1.module_el8.10.0+3884+a79fbae6" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el8.10.0+3884+a79fbae6.src.rpm">
          <filename>postgresql-plpython3-16.4-1.module_el8.10.0+3884+a79fbae6.s390x.rpm</filename>
          <sum type="sha256">4f57abc4195ce200f31dfc33f776e0f9f37c6929dba432b470878797c9ad79bb</sum>
        </package>
        <package name="postgresql-docs" version="16.4" release="1.module_el8.10.0+3884+a79fbae6" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el8.10.0+3884+a79fbae6.src.rpm">
          <filename>postgresql-docs-16.4-1.module_el8.10.0+3884+a79fbae6.s390x.rpm</filename>
          <sum type="sha256">5bbd5199217c2f839fb4b1056b43ded464076294d373a8f232aaca856afeb1b3</sum>
        </package>
        <package name="postgresql-private-libs" version="16.4" release="1.module_el8.10.0+3884+a79fbae6" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el8.10.0+3884+a79fbae6.src.rpm">
          <filename>postgresql-private-libs-16.4-1.module_el8.10.0+3884+a79fbae6.s390x.rpm</filename>
          <sum type="sha256">65ca19c7495108732e794baa5c2738934534bbd0e6b36f27fa615d7f9fcff42d</sum>
        </package>
        <package name="postgresql-plperl" version="16.4" release="1.module_el8.10.0+3884+a79fbae6" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el8.10.0+3884+a79fbae6.src.rpm">
          <filename>postgresql-plperl-16.4-1.module_el8.10.0+3884+a79fbae6.s390x.rpm</filename>
          <sum type="sha256">a727f2aba10d286ed9917976aecc4d3ba319f3863298a219ad1c51d1f0674d55</sum>
        </package>
        <package name="postgres-decoderbufs" version="2.4.0" release="1.Final.module_el8.10.0+3798+606ebb9f" epoch="0" arch="s390x" src="postgres-decoderbufs-2.4.0-1.Final.module_el8.10.0+3798+606ebb9f.src.rpm">
          <filename>postgres-decoderbufs-2.4.0-1.Final.module_el8.10.0+3798+606ebb9f.s390x.rpm</filename>
          <sum type="sha256">b4ab4ce80d621ce9e80cef82edec35ef1ab32c9448d690e668db0bb17bd1a90a</sum>
        </package>
        <package name="postgresql-pltcl" version="16.4" release="1.module_el8.10.0+3884+a79fbae6" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el8.10.0+3884+a79fbae6.src.rpm">
          <filename>postgresql-pltcl-16.4-1.module_el8.10.0+3884+a79fbae6.s390x.rpm</filename>
          <sum type="sha256">b93066070f4c3fe38558de0920ba0aae49dd3b42a57aa8355cdc9724435df83a</sum>
        </package>
        <package name="postgresql-contrib" version="16.4" release="1.module_el8.10.0+3884+a79fbae6" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el8.10.0+3884+a79fbae6.src.rpm">
          <filename>postgresql-contrib-16.4-1.module_el8.10.0+3884+a79fbae6.s390x.rpm</filename>
          <sum type="sha256">c9fb74e6bcdd346dee18c878bd0bcd402a635609fc27f4c50330402cd4af1a9c</sum>
        </package>
        <package name="postgresql-private-devel" version="16.4" release="1.module_el8.10.0+3884+a79fbae6" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el8.10.0+3884+a79fbae6.src.rpm">
          <filename>postgresql-private-devel-16.4-1.module_el8.10.0+3884+a79fbae6.s390x.rpm</filename>
          <sum type="sha256">d35be604b4dae54e4439de299f5ec5e83bec92c86bd30728adf433f707eb1129</sum>
        </package>
        <package name="postgresql-upgrade" version="16.4" release="1.module_el8.10.0+3884+a79fbae6" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el8.10.0+3884+a79fbae6.src.rpm">
          <filename>postgresql-upgrade-16.4-1.module_el8.10.0+3884+a79fbae6.s390x.rpm</filename>
          <sum type="sha256">dca24b705ca0bacaf9ef906e4aae906b0bc9e63b033627932113137071aed931</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="16.4" release="1.module_el8.10.0+3884+a79fbae6" epoch="0" arch="noarch" src="postgresql-16.4-1.module_el8.10.0+3884+a79fbae6.src.rpm">
          <filename>postgresql-test-rpm-macros-16.4-1.module_el8.10.0+3884+a79fbae6.noarch.rpm</filename>
          <sum type="sha256">de1f4d5d0aa29a4d3beec7fa9a07f6ec8879b3ff36d54da2a53ab877d2df2334</sum>
        </package>
        <package name="pgaudit" version="16.0" release="1.module_el8.10.0+3798+606ebb9f" epoch="0" arch="s390x" src="pgaudit-16.0-1.module_el8.10.0+3798+606ebb9f.src.rpm">
          <filename>pgaudit-16.0-1.module_el8.10.0+3798+606ebb9f.s390x.rpm</filename>
          <sum type="sha256">e1395e420ef0b455c809e9fbbc50b5a27410be72d91603805a4907b86ca95cce</sum>
        </package>
        <package name="postgresql-server-devel" version="16.4" release="1.module_el8.10.0+3884+a79fbae6" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el8.10.0+3884+a79fbae6.src.rpm">
          <filename>postgresql-server-devel-16.4-1.module_el8.10.0+3884+a79fbae6.s390x.rpm</filename>
          <sum type="sha256">ebcd12f532c21e40d120e48c6083d4ab6341f841a193cd077dc5b54b7d4bc4bf</sum>
        </package>
        <package name="postgresql-static" version="16.4" release="1.module_el8.10.0+3884+a79fbae6" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el8.10.0+3884+a79fbae6.src.rpm">
          <filename>postgresql-static-16.4-1.module_el8.10.0+3884+a79fbae6.s390x.rpm</filename>
          <sum type="sha256">f585689d98da69a29c9ccd31712b5df00119ca964046259c8d5cd0ba8224ca1e</sum>
        </package>
        <package name="postgresql-server" version="16.4" release="1.module_el8.10.0+3884+a79fbae6" epoch="0" arch="s390x" src="postgresql-16.4-1.module_el8.10.0+3884+a79fbae6.src.rpm">
          <filename>postgresql-server-16.4-1.module_el8.10.0+3884+a79fbae6.s390x.rpm</filename>
          <sum type="sha256">fcfd557c3d90e73116d44e3ee64a0eb5287b7c9ad2774bbe44d40beac5ee5d93</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5941</id>
    <title>Moderate: libvpx security update</title>
    <issued date="2024-08-28 00:00:00"/>
    <updated date="2024-08-29 08:25:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvpx security update</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

* libvpx: Heap buffer overflow related to VP9 encoding (CVE-2023-6349)
* libvpx: Integer overflow in vpx_img_alloc() (CVE-2024-5197)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5941" id="RHSA-2024:5941" type="rhsa" title="RHSA-2024:5941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6349" id="CVE-2023-6349" type="cve" title="CVE-2023-6349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5197" id="CVE-2024-5197" type="cve" title="CVE-2024-5197"/>
      <reference href="https://bugzilla.redhat.com/2283553" id="2283553" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291198" id="2291198" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5941.html" id="ALSA-2024:5941" type="self" title="ALSA-2024:5941"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libvpx" version="1.7.0" release="11.el8_10" epoch="0" arch="s390x" src="libvpx-1.7.0-11.el8_10.src.rpm">
          <filename>libvpx-1.7.0-11.el8_10.s390x.rpm</filename>
          <sum type="sha256">632c071259c5ae83dce785c73c329656700b732c6f769c09bdf66b9614a1f4fb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5962</id>
    <title>Moderate: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2024-08-28 00:00:00"/>
    <updated date="2024-08-29 08:29:11"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)
* pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)
* cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923)
* python: cpython: From NVD collector (CVE-2024-8088)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5962" id="RHSA-2024:5962" type="rhsa" title="RHSA-2024:5962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4032" id="CVE-2024-4032" type="cve" title="CVE-2024-4032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6345" id="CVE-2024-6345" type="cve" title="CVE-2024-6345"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6923" id="CVE-2024-6923" type="cve" title="CVE-2024-6923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8088" id="CVE-2024-8088" type="cve" title="CVE-2024-8088"/>
      <reference href="https://bugzilla.redhat.com/2292921" id="2292921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297771" id="2297771" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302255" id="2302255" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2307370" id="2307370" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5962.html" id="ALSA-2024:5962" type="self" title="ALSA-2024:5962"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="python39" stream="3.9" version="8100020240828192834" context="0a5380d9" arch="s390x"/>
        <package name="python39-psycopg2-tests" version="2.8.6" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-psycopg2-tests-2.8.6-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">05d2693d2fda223ef60e5133f0ea03da31cbd0047d13a3bd8f677c4042064ec4</sum>
        </package>
        <package name="python39-test" version="3.9.19" release="7.module_el8.10.0+3885+d986a391" epoch="0" arch="s390x" src="python39-3.9.19-7.module_el8.10.0+3885+d986a391.src.rpm">
          <filename>python39-test-3.9.19-7.module_el8.10.0+3885+d986a391.s390x.rpm</filename>
          <sum type="sha256">0f40578f0fb3cf0633fefbf2780569cf442175d5448cffc3763c8fbe29650070</sum>
        </package>
        <package name="python39-libs" version="3.9.19" release="7.module_el8.10.0+3885+d986a391" epoch="0" arch="s390x" src="python39-3.9.19-7.module_el8.10.0+3885+d986a391.src.rpm">
          <filename>python39-libs-3.9.19-7.module_el8.10.0+3885+d986a391.s390x.rpm</filename>
          <sum type="sha256">1b92f364f1381e31a9926dc36108f6e46ab09bbc84ea29e1d937928ab6ee12cc</sum>
        </package>
        <package name="python39-pip" version="20.2.4" release="9.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python3x-pip-20.2.4-9.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-pip-20.2.4-9.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">1cddc6a728150b59b88dadd96ccc569c7bb77f8952761eca587d684b1a9d53dc</sum>
        </package>
        <package name="python39-tkinter" version="3.9.19" release="7.module_el8.10.0+3885+d986a391" epoch="0" arch="s390x" src="python39-3.9.19-7.module_el8.10.0+3885+d986a391.src.rpm">
          <filename>python39-tkinter-3.9.19-7.module_el8.10.0+3885+d986a391.s390x.rpm</filename>
          <sum type="sha256">22579290d013a1132726c51a833cf07bf257c0bd21007938edadc855b168460d</sum>
        </package>
        <package name="python39-urllib3" version="1.25.10" release="5.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python-urllib3-1.25.10-5.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-urllib3-1.25.10-5.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">24df140ee4c409e7c015b7d7584ba8aa8df5b95f9ecea9b457ce9ea0f3c68d98</sum>
        </package>
        <package name="python39-pip-wheel" version="20.2.4" release="9.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python3x-pip-20.2.4-9.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-pip-wheel-20.2.4-9.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">2a77862adcd93af6aa76bbbf2467fbd468eef1d9d6265d21cb2316e69d48cae1</sum>
        </package>
        <package name="python39-idna" version="2.10" release="4.module_el8.10.0+3849+a48d89aa" epoch="0" arch="noarch" src="python-idna-2.10-4.module_el8.10.0+3849+a48d89aa.src.rpm">
          <filename>python39-idna-2.10-4.module_el8.10.0+3849+a48d89aa.noarch.rpm</filename>
          <sum type="sha256">381f6f79555962d405b57a48952a958cf6f71a88772061ae3a017ad2a49f40c6</sum>
        </package>
        <package name="python39-psycopg2" version="2.8.6" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">3938e67a4a4560730a8004aa6291d4a5162286bd6f68bc00b16e2ed49d466377</sum>
        </package>
        <package name="python39-numpy-f2py" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-f2py-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">56f4a39fc3b7cacfec741e84c3c59e67da9e3b2f122f09e59cac8a8020a4ba7c</sum>
        </package>
        <package name="python39-idle" version="3.9.19" release="7.module_el8.10.0+3885+d986a391" epoch="0" arch="s390x" src="python39-3.9.19-7.module_el8.10.0+3885+d986a391.src.rpm">
          <filename>python39-idle-3.9.19-7.module_el8.10.0+3885+d986a391.s390x.rpm</filename>
          <sum type="sha256">5929894ac87e1f4ba5915624a12ec5281b03ae36e17b046ace23b352c8b97acc</sum>
        </package>
        <package name="python39-psycopg2-doc" version="2.8.6" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-psycopg2-doc-2.8.6-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">5c33f9b35f95710fe82294dc826e72f8a2af5309c9f694687b92f36df933e837</sum>
        </package>
        <package name="python39-scipy" version="1.5.4" release="5.module_el8.9.0+3634+fb2a896c" epoch="0" arch="s390x" src="scipy-1.5.4-5.module_el8.9.0+3634+fb2a896c.src.rpm">
          <filename>python39-scipy-1.5.4-5.module_el8.9.0+3634+fb2a896c.s390x.rpm</filename>
          <sum type="sha256">68206ec5b6bf886e1266c848bf014248b598bea11cce32708352e16fceaa4475</sum>
        </package>
        <package name="python39-setuptools" version="50.3.2" release="6.module_el8.10.0+3885+d986a391" epoch="0" arch="noarch" src="python3x-setuptools-50.3.2-6.module_el8.10.0+3885+d986a391.src.rpm">
          <filename>python39-setuptools-50.3.2-6.module_el8.10.0+3885+d986a391.noarch.rpm</filename>
          <sum type="sha256">715bf17ab3ab070828be20ba0e485b383bacfe6244860a01169d79e309c3aef0</sum>
        </package>
        <package name="python39-devel" version="3.9.19" release="7.module_el8.10.0+3885+d986a391" epoch="0" arch="s390x" src="python39-3.9.19-7.module_el8.10.0+3885+d986a391.src.rpm">
          <filename>python39-devel-3.9.19-7.module_el8.10.0+3885+d986a391.s390x.rpm</filename>
          <sum type="sha256">76a5db3657979ee7f8f020ba986bef16b3d4f8c366cbf80c61cf76eb6f4a0562</sum>
        </package>
        <package name="python39-cryptography" version="3.3.1" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-cryptography-3.3.1-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-cryptography-3.3.1-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">8834a7762b7982546305749c0b8ab5193a8b777110eaddbdbb80e69fdaf6ea8a</sum>
        </package>
        <package name="python39-psutil" version="5.8.0" release="4.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9300840b5b4e742063f5617bc74cc2b05b4f3d5bdcd113ee5b3a9745baf3d0dc</sum>
        </package>
        <package name="python39-numpy" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9ffe33f6e51a25e79b88e45fa5cdca37a3b77d0868fe40e156f615224308810c</sum>
        </package>
        <package name="python39" version="3.9.19" release="7.module_el8.10.0+3885+d986a391" epoch="0" arch="s390x" src="python39-3.9.19-7.module_el8.10.0+3885+d986a391.src.rpm">
          <filename>python39-3.9.19-7.module_el8.10.0+3885+d986a391.s390x.rpm</filename>
          <sum type="sha256">a449c1b981b2b6a044424fd74aa4381fce3ee239bcd5f1be16bb479ced7358d8</sum>
        </package>
        <package name="python39-rpm-macros" version="3.9.19" release="7.module_el8.10.0+3885+d986a391" epoch="0" arch="noarch" src="python39-3.9.19-7.module_el8.10.0+3885+d986a391.src.rpm">
          <filename>python39-rpm-macros-3.9.19-7.module_el8.10.0+3885+d986a391.noarch.rpm</filename>
          <sum type="sha256">cfabfe94432c9bba03e9759ec11798d736ad10916ac23a68d79c9d1e50d291f1</sum>
        </package>
        <package name="python39-requests" version="2.25.0" release="3.module_el8.9.0+3634+fb2a896c" epoch="0" arch="noarch" src="python-requests-2.25.0-3.module_el8.9.0+3634+fb2a896c.src.rpm">
          <filename>python39-requests-2.25.0-3.module_el8.9.0+3634+fb2a896c.noarch.rpm</filename>
          <sum type="sha256">d021b1b5bb6a395348b4764885ec17842861193b8e60c25abcf8e1ad7a047641</sum>
        </package>
        <package name="python39-mod_wsgi" version="4.7.1" release="7.module_el8.9.0+3634+fb2a896c" epoch="0" arch="s390x" src="mod_wsgi-4.7.1-7.module_el8.9.0+3634+fb2a896c.src.rpm">
          <filename>python39-mod_wsgi-4.7.1-7.module_el8.9.0+3634+fb2a896c.s390x.rpm</filename>
          <sum type="sha256">dc14410284d94a7140daaaefd4c18ea74368f0acc6515ea0f2332b7b14b61f38</sum>
        </package>
        <package name="python39-lxml" version="4.6.5" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">dc2ce0990738ea69e2b3641de1886825066554244cf58815971db30e321b56b2</sum>
        </package>
        <package name="python39-cffi" version="1.14.3" release="2.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">ec3acbe8ceecf82559556caacd8c41e2b40e69348f2e6893f0b7598aa36371fd</sum>
        </package>
        <package name="python39-setuptools-wheel" version="50.3.2" release="6.module_el8.10.0+3885+d986a391" epoch="0" arch="noarch" src="python3x-setuptools-50.3.2-6.module_el8.10.0+3885+d986a391.src.rpm">
          <filename>python39-setuptools-wheel-50.3.2-6.module_el8.10.0+3885+d986a391.noarch.rpm</filename>
          <sum type="sha256">f24400c76f23e4e3ce4c36e34154b4d10aeceaf76cbc0f9470f61ebc8bbfdb16</sum>
        </package>
        <package name="python39-pyyaml" version="5.4.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="PyYAML-5.4.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pyyaml-5.4.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">faa90d54ace8329c64942f01e18434bce14edf19cc3a534ae07de7bc301cd27f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6000</id>
    <title>Important: postgresql:12 security update</title>
    <issued date="2024-08-29 00:00:00"/>
    <updated date="2024-08-29 13:46:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:12 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: PostgreSQL relation replacement during pg_dump executes arbitrary SQL (CVE-2024-7348)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6000" id="RHSA-2024:6000" type="rhsa" title="RHSA-2024:6000"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7348" id="CVE-2024-7348" type="cve" title="CVE-2024-7348"/>
      <reference href="https://bugzilla.redhat.com/2303682" id="2303682" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6000.html" id="ALSA-2024:6000" type="self" title="ALSA-2024:6000"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="12" version="8100020240829121050" context="9edba152" arch="s390x"/>
        <package name="pgaudit" version="1.4.0" release="7.module_el8.9.0+3740+0e74851f.alma.1" epoch="0" arch="s390x" src="pgaudit-1.4.0-7.module_el8.9.0+3740+0e74851f.alma.1.src.rpm">
          <filename>pgaudit-1.4.0-7.module_el8.9.0+3740+0e74851f.alma.1.s390x.rpm</filename>
          <sum type="sha256">05a6d09d675776fb9ab998aa9fb52890d6c4ecc40957331844fd2c42f555ebca</sum>
        </package>
        <package name="pg_repack" version="1.4.6" release="3.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="pg_repack-1.4.6-3.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>pg_repack-1.4.6-3.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">14fdf29fe5dd7075aaf956b75aec2c5028f78ea8c06a19b461fa970284284047</sum>
        </package>
        <package name="postgresql-static" version="12.20" release="1.module_el8.10.0+3886+1dfe41d7" epoch="0" arch="s390x" src="postgresql-12.20-1.module_el8.10.0+3886+1dfe41d7.src.rpm">
          <filename>postgresql-static-12.20-1.module_el8.10.0+3886+1dfe41d7.s390x.rpm</filename>
          <sum type="sha256">16ea23eaf2f8666a6ac06de08d4ecc6d1e1e776da27bef4d56a49e6106169936</sum>
        </package>
        <package name="postgresql-test" version="12.20" release="1.module_el8.10.0+3886+1dfe41d7" epoch="0" arch="s390x" src="postgresql-12.20-1.module_el8.10.0+3886+1dfe41d7.src.rpm">
          <filename>postgresql-test-12.20-1.module_el8.10.0+3886+1dfe41d7.s390x.rpm</filename>
          <sum type="sha256">2f542bd28805e83dcafa827164e14dd7b028b56013c8bfef4feeeab09399b195</sum>
        </package>
        <package name="postgresql-plpython3" version="12.20" release="1.module_el8.10.0+3886+1dfe41d7" epoch="0" arch="s390x" src="postgresql-12.20-1.module_el8.10.0+3886+1dfe41d7.src.rpm">
          <filename>postgresql-plpython3-12.20-1.module_el8.10.0+3886+1dfe41d7.s390x.rpm</filename>
          <sum type="sha256">3405e673847f624225b85a138d2fcb5395b48bee9197d5eacb57788b134ce301</sum>
        </package>
        <package name="postgresql-plperl" version="12.20" release="1.module_el8.10.0+3886+1dfe41d7" epoch="0" arch="s390x" src="postgresql-12.20-1.module_el8.10.0+3886+1dfe41d7.src.rpm">
          <filename>postgresql-plperl-12.20-1.module_el8.10.0+3886+1dfe41d7.s390x.rpm</filename>
          <sum type="sha256">61e7f72aa35b6c8523fa8c7efd3b4e265b97af049085f445139720339a6c7e5f</sum>
        </package>
        <package name="postgresql-contrib" version="12.20" release="1.module_el8.10.0+3886+1dfe41d7" epoch="0" arch="s390x" src="postgresql-12.20-1.module_el8.10.0+3886+1dfe41d7.src.rpm">
          <filename>postgresql-contrib-12.20-1.module_el8.10.0+3886+1dfe41d7.s390x.rpm</filename>
          <sum type="sha256">69c17dcab2f04422cdfe32d6f7d9c206705e23f97a6a4598a2fdb71da28edc6b</sum>
        </package>
        <package name="postgresql-docs" version="12.20" release="1.module_el8.10.0+3886+1dfe41d7" epoch="0" arch="s390x" src="postgresql-12.20-1.module_el8.10.0+3886+1dfe41d7.src.rpm">
          <filename>postgresql-docs-12.20-1.module_el8.10.0+3886+1dfe41d7.s390x.rpm</filename>
          <sum type="sha256">8a9395e2e2f6c599c269e40431ed1ee4abf24a8bff55760d13434a4c9d243d69</sum>
        </package>
        <package name="postgres-decoderbufs" version="0.10.0" release="2.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="postgres-decoderbufs-0.10.0-2.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>postgres-decoderbufs-0.10.0-2.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">8cd16a1e3af9b7e12bf6df8db5735aeeb762e32913e95ec5dabcb05c6ac34f39</sum>
        </package>
        <package name="postgresql-pltcl" version="12.20" release="1.module_el8.10.0+3886+1dfe41d7" epoch="0" arch="s390x" src="postgresql-12.20-1.module_el8.10.0+3886+1dfe41d7.src.rpm">
          <filename>postgresql-pltcl-12.20-1.module_el8.10.0+3886+1dfe41d7.s390x.rpm</filename>
          <sum type="sha256">94e234da1959273f970920060a8051fd74a15e80fd95583dd62f40a628955225</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="12.20" release="1.module_el8.10.0+3886+1dfe41d7" epoch="0" arch="s390x" src="postgresql-12.20-1.module_el8.10.0+3886+1dfe41d7.src.rpm">
          <filename>postgresql-upgrade-devel-12.20-1.module_el8.10.0+3886+1dfe41d7.s390x.rpm</filename>
          <sum type="sha256">9a724219afc1f4677f19dbf06d88d350e561be7ca6d1c15c6244c409b83c4dd5</sum>
        </package>
        <package name="postgresql-server-devel" version="12.20" release="1.module_el8.10.0+3886+1dfe41d7" epoch="0" arch="s390x" src="postgresql-12.20-1.module_el8.10.0+3886+1dfe41d7.src.rpm">
          <filename>postgresql-server-devel-12.20-1.module_el8.10.0+3886+1dfe41d7.s390x.rpm</filename>
          <sum type="sha256">b8c004c54bbcb2d91087caffedfcde2b47334fc8e769a52e4ebba2bc1f7d7bbc</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="12.20" release="1.module_el8.10.0+3886+1dfe41d7" epoch="0" arch="noarch" src="postgresql-12.20-1.module_el8.10.0+3886+1dfe41d7.src.rpm">
          <filename>postgresql-test-rpm-macros-12.20-1.module_el8.10.0+3886+1dfe41d7.noarch.rpm</filename>
          <sum type="sha256">c1b4cdc8c74590db46d875793a5e99e3093ebd482f644d4eac711efb87e23a5a</sum>
        </package>
        <package name="postgresql-server" version="12.20" release="1.module_el8.10.0+3886+1dfe41d7" epoch="0" arch="s390x" src="postgresql-12.20-1.module_el8.10.0+3886+1dfe41d7.src.rpm">
          <filename>postgresql-server-12.20-1.module_el8.10.0+3886+1dfe41d7.s390x.rpm</filename>
          <sum type="sha256">c57f42d035d26c2de0b44ee65904edbfe3faa84adff738fbd35695620151cad7</sum>
        </package>
        <package name="postgresql" version="12.20" release="1.module_el8.10.0+3886+1dfe41d7" epoch="0" arch="s390x" src="postgresql-12.20-1.module_el8.10.0+3886+1dfe41d7.src.rpm">
          <filename>postgresql-12.20-1.module_el8.10.0+3886+1dfe41d7.s390x.rpm</filename>
          <sum type="sha256">c631d51f6a704f887dc76867a89b7325971c00c5eea307017144509168bd285b</sum>
        </package>
        <package name="postgresql-upgrade" version="12.20" release="1.module_el8.10.0+3886+1dfe41d7" epoch="0" arch="s390x" src="postgresql-12.20-1.module_el8.10.0+3886+1dfe41d7.src.rpm">
          <filename>postgresql-upgrade-12.20-1.module_el8.10.0+3886+1dfe41d7.s390x.rpm</filename>
          <sum type="sha256">cdf4131eb4f0fa3b78bbdc96ca5c7b349e6163fa0406400f625d04a8ffc63674</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6001</id>
    <title>Important: postgresql:15 security update</title>
    <issued date="2024-08-29 00:00:00"/>
    <updated date="2024-08-29 13:39:15"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:15 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: PostgreSQL relation replacement during pg_dump executes arbitrary SQL (CVE-2024-7348)
* postgresql: PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checks (CVE-2024-4317)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6001" id="RHSA-2024:6001" type="rhsa" title="RHSA-2024:6001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4317" id="CVE-2024-4317" type="cve" title="CVE-2024-4317"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7348" id="CVE-2024-7348" type="cve" title="CVE-2024-7348"/>
      <reference href="https://bugzilla.redhat.com/2279935" id="2279935" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303682" id="2303682" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6001.html" id="ALSA-2024:6001" type="self" title="ALSA-2024:6001"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="15" version="8100020240829121429" context="9edba152" arch="s390x"/>
        <package name="postgresql-pltcl" version="15.8" release="1.module_el8.10.0+3888+1aead837" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el8.10.0+3888+1aead837.src.rpm">
          <filename>postgresql-pltcl-15.8-1.module_el8.10.0+3888+1aead837.s390x.rpm</filename>
          <sum type="sha256">1040d6448f38c4603cc6ca7d52ef5431cad7ef0f7251f3bf0745ac41c14781e2</sum>
        </package>
        <package name="postgresql-plperl" version="15.8" release="1.module_el8.10.0+3888+1aead837" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el8.10.0+3888+1aead837.src.rpm">
          <filename>postgresql-plperl-15.8-1.module_el8.10.0+3888+1aead837.s390x.rpm</filename>
          <sum type="sha256">264b813de3041a9641102281cb27164a557c82d8effa971625147b474c8b7d37</sum>
        </package>
        <package name="postgresql-docs" version="15.8" release="1.module_el8.10.0+3888+1aead837" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el8.10.0+3888+1aead837.src.rpm">
          <filename>postgresql-docs-15.8-1.module_el8.10.0+3888+1aead837.s390x.rpm</filename>
          <sum type="sha256">4ad34d3f4c5df4a5b28cc91b89fc4334bd7fec9fcc5b0f297cda5353ae393372</sum>
        </package>
        <package name="postgresql-static" version="15.8" release="1.module_el8.10.0+3888+1aead837" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el8.10.0+3888+1aead837.src.rpm">
          <filename>postgresql-static-15.8-1.module_el8.10.0+3888+1aead837.s390x.rpm</filename>
          <sum type="sha256">4df04a0d1f7d5dfd393f080d9d18384f02cd71bcae53f44d7a97b52974719160</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="15.8" release="1.module_el8.10.0+3888+1aead837" epoch="0" arch="noarch" src="postgresql-15.8-1.module_el8.10.0+3888+1aead837.src.rpm">
          <filename>postgresql-test-rpm-macros-15.8-1.module_el8.10.0+3888+1aead837.noarch.rpm</filename>
          <sum type="sha256">58a75dc21269911fb5baa88bbb4525f5b25b84b1c6afef03fcd8b574e314a164</sum>
        </package>
        <package name="postgresql-private-devel" version="15.8" release="1.module_el8.10.0+3888+1aead837" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el8.10.0+3888+1aead837.src.rpm">
          <filename>postgresql-private-devel-15.8-1.module_el8.10.0+3888+1aead837.s390x.rpm</filename>
          <sum type="sha256">7056a4adebabf8a5fef7c3618fe4891fa03fb86c43b6fa041774b26150ed6cc7</sum>
        </package>
        <package name="postgresql-private-libs" version="15.8" release="1.module_el8.10.0+3888+1aead837" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el8.10.0+3888+1aead837.src.rpm">
          <filename>postgresql-private-libs-15.8-1.module_el8.10.0+3888+1aead837.s390x.rpm</filename>
          <sum type="sha256">75a61938e3541aed8f4f7c5e2f58e99f878415063937a3f8ad482faf27fab517</sum>
        </package>
        <package name="pg_repack" version="1.4.8" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="pg_repack-1.4.8-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>pg_repack-1.4.8-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">7fbd57e759f737f8bc3c7bc2715300640b00ae84ed9b74d469be03ee537d20b9</sum>
        </package>
        <package name="postgresql" version="15.8" release="1.module_el8.10.0+3888+1aead837" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el8.10.0+3888+1aead837.src.rpm">
          <filename>postgresql-15.8-1.module_el8.10.0+3888+1aead837.s390x.rpm</filename>
          <sum type="sha256">82f532b3487621929987d4629f241387fceeff844e525680f1c1745b82f85bdf</sum>
        </package>
        <package name="postgresql-upgrade" version="15.8" release="1.module_el8.10.0+3888+1aead837" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el8.10.0+3888+1aead837.src.rpm">
          <filename>postgresql-upgrade-15.8-1.module_el8.10.0+3888+1aead837.s390x.rpm</filename>
          <sum type="sha256">a0c8c0ac3cce5a81bd3e5f6e619bf2eea7d937398655b356ad7b6a30b3737a74</sum>
        </package>
        <package name="postgresql-contrib" version="15.8" release="1.module_el8.10.0+3888+1aead837" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el8.10.0+3888+1aead837.src.rpm">
          <filename>postgresql-contrib-15.8-1.module_el8.10.0+3888+1aead837.s390x.rpm</filename>
          <sum type="sha256">b14f65b0a140def6609f37b9397fccd27a772d500e1b37a7509a4deb7778cf6d</sum>
        </package>
        <package name="postgresql-test" version="15.8" release="1.module_el8.10.0+3888+1aead837" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el8.10.0+3888+1aead837.src.rpm">
          <filename>postgresql-test-15.8-1.module_el8.10.0+3888+1aead837.s390x.rpm</filename>
          <sum type="sha256">baf7dfd47bf22852b4e9a9d76ea8c83d2bb15417026d32b8df3dcd8fc79a3a80</sum>
        </package>
        <package name="pgaudit" version="1.7.0" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="pgaudit-1.7.0-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>pgaudit-1.7.0-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">bebebc0b85b4d88d466cf43a44e5ae321c851b621377e2c96e1564cf00fd07bd</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="15.8" release="1.module_el8.10.0+3888+1aead837" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el8.10.0+3888+1aead837.src.rpm">
          <filename>postgresql-upgrade-devel-15.8-1.module_el8.10.0+3888+1aead837.s390x.rpm</filename>
          <sum type="sha256">c22159e378b97e6d600f315d10d28dacf171e5665e0d91226e0fed136709d145</sum>
        </package>
        <package name="postgresql-server-devel" version="15.8" release="1.module_el8.10.0+3888+1aead837" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el8.10.0+3888+1aead837.src.rpm">
          <filename>postgresql-server-devel-15.8-1.module_el8.10.0+3888+1aead837.s390x.rpm</filename>
          <sum type="sha256">d8923b2df60d2b121406c24bcbbaad557a6f8b26d6bf5d12ae9f8928317ad271</sum>
        </package>
        <package name="postgres-decoderbufs" version="1.9.7" release="1.Final.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="postgres-decoderbufs-1.9.7-1.Final.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>postgres-decoderbufs-1.9.7-1.Final.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">d93f26982b8a0299bb5535e5aed623996c696a2eb2f9157554b4dae3f5cce2ef</sum>
        </package>
        <package name="postgresql-server" version="15.8" release="1.module_el8.10.0+3888+1aead837" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el8.10.0+3888+1aead837.src.rpm">
          <filename>postgresql-server-15.8-1.module_el8.10.0+3888+1aead837.s390x.rpm</filename>
          <sum type="sha256">e99db3fecc8b35157307262da78e2f8886cd2dfe786ff3e642579264900c2032</sum>
        </package>
        <package name="postgresql-plpython3" version="15.8" release="1.module_el8.10.0+3888+1aead837" epoch="0" arch="s390x" src="postgresql-15.8-1.module_el8.10.0+3888+1aead837.src.rpm">
          <filename>postgresql-plpython3-15.8-1.module_el8.10.0+3888+1aead837.s390x.rpm</filename>
          <sum type="sha256">fae5ccff7a37f65f294ce8b9a1ccf6d6d33621668c40f954973da76a74e5d5a3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6018</id>
    <title>Important: postgresql:13 security update</title>
    <issued date="2024-08-29 00:00:00"/>
    <updated date="2024-08-29 13:41:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:13 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: PostgreSQL relation replacement during pg_dump executes arbitrary SQL (CVE-2024-7348)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6018" id="RHSA-2024:6018" type="rhsa" title="RHSA-2024:6018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7348" id="CVE-2024-7348" type="cve" title="CVE-2024-7348"/>
      <reference href="https://bugzilla.redhat.com/2303682" id="2303682" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6018.html" id="ALSA-2024:6018" type="self" title="ALSA-2024:6018"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="13" version="8100020240829121253" context="9edba152" arch="s390x"/>
        <package name="postgresql" version="13.16" release="1.module_el8.10.0+3887+93e5d125" epoch="0" arch="s390x" src="postgresql-13.16-1.module_el8.10.0+3887+93e5d125.src.rpm">
          <filename>postgresql-13.16-1.module_el8.10.0+3887+93e5d125.s390x.rpm</filename>
          <sum type="sha256">000334dfe801b7a3b958919c3076ae601d5ccc421d00d452b594c4252c4db4c9</sum>
        </package>
        <package name="postgresql-static" version="13.16" release="1.module_el8.10.0+3887+93e5d125" epoch="0" arch="s390x" src="postgresql-13.16-1.module_el8.10.0+3887+93e5d125.src.rpm">
          <filename>postgresql-static-13.16-1.module_el8.10.0+3887+93e5d125.s390x.rpm</filename>
          <sum type="sha256">325e70520f6e4debb352fa459a0934646e7e41875f6edc9e143f4728580a26e1</sum>
        </package>
        <package name="postgresql-contrib" version="13.16" release="1.module_el8.10.0+3887+93e5d125" epoch="0" arch="s390x" src="postgresql-13.16-1.module_el8.10.0+3887+93e5d125.src.rpm">
          <filename>postgresql-contrib-13.16-1.module_el8.10.0+3887+93e5d125.s390x.rpm</filename>
          <sum type="sha256">3672ffbbef46a23c781df58c0ad153fe04514bb3d20bba2312518c362c8fd83a</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="13.16" release="1.module_el8.10.0+3887+93e5d125" epoch="0" arch="noarch" src="postgresql-13.16-1.module_el8.10.0+3887+93e5d125.src.rpm">
          <filename>postgresql-test-rpm-macros-13.16-1.module_el8.10.0+3887+93e5d125.noarch.rpm</filename>
          <sum type="sha256">3ba6577c65a49d87db69eb05a785602bebdadfde4376d1313f3fbe8252561357</sum>
        </package>
        <package name="postgresql-upgrade" version="13.16" release="1.module_el8.10.0+3887+93e5d125" epoch="0" arch="s390x" src="postgresql-13.16-1.module_el8.10.0+3887+93e5d125.src.rpm">
          <filename>postgresql-upgrade-13.16-1.module_el8.10.0+3887+93e5d125.s390x.rpm</filename>
          <sum type="sha256">4d9eefc59aa1ed9b02baac1235c57edd6bd5628f680aece206f627ae0022971c</sum>
        </package>
        <package name="postgresql-server" version="13.16" release="1.module_el8.10.0+3887+93e5d125" epoch="0" arch="s390x" src="postgresql-13.16-1.module_el8.10.0+3887+93e5d125.src.rpm">
          <filename>postgresql-server-13.16-1.module_el8.10.0+3887+93e5d125.s390x.rpm</filename>
          <sum type="sha256">5e795f8960a2cc47bfc1398ff4c5980fe35b93f6f0dd9efb566281c87fdb8bb3</sum>
        </package>
        <package name="postgresql-test" version="13.16" release="1.module_el8.10.0+3887+93e5d125" epoch="0" arch="s390x" src="postgresql-13.16-1.module_el8.10.0+3887+93e5d125.src.rpm">
          <filename>postgresql-test-13.16-1.module_el8.10.0+3887+93e5d125.s390x.rpm</filename>
          <sum type="sha256">76b6b89e1a82956e33d532e1d76f0bd6d096e1d8ce820347e5ad81553578f41a</sum>
        </package>
        <package name="postgresql-plpython3" version="13.16" release="1.module_el8.10.0+3887+93e5d125" epoch="0" arch="s390x" src="postgresql-13.16-1.module_el8.10.0+3887+93e5d125.src.rpm">
          <filename>postgresql-plpython3-13.16-1.module_el8.10.0+3887+93e5d125.s390x.rpm</filename>
          <sum type="sha256">9fe658aca94d9ccd61f1a9d746257900451d307378c209ff8b6d6e60f2ae4df7</sum>
        </package>
        <package name="pgaudit" version="1.5.0" release="1.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="pgaudit-1.5.0-1.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>pgaudit-1.5.0-1.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">a29cba50326b3c78b1cff9ad076eff7837022e71f02d7ec9e918aed69a9c3f35</sum>
        </package>
        <package name="postgresql-server-devel" version="13.16" release="1.module_el8.10.0+3887+93e5d125" epoch="0" arch="s390x" src="postgresql-13.16-1.module_el8.10.0+3887+93e5d125.src.rpm">
          <filename>postgresql-server-devel-13.16-1.module_el8.10.0+3887+93e5d125.s390x.rpm</filename>
          <sum type="sha256">b0a62f5a4e629bbb489a6c2f266d55af578d83a1605247991fd0968965318bf2</sum>
        </package>
        <package name="postgres-decoderbufs" version="0.10.0" release="2.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">b11226898b888f8213eefe941cece0f636a08ccce2ceaa8bee2a38e6058ed4f3</sum>
        </package>
        <package name="postgresql-plperl" version="13.16" release="1.module_el8.10.0+3887+93e5d125" epoch="0" arch="s390x" src="postgresql-13.16-1.module_el8.10.0+3887+93e5d125.src.rpm">
          <filename>postgresql-plperl-13.16-1.module_el8.10.0+3887+93e5d125.s390x.rpm</filename>
          <sum type="sha256">bf08659bac5049874143db780d6cc381459b773201615b101c2c98258c689e3c</sum>
        </package>
        <package name="postgresql-pltcl" version="13.16" release="1.module_el8.10.0+3887+93e5d125" epoch="0" arch="s390x" src="postgresql-13.16-1.module_el8.10.0+3887+93e5d125.src.rpm">
          <filename>postgresql-pltcl-13.16-1.module_el8.10.0+3887+93e5d125.s390x.rpm</filename>
          <sum type="sha256">c07d01df55ec71390729d14ef83cdaa8225c01c427fa04bb3339757e5ecb6386</sum>
        </package>
        <package name="pg_repack" version="1.4.6" release="3.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="pg_repack-1.4.6-3.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>pg_repack-1.4.6-3.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">c1b386540b304a4de3ff8d840ec35dc9d67ecd1827aa06cd695f06060e8d2ea7</sum>
        </package>
        <package name="postgresql-docs" version="13.16" release="1.module_el8.10.0+3887+93e5d125" epoch="0" arch="s390x" src="postgresql-13.16-1.module_el8.10.0+3887+93e5d125.src.rpm">
          <filename>postgresql-docs-13.16-1.module_el8.10.0+3887+93e5d125.s390x.rpm</filename>
          <sum type="sha256">f4e1d99b5580a5c7aa1faa64084efc5dac24796fc55f2144fcba91d5d74d1ab7</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.16" release="1.module_el8.10.0+3887+93e5d125" epoch="0" arch="s390x" src="postgresql-13.16-1.module_el8.10.0+3887+93e5d125.src.rpm">
          <filename>postgresql-upgrade-devel-13.16-1.module_el8.10.0+3887+93e5d125.s390x.rpm</filename>
          <sum type="sha256">f5e407952a92cdf9d3e28f023597d11fb7a98d22a742c78e4021e0040c0ae62e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6148</id>
    <title>Moderate: nodejs:18 security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-03 13:11:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs:18 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. 

Security Fix(es):

* node-tar: denial of service while parsing a tar file due to lack of folders depth validation (CVE-2024-28863)
* nodejs: Bypass network import restriction via data URL (CVE-2024-22020)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6148" id="RHSA-2024:6148" type="rhsa" title="RHSA-2024:6148"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-22020" id="CVE-2024-22020" type="cve" title="CVE-2024-22020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28863" id="CVE-2024-28863" type="cve" title="CVE-2024-28863"/>
      <reference href="https://bugzilla.redhat.com/2293200" id="2293200" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2296417" id="2296417" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6148.html" id="ALSA-2024:6148" type="self" title="ALSA-2024:6148"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="nodejs" stream="18" version="8100020240903092012" context="9edba152" arch="s390x"/>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.8.0+3613+1ed8c91d" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.8.0+3613+1ed8c91d.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.8.0+3613+1ed8c91d.noarch.rpm</filename>
          <sum type="sha256">1de153a1170baeaa24f02ebd86d32d508ac48ea9ed54e2a70c5250a81952a65b</sum>
        </package>
        <package name="nodejs" version="18.20.4" release="1.module_el8.10.0+3890+5a092792" epoch="1" arch="s390x" src="nodejs-18.20.4-1.module_el8.10.0+3890+5a092792.src.rpm">
          <filename>nodejs-18.20.4-1.module_el8.10.0+3890+5a092792.s390x.rpm</filename>
          <sum type="sha256">2b26b1b6b17c70b5eff1c1f372709209a53efd5ea20bf346e60d52ce48834610</sum>
        </package>
        <package name="nodejs-full-i18n" version="18.20.4" release="1.module_el8.10.0+3890+5a092792" epoch="1" arch="s390x" src="nodejs-18.20.4-1.module_el8.10.0+3890+5a092792.src.rpm">
          <filename>nodejs-full-i18n-18.20.4-1.module_el8.10.0+3890+5a092792.s390x.rpm</filename>
          <sum type="sha256">683cebe7dfc115855f64fa803e1ff64c30bc5c20501784c7fe5a5a533023bb52</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el8.7.0+3343+ea2b7901" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.noarch.rpm</filename>
          <sum type="sha256">9430d44c78a3cfbe1ae3d39b8531f651606661943959bc0c3de87b2f91ea6f67</sum>
        </package>
        <package name="nodejs-docs" version="18.20.4" release="1.module_el8.10.0+3890+5a092792" epoch="1" arch="noarch" src="nodejs-18.20.4-1.module_el8.10.0+3890+5a092792.src.rpm">
          <filename>nodejs-docs-18.20.4-1.module_el8.10.0+3890+5a092792.noarch.rpm</filename>
          <sum type="sha256">aacea7c98abaf938ef709e3c3a1a6dc79ec9d0457171e51736eb0c2c49075cb4</sum>
        </package>
        <package name="npm" version="10.7.0" release="1.18.20.4.1.module_el8.10.0+3890+5a092792" epoch="1" arch="s390x" src="nodejs-18.20.4-1.module_el8.10.0+3890+5a092792.src.rpm">
          <filename>npm-10.7.0-1.18.20.4.1.module_el8.10.0+3890+5a092792.s390x.rpm</filename>
          <sum type="sha256">ba1c2c01d20982e15d1dc3748bccd50f643722841b1413202beb3be3ea41baa2</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el8.7.0+3343+ea2b7901" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el8.7.0+3343+ea2b7901.noarch.rpm</filename>
          <sum type="sha256">dca36d100028686323583aeddaa86efff902ff7fe29cb97d4356c309e3e899d9</sum>
        </package>
        <package name="nodejs-devel" version="18.20.4" release="1.module_el8.10.0+3890+5a092792" epoch="1" arch="s390x" src="nodejs-18.20.4-1.module_el8.10.0+3890+5a092792.src.rpm">
          <filename>nodejs-devel-18.20.4-1.module_el8.10.0+3890+5a092792.s390x.rpm</filename>
          <sum type="sha256">fa8f397a66c4ad2e56363182bd087a5c0557c5b3f5e84186aa0a816012ac1264</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6309</id>
    <title>Moderate: fence-agents security update</title>
    <issued date="2024-09-04 00:00:00"/>
    <updated date="2024-09-05 06:39:09"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. 

Security Fix(es):

* urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891)
* pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6309" id="RHSA-2024:6309" type="rhsa" title="RHSA-2024:6309"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37891" id="CVE-2024-37891" type="cve" title="CVE-2024-37891"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6345" id="CVE-2024-6345" type="cve" title="CVE-2024-6345"/>
      <reference href="https://bugzilla.redhat.com/2292788" id="2292788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297771" id="2297771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6309.html" id="ALSA-2024:6309" type="self" title="ALSA-2024:6309"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="fence-agents-ipmilan" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-ipmilan-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">042317e251d2510d9b9ea56c27c6a84b006fea08080915643ae80df4120b4c9f</sum>
        </package>
        <package name="fence-agents-intelmodular" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-intelmodular-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">05a88d65e7605102ad841f4f460e5e6b338be4a6f5cd9af634e324887faf43f2</sum>
        </package>
        <package name="fence-agents-eaton-snmp" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-eaton-snmp-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">07779bdf68e97fa938fc1671dd350ecf19648ef947102a2c73cd0e95590d4433</sum>
        </package>
        <package name="fence-agents-all" version="4.2.1" release="129.el8_10.4" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-all-4.2.1-129.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">0bea523146e53ed394700bc9edaf82d24c55dcd04a31c00ff925178920ee1b42</sum>
        </package>
        <package name="fence-agents-mpath" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-mpath-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">0c5e5d1bd1bda5fe58af3f8208e41d9926f7391d4e5e470ff1a4bd5a82e9d4b5</sum>
        </package>
        <package name="fence-agents-rhevm" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-rhevm-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">0e745a6c2a015300baccab6be2aa348be43f21677276fe63f7c8f469d6fc3b8c</sum>
        </package>
        <package name="fence-agents-cisco-ucs" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-cisco-ucs-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">0ecad4101351eb8199cb1beefed8bb6f59665b1e761187ce2c0ab376086bd750</sum>
        </package>
        <package name="fence-agents-drac5" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-drac5-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">10103d033b94d354f890e4a7c49d7abe29aba0999019964ccb7bd712bc6de653</sum>
        </package>
        <package name="fence-agents-compute" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-compute-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">108aff16fc6f0436835bb85ff0fbae08ef55695530ed0909591139f935ee2c24</sum>
        </package>
        <package name="fence-agents-ipdu" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-ipdu-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">17007a465288650ec690ba99b433e67ac41ec4eb58408a198745fe60b2e461de</sum>
        </package>
        <package name="fence-agents-common" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-common-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">191851bb310217e2b8047bf885f376643c4d8a6d72c7d1ad788d9dc194a314a7</sum>
        </package>
        <package name="fence-agents-eps" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-eps-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">1cb656270040139b614a2ec735cbc578a787b0f71598663d7d46318a4af59845</sum>
        </package>
        <package name="fence-agents-lpar" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-lpar-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">205135ff58c1d58c0b02beba0ac3663756dbc2b5d826f0bbf04919c400432431</sum>
        </package>
        <package name="fence-agents-heuristics-ping" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-heuristics-ping-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">2cbad8bbc6934f7249ddf63cf8468125dcf9f6e1cda13e99455f346d93b2b333</sum>
        </package>
        <package name="fence-agents-rsb" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-rsb-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">2e3a971b74673edcfe21eb50002c14079255588b4e0e2fe06435b05fe2acd3c1</sum>
        </package>
        <package name="fence-agents-scsi" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-scsi-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">2eda232fbcace2150487ee417a42bb05375c2ef76685cb4884a17cf8d900a7a6</sum>
        </package>
        <package name="fence-agents-ilo-mp" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-ilo-mp-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">3634de277ad59c43b82c8f82001c6cd720db16ce3f2631742e1bbbaeae67e138</sum>
        </package>
        <package name="fence-agents-ibm-powervs" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-ibm-powervs-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">45cfeb708ebdec9e8d25465e9445682a02056f300cc0dad7c0991d65c07f346d</sum>
        </package>
        <package name="fence-agents-emerson" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-emerson-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">48366c97e82d2c26d8ec42100707cecfdc117e0e1f6f60bf7d51fb0b4bdd068b</sum>
        </package>
        <package name="fence-agents-sbd" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-sbd-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">4b8c0e78f4f13cd0a045db75656cb44dec1877021ccf6e07548b08c8dfefe13d</sum>
        </package>
        <package name="fence-agents-ilo-ssh" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-ilo-ssh-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">4d246ea07f2f5eb474d95de2adc89c5c21f732f276b401fe1e6360e4fb25f92f</sum>
        </package>
        <package name="fence-agents-cisco-mds" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-cisco-mds-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">553c3101b7603b4c9e279a0b17b70dd00da6bef4c7aac7c64919e1312bd59387</sum>
        </package>
        <package name="fence-agents-ifmib" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-ifmib-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">57b44a9d8c4d21ccc70ddb7ff9ecb67486ae7ac3174895a5af921f9906a680d0</sum>
        </package>
        <package name="fence-agents-apc" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-apc-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">60087cd2741be9940d1c0041010bcfc0558bb8c5104fe4a54e7dd7be05370c95</sum>
        </package>
        <package name="fence-agents-virsh" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-virsh-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">62494fb1e41cd295ee02092e761e2961abbe01e494d4fdd7ab01798da997b877</sum>
        </package>
        <package name="fence-agents-ilo-moonshot" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-ilo-moonshot-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">82d5c37911e3f54473667196ab1eaf29dacf425575329c27c855de99833554ac</sum>
        </package>
        <package name="fence-agents-bladecenter" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-bladecenter-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">834d93c530a69fa1d449c7582bc634094400a97f096d099825451aca8d129217</sum>
        </package>
        <package name="fence-agents-vmware-rest" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-vmware-rest-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">842925771e331a4942df1cb4ea8a7a04cf426e9ad3ddb30aa042064959111877</sum>
        </package>
        <package name="fence-agents-ibmblade" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-ibmblade-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">893d99b36c07ce096e6bcb1acec17eadead3c11aa458ca6c8a9ac7165f9798ee</sum>
        </package>
        <package name="fence-agents-redfish" version="4.2.1" release="129.el8_10.4" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-redfish-4.2.1-129.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">8e82a722f87cdd483b1432e802d7fc7311a104c0d19662c9315fd210bd9fa347</sum>
        </package>
        <package name="fence-agents-ibm-vpc" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-ibm-vpc-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">a1848e1bb71d69b070a030ddfdbc6525c1ad6f4f4461998c71090ad207bd2156</sum>
        </package>
        <package name="fence-agents-apc-snmp" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-apc-snmp-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">ac65008253197f063950091bf4c39dfb53f329f37e88c644d7c4a565661e4042</sum>
        </package>
        <package name="fence-agents-vmware-soap" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-vmware-soap-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">adcf2a40d06faf380441b074f01d90758ad9a3b9aa0adf2df8ae4f10c59a024d</sum>
        </package>
        <package name="fence-agents-wti" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-wti-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">b3d3352d577d588a6709d941d60c339e4e7e2ad5cc1930dd6f20f243dcee4def</sum>
        </package>
        <package name="fence-agents-kubevirt" version="4.2.1" release="129.el8_10.4" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-kubevirt-4.2.1-129.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">c87b4f9496e39efa44353bbf2161926c2f20705c32d4f7fbd7ab66bfda51960f</sum>
        </package>
        <package name="fence-agents-zvm" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-zvm-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">d17e0ee4261933fbac3765cb871589142a177e2c1805f0d717366387945f6002</sum>
        </package>
        <package name="fence-agents-hpblade" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-hpblade-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">d528374f29d699ada526a6e18729814833a2007cebb263b5b7fabd3e21c27643</sum>
        </package>
        <package name="fence-agents-brocade" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-brocade-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">d8851fce86140d50b2ca8f5026ba2e82baadbac8f2ec35908b308ba4fef8a4b2</sum>
        </package>
        <package name="fence-agents-kdump" version="4.2.1" release="129.el8_10.4" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-kdump-4.2.1-129.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">db02fc0048ca55bb08ae0179e726ce8cdac0ea744d8cf36fc404655d47e0bf32</sum>
        </package>
        <package name="fence-agents-rsa" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-rsa-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">e33de9c04f83a196b74e717d905c316795b326c945cd9d29087701eeeb0c4373</sum>
        </package>
        <package name="fence-agents-amt-ws" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-amt-ws-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">ed712c929d35d873f05de4a9a920fed196dcc433b8c09d0c1ae9311a397c4d44</sum>
        </package>
        <package name="fence-agents-ilo2" version="4.2.1" release="129.el8_10.4" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.4.src.rpm">
          <filename>fence-agents-ilo2-4.2.1-129.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">fa8922a2d70e68b65c64fd02fdd73de09116c8af6bd3b6490367c8e70dab593e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6422</id>
    <title>Important: bubblewrap and flatpak security update</title>
    <issued date="2024-09-05 00:00:00"/>
    <updated date="2024-09-06 07:42:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bubblewrap and flatpak security update</summary>
    <description>Bubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces.

Security Fix(es):

* flatpak: Access to files outside sandbox for apps using persistent= (--persist) (CVE-2024-42472)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6422" id="RHSA-2024:6422" type="rhsa" title="RHSA-2024:6422"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42472" id="CVE-2024-42472" type="cve" title="CVE-2024-42472"/>
      <reference href="https://bugzilla.redhat.com/2305202" id="2305202" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6422.html" id="ALSA-2024:6422" type="self" title="ALSA-2024:6422"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="flatpak-libs" version="1.12.9" release="3.el8_10" epoch="0" arch="s390x" src="flatpak-1.12.9-3.el8_10.src.rpm">
          <filename>flatpak-libs-1.12.9-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">5889ee1495c76235bc52165e5a67d18645c8ae1b8f127c22e31d565a3c97656e</sum>
        </package>
        <package name="flatpak" version="1.12.9" release="3.el8_10" epoch="0" arch="s390x" src="flatpak-1.12.9-3.el8_10.src.rpm">
          <filename>flatpak-1.12.9-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">a62c19d4b1b705bb36dde36fb0c3ed76cb79b79c273a2b857bed3c450466435d</sum>
        </package>
        <package name="flatpak-session-helper" version="1.12.9" release="3.el8_10" epoch="0" arch="s390x" src="flatpak-1.12.9-3.el8_10.src.rpm">
          <filename>flatpak-session-helper-1.12.9-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">c09125efd4c3c81498bfc91d6d3b31904ad152ffdebd3b64d28033c15c502e3e</sum>
        </package>
        <package name="flatpak-selinux" version="1.12.9" release="3.el8_10" epoch="0" arch="noarch" src="flatpak-1.12.9-3.el8_10.src.rpm">
          <filename>flatpak-selinux-1.12.9-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">d84fc2962dc7cbe277bf16894675e52a94555cf694d9273b1743aaf7c371adaf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6569</id>
    <title>Moderate: 389-ds:1.4 security update</title>
    <issued date="2024-09-11 00:00:00"/>
    <updated date="2024-09-11 09:50:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>389-ds:1.4 security update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. 

Security Fix(es):

* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6569" id="RHSA-2024:6569" type="rhsa" title="RHSA-2024:6569"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5953" id="CVE-2024-5953" type="cve" title="CVE-2024-5953"/>
      <reference href="https://bugzilla.redhat.com/2292104" id="2292104" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6569.html" id="ALSA-2024:6569" type="self" title="ALSA-2024:6569"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="389-ds" stream="1.4" version="8100020240911061138" context="17499975" arch="s390x"/>
        <package name="389-ds-base" version="1.4.3.39" release="8.module_el8.10.0+3891+cbd883bf" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-8.module_el8.10.0+3891+cbd883bf.src.rpm">
          <filename>389-ds-base-1.4.3.39-8.module_el8.10.0+3891+cbd883bf.s390x.rpm</filename>
          <sum type="sha256">1f20d14026e7c4034c4f71494c74543145e1a521e2fb9369732abd5e245211ea</sum>
        </package>
        <package name="389-ds-base-snmp" version="1.4.3.39" release="8.module_el8.10.0+3891+cbd883bf" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-8.module_el8.10.0+3891+cbd883bf.src.rpm">
          <filename>389-ds-base-snmp-1.4.3.39-8.module_el8.10.0+3891+cbd883bf.s390x.rpm</filename>
          <sum type="sha256">3f6821bbab4bbe7a5d592f3a75f9f45dd29de1fe70705be3a9de461d9c2b489b</sum>
        </package>
        <package name="389-ds-base-devel" version="1.4.3.39" release="8.module_el8.10.0+3891+cbd883bf" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-8.module_el8.10.0+3891+cbd883bf.src.rpm">
          <filename>389-ds-base-devel-1.4.3.39-8.module_el8.10.0+3891+cbd883bf.s390x.rpm</filename>
          <sum type="sha256">4fc4b927afbbb148f2e193d99a11a6b99e0a964eaabfa17c682c27c8c513ba6b</sum>
        </package>
        <package name="python3-lib389" version="1.4.3.39" release="8.module_el8.10.0+3891+cbd883bf" epoch="0" arch="noarch" src="389-ds-base-1.4.3.39-8.module_el8.10.0+3891+cbd883bf.src.rpm">
          <filename>python3-lib389-1.4.3.39-8.module_el8.10.0+3891+cbd883bf.noarch.rpm</filename>
          <sum type="sha256">c881262873431a0b95ad861ec4d6f1c52d341d78c8821fe687aaa7c3d9e9831a</sum>
        </package>
        <package name="389-ds-base-libs" version="1.4.3.39" release="8.module_el8.10.0+3891+cbd883bf" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-8.module_el8.10.0+3891+cbd883bf.src.rpm">
          <filename>389-ds-base-libs-1.4.3.39-8.module_el8.10.0+3891+cbd883bf.s390x.rpm</filename>
          <sum type="sha256">d8149ab68a8000c5c2b957d191099ed956137b4283bc8690c6e216fb8c87cb22</sum>
        </package>
        <package name="389-ds-base-legacy-tools" version="1.4.3.39" release="8.module_el8.10.0+3891+cbd883bf" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-8.module_el8.10.0+3891+cbd883bf.src.rpm">
          <filename>389-ds-base-legacy-tools-1.4.3.39-8.module_el8.10.0+3891+cbd883bf.s390x.rpm</filename>
          <sum type="sha256">f2f0e8dae1e527b01940b2e25586bf3756282d5c044c6f74e80b6130e8e6f8a5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6682</id>
    <title>Important: firefox security update</title>
    <issued date="2024-09-16 00:00:00"/>
    <updated date="2024-09-19 12:53:41"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: 115.15/128.2 ESR ()
* mozilla: Type confusion when looking up a property name in a &amp;quot;with&amp;quot; block (CVE-2024-8381)
* mozilla: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran (CVE-2024-8382)
* mozilla: Firefox did not ask before openings news: links in an external application (CVE-2024-8383)
* mozilla: Garbage collection could mis-color cross-compartment objects in OOM conditions (CVE-2024-8384)
* mozilla: WASM type confusion involving ArrayTypes (CVE-2024-8385)
* mozilla: SelectElements could be shown over another site if popups are allowed (CVE-2024-8386)
* mozilla: Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2 (CVE-2024-8387)
* mozilla: Type Confusion in Async Generators in Javascript Engine (CVE-2024-7652)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6682" id="RHSA-2024:6682" type="rhsa" title="RHSA-2024:6682"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7652" id="CVE-2024-7652" type="cve" title="CVE-2024-7652"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8381" id="CVE-2024-8381" type="cve" title="CVE-2024-8381"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8382" id="CVE-2024-8382" type="cve" title="CVE-2024-8382"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8383" id="CVE-2024-8383" type="cve" title="CVE-2024-8383"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8384" id="CVE-2024-8384" type="cve" title="CVE-2024-8384"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8385" id="CVE-2024-8385" type="cve" title="CVE-2024-8385"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8386" id="CVE-2024-8386" type="cve" title="CVE-2024-8386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8387" id="CVE-2024-8387" type="cve" title="CVE-2024-8387"/>
      <reference href="https://bugzilla.redhat.com/2309427" id="2309427" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309428" id="2309428" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309429" id="2309429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309430" id="2309430" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309431" id="2309431" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309432" id="2309432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309433" id="2309433" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310490" id="2310490" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6682.html" id="ALSA-2024:6682" type="self" title="ALSA-2024:6682"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="128.2.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-128.2.0-1.el8_10.alma.1.src.rpm">
          <filename>firefox-128.2.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">8b44bbf7da20a78280e7a2d9351c9056713a2c1e323f79fbe7659cd357e32a4e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6684</id>
    <title>Important: thunderbird security update</title>
    <issued date="2024-09-16 00:00:00"/>
    <updated date="2024-09-19 12:52:11"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

* thunderbird: 115.15/128.2 ()
* mozilla: Type confusion when looking up a property name in a &amp;quot;with&amp;quot; block (CVE-2024-8381)
* mozilla: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran (CVE-2024-8382)
* mozilla: Garbage collection could mis-color cross-compartment objects in OOM conditions (CVE-2024-8384)
* mozilla: WASM type confusion involving ArrayTypes (CVE-2024-8385)
* mozilla: SelectElements could be shown over another site if popups are allowed (CVE-2024-8386)
* mozilla: Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2 (CVE-2024-8387)
* thunderbird: Crash when aborting verification of OTR chat (CVE-2024-8394)
* mozilla: Type Confusion in Async Generators in Javascript Engine (CVE-2024-7652)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6684" id="RHSA-2024:6684" type="rhsa" title="RHSA-2024:6684"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7652" id="CVE-2024-7652" type="cve" title="CVE-2024-7652"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8381" id="CVE-2024-8381" type="cve" title="CVE-2024-8381"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8382" id="CVE-2024-8382" type="cve" title="CVE-2024-8382"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8384" id="CVE-2024-8384" type="cve" title="CVE-2024-8384"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8385" id="CVE-2024-8385" type="cve" title="CVE-2024-8385"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8386" id="CVE-2024-8386" type="cve" title="CVE-2024-8386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8387" id="CVE-2024-8387" type="cve" title="CVE-2024-8387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8394" id="CVE-2024-8394" type="cve" title="CVE-2024-8394"/>
      <reference href="https://bugzilla.redhat.com/2309427" id="2309427" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309428" id="2309428" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309430" id="2309430" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309431" id="2309431" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309432" id="2309432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309433" id="2309433" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310481" id="2310481" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310490" id="2310490" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6684.html" id="ALSA-2024:6684" type="self" title="ALSA-2024:6684"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="128.2.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-128.2.0-1.el8_10.alma.1.src.rpm">
          <filename>thunderbird-128.2.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">6256673ad9cf24cf9588b3610d8b19e794a11ea0f1b72b9cb27863e16a78ba0d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6784</id>
    <title>Moderate: ruby:3.3 security update</title>
    <issued date="2024-09-18 00:00:00"/>
    <updated date="2024-09-19 16:41:09"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby:3.3 security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

* rexml: DoS vulnerability in REXML (CVE-2024-39908)
* rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace character, &gt;] and ]&gt; (CVE-2024-41123)
* rexml: DoS vulnerability in REXML (CVE-2024-41946)
* rexml: DoS vulnerability in REXML (CVE-2024-43398)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6784" id="RHSA-2024:6784" type="rhsa" title="RHSA-2024:6784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39908" id="CVE-2024-39908" type="cve" title="CVE-2024-39908"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41123" id="CVE-2024-41123" type="cve" title="CVE-2024-41123"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41946" id="CVE-2024-41946" type="cve" title="CVE-2024-41946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43398" id="CVE-2024-43398" type="cve" title="CVE-2024-43398"/>
      <reference href="https://bugzilla.redhat.com/2298243" id="2298243" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302268" id="2302268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302272" id="2302272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2307297" id="2307297" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6784.html" id="ALSA-2024:6784" type="self" title="ALSA-2024:6784"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="ruby" stream="3.3" version="8100020240411121924" context="9edba152" arch="s390x"/>
        <package name="rubygem-mysql2" version="0.5.5" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="s390x" src="rubygem-mysql2-0.5.5-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-mysql2-0.5.5-1.module_el8.10.0+3799+191214cc.s390x.rpm</filename>
          <sum type="sha256">0212e4bd0a248fdb4c10424d90e73d4c0400b209c24f90e3a5fac26348adcdc3</sum>
        </package>
        <package name="rubygem-irb" version="1.13.1" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>rubygem-irb-1.13.1-3.module_el8.10.0+3894+6d587c81.noarch.rpm</filename>
          <sum type="sha256">0737a3eae71272a73e55fb8fed0dce33776612a4ff917dc86bf2787ccdbe20e9</sum>
        </package>
        <package name="rubygem-racc" version="1.7.3" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="s390x" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>rubygem-racc-1.7.3-3.module_el8.10.0+3894+6d587c81.s390x.rpm</filename>
          <sum type="sha256">0f977cf5d7fb1759e7230e4f5cb8801f0d8c2b65008cc3fba7f3a3e8f21eb832</sum>
        </package>
        <package name="rubygems" version="3.5.16" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>rubygems-3.5.16-3.module_el8.10.0+3894+6d587c81.noarch.rpm</filename>
          <sum type="sha256">2146a852600296fee41befd79ef991f5b859db046576460fc21d9ec425b9c2ff</sum>
        </package>
        <package name="rubygem-minitest" version="5.20.0" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>rubygem-minitest-5.20.0-3.module_el8.10.0+3894+6d587c81.noarch.rpm</filename>
          <sum type="sha256">2aeb854c498cf5a6f27314d24c5fb3c76d045679b89ab2c66d7d0b54a542e908</sum>
        </package>
        <package name="rubygem-rexml" version="3.3.6" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>rubygem-rexml-3.3.6-3.module_el8.10.0+3894+6d587c81.noarch.rpm</filename>
          <sum type="sha256">2f1d7dad62e42b45c240f7b1d67434190279ebb3a7d0d5d2a55cb8c5b76e3812</sum>
        </package>
        <package name="rubygem-psych" version="5.1.2" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="s390x" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>rubygem-psych-5.1.2-3.module_el8.10.0+3894+6d587c81.s390x.rpm</filename>
          <sum type="sha256">4526a24f5f0607f1602f2ab658386fcc6071bb746de6bec3fe6c055cda2dd657</sum>
        </package>
        <package name="ruby" version="3.3.5" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="s390x" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.s390x.rpm</filename>
          <sum type="sha256">5afac1c527269977f3b813e5eddd9b4c8df5ab61bc4852bf7df1ddf2d854c0b4</sum>
        </package>
        <package name="rubygem-json" version="2.7.1" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="s390x" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>rubygem-json-2.7.1-3.module_el8.10.0+3894+6d587c81.s390x.rpm</filename>
          <sum type="sha256">5bce1a32933da04f2998d11324b26d4f6e0861edda71d531d47b2fae7dbf8585</sum>
        </package>
        <package name="rubygem-rake" version="13.1.0" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>rubygem-rake-13.1.0-3.module_el8.10.0+3894+6d587c81.noarch.rpm</filename>
          <sum type="sha256">607e1eb15560d389f0c5e0794f56718d71daa31db1bd08f875e6ec630f8c1379</sum>
        </package>
        <package name="rubygems-devel" version="3.5.16" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>rubygems-devel-3.5.16-3.module_el8.10.0+3894+6d587c81.noarch.rpm</filename>
          <sum type="sha256">6ea5289f465595b80ca78c04e775cde5ce77a2f3777317bb39d9f630c972fe77</sum>
        </package>
        <package name="rubygem-rdoc" version="6.6.3.1" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>rubygem-rdoc-6.6.3.1-3.module_el8.10.0+3894+6d587c81.noarch.rpm</filename>
          <sum type="sha256">86a2ba2012ba9a437856c72d0e5c59eb9c4d03947d7aa009b291fc29c60a024c</sum>
        </package>
        <package name="rubygem-power_assert" version="2.0.3" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>rubygem-power_assert-2.0.3-3.module_el8.10.0+3894+6d587c81.noarch.rpm</filename>
          <sum type="sha256">892a198ef3cc695b52bc12b648a7db2c17538e26e1e5fad78a63e5db863db519</sum>
        </package>
        <package name="rubygem-io-console" version="0.7.1" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="s390x" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>rubygem-io-console-0.7.1-3.module_el8.10.0+3894+6d587c81.s390x.rpm</filename>
          <sum type="sha256">900b67557ec674ca006149ddc69cc91f006a3fbeeb25e288f042124833d9bfe6</sum>
        </package>
        <package name="ruby-libs" version="3.3.5" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="s390x" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>ruby-libs-3.3.5-3.module_el8.10.0+3894+6d587c81.s390x.rpm</filename>
          <sum type="sha256">9d2b6859f837e20be15804d91a2e677e7d6b72ea84febac6d6e8f61f3b82dbc4</sum>
        </package>
        <package name="rubygem-mysql2-doc" version="0.5.5" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-mysql2-0.5.5-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-mysql2-doc-0.5.5-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">a1e84a63a7afd9043eb9ee27d2b4a2784de6e4790859efeb6e29353b8922b91f</sum>
        </package>
        <package name="rubygem-rbs" version="3.4.0" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="s390x" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>rubygem-rbs-3.4.0-3.module_el8.10.0+3894+6d587c81.s390x.rpm</filename>
          <sum type="sha256">a4f78d348ccc95dddc96495b9df9c7402998cf29a219eb0fb9bffda7c9f66687</sum>
        </package>
        <package name="rubygem-test-unit" version="3.6.1" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>rubygem-test-unit-3.6.1-3.module_el8.10.0+3894+6d587c81.noarch.rpm</filename>
          <sum type="sha256">ab4e0e99e106bd11293a2aeb1bc6bbb98ce5963316340479f588ff2e6662f992</sum>
        </package>
        <package name="rubygem-pg" version="1.5.4" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="s390x" src="rubygem-pg-1.5.4-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-pg-1.5.4-1.module_el8.10.0+3799+191214cc.s390x.rpm</filename>
          <sum type="sha256">b17f6e9ce3697902b5d1a0a00f804510913440b751583002e5226f0f1bafcfad</sum>
        </package>
        <package name="ruby-bundled-gems" version="3.3.5" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="s390x" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>ruby-bundled-gems-3.3.5-3.module_el8.10.0+3894+6d587c81.s390x.rpm</filename>
          <sum type="sha256">b7a6c55831a17f20bfd5d71e93032e77eb50ac13d40f4668510062e967cf6301</sum>
        </package>
        <package name="rubygem-pg-doc" version="1.5.4" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-pg-1.5.4-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-pg-doc-1.5.4-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">b8da427ba088e5a263b5c71d592a6515861cf12932be7ac5577f51afc1c68900</sum>
        </package>
        <package name="rubygem-bigdecimal" version="3.1.5" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="s390x" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>rubygem-bigdecimal-3.1.5-3.module_el8.10.0+3894+6d587c81.s390x.rpm</filename>
          <sum type="sha256">c33630da655270ea1978caa62b694d49131b8a623eb7acd7c5ca6a45dabe4bb6</sum>
        </package>
        <package name="rubygem-abrt-doc" version="0.4.0" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-abrt-0.4.0-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-abrt-doc-0.4.0-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">c7018cb7e3cfdd28f00117935672e78df8eddf81f308a36b9be1dd8a3fec2afe</sum>
        </package>
        <package name="ruby-doc" version="3.3.5" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>ruby-doc-3.3.5-3.module_el8.10.0+3894+6d587c81.noarch.rpm</filename>
          <sum type="sha256">c7f03cf55fa8ffe4e1a67a211df11f79f62b5faa03a702a6bf2eee609e3a2c38</sum>
        </package>
        <package name="rubygem-rss" version="0.3.1" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>rubygem-rss-0.3.1-3.module_el8.10.0+3894+6d587c81.noarch.rpm</filename>
          <sum type="sha256">d78ddd2589b34029e2e361daa6a661f654501aa82edda771e748aa7ecd2763d2</sum>
        </package>
        <package name="ruby-devel" version="3.3.5" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="s390x" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>ruby-devel-3.3.5-3.module_el8.10.0+3894+6d587c81.s390x.rpm</filename>
          <sum type="sha256">dda66e50402eabc0fe16a2f202e4c48f91e51d49b9ed71c8304dcaecd26cc202</sum>
        </package>
        <package name="rubygem-bundler" version="2.5.16" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>rubygem-bundler-2.5.16-3.module_el8.10.0+3894+6d587c81.noarch.rpm</filename>
          <sum type="sha256">e01c11442ba6e8d6c496f696c679250382ce440c2515a56ea7a4ef5c159bda34</sum>
        </package>
        <package name="rubygem-abrt" version="0.4.0" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-abrt-0.4.0-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-abrt-0.4.0-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">eb0f7cad4d0f103b5e53f11647208a780406db8c8cd8c9556e219bec8e1d9893</sum>
        </package>
        <package name="rubygem-typeprof" version="0.21.9" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>rubygem-typeprof-0.21.9-3.module_el8.10.0+3894+6d587c81.noarch.rpm</filename>
          <sum type="sha256">f30164b27c0c314691e9a8b54e480f4c1f0c99c91866c22e3d010c4b16617930</sum>
        </package>
        <package name="ruby-default-gems" version="3.3.5" release="3.module_el8.10.0+3894+6d587c81" epoch="0" arch="noarch" src="ruby-3.3.5-3.module_el8.10.0+3894+6d587c81.src.rpm">
          <filename>ruby-default-gems-3.3.5-3.module_el8.10.0+3894+6d587c81.noarch.rpm</filename>
          <sum type="sha256">fa21c193669f0dd41f084abd4ee76f23eccb89a3ca69724c1081b8f8a2006b13</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6837</id>
    <title>Important: pcp security update</title>
    <issued date="2024-09-19 00:00:00"/>
    <updated date="2024-09-20 12:01:18"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pcp security update</summary>
    <description>Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems.

Security Fix(es):

* pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)
* pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6837" id="RHSA-2024:6837" type="rhsa" title="RHSA-2024:6837"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45769" id="CVE-2024-45769" type="cve" title="CVE-2024-45769"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45770" id="CVE-2024-45770" type="cve" title="CVE-2024-45770"/>
      <reference href="https://bugzilla.redhat.com/2310451" id="2310451" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310452" id="2310452" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6837.html" id="ALSA-2024:6837" type="self" title="ALSA-2024:6837"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="pcp-pmda-lio" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-lio-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">01ad0556ce756c5a7fe357e7ba73f24b4cc599cacaf8c52b29bf537d13abe6c1</sum>
        </package>
        <package name="pcp-export-pcp2influxdb" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-export-pcp2influxdb-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">022904d6abc9bbe08ce77db8cab32fcf8296035bd79aea00000ede2c5e8f3291</sum>
        </package>
        <package name="pcp-pmda-snmp" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-snmp-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">03238337d0bc428b68b8bdde527ed4aeb7088a6ea7af3e57edd0913d0ee1bc92</sum>
        </package>
        <package name="pcp-pmda-postfix" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-postfix-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">0830c8c2afd5166b1d16b8dfc67ce330bc58b78d79cb9431950c171907d1f924</sum>
        </package>
        <package name="pcp-pmda-bcc" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-bcc-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">0a526628421377c2754b296b34b82a8c36ff547c11b01c27dac56a42908b40b5</sum>
        </package>
        <package name="pcp-pmda-statsd" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-statsd-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">0f3f488396139a73f1a16af82e95829f03d0209919bebb43a6c82832ce09f003</sum>
        </package>
        <package name="pcp-export-pcp2spark" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-export-pcp2spark-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">15dc0f295e2582b13350fba07289efcdca68a43611ae613f06b2401e3fc75a3f</sum>
        </package>
        <package name="pcp-pmda-dbping" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-dbping-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">1612c49f0818e8d27a4e4885e43ac7b33910ca0d6b5fc713e0a2e9372b9644d4</sum>
        </package>
        <package name="pcp-zeroconf" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-zeroconf-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">18c2cb5fabe7315587282f1c39e693981a98219627bb302a10e3acf5e38114a3</sum>
        </package>
        <package name="pcp-gui" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-gui-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">18fa2ef2746c7714616d366fc542206460502431dd58cbfaf234bf31ab571173</sum>
        </package>
        <package name="pcp-pmda-nvidia-gpu" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-nvidia-gpu-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">1b46ba002ea64beaff9951509b09d512550ec8095ee7cef69358b4b50703bb12</sum>
        </package>
        <package name="pcp-pmda-cisco" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-cisco-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">1b5bc49cf76e1ab6e798db604562fc2f5a19d6544daf261315e80e3d84bcd140</sum>
        </package>
        <package name="perl-PCP-MMV" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>perl-PCP-MMV-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">1d4c066c9a804f58f8f3e4d0b1d22238fb2cdfb74132140854753a13ef92f8f1</sum>
        </package>
        <package name="pcp-pmda-slurm" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-slurm-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">1df3aab1ee38134089b79c63c7ba65e9adbb17c6b12e5cee5c01710053658a3c</sum>
        </package>
        <package name="pcp-pmda-ds389" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-ds389-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">1f53cd720cd6495c385176020023f055d3914c453301404494f90fda001cabba</sum>
        </package>
        <package name="pcp-pmda-oracle" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-oracle-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">20a1e14a25f757cca49af99ae9468a7e47da8598923db737d71c11f20862069f</sum>
        </package>
        <package name="pcp-pmda-roomtemp" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-roomtemp-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">2175ba4b6c4798f24d708780709b5db9c1949d097c4eede07bd8cf7a852a4e57</sum>
        </package>
        <package name="pcp-pmda-podman" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-podman-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">23cc15a8e82aa3b49bc1f592d97802d8fde81db5d2ceccd54a7c8f43971b8389</sum>
        </package>
        <package name="pcp-pmda-nginx" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-nginx-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">262b72e8c2a66910c7d9324dd6129ba0d3d013261beb068c85b9f07c8de9c57f</sum>
        </package>
        <package name="pcp-pmda-gpfs" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-gpfs-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">2945c8a094ce5ca992a1733715969fdb25744e27cdb1cb2eaad10eba4822dedb</sum>
        </package>
        <package name="pcp-pmda-weblog" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-weblog-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">35ee64a07d94a591b0abb21dd2d70bbc356af76757ca9519040b6c9be318258d</sum>
        </package>
        <package name="pcp-pmda-sendmail" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-sendmail-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">3653b83e723c623ba45065833e6dc4384f01c2f0378d7f472e7d2958c3eca858</sum>
        </package>
        <package name="pcp-pmda-bash" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-bash-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">36f7cd4e7be8579f485bc664cb10217d0ead493160c58b456f9757ec251b1d44</sum>
        </package>
        <package name="pcp-import-mrtg2pcp" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-import-mrtg2pcp-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">38817d0aee8503f5be25b9599ead312c59357b933d49e7d4daa73be477e6b64c</sum>
        </package>
        <package name="pcp-pmda-postgresql" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-postgresql-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">39a4089778fee5ff956aa6aaa450691112ee52324bb3fa8705a968610fba9934</sum>
        </package>
        <package name="pcp-import-ganglia2pcp" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-import-ganglia2pcp-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">3add9baf2bf1ef5b99bcf02e5f2acbc21e819e695e392644ec4a321c9f5845e8</sum>
        </package>
        <package name="pcp-pmda-samba" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-samba-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">3c33fe2550e7863168d89326d013671790acf14531f67e882a06022acd97ed0d</sum>
        </package>
        <package name="pcp-export-pcp2zabbix" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-export-pcp2zabbix-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">3ecb99d2421a58b2a82b000a14d6449c56e3f2da5c4fd43bfb87bbcd1bf138f2</sum>
        </package>
        <package name="pcp-pmda-elasticsearch" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-elasticsearch-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">40e378d446c4b706f2e2718022fcc531abaa00db9dad0faffba5affe1b1dc76f</sum>
        </package>
        <package name="pcp-devel" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-devel-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">41f9307de084c055597e105209c0b07ea0b4cc13f7cf55c556138091ece8a451</sum>
        </package>
        <package name="pcp-pmda-denki" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-denki-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">43a3ab55b22fb7168df51daadcc928fba92256e22f5d5c44c22aabfe1f118b94</sum>
        </package>
        <package name="pcp-system-tools" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-system-tools-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">48693ada6cadd87a755847e687dd9b244f685313730655f8bd79e3061aa0eff2</sum>
        </package>
        <package name="pcp-pmda-openvswitch" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-openvswitch-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">48c1293a2c72a437472755b6ced50bde31eb0815e466d446bd18b7836eea3513</sum>
        </package>
        <package name="pcp-libs-devel" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-libs-devel-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">4a33515fe608208de05f52a2957f8e5e42349a26ef1f8806a9b49535c556bb86</sum>
        </package>
        <package name="pcp-import-collectl2pcp" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-import-collectl2pcp-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">4bd60ca836dbbe9bcf0024e3ecefe76a1637a1514b123a43bf487e791a0b60bb</sum>
        </package>
        <package name="pcp-pmda-lmsensors" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-lmsensors-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">517a7d097bc3d5e1a634fb1051c007e4499d92f07d8f6d76ca4f118e63c29c72</sum>
        </package>
        <package name="pcp-pmda-zimbra" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-zimbra-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">5240aa8326b5b227fa8b7b4d9a4377dd4f76d95da075d677daab4e9666d84b36</sum>
        </package>
        <package name="pcp-pmda-hacluster" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-hacluster-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">559d9755c254662a83e31e1fc5942e630c4b082eb2ba259f9354a0ffbaf89de7</sum>
        </package>
        <package name="pcp-pmda-libvirt" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-libvirt-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">5702bca013652d21c7ebc9630eb4cb3822c96534f2afe356fa5da28541b448c8</sum>
        </package>
        <package name="pcp-pmda-unbound" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-unbound-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">58d3e26de742e373174aff95a94ed97521375f81ce7beeddb804cc33706ca96e</sum>
        </package>
        <package name="pcp-export-pcp2elasticsearch" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-export-pcp2elasticsearch-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">5a3b6efdf2d54d3949b42f61719746ace1124c5a68dfa9681990f0b98862432c</sum>
        </package>
        <package name="pcp-pmda-dm" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-dm-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">5ae8bae45d96c3164cd899006aca9e0fcf4d49e2ddd2a298c0d39f08572cfd49</sum>
        </package>
        <package name="pcp-pmda-pdns" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-pdns-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">5c48a8c78156fd810e75b1543a4d0ea2e963a0ef72e2e87a0efe6d6651b39609</sum>
        </package>
        <package name="pcp-pmda-lustre" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-lustre-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">5ff5fa6f09fca7e0cdd768797bf2bb17db273e1e7cee1728ee808e7fc3a36f53</sum>
        </package>
        <package name="pcp-pmda-haproxy" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-haproxy-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">6123e345bfa300659f7fcaea287460042ab6c428f2b5baabd70fc96744a66868</sum>
        </package>
        <package name="pcp-pmda-cifs" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-cifs-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">64c1a4b0065cc10d99a0e0281f98497c83baf3a98766345653fc92930700b0fa</sum>
        </package>
        <package name="pcp-pmda-logger" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-logger-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">6d094d9be0e42e6ab82b0635f56f039448f1fc1f247c2a9cbedff7e619e3dc7a</sum>
        </package>
        <package name="pcp-pmda-netfilter" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-netfilter-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">6fe7a1edbdb9ff123269232f8b129a669ebd686df47a6786257f7a0f2e1dd831</sum>
        </package>
        <package name="pcp-pmda-sockets" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-sockets-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">7829ed5b9cd17547d345bd2c043d461bf7f7a62b80046d4d43aa40cd692da812</sum>
        </package>
        <package name="pcp-export-pcp2xml" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-export-pcp2xml-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">7996788e4a4ce0aec9dde406ec9c5d59624c27d41482e538d1e79c74ff9b0896</sum>
        </package>
        <package name="perl-PCP-LogImport" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>perl-PCP-LogImport-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">7ce3a20507286e2d9abaea9ecd252642009f74bd74a8d5507f906e0c9f01100a</sum>
        </package>
        <package name="pcp-pmda-mic" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-mic-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">7f9574eb8a93b731746016c4515c22508cf00a1cccbfdcaab8889daefe6d5e8f</sum>
        </package>
        <package name="pcp-pmda-smart" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-smart-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">87e78675a46ab7694111eb51c6e87645bdc6f81d9f46b05c7242cbd348ebb298</sum>
        </package>
        <package name="pcp-pmda-apache" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-apache-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">87f85a9a49fb04240610482ad8c62dff1d9f087bfb1c2900b6fa9bc27d7ca5c8</sum>
        </package>
        <package name="pcp-pmda-memcache" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-memcache-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">8e42d62cfd519d929c2bb0325523d7b0326df6e5f6226535e13bddcaa735321d</sum>
        </package>
        <package name="pcp-pmda-mysql" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-mysql-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">8f38580009ea93508538841912fce52d0be757588dce8111ff7f7e09e9fb8323</sum>
        </package>
        <package name="pcp-testsuite" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-testsuite-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">9069c6c02db26825f6e118c7a4737481587b8039e53e81e6192fbef27b62f57d</sum>
        </package>
        <package name="pcp-pmda-lustrecomm" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-lustrecomm-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">96bead59af933e331f7ca125bedf4014b977e456edeb82d2f71b66434a063923</sum>
        </package>
        <package name="pcp" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">9772463a99e0837406fec8f33c5cbf8d00e06069f73b3f4ac35f878e798032e2</sum>
        </package>
        <package name="perl-PCP-LogSummary" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>perl-PCP-LogSummary-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">984620b5d81b42258e8efa75eef44d99c8a71c5699eaddef56b0f4e4297f4302</sum>
        </package>
        <package name="pcp-pmda-docker" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-docker-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">9a13ff894f36a2567b939fac72a0cfd9dd61fc6c0a9f8a0d7822a76bf2757f58</sum>
        </package>
        <package name="pcp-import-iostat2pcp" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-import-iostat2pcp-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">9c632ea2e48bbaf4ab4e0f65d46c583e5229b86150210db4194b8266f25420d6</sum>
        </package>
        <package name="pcp-import-sar2pcp" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-import-sar2pcp-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">9fb8bb91089dd97f5f771faefb8466bbf95005d1b56d9c5a94cfd5e4615ad991</sum>
        </package>
        <package name="pcp-pmda-mounts" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-mounts-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">a9afd97b4fea40b1b52e405eb70d07084ad2b722e81c66e4e17032df0e8dfb91</sum>
        </package>
        <package name="pcp-pmda-activemq" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-activemq-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">ae423363a55ee4333b494edebbb16123e28cde8930ad5a006ede8f4cb139bac3</sum>
        </package>
        <package name="pcp-pmda-openmetrics" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-openmetrics-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">b37750fe893953b07d3dbaf2d4aba24ef40310c909eb3c3ea9f51fe95f2ea234</sum>
        </package>
        <package name="pcp-pmda-summary" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-summary-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">b3b3db9d250a7f6fd20ce9edc62fd151ade9fbb13d71bed7e9f3d08473d1d00b</sum>
        </package>
        <package name="pcp-pmda-ds389log" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-ds389log-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">b50c7915f2d17a2451a07be3131e8e7a03cd42bed09ba589a45d6f9a90823554</sum>
        </package>
        <package name="pcp-conf" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-conf-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">b5f7629cece5b7fc7cf5daca1835f28aa5dfc01e8dcc77457ef535c8d781c2d3</sum>
        </package>
        <package name="pcp-pmda-netcheck" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-netcheck-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">b857d14965d790711edc35e3d9ee63016ad66db066e1b29a70a3e97bd1524a3c</sum>
        </package>
        <package name="pcp-pmda-mongodb" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-mongodb-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">b9e0b33bb1006915e5ba1cca5ddcc610fce0c92b090426229407a0ce6c2aac0f</sum>
        </package>
        <package name="pcp-selinux" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-selinux-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">bf5130aee4df381b912694bcb481841ff42fc3cc0567f51eca4c086239a9c605</sum>
        </package>
        <package name="perl-PCP-PMDA" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>perl-PCP-PMDA-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">c1336bb04735e212b2676a18f5996f3ad503177840fb5ef6d0232e1cefdc3993</sum>
        </package>
        <package name="pcp-export-pcp2graphite" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-export-pcp2graphite-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">c34e101fbeb8a6393f2b20d27938b4783d476321fedf53a17d02ed3aed525777</sum>
        </package>
        <package name="pcp-doc" version="5.3.7" release="22.el8_10" epoch="0" arch="noarch" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-doc-5.3.7-22.el8_10.noarch.rpm</filename>
          <sum type="sha256">c496262ecbcd96d767109453902e367b3dbbbb7a61cee0a4ff551d4c96817441</sum>
        </package>
        <package name="pcp-pmda-trace" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-trace-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">c4bb4860817a5426453347af29f0ab794487c632340247db4d4ba0cfba73ce95</sum>
        </package>
        <package name="pcp-export-pcp2json" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-export-pcp2json-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">c75c293116e3ba2d148c8b24f769439eb9f1baf1291d8be7fcb21ba34adfba1c</sum>
        </package>
        <package name="pcp-libs" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-libs-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">c761aef36501f184cbd8b297b6070d05c34dae53a6e56851934b70ebeffd3237</sum>
        </package>
        <package name="pcp-pmda-gfs2" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-gfs2-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">cdc1f612b5bd2deacd163eb7d97ede2b91a41ac7007300ac447b31ddaa1ea0d1</sum>
        </package>
        <package name="pcp-pmda-bonding" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-bonding-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">d4a8251673723218e6750788629760325e29299df31a256864b9bb630b5b30e4</sum>
        </package>
        <package name="pcp-pmda-json" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-json-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">d5ecaa5f4b217fef1ba2d97364c8a2a7c4aa2604c2b26ae943f99ea860141323</sum>
        </package>
        <package name="pcp-pmda-gluster" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-gluster-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">d844615bf2181999790c81012be534e95be7c1094e43a6229f8ce291c8bad42c</sum>
        </package>
        <package name="pcp-pmda-systemd" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-systemd-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">dc05847e8bc2f1f020a87b18ec02ba54a4b0f07cd076490cd1a78b244e67cb7c</sum>
        </package>
        <package name="pcp-pmda-named" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-named-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">dc05efa8aad3351cb18d84632ffd7707e89a103d83e68ccf5ffa4350fc62953e</sum>
        </package>
        <package name="pcp-pmda-shping" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-shping-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">de55fb041cf58f65af552bc487052994318f59e3ad7540d25ceeed5d7ca207d6</sum>
        </package>
        <package name="python3-pcp" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>python3-pcp-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">e388fb0a2fcc0465e444261eeb63a1c389b4bd85e8d3af982f63a70bfa6e1d2b</sum>
        </package>
        <package name="pcp-export-zabbix-agent" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-export-zabbix-agent-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">e39087e9a1afe8ce0f991b8b43999eac3ba4f37f3d590b0196556df6011071f0</sum>
        </package>
        <package name="pcp-pmda-bind2" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-bind2-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">e41f0c4c556fbe39d6b4f394aff8bfaf9ed6d7a85f178a3e41407584f14126ba</sum>
        </package>
        <package name="pcp-pmda-redis" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-redis-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">e5d3c5bc9e1059cb4108a8cf04cfeba50ccec0651834fa5853090e051bb399b5</sum>
        </package>
        <package name="pcp-pmda-rabbitmq" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-rabbitmq-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">e5d9d3f69bc457e89ea13420d3c30a8aed9471f0f8e1e2f36c4da258bb4f52fe</sum>
        </package>
        <package name="pcp-pmda-bpftrace" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-bpftrace-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">e8b8df02bdcdf05d838783f26bd49de9d6aaddeecf22f0ecbc160d050f504741</sum>
        </package>
        <package name="pcp-pmda-mailq" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-mailq-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">eb02e71aa0f5789290a5ce86e363e793b928318f9f949411797d5eef8f12240c</sum>
        </package>
        <package name="pcp-pmda-zswap" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-zswap-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">ec15208dfa092491c88976841b36522102fa9dedde3c4fb6895ca81a41f369a3</sum>
        </package>
        <package name="pcp-pmda-rsyslog" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-rsyslog-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">f03e190b388323f5bda27ef1c40af43b4c443b9188a993f932d701cec2bd0612</sum>
        </package>
        <package name="pcp-pmda-news" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-news-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">f9ea863158f8fb9fa2f27d08cc1fb4bfce8240bbe570412ad50d201fef2ded15</sum>
        </package>
        <package name="pcp-pmda-gpsd" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-gpsd-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">fccc7a9c8ba1b95e3db9c9b8de934dfa0acdc9d4882b969e7575683af4075450</sum>
        </package>
        <package name="pcp-pmda-nfsclient" version="5.3.7" release="22.el8_10" epoch="0" arch="s390x" src="pcp-5.3.7-22.el8_10.src.rpm">
          <filename>pcp-pmda-nfsclient-5.3.7-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">fe9358f631e704ca97bdf4d5db259d4e92a7ae6818ee028d92c2b3941ae867db</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6908</id>
    <title>Important: go-toolset:rhel8 security update</title>
    <issued date="2024-09-23 00:00:00"/>
    <updated date="2024-09-24 09:39:42"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>go-toolset:rhel8 security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. 

Security Fix(es):

* net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)
* go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155)
* encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)
* go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6908" id="RHSA-2024:6908" type="rhsa" title="RHSA-2024:6908"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24791" id="CVE-2024-24791" type="cve" title="CVE-2024-24791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34155" id="CVE-2024-34155" type="cve" title="CVE-2024-34155"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34156" id="CVE-2024-34156" type="cve" title="CVE-2024-34156"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34158" id="CVE-2024-34158" type="cve" title="CVE-2024-34158"/>
      <reference href="https://bugzilla.redhat.com/2295310" id="2295310" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310527" id="2310527" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310528" id="2310528" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310529" id="2310529" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6908.html" id="ALSA-2024:6908" type="self" title="ALSA-2024:6908"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="go-toolset" stream="rhel8" version="8100020240923132138" context="9edba152" arch="s390x"/>
        <package name="golang" version="1.21.13" release="2.module_el8.10.0+3895+92d465e0" epoch="0" arch="s390x" src="golang-1.21.13-2.module_el8.10.0+3895+92d465e0.src.rpm">
          <filename>golang-1.21.13-2.module_el8.10.0+3895+92d465e0.s390x.rpm</filename>
          <sum type="sha256">0efe9d983186220ade19d46ecaf60e55f2d3734cc8ae50e644a76e835027d694</sum>
        </package>
        <package name="golang-docs" version="1.21.13" release="2.module_el8.10.0+3895+92d465e0" epoch="0" arch="noarch" src="golang-1.21.13-2.module_el8.10.0+3895+92d465e0.src.rpm">
          <filename>golang-docs-1.21.13-2.module_el8.10.0+3895+92d465e0.noarch.rpm</filename>
          <sum type="sha256">13a9733907a2ea64df5d675bb139d23d156ddc50f6ecb093bc1a4b9202ad5cf5</sum>
        </package>
        <package name="golang-tests" version="1.21.13" release="2.module_el8.10.0+3895+92d465e0" epoch="0" arch="noarch" src="golang-1.21.13-2.module_el8.10.0+3895+92d465e0.src.rpm">
          <filename>golang-tests-1.21.13-2.module_el8.10.0+3895+92d465e0.noarch.rpm</filename>
          <sum type="sha256">17655f260bf27f756693097c8ff7e567fbd12dda4b3bd8fdb9bf780f7c4fca33</sum>
        </package>
        <package name="golang-bin" version="1.21.13" release="2.module_el8.10.0+3895+92d465e0" epoch="0" arch="s390x" src="golang-1.21.13-2.module_el8.10.0+3895+92d465e0.src.rpm">
          <filename>golang-bin-1.21.13-2.module_el8.10.0+3895+92d465e0.s390x.rpm</filename>
          <sum type="sha256">399d92a391adb1d842c66fb037b65a3d1c899524e21ce917bf9e0575a847d8ce</sum>
        </package>
        <package name="go-toolset" version="1.21.13" release="1.module_el8.10.0+3895+92d465e0" epoch="0" arch="s390x" src="go-toolset-1.21.13-1.module_el8.10.0+3895+92d465e0.src.rpm">
          <filename>go-toolset-1.21.13-1.module_el8.10.0+3895+92d465e0.s390x.rpm</filename>
          <sum type="sha256">9796db0484143169ab0214cd15fd46d9cc58097f8ed733b0aea3d2bff2134815</sum>
        </package>
        <package name="golang-src" version="1.21.13" release="2.module_el8.10.0+3895+92d465e0" epoch="0" arch="noarch" src="golang-1.21.13-2.module_el8.10.0+3895+92d465e0.src.rpm">
          <filename>golang-src-1.21.13-2.module_el8.10.0+3895+92d465e0.noarch.rpm</filename>
          <sum type="sha256">bb197d7f855f5d6626fda4479df637125c4e8c9d24ed72f39fafab27c8d504e5</sum>
        </package>
        <package name="golang-misc" version="1.21.13" release="2.module_el8.10.0+3895+92d465e0" epoch="0" arch="noarch" src="golang-1.21.13-2.module_el8.10.0+3895+92d465e0.src.rpm">
          <filename>golang-misc-1.21.13-2.module_el8.10.0+3895+92d465e0.noarch.rpm</filename>
          <sum type="sha256">c69544f2afe908abf7bb1b4aa6633d2e1b30c3238b7538c7810b94a4c6e003f2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6961</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2024-09-24 00:00:00"/>
    <updated date="2024-09-24 09:28:28"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.  The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately.  Documentation for Python is provided in the python3.12-docs package.  Packages containing additional libraries for Python are generally named with the "python3.12-" prefix.  For the unversioned "python" executable, see manual page "unversioned-python".

Security Fix(es):

* python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)
* cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923)
* python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service (CVE-2024-8088)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6961" id="RHSA-2024:6961" type="rhsa" title="RHSA-2024:6961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4032" id="CVE-2024-4032" type="cve" title="CVE-2024-4032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6923" id="CVE-2024-6923" type="cve" title="CVE-2024-6923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8088" id="CVE-2024-8088" type="cve" title="CVE-2024-8088"/>
      <reference href="https://bugzilla.redhat.com/2292921" id="2292921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302255" id="2302255" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2307370" id="2307370" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6961.html" id="ALSA-2024:6961" type="self" title="ALSA-2024:6961"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.12-rpm-macros" version="3.12.5" release="2.el8_10" epoch="0" arch="noarch" src="python3.12-3.12.5-2.el8_10.src.rpm">
          <filename>python3.12-rpm-macros-3.12.5-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">0c827f3386b8ea6e6f9e14048084a9fa9b71fa9a2a2b5ad57dc72a24a88f7e5c</sum>
        </package>
        <package name="python3.12-libs" version="3.12.5" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el8_10.src.rpm">
          <filename>python3.12-libs-3.12.5-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">0cf68343bac1d89c35cc7193ec1c89959dfd215de21f4dfd01d66e4a563e363c</sum>
        </package>
        <package name="python3.12" version="3.12.5" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el8_10.src.rpm">
          <filename>python3.12-3.12.5-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">4def7f1a3ab4b5309af4911aae782ef0519c22fe2be6a8f2ced41ea65864822e</sum>
        </package>
        <package name="python3.12-devel" version="3.12.5" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el8_10.src.rpm">
          <filename>python3.12-devel-3.12.5-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">8a922cf905d3201fb9d8d51ec4ae039ef62bfe8e9916679f67e0b6f739e99fe5</sum>
        </package>
        <package name="python3.12-tkinter" version="3.12.5" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el8_10.src.rpm">
          <filename>python3.12-tkinter-3.12.5-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">c886117f31d40289f617873762ea9ae75a9c8f04c129376eeda359e788623939</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6962</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-09-24 00:00:00"/>
    <updated date="2024-09-24 09:21:37"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)
* cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923)
* python: cpython: From NVD collector (CVE-2024-8088)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6962" id="RHSA-2024:6962" type="rhsa" title="RHSA-2024:6962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4032" id="CVE-2024-4032" type="cve" title="CVE-2024-4032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6923" id="CVE-2024-6923" type="cve" title="CVE-2024-6923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8088" id="CVE-2024-8088" type="cve" title="CVE-2024-8088"/>
      <reference href="https://bugzilla.redhat.com/2292921" id="2292921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302255" id="2302255" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2307370" id="2307370" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6962.html" id="ALSA-2024:6962" type="self" title="ALSA-2024:6962"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.11-tkinter" version="3.11.9" release="7.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el8_10.src.rpm">
          <filename>python3.11-tkinter-3.11.9-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">15ceda730dc122ae831765e4806843d384afa8e307cc55c30d0e1c681589aa78</sum>
        </package>
        <package name="python3.11-rpm-macros" version="3.11.9" release="7.el8_10" epoch="0" arch="noarch" src="python3.11-3.11.9-7.el8_10.src.rpm">
          <filename>python3.11-rpm-macros-3.11.9-7.el8_10.noarch.rpm</filename>
          <sum type="sha256">3cd43458664b79cc0ee7be7428bedfc9d9d38e821769532312fa90d1a524685f</sum>
        </package>
        <package name="python3.11" version="3.11.9" release="7.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el8_10.src.rpm">
          <filename>python3.11-3.11.9-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">7bd92cfbe9030ed9f3a3c9855846312791377d896a999c837afe4f1411f0b791</sum>
        </package>
        <package name="python3.11-devel" version="3.11.9" release="7.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el8_10.src.rpm">
          <filename>python3.11-devel-3.11.9-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">a4b695b1223e27926c98fa2b94759fb901161ff47fa499e7a2a99f7c91a36552</sum>
        </package>
        <package name="python3.11-libs" version="3.11.9" release="7.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el8_10.src.rpm">
          <filename>python3.11-libs-3.11.9-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">c4676662b824170f24459628a1b3d1cc7fd0460c9b53fcdecc3f90fed763a621</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6963</id>
    <title>Moderate: gtk3 security update</title>
    <issued date="2024-09-24 00:00:00"/>
    <updated date="2024-09-24 11:32:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gtk3 security update</summary>
    <description>The GTK+ library provides a multi-platform toolkit for creating graphical user interfaces. The gtk3 packages contain GTK+ version 3.

Security Fix(es):

* gtk3: gtk2: Library injection from CWD (CVE-2024-6655)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6963" id="RHSA-2024:6963" type="rhsa" title="RHSA-2024:6963"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6655" id="CVE-2024-6655" type="cve" title="CVE-2024-6655"/>
      <reference href="https://bugzilla.redhat.com/2297098" id="2297098" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6963.html" id="ALSA-2024:6963" type="self" title="ALSA-2024:6963"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="gtk3-immodule-xim" version="3.22.30" release="12.el8_10" epoch="0" arch="s390x" src="gtk3-3.22.30-12.el8_10.src.rpm">
          <filename>gtk3-immodule-xim-3.22.30-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">0649655ac02f9818a36761fa2e79f637396c842781a85c861ced8fa3aca3d7e1</sum>
        </package>
        <package name="gtk3-devel" version="3.22.30" release="12.el8_10" epoch="0" arch="s390x" src="gtk3-3.22.30-12.el8_10.src.rpm">
          <filename>gtk3-devel-3.22.30-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">68ab6e4baab20f5bac18c2778d88b8fc356494e7b809ea91198f74379325f053</sum>
        </package>
        <package name="gtk3" version="3.22.30" release="12.el8_10" epoch="0" arch="s390x" src="gtk3-3.22.30-12.el8_10.src.rpm">
          <filename>gtk3-3.22.30-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">ae9aa90933f01cfe965844578bbd3f2ec265192da04ab68d21bbb1d75aa93f9b</sum>
        </package>
        <package name="gtk-update-icon-cache" version="3.22.30" release="12.el8_10" epoch="0" arch="s390x" src="gtk3-3.22.30-12.el8_10.src.rpm">
          <filename>gtk-update-icon-cache-3.22.30-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">b8a6a0eb705bd59600ef96453429d11b906df665e90af547e5fe649e02d340c5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6964</id>
    <title>Moderate: virt:rhel and virt-devel:rhel security update</title>
    <issued date="2024-09-24 00:00:00"/>
    <updated date="2024-09-24 14:46:40"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>virt:rhel and virt-devel:rhel security update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* QEMU: virtio: DMA reentrancy issue leads to double free vulnerability (CVE-2024-3446)
* QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure (CVE-2024-7409)
* libnbd: NBD server improper certificate validation (CVE-2024-7383)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6964" id="RHSA-2024:6964" type="rhsa" title="RHSA-2024:6964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3446" id="CVE-2024-3446" type="cve" title="CVE-2024-3446"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7383" id="CVE-2024-7383" type="cve" title="CVE-2024-7383"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7409" id="CVE-2024-7409" type="cve" title="CVE-2024-7409"/>
      <reference href="https://bugzilla.redhat.com/2274211" id="2274211" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302487" id="2302487" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302865" id="2302865" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6964.html" id="ALSA-2024:6964" type="self" title="ALSA-2024:6964"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="virt" stream="rhel" version="8100020240407121213" context="9edba152" arch="s390x"/>
        <package name="qemu-kvm-block-curl" version="6.2.0" release="53.module_el8.10.0+3897+eb84924d" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>qemu-kvm-block-curl-6.2.0-53.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">0268de0ce794e044d6123932a9b5c51885591515f26af96dddb14a398c2f4ac9</sum>
        </package>
        <package name="nbdkit-basic-plugins" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-basic-plugins-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">04adc669a1655a4f4dcadbdd520afd5f6f5dc82b44738fcabde3a280f36fb90f</sum>
        </package>
        <package name="python3-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>python3-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">05372f9ad377c74c0d221dacf23c7510171afbb751c03585fd3c09513d7e1bde</sum>
        </package>
        <package name="qemu-kvm-core" version="6.2.0" release="53.module_el8.10.0+3897+eb84924d" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>qemu-kvm-core-6.2.0-53.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">07f1bf7c4e16811633c6506be6ffba0b7e56aeffe80b9f2ca0dae55bdfa9cee3</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-nwfilter-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">10873d1e7f2c099d2c50f356ead84ac6ebd44352a522d1ace4a0070a843b2c67</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-kvm-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">10f4cfb0cdbd249d55e614fb0407b9ee89a3cd8e3950f0365b6cb213bb5fbc60</sum>
        </package>
        <package name="libguestfs-tools" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-tools-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">116835a3e003417d7186479fbf47960a09588a3ace207d4f34da6a19ab8c07de</sum>
        </package>
        <package name="libnbd-devel" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="s390x" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>libnbd-devel-1.6.0-6.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">13ff008c635e7416a262ccfc52419629b03bcd3da12d32abdc3ee37072fb40ec</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="6.2.0" release="53.module_el8.10.0+3897+eb84924d" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>qemu-kvm-block-rbd-6.2.0-53.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">17418efddd9c38c2b2f835c4ea990f5dfc83e307f64d3dad6fc323f10292892c</sum>
        </package>
        <package name="netcf-devel" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-devel-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1888edc09e8d44539c2c7b84b7a8df91477b8a725fe93436ac4d71106e177d48</sum>
        </package>
        <package name="libguestfs-javadoc" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-javadoc-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">18b9d6c98999a3b289a865504944fb3dc9b2994eff5461933549add50c6faa5b</sum>
        </package>
        <package name="nbdkit" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">1a6f5649d6acd35dd28d2d99042056bc8308fe0910ce6322bf27b0ec71bbee4f</sum>
        </package>
        <package name="hivex-devel" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>hivex-devel-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1aa145aa6a3f900531fc1c8f1c161197f37539d113d47c14efd9c66def20940a</sum>
        </package>
        <package name="qemu-guest-agent" version="6.2.0" release="53.module_el8.10.0+3897+eb84924d" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>qemu-guest-agent-6.2.0-53.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">1ba3ce782839f0a61c0c4b1aa01946cbe5fa36a2f3d712d041f78fa606a3b8b1</sum>
        </package>
        <package name="libnbd" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="s390x" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">1f3f644969c542586e0a5467676e856c27df1546e6807a8a890dfd446f76c6d6</sum>
        </package>
        <package name="nbdkit-python-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-python-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">23c394ecc23e544232d78956b610b1403324cb6a46a3d46adc0fd256f19a1e4b</sum>
        </package>
        <package name="nbdkit-tar-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tar-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">2521bcc64ce8e24df611cf9194277fd5f7856f3df3f72be3276748b10d23beb3</sum>
        </package>
        <package name="nbdkit-bash-completion" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="noarch" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-bash-completion-1.24.0-5.module_el8.8.0+3485+7cffc4a3.noarch.rpm</filename>
          <sum type="sha256">254dfbf64036ae05d930d81be90202718fba7b341f0457de4a29ecfca3aea646</sum>
        </package>
        <package name="nbdkit-xz-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-xz-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">263ad615e21aaba0dce020cf1ad8b569c3860640d8074e9f74035ff925c409d0</sum>
        </package>
        <package name="libtpms-devel" version="0.9.1" release="2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3" epoch="0" arch="s390x" src="libtpms-0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3.src.rpm">
          <filename>libtpms-devel-0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3.s390x.rpm</filename>
          <sum type="sha256">269f20560a0beff0b38ed88964a0be1d0318c9057569bd209332e0a87ddbae0b</sum>
        </package>
        <package name="nbdkit-gzip-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-gzip-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">27675a3171d769e7f9ea9b7fa63303b3e51f8221a68feaee1f16aeb7d658dccb</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">2820368b6f9e9d4e64dc753ff9238fa06e4f9b5ac53c076a3f90393b5848892e</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-gluster" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-driver-storage-gluster-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">28a6d018fa346678264dd6795f440bb4b74832bd6991870a7498ef54b5d319d3</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">2a16b71ccb61cf973f228b9527379cdcdac7e779c9d8a850aac7b33dc3e741db</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-nodedev-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">361289dad4ffd3db0c0ed71866ef64564becf279898cdf499ad6741ea693c5d4</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-config-network-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">36c7410a276d0c05b62de2c4f759cbfd213afee70d18941b83714a439847d199</sum>
        </package>
        <package name="lua-guestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>lua-guestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">36d15a85e154608cf2bc661120c8a573356cb3e0e1dc77a94387aa3c8bce90ef</sum>
        </package>
        <package name="libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">40e3ffa7c3e67b0fe9a110dbe8bf267fa9906f358a3bd81135b33a624e6429ba</sum>
        </package>
        <package name="ruby-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ruby-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">4428b40d29de3a3eda15340b2cbacebe838ba363b3897a1a91f904b9f2b4f8b9</sum>
        </package>
        <package name="libvirt-client" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-client-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">48d67c7ebd04f63f2d5e2c0d4e8604ab8a9fb72bb8c7d5e4622809ec50a3847a</sum>
        </package>
        <package name="nbdkit-basic-filters" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-basic-filters-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">494ad345b2b9b009436ba9a8c8c6bb245e8617e921dae51ab6d9281e95999f31</sum>
        </package>
        <package name="nbdkit-curl-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-curl-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">4fd1a6bbe855d7c4068fcf080b4b0b15b367ef7f635ac869b7bddb1698dafa01</sum>
        </package>
        <package name="qemu-kvm-common" version="6.2.0" release="53.module_el8.10.0+3897+eb84924d" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>qemu-kvm-common-6.2.0-53.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">5542f50cc85f74d40e80dd1cc6f5bc34754321031f79caed799221ab255ee187</sum>
        </package>
        <package name="libvirt-lock-sanlock" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-lock-sanlock-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">5a35761e748522ef61aa778a9cffc1f7e4bb21ed904727f6a7f307d3769358ce</sum>
        </package>
        <package name="libguestfs-bash-completion" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-bash-completion-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">5a67ce33e944ee07d6ea976afa13f8c832ce4be22f124591ace620dfe08b5178</sum>
        </package>
        <package name="libguestfs-gobject-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gobject-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">5e05d955e58bc16ccb3e4097f338dd34af18225ef9bcd2b420d794a9efdd269b</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">5e2c2a5ff62ebbfcb6a922079204a8b7b0873f33628d274248fca981206b0721</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-storage-core-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">66eda12af76d14fceb10af042f8b1113d6aa0fceabc8b145f7998e89f221bfe9</sum>
        </package>
        <package name="libvirt-daemon" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">69088558d53f492d1dbc8a22e18e6b3f7cb8ed39126b252d9181f6deab068ec2</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="6.2.0" release="53.module_el8.10.0+3897+eb84924d" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>qemu-kvm-block-iscsi-6.2.0-53.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">6ae71fab532c79e3e268c7f37fb681d4b21fdf5aab1ee2fc72d74c928526ff28</sum>
        </package>
        <package name="nbdkit-tmpdisk-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tmpdisk-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">6f4728c5aa7cc03d70b241d6947aff1fe49546aac4cc62bd01a59c1b1b73ba35</sum>
        </package>
        <package name="libguestfs-java-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-java-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">6fc6fe19b2e83d70d5f240d776ccc00a181870a485d39667fccb62ec0b851f02</sum>
        </package>
        <package name="nbdkit-server" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-server-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">706c1dd5780f1e48f883702f6c86a985bd057078fcd41326947b283625a77e05</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-driver-secret-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">75a15044807d6e3c1220c45dd4cf1bf48d3d3c9708dc4303c07c1ba781716fec</sum>
        </package>
        <package name="perl-Sys-Guestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>perl-Sys-Guestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">77c035cdcf2f7e819dcb6d76b9ba12ae63a6f07d615a9a435b7ec2dc8ca93330</sum>
        </package>
        <package name="libguestfs-gfs2" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gfs2-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">7ee36ba216591f26a055c687e5e75e054585c69c86b085d8966cb419ddeb3362</sum>
        </package>
        <package name="libguestfs-gobject" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gobject-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">8292ca96b97184b2ca5475901b46b09f715adbe99d1a5983c9ad4a0d2b3d72bb</sum>
        </package>
        <package name="qemu-img" version="6.2.0" release="53.module_el8.10.0+3897+eb84924d" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>qemu-img-6.2.0-53.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">83c1001346d8b82eff5e823f78aa2609db1018e4e91ecfdc897d4abcda2cf404</sum>
        </package>
        <package name="netcf-libs" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-libs-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">843b61e4019e8cec44d5f5823d3c8c0b803997791aecef6ff1023224147cd6f8</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-driver-storage-logical-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">851a5240f186a9e7782c1d2e0e52fa4914238d0d2f3d9a3ca53859dce3d67189</sum>
        </package>
        <package name="nbdkit-linuxdisk-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-linuxdisk-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">8673003aa4610f82cbe152021387ac3c6c59d730a79b446aad432030e20f5eff</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="6.2.0" release="53.module_el8.10.0+3897+eb84924d" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>qemu-kvm-block-ssh-6.2.0-53.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">874aedf77c38f1cdabc7005fb1aac44ae0424777fe31bb10524a85d543932248</sum>
        </package>
        <package name="swtpm-tools" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-tools-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">87ce1c2ecc368965a92cf71a29a7cb1331508c7c86394cfaa7e4e87d20897d7b</sum>
        </package>
        <package name="nbdkit-tar-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tar-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">87ec102223607b5d8760ee3d8998a48b3fbce6a1abe6d8056782c1d9f94513ad</sum>
        </package>
        <package name="supermin-devel" version="5.2.1" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="supermin-5.2.1-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>supermin-devel-5.2.1-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">8a47307269cf95719225e1e27dcd1cebdf6a0481948e4a044db972af12de9ce3</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-driver-storage-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">8c9360889cffa607ab7597b5b39d6a1765406030c823d970fab80ba8b513b647</sum>
        </package>
        <package name="libguestfs-man-pages-uk" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-man-pages-uk-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">8cd1a80b657a0373e6dcf0b6699e7574c9874db489201985b16bc1d1d78cc55b</sum>
        </package>
        <package name="swtpm-tools-pkcs11" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-tools-pkcs11-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">8e7eeb060f1253ff8a48085d0b452c2ba2c1837e286fd23d91426f255d72398a</sum>
        </package>
        <package name="qemu-kvm" version="6.2.0" release="53.module_el8.10.0+3897+eb84924d" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>qemu-kvm-6.2.0-53.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">8fd9e820d1658f4b88a354fcad1f6e4c752b8a656248f1610cce40ddd62aa48f</sum>
        </package>
        <package name="libguestfs-rescue" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-rescue-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">92093c28f6226504668df61e0bc2c5d1e7d8bf505a8bf762cdd5d2e7a50bb52f</sum>
        </package>
        <package name="netcf" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">9268b4ab854af88a5e511f78b47cf3c4acd66d76f7ea901452f6efd3f9c8bc7c</sum>
        </package>
        <package name="libguestfs-man-pages-ja" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-man-pages-ja-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">968dd115e865d941a07d1728940d84bdfef4f26d43d39aa225f4f4a5a821c89d</sum>
        </package>
        <package name="libguestfs-rsync" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-rsync-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">9cc94d5cec35a9f048fa74c69a8b7d6a0ec48c14074297bb564b91f4cdc4c54f</sum>
        </package>
        <package name="hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">9d259d5ff0ee30b3a2a8e5f897675750f74741ed06d50d3623cf469d1d0f01d8</sum>
        </package>
        <package name="libiscsi" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">a1c871e87ebd136bfd498f13824563fd7428fcaf66bcffb341cfbb8370c2a18d</sum>
        </package>
        <package name="swtpm" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">a7fbed17619ce4d6d7d43a459be652ec92882b41903ac386ebfd9815806bc622</sum>
        </package>
        <package name="perl-Sys-Virt" version="8.0.0" release="1.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="perl-Sys-Virt-8.0.0-1.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>perl-Sys-Virt-8.0.0-1.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">a8b115eb9ca2707d1d7f800ac1b7730dcc6718168ff355f065464e6778ef5929</sum>
        </package>
        <package name="nbdkit-nbd-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-nbd-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">a9427bee7f157a63f2acd2357032ce829e0561b24193d204072502adad4aa52e</sum>
        </package>
        <package name="libvirt-wireshark" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-wireshark-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">aa6eee72b29e4849c3797c2a17eda03bea12f7b67bcdfe743742a470d30c8eaa</sum>
        </package>
        <package name="python3-libnbd" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="s390x" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>python3-libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">af55cd779b02d3ce09e49f1e8a86893252ce44c2b04cb115e13107018b32841d</sum>
        </package>
        <package name="nbdkit-example-plugins" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-example-plugins-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">b10c0d094e84d5c035dae70b4db36c311eb7ff9cbee00c8443848f049a600ae4</sum>
        </package>
        <package name="libnbd-bash-completion" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="noarch" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>libnbd-bash-completion-1.6.0-6.module_el8.10.0+3897+eb84924d.noarch.rpm</filename>
          <sum type="sha256">b3fd3388c6c1d03a6cbb0a2c371b7e5e0fbfdce2b1481e96c9ad7cb2ef12147d</sum>
        </package>
        <package name="libguestfs-appliance" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-appliance-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">b5add06502e5bda5f39f712640e2ab0e8cf539b7a90370c6c1fd963bb73bc7d7</sum>
        </package>
        <package name="libiscsi-utils" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-utils-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">b6eb101dc2787a7d79b4fe51913319933f5927d1816ea03592d2be849ce21faf</sum>
        </package>
        <package name="ruby-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ruby-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">b8696f7658b7872cb5f4e9fe2319e00ec6b668fe0e9adea787890cb9500e0223</sum>
        </package>
        <package name="nbdkit-ssh-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-ssh-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">b9b590364d69f18da851dea269d4774ff711f44e3ace9b3304e87fe25f26aaa5</sum>
        </package>
        <package name="qemu-kvm-docs" version="6.2.0" release="53.module_el8.10.0+3897+eb84924d" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>qemu-kvm-docs-6.2.0-53.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">bba25cbf1edf0edd4ecf056c8821b82a5c468ed9d5d743a95729899a49a1db51</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">bc058445b194c8733733f1678aedd9b5d8e604881097518ef9cc03aaeb60ed42</sum>
        </package>
        <package name="libvirt-libs" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-libs-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">bc4094bfc0c58c695c2689c176d24ffb51a958735017177d881019bb364845d6</sum>
        </package>
        <package name="virt-dib" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>virt-dib-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">bf4b5929cf910fb7e4671e32c9ac2ce2f456e8b1e577cb0f4f33a0df8d316c27</sum>
        </package>
        <package name="libguestfs-java" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-java-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">bfc05f2dc57991bad44654221ea88f653c916e80637290b69c96e3e0f5aa55a8</sum>
        </package>
        <package name="libvirt-nss" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-nss-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">c1469eac4d0088ca6b395e318562674539b2174257260c4f8b2db644e4a60b3c</sum>
        </package>
        <package name="libvirt-dbus" version="1.3.0" release="2.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libvirt-dbus-1.3.0-2.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libvirt-dbus-1.3.0-2.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">c20042be5784c1f4323e5590891be2a0e33244acff6b45149f36a2eef834064b</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-network-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">c3c0a9b2f00b1174b43b48149b89ad8d0d1019d36a68c3b7853ca14d3c124c96</sum>
        </package>
        <package name="libtpms" version="0.9.1" release="2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3" epoch="0" arch="s390x" src="libtpms-0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3.src.rpm">
          <filename>libtpms-0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3.s390x.rpm</filename>
          <sum type="sha256">c3ffd3692f5d8a7b71c37dad7b8413e74a7099fbb3af07604cec46ee00eb50fd</sum>
        </package>
        <package name="libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">c685dcd2fb41a700a866919788441d7c80c9a10b9757ea843e7a56c67a5d4be2</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-config-nwfilter-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">c8ead4f23780756f437c40b13e61ac634f1f26c63c83693d2a653d645df56194</sum>
        </package>
        <package name="libguestfs-winsupport" version="8.10" release="1.module_el8.10.0+3768+dfd76e10" epoch="0" arch="s390x" src="libguestfs-winsupport-8.10-1.module_el8.10.0+3768+dfd76e10.src.rpm">
          <filename>libguestfs-winsupport-8.10-1.module_el8.10.0+3768+dfd76e10.s390x.rpm</filename>
          <sum type="sha256">ccf203e75a1c0f0de8598ecc0fce3f409a12f34189a7fae21d58c8311062f236</sum>
        </package>
        <package name="swtpm-libs" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-libs-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">d077f2d1f54aa47907a883e12d46f0632e33ad5141bd16a25759a580f851b91c</sum>
        </package>
        <package name="libiscsi-devel" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-devel-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">d45a7d8438477f375ed86276eea276fd3bb0965844cb8733a09691fc68d730db</sum>
        </package>
        <package name="nbdkit-devel" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-devel-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">d5bc58eda3110ad1589ab9d239e347e155bf59eaee69e0bea028f67d9e0ea216</sum>
        </package>
        <package name="swtpm-devel" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-devel-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">d69840154560e2ca3f4ea1315bfcca103b2260692f2c3d5fa1a76dbed7ddfbe1</sum>
        </package>
        <package name="libvirt-devel" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-devel-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">db045ac10b55beaaecb34b845985f7edc9c34f3eb2ccaa07ee42b260e448b9e1</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-storage-disk-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">de7b0981e08e2e31b36a792113f40200c7aa8d33d716c515c5923321405b8aca</sum>
        </package>
        <package name="supermin" version="5.2.1" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="supermin-5.2.1-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>supermin-5.2.1-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">e15b529769bbaa1d035eb7e4d4f58f4757e58772523d45cb07cc7533eeef0057</sum>
        </package>
        <package name="python3-libvirt" version="8.0.0" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="libvirt-python-8.0.0-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>python3-libvirt-8.0.0-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">e36c5a8c03f3393622b5dd5badefcd4a05ee01b8de17de28812017ddfda63954</sum>
        </package>
        <package name="libvirt" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">e4f798b5b68b7544b99781579cac2ae0eda08df09c3fc801293c60e8ce5d9e24</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">e8fc8e7fb95aaf6528729420fc18206dbeb55eec274769d17da8f89981796875</sum>
        </package>
        <package name="python3-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>python3-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">ec11102e66953715d97704c820c0effcd80944fdd525efca9645f70b1cfa2fa9</sum>
        </package>
        <package name="nbdfuse" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="s390x" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>nbdfuse-1.6.0-6.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">ec2a6b02d5f84f5b5788518aed5038b701ea7ef7c7b7d4c85f8320106d4a9d05</sum>
        </package>
        <package name="libguestfs-inspect-icons" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-inspect-icons-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">ece57f7c833d85599725786783875d496fd9d38644cdc96ce23e4d73c6d5e4c9</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-driver-qemu-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">f223dc638a874e751e57aae9bce8c6cd2094eb7dc1ae8b79d0324eb19a727697</sum>
        </package>
        <package name="nbdkit-gzip-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-gzip-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">f3befb065571d5207296b7d7f2db60348cb935ec26b3fcf7a5db2f66dbec7dc5</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="8.0.0" release="23.2.module_el8.10.0+3869+b8959270" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>libvirt-daemon-driver-interface-8.0.0-23.2.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">f643f2073be4de6c72dd55c2643aa6545240dced4f24ee34e0eecf60fd387b28</sum>
        </package>
        <package name="libvirt-docs" version="8.0.0" release="23.2.module_el8.10.0+3867+f3f9981a" epoch="0" arch="s390x" src="libvirt-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.src.rpm">
          <filename>libvirt-docs-8.0.0-23.2.module_el8.10.0+3867+f3f9981a.s390x.rpm</filename>
          <sum type="sha256">f97fd040aebd5aef045149e684d54a32a8ab5f506aadd8fbc47ec9592eba81c6</sum>
        </package>
        <package name="libguestfs-xfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-xfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">fa8ce4ce15f9b8d5753db18aa569fdbb4c636e16d88c6bb83fc588c594c1ee90</sum>
        </package>
        <package name="perl-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>perl-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">fcc1bade9f3d715b09d2679d6efc9fd94b2faa9e912dcae68dbc372613f90965</sum>
        </package>
        <package name="libguestfs-tools-c" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-tools-c-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">fce060540b90878b0d21bfa525965ac06b8622b0a7cf824c54761c92b79f0764</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6969</id>
    <title>Moderate: container-tools:rhel8 security update</title>
    <issued date="2024-09-24 00:00:00"/>
    <updated date="2024-09-24 14:49:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>container-tools:rhel8 security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)
* golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)
* golang: net/mail: comments in display names are incorrectly handled (CVE-2024-24784)
* golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)
* net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6969" id="RHSA-2024:6969" type="rhsa" title="RHSA-2024:6969"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45290" id="CVE-2023-45290" type="cve" title="CVE-2023-45290"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24783" id="CVE-2024-24783" type="cve" title="CVE-2024-24783"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24784" id="CVE-2024-24784" type="cve" title="CVE-2024-24784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24788" id="CVE-2024-24788" type="cve" title="CVE-2024-24788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24791" id="CVE-2024-24791" type="cve" title="CVE-2024-24791"/>
      <reference href="https://bugzilla.redhat.com/2268017" id="2268017" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268019" id="2268019" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268021" id="2268021" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2279814" id="2279814" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295310" id="2295310" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6969.html" id="ALSA-2024:6969" type="self" title="ALSA-2024:6969"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="container-tools" stream="rhel8" version="8100020240813140059" context="20125149" arch="s390x"/>
        <package name="criu-libs" version="3.18" release="5.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>criu-libs-3.18-5.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">1962469cfa08c792359c82d44b5410abab23b62f897edccd5283944edabe867a</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="13.module_el8.10.0+3898+7a25cb1a" epoch="4" arch="s390x" src="podman-4.9.4-13.module_el8.10.0+3898+7a25cb1a.src.rpm">
          <filename>podman-tests-4.9.4-13.module_el8.10.0+3898+7a25cb1a.s390x.rpm</filename>
          <sum type="sha256">1e32d156f7b681ca4bf2156841fa32c3ead3c30e212cdebb352603529b75b8b6</sum>
        </package>
        <package name="netavark" version="1.10.3" release="1.module_el8.10.0+3876+e55593a8" epoch="2" arch="s390x" src="netavark-1.10.3-1.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>netavark-1.10.3-1.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">22f05aa438e94dcdf27f2a11498a91bafbc680d2eb3e7949e845aa8bf051a0f5</sum>
        </package>
        <package name="skopeo-tests" version="1.14.5" release="3.module_el8.10.0+3876+e55593a8" epoch="2" arch="s390x" src="skopeo-1.14.5-3.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>skopeo-tests-1.14.5-3.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">29a7b74a18e0a1b63825ee2eb5c3f36a2a3971da39a546401e9c9d07b00cd50e</sum>
        </package>
        <package name="fuse-overlayfs" version="1.13" release="1.module_el8.10.0+3859+6ae70a0e" epoch="0" arch="s390x" src="fuse-overlayfs-1.13-1.module_el8.10.0+3859+6ae70a0e.src.rpm">
          <filename>fuse-overlayfs-1.13-1.module_el8.10.0+3859+6ae70a0e.s390x.rpm</filename>
          <sum type="sha256">29b30d0c5708c9391957eaf454601ebef98ef92f93cfcf35fc2ac68ca6e95c87</sum>
        </package>
        <package name="python3-criu" version="3.18" release="5.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>python3-criu-3.18-5.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">311d1d5a7cbbe515f773456c7925176b0f726957791911831a4f418e1fdf7b3b</sum>
        </package>
        <package name="containers-common" version="1" release="82.module_el8.10.0+3876+e55593a8" epoch="2" arch="s390x" src="containers-common-1-82.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>containers-common-1-82.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">4213618237f4e9c274bf08dbbccaaf202cbb700ea739218d364bb09c06221925</sum>
        </package>
        <package name="python3-podman" version="4.9.0" release="2.module_el8.10.0+3876+e55593a8" epoch="0" arch="noarch" src="python-podman-4.9.0-2.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>python3-podman-4.9.0-2.module_el8.10.0+3876+e55593a8.noarch.rpm</filename>
          <sum type="sha256">437316c120844707bd3e7921d302269491e58d4266339b9e5dd59fd6ad67d5a1</sum>
        </package>
        <package name="slirp4netns" version="1.2.3" release="1.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="slirp4netns-1.2.3-1.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>slirp4netns-1.2.3-1.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">47e064f66ebe5ddf06943af427f7e84b1bfe6139ff8bfd3f03d60c6be4ac9be1</sum>
        </package>
        <package name="runc" version="1.1.12" release="4.module_el8.10.0+3876+e55593a8" epoch="1" arch="s390x" src="runc-1.1.12-4.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>runc-1.1.12-4.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">4ee01b09e2843e732538233fa8c3026de312a0db5ff95c91bf2ff7b52ccf6fdb</sum>
        </package>
        <package name="skopeo" version="1.14.5" release="3.module_el8.10.0+3876+e55593a8" epoch="2" arch="s390x" src="skopeo-1.14.5-3.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>skopeo-1.14.5-3.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">50b8cf3c6219a9c8669cf6689c25f51511d933ab1bdba7d06e67d30919034939</sum>
        </package>
        <package name="udica" version="0.2.6" release="21.module_el8.10.0+3876+e55593a8" epoch="0" arch="noarch" src="udica-0.2.6-21.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>udica-0.2.6-21.module_el8.10.0+3876+e55593a8.noarch.rpm</filename>
          <sum type="sha256">55469040dd62b0fa6078a3436651230dae541d4e4bd0ca8e4f35b619bedd0de0</sum>
        </package>
        <package name="cockpit-podman" version="84.1" release="1.module_el8.10.0+3876+e55593a8" epoch="0" arch="noarch" src="cockpit-podman-84.1-1.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>cockpit-podman-84.1-1.module_el8.10.0+3876+e55593a8.noarch.rpm</filename>
          <sum type="sha256">55b45ab38b4e2f9aba55c370f27cf80f15945bd3f4c400837f83b38782fd38b8</sum>
        </package>
        <package name="container-selinux" version="2.229.0" release="2.module_el8.10.0+3876+e55593a8" epoch="2" arch="noarch" src="container-selinux-2.229.0-2.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>container-selinux-2.229.0-2.module_el8.10.0+3876+e55593a8.noarch.rpm</filename>
          <sum type="sha256">58167ed169ed600019e514e0d6d861314bbc86583f8b25692a7a6597292f62cf</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.5" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>toolbox-tests-0.0.99.5-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">6f3afa8d1e85355c8b298eb28c01fa395e12e6268471b962b0987703f32210e9</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="2.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>libslirp-4.4.0-2.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">73cf1d62af4216a02d4c73012417aa34facbeca42f72a37dacf5a3cc79f96e6e</sum>
        </package>
        <package name="aardvark-dns" version="1.10.0" release="1.module_el8.10.0+3858+6ad51f9f" epoch="2" arch="s390x" src="aardvark-dns-1.10.0-1.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>aardvark-dns-1.10.0-1.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">8930e60873726395a1b7b7b675fa0aa66538198c06fb483ea9f24ae795ca8a1d</sum>
        </package>
        <package name="toolbox" version="0.0.99.5" release="2.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>toolbox-0.0.99.5-2.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">8df71d94e465a66228dced33f5189e4789bc2ac13946b5e79a11e8091af4f33e</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="2.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>libslirp-devel-4.4.0-2.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">8e619da0a95c4f17206294099001540f08000d56a3e433f027055d84dabef841</sum>
        </package>
        <package name="podman-plugins" version="4.9.4" release="13.module_el8.10.0+3898+7a25cb1a" epoch="4" arch="s390x" src="podman-4.9.4-13.module_el8.10.0+3898+7a25cb1a.src.rpm">
          <filename>podman-plugins-4.9.4-13.module_el8.10.0+3898+7a25cb1a.s390x.rpm</filename>
          <sum type="sha256">aded3ea759f257788f9bba2512e6f5ac7a80878957cfef7bd6c7ddb6c850c3a0</sum>
        </package>
        <package name="crit" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>crit-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">aeb27c5bcec90a9452f93ad79ef0d4f00ecedf4442f32f9bedb481509db12683</sum>
        </package>
        <package name="containernetworking-plugins" version="1.4.0" release="5.module_el8.10.0+3876+e55593a8" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-5.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>containernetworking-plugins-1.4.0-5.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">b0f6d94b26b1b34fa0d367d6092dd09a4f7abf5e815627bc96b1c060b1aaea17</sum>
        </package>
        <package name="podman-catatonit" version="4.9.4" release="13.module_el8.10.0+3898+7a25cb1a" epoch="4" arch="s390x" src="podman-4.9.4-13.module_el8.10.0+3898+7a25cb1a.src.rpm">
          <filename>podman-catatonit-4.9.4-13.module_el8.10.0+3898+7a25cb1a.s390x.rpm</filename>
          <sum type="sha256">b29793261f27b654dcfcff9f893a3e22e0ed71b818ef4d03d26ed63a0f06efb1</sum>
        </package>
        <package name="buildah-tests" version="1.33.8" release="4.module_el8.10.0+3876+e55593a8" epoch="2" arch="s390x" src="buildah-1.33.8-4.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>buildah-tests-1.33.8-4.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">babcea9dce0eaa42aef9f6dc138275c2fde1ccc4772c41013eb58af042605e52</sum>
        </package>
        <package name="criu" version="3.18" release="5.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>criu-3.18-5.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">bdaddee931f3746ac7472d9ccee504acd0be805433b3d160b1e7caf8bf361cb8</sum>
        </package>
        <package name="podman-gvproxy" version="4.9.4" release="13.module_el8.10.0+3898+7a25cb1a" epoch="4" arch="s390x" src="podman-4.9.4-13.module_el8.10.0+3898+7a25cb1a.src.rpm">
          <filename>podman-gvproxy-4.9.4-13.module_el8.10.0+3898+7a25cb1a.s390x.rpm</filename>
          <sum type="sha256">c520188eab1a9335f014a7511c184335ae0bef950e3f66bc74fad5e50c30ccc7</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="13.module_el8.10.0+3898+7a25cb1a" epoch="4" arch="noarch" src="podman-4.9.4-13.module_el8.10.0+3898+7a25cb1a.src.rpm">
          <filename>podman-docker-4.9.4-13.module_el8.10.0+3898+7a25cb1a.noarch.rpm</filename>
          <sum type="sha256">ca5b1e96092a8aaaa7ea636b10b85ffb06d38361b9f86b7e281e29e628d0d1f2</sum>
        </package>
        <package name="crun" version="1.14.3" release="2.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="crun-1.14.3-2.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>crun-1.14.3-2.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">d07a292ed62fb537ef65dee1cce03a0dfb3eb95bb4967ff688f1d3332fabe47b</sum>
        </package>
        <package name="podman" version="4.9.4" release="13.module_el8.10.0+3898+7a25cb1a" epoch="4" arch="s390x" src="podman-4.9.4-13.module_el8.10.0+3898+7a25cb1a.src.rpm">
          <filename>podman-4.9.4-13.module_el8.10.0+3898+7a25cb1a.s390x.rpm</filename>
          <sum type="sha256">dd3c629a524337482676d2ce3f65f7ea03e0ba56d039ed9c16db60de74475705</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.10" release="1.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">e80883fe6389cab87bbab36264467f6f22350aee4fec71f2366bb4afb66292e6</sum>
        </package>
        <package name="buildah" version="1.33.8" release="4.module_el8.10.0+3876+e55593a8" epoch="2" arch="s390x" src="buildah-1.33.8-4.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>buildah-1.33.8-4.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">ecf331e74afe7a15c0fe6c74f99b0982aaf86172c6e585abd62988360715aa23</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="13.module_el8.10.0+3898+7a25cb1a" epoch="4" arch="s390x" src="podman-4.9.4-13.module_el8.10.0+3898+7a25cb1a.src.rpm">
          <filename>podman-remote-4.9.4-13.module_el8.10.0+3898+7a25cb1a.s390x.rpm</filename>
          <sum type="sha256">f6ef74160634f4bee3216a372c1404994346b0d5dbfc6fbc5f9a1950519173fe</sum>
        </package>
        <package name="conmon" version="2.1.10" release="1.module_el8.10.0+3845+87b84552" epoch="3" arch="s390x" src="conmon-2.1.10-1.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>conmon-2.1.10-1.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">f8f7e631b6103852487fcb99e1c6baaf8c5e60e3654c2f5a4bddc238ed708563</sum>
        </package>
        <package name="criu-devel" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>criu-devel-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">ffa71276e65ae92bb9c7b93241ba28ad74337aa5770f3cf3390d73b2552e73ae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6973</id>
    <title>Moderate: dovecot security update</title>
    <issued date="2024-09-24 00:00:00"/>
    <updated date="2024-09-24 11:31:00"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dovecot security update</summary>
    <description>Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. 

Security Fix(es):

* dovecot: using a large number of address headers may trigger a denial of service (CVE-2024-23184)
* dovecot: very large headers can cause resource exhaustion when parsing message (CVE-2024-23185)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6973" id="RHSA-2024:6973" type="rhsa" title="RHSA-2024:6973"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23184" id="CVE-2024-23184" type="cve" title="CVE-2024-23184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23185" id="CVE-2024-23185" type="cve" title="CVE-2024-23185"/>
      <reference href="https://bugzilla.redhat.com/2305909" id="2305909" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2305910" id="2305910" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6973.html" id="ALSA-2024:6973" type="self" title="ALSA-2024:6973"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="dovecot-pigeonhole" version="2.3.16" release="6.el8_10" epoch="1" arch="s390x" src="dovecot-2.3.16-6.el8_10.src.rpm">
          <filename>dovecot-pigeonhole-2.3.16-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">0061e7f23ac3949a84754a7067815856f8608ec1fec7ba730565cdb86234e554</sum>
        </package>
        <package name="dovecot" version="2.3.16" release="6.el8_10" epoch="1" arch="s390x" src="dovecot-2.3.16-6.el8_10.src.rpm">
          <filename>dovecot-2.3.16-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">3bd7d8c7c9116eb08ce0459c2d5a3f45c3aa864c1f200563f7dfea400da08537</sum>
        </package>
        <package name="dovecot-pgsql" version="2.3.16" release="6.el8_10" epoch="1" arch="s390x" src="dovecot-2.3.16-6.el8_10.src.rpm">
          <filename>dovecot-pgsql-2.3.16-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">b8ad3608e41a212f643a3a1b84f2c686240d2fe71614aab31d586b01c0101924</sum>
        </package>
        <package name="dovecot-mysql" version="2.3.16" release="6.el8_10" epoch="1" arch="s390x" src="dovecot-2.3.16-6.el8_10.src.rpm">
          <filename>dovecot-mysql-2.3.16-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">e860eed009360399abb29d8fe38709911526ee0960620c31b8555f05961431f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6975</id>
    <title>Moderate: python3 security update</title>
    <issued date="2024-09-24 00:00:00"/>
    <updated date="2024-09-24 14:01:31"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)
* cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923)
* python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6975" id="RHSA-2024:6975" type="rhsa" title="RHSA-2024:6975"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4032" id="CVE-2024-4032" type="cve" title="CVE-2024-4032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6923" id="CVE-2024-6923" type="cve" title="CVE-2024-6923"/>
      <reference href="https://bugzilla.redhat.com/2292921" id="2292921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302255" id="2302255" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6975.html" id="ALSA-2024:6975" type="self" title="ALSA-2024:6975"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="platform-python-debug" version="3.6.8" release="67.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-67.el8_10.alma.1.src.rpm">
          <filename>platform-python-debug-3.6.8-67.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">3a365faffbeabe9f69246773a1397b488c498eaf7548a642b98e761d0bfe87e3</sum>
        </package>
        <package name="python3-tkinter" version="3.6.8" release="67.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-67.el8_10.alma.1.src.rpm">
          <filename>python3-tkinter-3.6.8-67.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">cc599a4434255537c763fcd5ea0f0df5252253c6a42b206100b08dd3eba810c6</sum>
        </package>
        <package name="python3-idle" version="3.6.8" release="67.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-67.el8_10.alma.1.src.rpm">
          <filename>python3-idle-3.6.8-67.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">d7709706e3432617f2455ec688ce4382480bc5626a5acbf2be64389105461df1</sum>
        </package>
        <package name="platform-python-devel" version="3.6.8" release="67.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-67.el8_10.alma.1.src.rpm">
          <filename>platform-python-devel-3.6.8-67.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">fa3f3b98b5d78be8595edf9286dae74da1c2c933e4f584598a305c00097aaa8d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6987</id>
    <title>Moderate: emacs security update</title>
    <issued date="2024-09-24 00:00:00"/>
    <updated date="2024-09-24 11:27:55"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>emacs security update</summary>
    <description>GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

* emacs: Gnus treats inline MIME contents as trusted (CVE-2024-30203)
* emacs: Org mode considers contents of remote files to be trusted (CVE-2024-30205)
* emacs: org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6987" id="RHSA-2024:6987" type="rhsa" title="RHSA-2024:6987"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30203" id="CVE-2024-30203" type="cve" title="CVE-2024-30203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30205" id="CVE-2024-30205" type="cve" title="CVE-2024-30205"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39331" id="CVE-2024-39331" type="cve" title="CVE-2024-39331"/>
      <reference href="https://bugzilla.redhat.com/2280296" id="2280296" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280298" id="2280298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293942" id="2293942" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6987.html" id="ALSA-2024:6987" type="self" title="ALSA-2024:6987"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="emacs-terminal" version="26.1" release="12.el8_10" epoch="1" arch="noarch" src="emacs-26.1-12.el8_10.src.rpm">
          <filename>emacs-terminal-26.1-12.el8_10.noarch.rpm</filename>
          <sum type="sha256">38eb9ff3fb3dcda9340ab737cf4ae82845cb5f0c3e5a99cb0a6fd7a71fbc3a48</sum>
        </package>
        <package name="emacs-lucid" version="26.1" release="12.el8_10" epoch="1" arch="s390x" src="emacs-26.1-12.el8_10.src.rpm">
          <filename>emacs-lucid-26.1-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">50fabc0f24aba777da7cce2db294bf5de8f5ef112b8e549aaf5825a45e0e6b3c</sum>
        </package>
        <package name="emacs-common" version="26.1" release="12.el8_10" epoch="1" arch="s390x" src="emacs-26.1-12.el8_10.src.rpm">
          <filename>emacs-common-26.1-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">b8d232df827b238d7d966b200441f2575562e7362e99539f63a211ef446b5ba9</sum>
        </package>
        <package name="emacs" version="26.1" release="12.el8_10" epoch="1" arch="s390x" src="emacs-26.1-12.el8_10.src.rpm">
          <filename>emacs-26.1-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">d2f868e938f1f2028ef4965f93aa130a1ad67b3ab9105a5ca711c6a1d214a059</sum>
        </package>
        <package name="emacs-nox" version="26.1" release="12.el8_10" epoch="1" arch="s390x" src="emacs-26.1-12.el8_10.src.rpm">
          <filename>emacs-nox-26.1-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">ffd4282507b04752d1d8a74612df5f189bf0cc3b99a8098219795bee0afadf88</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7135</id>
    <title>Important: git-lfs security update</title>
    <issued date="2024-09-25 00:00:00"/>
    <updated date="2024-09-26 06:10:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git-lfs security update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.

Security Fix(es):

* encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7135" id="RHSA-2024:7135" type="rhsa" title="RHSA-2024:7135"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34156" id="CVE-2024-34156" type="cve" title="CVE-2024-34156"/>
      <reference href="https://bugzilla.redhat.com/2310528" id="2310528" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-7135.html" id="ALSA-2024:7135" type="self" title="ALSA-2024:7135"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="git-lfs" version="3.4.1" release="3.el8_10" epoch="0" arch="s390x" src="git-lfs-3.4.1-3.el8_10.src.rpm">
          <filename>git-lfs-3.4.1-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">8468dcdb052867173c5b0f2629f8749b55aa41fb030620115ded06aa8c5b422c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7262</id>
    <title>Important: osbuild-composer security update</title>
    <issued date="2024-09-26 00:00:00"/>
    <updated date="2024-09-27 07:24:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>osbuild-composer security update</summary>
    <description>A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud.  It is compatible with composer-cli and cockpit-composer clients.

Security Fix(es):

* golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)
* encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7262" id="RHSA-2024:7262" type="rhsa" title="RHSA-2024:7262"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1394" id="CVE-2024-1394" type="cve" title="CVE-2024-1394"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34156" id="CVE-2024-34156" type="cve" title="CVE-2024-34156"/>
      <reference href="https://bugzilla.redhat.com/2262921" id="2262921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310528" id="2310528" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-7262.html" id="ALSA-2024:7262" type="self" title="ALSA-2024:7262"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="osbuild-composer" version="101" release="2.el8_10.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101-2.el8_10.alma.1.src.rpm">
          <filename>osbuild-composer-101-2.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">7a3da68cc80177c0b21d9a6a3962d7c279bd7fe35fcfeff3ff32bd7e790d0340</sum>
        </package>
        <package name="osbuild-composer-core" version="101" release="2.el8_10.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101-2.el8_10.alma.1.src.rpm">
          <filename>osbuild-composer-core-101-2.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">a74e674a812c18f514f20357b559e2e6146db92b2ad85b531c257b8edcc198a3</sum>
        </package>
        <package name="osbuild-composer-worker" version="101" release="2.el8_10.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101-2.el8_10.alma.1.src.rpm">
          <filename>osbuild-composer-worker-101-2.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">ca33670ee372f769b7fcd4ba798b0a6975959fd44f0015e86fb0c744d25e48b4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7349</id>
    <title>Moderate: grafana security update</title>
    <issued date="2024-09-30 00:00:00"/>
    <updated date="2024-10-01 13:26:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB. 

Security Fix(es):

* net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7349" id="RHSA-2024:7349" type="rhsa" title="RHSA-2024:7349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24791" id="CVE-2024-24791" type="cve" title="CVE-2024-24791"/>
      <reference href="https://bugzilla.redhat.com/2295310" id="2295310" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-7349.html" id="ALSA-2024:7349" type="self" title="ALSA-2024:7349"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="grafana-selinux" version="9.2.10" release="18.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-18.el8_10.src.rpm">
          <filename>grafana-selinux-9.2.10-18.el8_10.s390x.rpm</filename>
          <sum type="sha256">504fd905a6375e88f0e7a7250462f704614290c952e225fb457a7ed87d6eaa45</sum>
        </package>
        <package name="grafana" version="9.2.10" release="18.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-18.el8_10.src.rpm">
          <filename>grafana-9.2.10-18.el8_10.s390x.rpm</filename>
          <sum type="sha256">76afa1f70ef4ed58609450de3b9e65daa2b42e4fe3f1ee9eeab8693dabef713a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7463</id>
    <title>Important: cups-filters security update</title>
    <issued date="2024-10-01 00:00:00"/>
    <updated date="2024-10-03 09:11:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>cups-filters security update</summary>
    <description>The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently. 

Security Fix(es):

* cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source ()
* cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes (CVE-2024-47076)
* cups: libppd: remote command injection via attacker controlled data in PPD file ()

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7463" id="RHSA-2024:7463" type="rhsa" title="RHSA-2024:7463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47076" id="CVE-2024-47076" type="cve" title="CVE-2024-47076"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47175" id="CVE-2024-47175" type="cve" title="CVE-2024-47175"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47176" id="CVE-2024-47176" type="cve" title="CVE-2024-47176"/>
      <reference href="https://bugzilla.redhat.com/2314252" id="2314252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2314253" id="2314253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2314256" id="2314256" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-7463.html" id="ALSA-2024:7463" type="self" title="ALSA-2024:7463"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="cups-filters" version="1.20.0" release="35.el8_10" epoch="0" arch="s390x" src="cups-filters-1.20.0-35.el8_10.src.rpm">
          <filename>cups-filters-1.20.0-35.el8_10.s390x.rpm</filename>
          <sum type="sha256">32f3db4c7dbd8afc1517936278314770a88ea7954fecb5227dc64ce824812449</sum>
        </package>
        <package name="cups-filters-libs" version="1.20.0" release="35.el8_10" epoch="0" arch="s390x" src="cups-filters-1.20.0-35.el8_10.src.rpm">
          <filename>cups-filters-libs-1.20.0-35.el8_10.s390x.rpm</filename>
          <sum type="sha256">612c60913761f951bee31f335c7b79cfa30dfa89b24c40d2f9108e84fb470481</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7502</id>
    <title>Moderate: go-toolset:rhel8 security update</title>
    <issued date="2024-10-02 00:00:00"/>
    <updated date="2024-10-03 12:57:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>go-toolset:rhel8 security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. 

Security Fix(es):

* golang-fips: Golang FIPS zeroed buffer (CVE-2024-9355)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7502" id="RHSA-2024:7502" type="rhsa" title="RHSA-2024:7502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9355" id="CVE-2024-9355" type="cve" title="CVE-2024-9355"/>
      <reference href="https://bugzilla.redhat.com/2315719" id="2315719" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-7502.html" id="ALSA-2024:7502" type="self" title="ALSA-2024:7502"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="go-toolset" stream="rhel8" version="8100020240923132138" context="9edba152" arch="s390x"/>
        <package name="golang-src" version="1.21.13" release="3.module_el8.10.0+3900+bb1e1982" epoch="0" arch="noarch" src="golang-1.21.13-3.module_el8.10.0+3900+bb1e1982.src.rpm">
          <filename>golang-src-1.21.13-3.module_el8.10.0+3900+bb1e1982.noarch.rpm</filename>
          <sum type="sha256">53d356b95f2fa45242f6002f9ca25a6434134050b045d9935cf81594713ee45f</sum>
        </package>
        <package name="golang-tests" version="1.21.13" release="3.module_el8.10.0+3900+bb1e1982" epoch="0" arch="noarch" src="golang-1.21.13-3.module_el8.10.0+3900+bb1e1982.src.rpm">
          <filename>golang-tests-1.21.13-3.module_el8.10.0+3900+bb1e1982.noarch.rpm</filename>
          <sum type="sha256">865bc53dcbeaa303ae85266ed04bc2092fa65184ebf2b52d998e0b76f8326d26</sum>
        </package>
        <package name="golang-bin" version="1.21.13" release="3.module_el8.10.0+3900+bb1e1982" epoch="0" arch="s390x" src="golang-1.21.13-3.module_el8.10.0+3900+bb1e1982.src.rpm">
          <filename>golang-bin-1.21.13-3.module_el8.10.0+3900+bb1e1982.s390x.rpm</filename>
          <sum type="sha256">928b54d9a144feca7d8e43838cecbbf6e6073b9a7b166e37b4a62f5fab71bbf9</sum>
        </package>
        <package name="go-toolset" version="1.21.13" release="1.module_el8.10.0+3895+92d465e0" epoch="0" arch="s390x" src="go-toolset-1.21.13-1.module_el8.10.0+3895+92d465e0.src.rpm">
          <filename>go-toolset-1.21.13-1.module_el8.10.0+3895+92d465e0.s390x.rpm</filename>
          <sum type="sha256">9796db0484143169ab0214cd15fd46d9cc58097f8ed733b0aea3d2bff2134815</sum>
        </package>
        <package name="golang" version="1.21.13" release="3.module_el8.10.0+3900+bb1e1982" epoch="0" arch="s390x" src="golang-1.21.13-3.module_el8.10.0+3900+bb1e1982.src.rpm">
          <filename>golang-1.21.13-3.module_el8.10.0+3900+bb1e1982.s390x.rpm</filename>
          <sum type="sha256">a9543f8bc53ba4068d9657938b449df54fe1b4f04b360d29ab4a13d383ea8c18</sum>
        </package>
        <package name="golang-misc" version="1.21.13" release="3.module_el8.10.0+3900+bb1e1982" epoch="0" arch="noarch" src="golang-1.21.13-3.module_el8.10.0+3900+bb1e1982.src.rpm">
          <filename>golang-misc-1.21.13-3.module_el8.10.0+3900+bb1e1982.noarch.rpm</filename>
          <sum type="sha256">c6820c0188a078ea7efb79e01b7346d93d40c5116e657cb5ed05a37fec7fb551</sum>
        </package>
        <package name="golang-docs" version="1.21.13" release="3.module_el8.10.0+3900+bb1e1982" epoch="0" arch="noarch" src="golang-1.21.13-3.module_el8.10.0+3900+bb1e1982.src.rpm">
          <filename>golang-docs-1.21.13-3.module_el8.10.0+3900+bb1e1982.noarch.rpm</filename>
          <sum type="sha256">e11f5c4f943559de3dc7dce715f1c89b125324a925f60d6b8474ad4352d3d156</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7699</id>
    <title>Important: thunderbird security update</title>
    <issued date="2024-10-07 00:00:00"/>
    <updated date="2024-10-09 08:55:36"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

* thunderbird: 115.16/128.3 ()
* firefox: thunderbird: Specially crafted WebTransport requests could lead to denial of service (CVE-2024-9399)
* firefox: thunderbird: Memory safety bugs fixed in Firefox 131 and Thunderbird 131 (CVE-2024-9403)
* firefox: thunderbird: Potential directory upload bypass via clickjacking (CVE-2024-9397)
* firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9401)
* firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9402)
* firefox: thunderbird: External protocol handlers could be enumerated via popups (CVE-2024-9398)
* firefox: thunderbird: Potential memory corruption during JIT compilation (CVE-2024-9400)
* firefox: thunderbird: Potential memory corruption may occur when cloning certain objects (CVE-2024-9396)
* firefox: thunderbird: Cross-origin access to PDF contents through multipart responses (CVE-2024-9393)
* firefox: thunderbird: Cross-origin access to JSON contents through multipart responses (CVE-2024-9394)
* firefox: thunderbird: Compromised content process can bypass site isolation (CVE-2024-9392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7699" id="RHSA-2024:7699" type="rhsa" title="RHSA-2024:7699"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9392" id="CVE-2024-9392" type="cve" title="CVE-2024-9392"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9393" id="CVE-2024-9393" type="cve" title="CVE-2024-9393"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9394" id="CVE-2024-9394" type="cve" title="CVE-2024-9394"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9396" id="CVE-2024-9396" type="cve" title="CVE-2024-9396"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9397" id="CVE-2024-9397" type="cve" title="CVE-2024-9397"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9398" id="CVE-2024-9398" type="cve" title="CVE-2024-9398"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9399" id="CVE-2024-9399" type="cve" title="CVE-2024-9399"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9400" id="CVE-2024-9400" type="cve" title="CVE-2024-9400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9401" id="CVE-2024-9401" type="cve" title="CVE-2024-9401"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9402" id="CVE-2024-9402" type="cve" title="CVE-2024-9402"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9403" id="CVE-2024-9403" type="cve" title="CVE-2024-9403"/>
      <reference href="https://bugzilla.redhat.com/2315945" id="2315945" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315947" id="2315947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315949" id="2315949" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315950" id="2315950" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315951" id="2315951" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315952" id="2315952" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315953" id="2315953" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315954" id="2315954" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315956" id="2315956" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315957" id="2315957" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315959" id="2315959" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-7699.html" id="ALSA-2024:7699" type="self" title="ALSA-2024:7699"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="128.3.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-128.3.0-1.el8_10.alma.1.src.rpm">
          <filename>thunderbird-128.3.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">920b0a41ab15d797dbb4e465d1d120690111807b4ce32c5ddc02fa4aa7706e95</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7700</id>
    <title>Important: firefox security update</title>
    <issued date="2024-10-07 00:00:00"/>
    <updated date="2024-10-09 08:57:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: 115.16/128.3 ESR ()
* firefox: thunderbird: Specially crafted WebTransport requests could lead to denial of service (CVE-2024-9399)
* firefox: thunderbird: Memory safety bugs fixed in Firefox 131 and Thunderbird 131 (CVE-2024-9403)
* firefox: thunderbird: Potential directory upload bypass via clickjacking (CVE-2024-9397)
* firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9401)
* firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9402)
* firefox: thunderbird: External protocol handlers could be enumerated via popups (CVE-2024-9398)
* firefox: thunderbird: Potential memory corruption during JIT compilation (CVE-2024-9400)
* firefox: thunderbird: Potential memory corruption may occur when cloning certain objects (CVE-2024-9396)
* firefox: thunderbird: Cross-origin access to PDF contents through multipart responses (CVE-2024-9393)
* firefox: thunderbird: Cross-origin access to JSON contents through multipart responses (CVE-2024-9394)
* firefox: thunderbird: Compromised content process can bypass site isolation (CVE-2024-9392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7700" id="RHSA-2024:7700" type="rhsa" title="RHSA-2024:7700"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8900" id="CVE-2024-8900" type="cve" title="CVE-2024-8900"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9392" id="CVE-2024-9392" type="cve" title="CVE-2024-9392"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9393" id="CVE-2024-9393" type="cve" title="CVE-2024-9393"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9394" id="CVE-2024-9394" type="cve" title="CVE-2024-9394"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9396" id="CVE-2024-9396" type="cve" title="CVE-2024-9396"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9397" id="CVE-2024-9397" type="cve" title="CVE-2024-9397"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9398" id="CVE-2024-9398" type="cve" title="CVE-2024-9398"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9399" id="CVE-2024-9399" type="cve" title="CVE-2024-9399"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9400" id="CVE-2024-9400" type="cve" title="CVE-2024-9400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9401" id="CVE-2024-9401" type="cve" title="CVE-2024-9401"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9402" id="CVE-2024-9402" type="cve" title="CVE-2024-9402"/>
      <reference href="https://bugzilla.redhat.com/2312914" id="2312914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315945" id="2315945" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315949" id="2315949" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315950" id="2315950" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315951" id="2315951" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315952" id="2315952" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315953" id="2315953" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315954" id="2315954" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315956" id="2315956" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315957" id="2315957" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315959" id="2315959" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-7700.html" id="ALSA-2024:7700" type="self" title="ALSA-2024:7700"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="128.3.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-128.3.0-1.el8_10.alma.1.src.rpm">
          <filename>firefox-128.3.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">071655bdc4686e8f2faca5650ff8b396fc78ed26c65a8655c4bb9988803b59d9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7851</id>
    <title>Important: .NET 6.0 security update</title>
    <issued date="2024-10-09 00:00:00"/>
    <updated date="2024-10-10 11:22:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.135 and .NET Runtime 6.0.35.

Security Fix(es):

* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7851" id="RHSA-2024:7851" type="rhsa" title="RHSA-2024:7851"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43483" id="CVE-2024-43483" type="cve" title="CVE-2024-43483"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43484" id="CVE-2024-43484" type="cve" title="CVE-2024-43484"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43485" id="CVE-2024-43485" type="cve" title="CVE-2024-43485"/>
      <reference href="https://bugzilla.redhat.com/2315729" id="2315729" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315730" id="2315730" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315731" id="2315731" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-7851.html" id="ALSA-2024:7851" type="self" title="ALSA-2024:7851"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="dotnet-hostfxr-6.0" version="6.0.35" release="1.el8_10" epoch="0" arch="s390x" src="dotnet6.0-6.0.135-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.35-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0f42ad5654d5e4ae3b469050278600b92fb966a44286612d6293078b4cc2ca5c</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.35" release="1.el8_10" epoch="0" arch="s390x" src="dotnet6.0-6.0.135-1.el8_10.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.35-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">585e98950dd2a02a729449c8d3eb11ec0a29f0c060ccf91fa77970454f12a96b</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.35" release="1.el8_10" epoch="0" arch="s390x" src="dotnet6.0-6.0.135-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.35-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5947a26353fd680aeb3cf0fdfd5d399d4316fd7f5460199f4a042668ea8f10ac</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.135" release="1.el8_10" epoch="0" arch="s390x" src="dotnet6.0-6.0.135-1.el8_10.src.rpm">
          <filename>dotnet-templates-6.0-6.0.135-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">705caa697bb021e06a6d2db5fde022d49e1f80a875c5938ef3a2e5da97c71793</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.35" release="1.el8_10" epoch="0" arch="s390x" src="dotnet6.0-6.0.135-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.35-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">96c8095b7d072d0cecafd5d0cb1f16de1b4e26cae14e9041d753fe3f60b84e8a</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.35" release="1.el8_10" epoch="0" arch="s390x" src="dotnet6.0-6.0.135-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.35-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">9fc12c594f47ba3429a8e6c66277489a8cba01bbd13c289456f172e90f22d150</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.35" release="1.el8_10" epoch="0" arch="s390x" src="dotnet6.0-6.0.135-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.35-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">d21bc7fcc4cbee93232e8b6a0f531e9b4cd2608140112c73a2472738ab97b550</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.135" release="1.el8_10" epoch="0" arch="s390x" src="dotnet6.0-6.0.135-1.el8_10.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.135-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">f6b22b12e249699a96f279a4223eee4daf3a0d6cde930c8dd63deb51058e7b93</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7868</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-10-09 00:00:00"/>
    <updated date="2024-10-10 11:20:14"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.110 and .NET Runtime 8.0.10.

Security Fix(es):

* dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution (CVE-2024-38229)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)
* dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution (CVE-2024-38229)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7868" id="RHSA-2024:7868" type="rhsa" title="RHSA-2024:7868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38229" id="CVE-2024-38229" type="cve" title="CVE-2024-38229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43483" id="CVE-2024-43483" type="cve" title="CVE-2024-43483"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43484" id="CVE-2024-43484" type="cve" title="CVE-2024-43484"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43485" id="CVE-2024-43485" type="cve" title="CVE-2024-43485"/>
      <reference href="https://bugzilla.redhat.com/2315729" id="2315729" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315730" id="2315730" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315731" id="2315731" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2316161" id="2316161" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-7868.html" id="ALSA-2024:7868" type="self" title="ALSA-2024:7868"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="dotnet-runtime-8.0" version="8.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el8_10.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">141779b699d7ed22e67d5cabdb25d96005be9ab36f64184be95821d7d6e2a589</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">202420b2ff36108802675b483247b055093abd6408feb38c2a3b59c0c378b604</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">209ecdcc2a3ae4b8550296c207e5d7791a592d4201830732868f0899c1c8e065</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.110" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.110-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">403abf12b218454f40494d017afdbc0aef657bc9557df13a756006a1c78e4f36</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">54f792a95bda1a31a087146d0b0c00fd479a96f9c9893f1361f21d19c95a0ad4</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5fdaefc76bae2985fc38bdd3fff6d6449e76bdac48c7146fcbf9bcfc5be85cc1</sum>
        </package>
        <package name="dotnet-host" version="8.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el8_10.src.rpm">
          <filename>dotnet-host-8.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">89b0c3e69457532810126dd4fbc9420ce38d486de1f080601d1e4b5519cf355d</sum>
        </package>
        <package name="dotnet" version="8.0.110" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el8_10.src.rpm">
          <filename>dotnet-8.0.110-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">8e0eae443f79a2753da8fcdc10f865d50da9269584cc97a74d28bf64b834f5ae</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b0fbcffb0390aad67fdf8b5fdc13be48ea8666a30229056f12b158493693d0a2</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="8.0.110" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el8_10.src.rpm">
          <filename>netstandard-targeting-pack-2.1-8.0.110-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b1bf2013f5205159ced00e41aa7125e6a2a59a4ff0b9d18ca5c2fcb1c00f747f</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.110" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el8_10.src.rpm">
          <filename>dotnet-templates-8.0-8.0.110-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c45cb7074b071636ee7b34d7d2170fcaa691504da868cc635a8bf6e48832c96c</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">ce0b72a920724d4fd43707ebd75a0c40b3ddbf7bbd569bab17b6fd0d0751b13e</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">e4a660987e30f3898d2d79260e70944239faabdd3b9ebec3edb05f3469251ce1</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.110" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.110-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">f630ae1fe1f6452ba5ed4ebf988ff8d8c2bae72461ebe8117e1bd250f2315ac0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7977</id>
    <title>Important: firefox security update</title>
    <issued date="2024-10-10 00:00:00"/>
    <updated date="2024-10-12 13:31:27"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill) (CVE-2024-9680)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7977" id="RHSA-2024:7977" type="rhsa" title="RHSA-2024:7977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9680" id="CVE-2024-9680" type="cve" title="CVE-2024-9680"/>
      <reference href="https://bugzilla.redhat.com/2317442" id="2317442" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-7977.html" id="ALSA-2024:7977" type="self" title="ALSA-2024:7977"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="128.3.1" release="2.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-128.3.1-2.el8_10.alma.1.src.rpm">
          <filename>firefox-128.3.1-2.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">825a6b472a686ba7a03c96a53cccd7c8672ec15fa5308866db976c65aa40194c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8024</id>
    <title>Important: thunderbird security update</title>
    <issued date="2024-10-14 00:00:00"/>
    <updated date="2024-10-15 09:19:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

* firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill) (CVE-2024-9680)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8024" id="RHSA-2024:8024" type="rhsa" title="RHSA-2024:8024"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9680" id="CVE-2024-9680" type="cve" title="CVE-2024-9680"/>
      <reference href="https://bugzilla.redhat.com/2317442" id="2317442" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8024.html" id="ALSA-2024:8024" type="self" title="ALSA-2024:8024"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="128.3.1" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-128.3.1-1.el8_10.alma.1.src.rpm">
          <filename>thunderbird-128.3.1-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">89bf81d8c1bea13825983e78277cba46c579c4fa943f1c7aa593d95fd33a3d0a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8038</id>
    <title>Important: container-tools:rhel8 security update</title>
    <issued date="2024-10-14 00:00:00"/>
    <updated date="2024-10-15 09:14:31"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>container-tools:rhel8 security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)
* go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155)
* encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)
* go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8038" id="RHSA-2024:8038" type="rhsa" title="RHSA-2024:8038"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45290" id="CVE-2023-45290" type="cve" title="CVE-2023-45290"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34155" id="CVE-2024-34155" type="cve" title="CVE-2024-34155"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34156" id="CVE-2024-34156" type="cve" title="CVE-2024-34156"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34158" id="CVE-2024-34158" type="cve" title="CVE-2024-34158"/>
      <reference href="https://bugzilla.redhat.com/2268017" id="2268017" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310527" id="2310527" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310528" id="2310528" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2310529" id="2310529" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8038.html" id="ALSA-2024:8038" type="self" title="ALSA-2024:8038"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="container-tools" stream="rhel8" version="8100020240813140059" context="20125149" arch="s390x"/>
        <package name="crun" version="1.14.3" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="crun-1.14.3-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>crun-1.14.3-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">1803f41cb3e0828fe770ce7de14a940b9fad458fd84f420baab724674e2041e7</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="13.module_el8.10.0+3901+4b80ecd7" epoch="4" arch="s390x" src="podman-4.9.4-13.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>podman-remote-4.9.4-13.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">207b9dbdfa75c839122bc5d683b6983427dee512bd979574c4c533433822c165</sum>
        </package>
        <package name="skopeo-tests" version="1.14.5" release="3.module_el8.10.0+3876+e55593a8" epoch="2" arch="s390x" src="skopeo-1.14.5-3.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>skopeo-tests-1.14.5-3.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">29a7b74a18e0a1b63825ee2eb5c3f36a2a3971da39a546401e9c9d07b00cd50e</sum>
        </package>
        <package name="podman-gvproxy" version="4.9.4" release="13.module_el8.10.0+3901+4b80ecd7" epoch="4" arch="s390x" src="podman-4.9.4-13.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>podman-gvproxy-4.9.4-13.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">2ddca07cf406be5823723038001188bbdc5268954d8cc2d697915e283906c5e9</sum>
        </package>
        <package name="netavark" version="1.10.3" release="1.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="s390x" src="netavark-1.10.3-1.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>netavark-1.10.3-1.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">32a9b85eb96899065a74a3a7e7758a6c450e8351a358c2c747d80e8b2117f7b6</sum>
        </package>
        <package name="aardvark-dns" version="1.10.1" release="2.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="s390x" src="aardvark-dns-1.10.1-2.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>aardvark-dns-1.10.1-2.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">33f0e53072f8851c287e97dada126b7e760aa82256964e34ed5d94a5bb61724c</sum>
        </package>
        <package name="criu-libs" version="3.18" release="5.module_el8.10.0+3901+4b80ecd7" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>criu-libs-3.18-5.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">42e5dc1d644bb232ca75c420f977c7791c274d1fefc680f4cf93fdd9d2c8253e</sum>
        </package>
        <package name="python3-podman" version="4.9.0" release="2.module_el8.10.0+3876+e55593a8" epoch="0" arch="noarch" src="python-podman-4.9.0-2.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>python3-podman-4.9.0-2.module_el8.10.0+3876+e55593a8.noarch.rpm</filename>
          <sum type="sha256">437316c120844707bd3e7921d302269491e58d4266339b9e5dd59fd6ad67d5a1</sum>
        </package>
        <package name="container-selinux" version="2.229.0" release="2.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="noarch" src="container-selinux-2.229.0-2.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>container-selinux-2.229.0-2.module_el8.10.0+3901+4b80ecd7.noarch.rpm</filename>
          <sum type="sha256">4eccad120e7c2a2c886ac9e608d1028e66e19089dd90fa1ef3cfb4c5453e6059</sum>
        </package>
        <package name="podman-plugins" version="4.9.4" release="13.module_el8.10.0+3901+4b80ecd7" epoch="4" arch="s390x" src="podman-4.9.4-13.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>podman-plugins-4.9.4-13.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">4ff49ca0477f7d474899874eb30abbe0a091924efeb6cbfdca79bbbafba17651</sum>
        </package>
        <package name="skopeo" version="1.14.5" release="3.module_el8.10.0+3876+e55593a8" epoch="2" arch="s390x" src="skopeo-1.14.5-3.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>skopeo-1.14.5-3.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">50b8cf3c6219a9c8669cf6689c25f51511d933ab1bdba7d06e67d30919034939</sum>
        </package>
        <package name="udica" version="0.2.6" release="21.module_el8.10.0+3876+e55593a8" epoch="0" arch="noarch" src="udica-0.2.6-21.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>udica-0.2.6-21.module_el8.10.0+3876+e55593a8.noarch.rpm</filename>
          <sum type="sha256">55469040dd62b0fa6078a3436651230dae541d4e4bd0ca8e4f35b619bedd0de0</sum>
        </package>
        <package name="cockpit-podman" version="84.1" release="1.module_el8.10.0+3876+e55593a8" epoch="0" arch="noarch" src="cockpit-podman-84.1-1.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>cockpit-podman-84.1-1.module_el8.10.0+3876+e55593a8.noarch.rpm</filename>
          <sum type="sha256">55b45ab38b4e2f9aba55c370f27cf80f15945bd3f4c400837f83b38782fd38b8</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="13.module_el8.10.0+3901+4b80ecd7" epoch="4" arch="noarch" src="podman-4.9.4-13.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>podman-docker-4.9.4-13.module_el8.10.0+3901+4b80ecd7.noarch.rpm</filename>
          <sum type="sha256">5bce7dca5ba7a50d7258ce179d585b04d8b52323dc6ccac1ba31927c60bf3d2a</sum>
        </package>
        <package name="python3-criu" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>python3-criu-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">632fe45692e3679dbd77ca62f4dd56c66dd4675de7f1874459025927e78d1db3</sum>
        </package>
        <package name="containernetworking-plugins" version="1.4.0" release="5.module_el8.10.0+3901+4b80ecd7" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-5.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>containernetworking-plugins-1.4.0-5.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">78e830e6f9990071123840c84580828b72b4833dc9a632ebc3fdbb0855224a4a</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>libslirp-4.4.0-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">7f6ee088719dda6b4abc4b0005f17b1a478bc5a1f5b85602af95ab2379a13ded</sum>
        </package>
        <package name="buildah" version="1.33.8" release="4.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="s390x" src="buildah-1.33.8-4.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>buildah-1.33.8-4.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">806fbd49ff9dd8a761546f4643fe107882ef92e6d5e475290dc0e6ebeb267515</sum>
        </package>
        <package name="fuse-overlayfs" version="1.13" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="s390x" src="fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">8118067655696462cee9dfc553f57e4501b089590d837bc88091716914c8d3f5</sum>
        </package>
        <package name="toolbox" version="0.0.99.5" release="2.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>toolbox-0.0.99.5-2.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">8df71d94e465a66228dced33f5189e4789bc2ac13946b5e79a11e8091af4f33e</sum>
        </package>
        <package name="containers-common" version="1" release="82.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="s390x" src="containers-common-1-82.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>containers-common-1-82.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">98eb0c5785e1d53743858e76ac35aab0b199a918b88c02e20aa6f64cc6f89618</sum>
        </package>
        <package name="crit" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>crit-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">aeb27c5bcec90a9452f93ad79ef0d4f00ecedf4442f32f9bedb481509db12683</sum>
        </package>
        <package name="buildah-tests" version="1.33.8" release="4.module_el8.10.0+3876+e55593a8" epoch="2" arch="s390x" src="buildah-1.33.8-4.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>buildah-tests-1.33.8-4.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">babcea9dce0eaa42aef9f6dc138275c2fde1ccc4772c41013eb58af042605e52</sum>
        </package>
        <package name="criu" version="3.18" release="5.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>criu-3.18-5.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">bdaddee931f3746ac7472d9ccee504acd0be805433b3d160b1e7caf8bf361cb8</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.5" release="2.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>toolbox-tests-0.0.99.5-2.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">cd2589cc60f58f089c493aeb4107feb1d1dfa328e28e3bc04226648424e71948</sum>
        </package>
        <package name="podman-catatonit" version="4.9.4" release="13.module_el8.10.0+3901+4b80ecd7" epoch="4" arch="s390x" src="podman-4.9.4-13.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>podman-catatonit-4.9.4-13.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">d43527b562a0b4025d29e675f0901cfbd57258ba5d6d128b6daa7e50f0b22107</sum>
        </package>
        <package name="slirp4netns" version="1.2.3" release="1.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="slirp4netns-1.2.3-1.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>slirp4netns-1.2.3-1.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">d750de35a600a89a6edbd8c2178e292766005ce3339a84c33adecfdef70e7a57</sum>
        </package>
        <package name="podman" version="4.9.4" release="13.module_el8.10.0+3898+7a25cb1a" epoch="4" arch="s390x" src="podman-4.9.4-13.module_el8.10.0+3898+7a25cb1a.src.rpm">
          <filename>podman-4.9.4-13.module_el8.10.0+3898+7a25cb1a.s390x.rpm</filename>
          <sum type="sha256">dd3c629a524337482676d2ce3f65f7ea03e0ba56d039ed9c16db60de74475705</sum>
        </package>
        <package name="runc" version="1.1.12" release="5.module_el8.10.0+3901+4b80ecd7" epoch="1" arch="s390x" src="runc-1.1.12-5.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>runc-1.1.12-5.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">dfcf17da3963fa11d4d974fb1851e6f88943cd61b343e65f85a03c8e5fd95762</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="13.module_el8.10.0+3901+4b80ecd7" epoch="4" arch="s390x" src="podman-4.9.4-13.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>podman-tests-4.9.4-13.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">e44b4c99cd6ae55765b1f3065b7b31093d93ea236c6215e54ae4fe0a8a21d3cc</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.10" release="1.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">e80883fe6389cab87bbab36264467f6f22350aee4fec71f2366bb4afb66292e6</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="2.module_el8.10.0+3901+4b80ecd7" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>libslirp-devel-4.4.0-2.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">ea8f3e70f2a1a7886cb1abcdb80e7b2ea3cf36a174dc5158142c286d69fae136</sum>
        </package>
        <package name="conmon" version="2.1.10" release="1.module_el8.10.0+3845+87b84552" epoch="3" arch="s390x" src="conmon-2.1.10-1.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>conmon-2.1.10-1.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">f8f7e631b6103852487fcb99e1c6baaf8c5e60e3654c2f5a4bddc238ed708563</sum>
        </package>
        <package name="criu-devel" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>criu-devel-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">ffa71276e65ae92bb9c7b93241ba28ad74337aa5770f3cf3390d73b2552e73ae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8117</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2024-10-16 00:00:00"/>
    <updated date="2024-10-18 09:40:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)
* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)
* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)
* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)
* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8117" id="RHSA-2024:8117" type="rhsa" title="RHSA-2024:8117"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-48161" id="CVE-2023-48161" type="cve" title="CVE-2023-48161"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21208" id="CVE-2024-21208" type="cve" title="CVE-2024-21208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21210" id="CVE-2024-21210" type="cve" title="CVE-2024-21210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21217" id="CVE-2024-21217" type="cve" title="CVE-2024-21217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21235" id="CVE-2024-21235" type="cve" title="CVE-2024-21235"/>
      <reference href="https://bugzilla.redhat.com/2251025" id="2251025" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318524" id="2318524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318526" id="2318526" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318530" id="2318530" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318534" id="2318534" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8117.html" id="ALSA-2024:8117" type="self" title="ALSA-2024:8117"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-1.8.0-openjdk" version="1.8.0.432.b06" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.432.b06-2.el8.s390x.rpm</filename>
          <sum type="sha256">135d5eef8133b8370af11cf35e00ca0918aafd03ec763135e0630bb3507eca2d</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.432.b06" release="2.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.432.b06-2.el8.noarch.rpm</filename>
          <sum type="sha256">494131c8322f482a2baad0cd6fe8954974c858a75f3511711e7e1b36e20df828</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility" version="1.8.0.432.b06" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-1.8.0.432.b06-2.el8.s390x.rpm</filename>
          <sum type="sha256">4c95bbf0fe6ec1cd58b1126b8d0ac592d7aa99fdec29cfb72d63c490ea186dd5</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.432.b06" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.432.b06-2.el8.s390x.rpm</filename>
          <sum type="sha256">8b0a39bf68275c5a57edb96b26adeed50f422cc30b1ca3aa4ddacafc218e09d4</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.432.b06" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.432.b06-2.el8.s390x.rpm</filename>
          <sum type="sha256">a1e32cdc80586ffecc78786298b8007e50025b0a70759b0944f42f21bd7c3aa3</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.432.b06" release="2.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.432.b06-2.el8.noarch.rpm</filename>
          <sum type="sha256">cd6ea97bced0c9f07d507719ecbe61fb0b5f982a40c201307d6ac53d66a3013a</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.432.b06" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.432.b06-2.el8.s390x.rpm</filename>
          <sum type="sha256">f5c1ff5610cced4d25e8f75464234f649dab459645c73b350b8cc6a94060f2e2</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.432.b06" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.432.b06-2.el8.s390x.rpm</filename>
          <sum type="sha256">fec9648da30a1b6af0641c3fd7677dab4e2cb08d3770e3603f9378b11333719b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8121</id>
    <title>Moderate: java-11-openjdk security update</title>
    <issued date="2024-10-16 00:00:00"/>
    <updated date="2024-10-18 09:37:56"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)
* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)
* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)
* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)
* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8121" id="RHSA-2024:8121" type="rhsa" title="RHSA-2024:8121"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-48161" id="CVE-2023-48161" type="cve" title="CVE-2023-48161"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21208" id="CVE-2024-21208" type="cve" title="CVE-2024-21208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21210" id="CVE-2024-21210" type="cve" title="CVE-2024-21210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21217" id="CVE-2024-21217" type="cve" title="CVE-2024-21217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21235" id="CVE-2024-21235" type="cve" title="CVE-2024-21235"/>
      <reference href="https://bugzilla.redhat.com/2251025" id="2251025" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318524" id="2318524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318526" id="2318526" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318530" id="2318530" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318534" id="2318534" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8121.html" id="ALSA-2024:8121" type="self" title="ALSA-2024:8121"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-11-openjdk-javadoc" version="11.0.25.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-javadoc-11.0.25.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">168c15faf41dc46375566c531d09bf6dc6a6f4ae99d77fd8ae7103b41f988552</sum>
        </package>
        <package name="java-11-openjdk" version="11.0.25.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-11.0.25.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">17a674e5020703c0950ed7c1dd4a3d46340b8fb9f4dec1d35cdca16155d3ac90</sum>
        </package>
        <package name="java-11-openjdk-static-libs" version="11.0.25.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-static-libs-11.0.25.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">682ffeeda5586c02237884c8f2349d28a2a9d55c59728d32cdd16ade355da883</sum>
        </package>
        <package name="java-11-openjdk-src" version="11.0.25.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-src-11.0.25.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">7350454ba2b1245f3a0ca665221b6b15c35b00509d67f124a361b3eb3e35fd72</sum>
        </package>
        <package name="java-11-openjdk-jmods" version="11.0.25.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-jmods-11.0.25.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">761f6381129df9f25ea62d2ee5f8854e064539e7ff1abdb5e5b5e3dc561aa3a3</sum>
        </package>
        <package name="java-11-openjdk-devel" version="11.0.25.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-devel-11.0.25.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">8ea8d3fbbc0163588057fcb68d1c2f3575e39dd85e1289f521e8cbaa6b2e1f28</sum>
        </package>
        <package name="java-11-openjdk-javadoc-zip" version="11.0.25.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-javadoc-zip-11.0.25.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">a45a43571c74ca05545a340963524cf6a50fa7e4d7b4ea9d2ad24d42d3a9043c</sum>
        </package>
        <package name="java-11-openjdk-headless" version="11.0.25.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-headless-11.0.25.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">a7b223c7320210c65384ce764f4e16dff54aef600451915566b95605b7b3bc58</sum>
        </package>
        <package name="java-11-openjdk-demo" version="11.0.25.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-demo-11.0.25.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">d2bdbab62b1d22dedccf78c33af2f948aed39dfa3aea42ad154a6287dd6a25dd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8124</id>
    <title>Moderate: java-17-openjdk security update</title>
    <issued date="2024-10-16 00:00:00"/>
    <updated date="2024-10-18 09:31:21"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)
* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)
* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)
* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)
* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8124" id="RHSA-2024:8124" type="rhsa" title="RHSA-2024:8124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-48161" id="CVE-2023-48161" type="cve" title="CVE-2023-48161"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21208" id="CVE-2024-21208" type="cve" title="CVE-2024-21208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21210" id="CVE-2024-21210" type="cve" title="CVE-2024-21210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21217" id="CVE-2024-21217" type="cve" title="CVE-2024-21217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21235" id="CVE-2024-21235" type="cve" title="CVE-2024-21235"/>
      <reference href="https://bugzilla.redhat.com/2251025" id="2251025" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318524" id="2318524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318526" id="2318526" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318530" id="2318530" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318534" id="2318534" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8124.html" id="ALSA-2024:8124" type="self" title="ALSA-2024:8124"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.13.0.11" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.13.0.11-3.el8.s390x.rpm</filename>
          <sum type="sha256">10123a8631c80e41f0cac3abd0e47340b1e34d9160a20cf2d6bfd188cc2d4b2c</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.13.0.11" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-headless-17.0.13.0.11-3.el8.s390x.rpm</filename>
          <sum type="sha256">75a41f4405f36af8b165cc7343318984e3ac1f618675444717d61ac78d84e7c9</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.13.0.11" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-devel-17.0.13.0.11-3.el8.s390x.rpm</filename>
          <sum type="sha256">7fe851ae358ca28396093aceef4edba8817789ba8e26583f6413a260ba116412</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.13.0.11" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.13.0.11-3.el8.s390x.rpm</filename>
          <sum type="sha256">855405f601923eadc2549a3556be7dd3c6b9d9487421bca6bbc0f019047e7509</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.13.0.11" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.13.0.11-3.el8.s390x.rpm</filename>
          <sum type="sha256">89d751bcd868aea8b3007e03b002347472c5f4a309f8ec8dd8d49a78a72b6936</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.13.0.11" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.13.0.11-3.el8.s390x.rpm</filename>
          <sum type="sha256">9392b1d24af0eb7dc5153ab75f8328b24e7ea5a5d9e22e2beb6b5e96facecce0</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.13.0.11" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-src-17.0.13.0.11-3.el8.s390x.rpm</filename>
          <sum type="sha256">94b78e9cbb6652d722aaeb13fb98c3b4f3c1a9484d6a78d3a26368ac11c8357a</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.13.0.11" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-demo-17.0.13.0.11-3.el8.s390x.rpm</filename>
          <sum type="sha256">9fb8a4c21fff1857b74a7437825788f1a15d2e1bd637194ce05dddab6ce789b4</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.13.0.11" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-17.0.13.0.11-3.el8.s390x.rpm</filename>
          <sum type="sha256">aa4fc936038489abc5a2ccdd48d021b1247700790c40021b5c765cd5bc51a08e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8127</id>
    <title>Moderate: java-21-openjdk security update</title>
    <issued date="2024-10-16 00:00:00"/>
    <updated date="2024-10-18 09:27:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 runtime environment.

Security Fix(es):

* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)
* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)
* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)
* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)
* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8127" id="RHSA-2024:8127" type="rhsa" title="RHSA-2024:8127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-48161" id="CVE-2023-48161" type="cve" title="CVE-2023-48161"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21208" id="CVE-2024-21208" type="cve" title="CVE-2024-21208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21210" id="CVE-2024-21210" type="cve" title="CVE-2024-21210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21217" id="CVE-2024-21217" type="cve" title="CVE-2024-21217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21235" id="CVE-2024-21235" type="cve" title="CVE-2024-21235"/>
      <reference href="https://bugzilla.redhat.com/2251025" id="2251025" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318524" id="2318524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318526" id="2318526" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318530" id="2318530" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318534" id="2318534" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8127.html" id="ALSA-2024:8127" type="self" title="ALSA-2024:8127"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-21-openjdk-javadoc" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-21.0.5.0.10-3.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">07d8aa38776e13a1d4286cdde2fa611306ebabff51cac3bb6ba11a806a2c1183</sum>
        </package>
        <package name="java-21-openjdk-javadoc-zip" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-zip-21.0.5.0.10-3.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">4209caaf96bc1a89195f59cf0e572260eb4f30d7887374797dffc0faa2479f3f</sum>
        </package>
        <package name="java-21-openjdk-headless" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-21.0.5.0.10-3.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">71c583b18476d6b651db39353534f2b20d3d2410a61c91dbd5578b03e74f346e</sum>
        </package>
        <package name="java-21-openjdk" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-21.0.5.0.10-3.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">919ead0842dafbde3f3b4935ca16513a62f4b1ea90dfedd8632576725e0c40a8</sum>
        </package>
        <package name="java-21-openjdk-static-libs" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-21.0.5.0.10-3.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">941b827091ce8c452990c3a9ca0d445bca6a49e17d4bd51b0243bd5a004b7d20</sum>
        </package>
        <package name="java-21-openjdk-demo" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-21.0.5.0.10-3.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">a3cfef2e1233fd2e8fd78c3da07f94a30ceeb48dfa07ac6259e9da4f05f0fda2</sum>
        </package>
        <package name="java-21-openjdk-jmods" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-21.0.5.0.10-3.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">a6aeca3fb09503c6320b60d70e56b83fa4248fb9e0233b5dbbb054bf427f81f0</sum>
        </package>
        <package name="java-21-openjdk-devel" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-21.0.5.0.10-3.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">bb48fb10bc024eccd9375c87859076939b0dc8dc597fab25a9f6d93f78f0e4c7</sum>
        </package>
        <package name="java-21-openjdk-src" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-src-21.0.5.0.10-3.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">f0e11b2a6eee0d7864b327cef866c9b1cc1cc4d673a8d2393e444b0250e3fdd6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8327</id>
    <title>Important: grafana security update</title>
    <issued date="2024-10-22 00:00:00"/>
    <updated date="2024-10-23 14:58:53"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB. 

Security Fix(es):

* golang-fips: Golang FIPS zeroed buffer (CVE-2024-9355)
* dompurify: nesting-based mutation XSS vulnerability (CVE-2024-47875)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8327" id="RHSA-2024:8327" type="rhsa" title="RHSA-2024:8327"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47875" id="CVE-2024-47875" type="cve" title="CVE-2024-47875"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9355" id="CVE-2024-9355" type="cve" title="CVE-2024-9355"/>
      <reference href="https://bugzilla.redhat.com/2315719" id="2315719" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318052" id="2318052" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8327.html" id="ALSA-2024:8327" type="self" title="ALSA-2024:8327"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="grafana-selinux" version="9.2.10" release="20.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-20.el8_10.src.rpm">
          <filename>grafana-selinux-9.2.10-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">7892968866fcd0285541baaa413fbd808e3be44a7e8e8f02e07c1efceaef8d7a</sum>
        </package>
        <package name="grafana" version="9.2.10" release="20.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-20.el8_10.src.rpm">
          <filename>grafana-9.2.10-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">a787ce5932dbc2b66c85b6a6943b3379e9fd86b054944ab4c83eba6322e7ae2a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8353</id>
    <title>Important: NetworkManager-libreswan security update</title>
    <issued date="2024-10-23 00:00:00"/>
    <updated date="2024-10-24 08:49:12"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>NetworkManager-libreswan security update</summary>
    <description>This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop

Security Fix(es):

* NetworkManager-libreswan: Local privilege escalation via leftupdown (CVE-2024-9050)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8353" id="RHSA-2024:8353" type="rhsa" title="RHSA-2024:8353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9050" id="CVE-2024-9050" type="cve" title="CVE-2024-9050"/>
      <reference href="https://bugzilla.redhat.com/2313828" id="2313828" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8353.html" id="ALSA-2024:8353" type="self" title="ALSA-2024:8353"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="NetworkManager-libreswan" version="1.2.10" release="7.el8_10" epoch="0" arch="s390x" src="NetworkManager-libreswan-1.2.10-7.el8_10.src.rpm">
          <filename>NetworkManager-libreswan-1.2.10-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">a5b461b4abfe8358134a2068db993e7e25dffcca83a1b68a670ba808439e48f9</sum>
        </package>
        <package name="NetworkManager-libreswan-gnome" version="1.2.10" release="7.el8_10" epoch="0" arch="s390x" src="NetworkManager-libreswan-1.2.10-7.el8_10.src.rpm">
          <filename>NetworkManager-libreswan-gnome-1.2.10-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">d429b6ede1507a53344989a297cf51947c8c571e6a3e1c06cfaded3a004d1f96</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8359</id>
    <title>Moderate: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2024-10-23 00:00:00"/>
    <updated date="2024-10-24 07:35:59"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8359" id="RHSA-2024:8359" type="rhsa" title="RHSA-2024:8359"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8359.html" id="ALSA-2024:8359" type="self" title="ALSA-2024:8359"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="python39" stream="3.9" version="8100020241023131949" context="0a5380d9" arch="s390x"/>
        <package name="python39-psycopg2-tests" version="2.8.6" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-psycopg2-tests-2.8.6-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">05d2693d2fda223ef60e5133f0ea03da31cbd0047d13a3bd8f677c4042064ec4</sum>
        </package>
        <package name="python39-devel" version="3.9.20" release="1.module_el8.10.0+3902+1690be06" epoch="0" arch="s390x" src="python39-3.9.20-1.module_el8.10.0+3902+1690be06.src.rpm">
          <filename>python39-devel-3.9.20-1.module_el8.10.0+3902+1690be06.s390x.rpm</filename>
          <sum type="sha256">1c25b77a8aff1cdd39cc7cfe0702a8bb5636339121b1d4f36d112722660a6a31</sum>
        </package>
        <package name="python39-pip" version="20.2.4" release="9.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python3x-pip-20.2.4-9.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-pip-20.2.4-9.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">1cddc6a728150b59b88dadd96ccc569c7bb77f8952761eca587d684b1a9d53dc</sum>
        </package>
        <package name="python39-urllib3" version="1.25.10" release="5.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python-urllib3-1.25.10-5.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-urllib3-1.25.10-5.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">24df140ee4c409e7c015b7d7584ba8aa8df5b95f9ecea9b457ce9ea0f3c68d98</sum>
        </package>
        <package name="python39-test" version="3.9.20" release="1.module_el8.10.0+3902+1690be06" epoch="0" arch="s390x" src="python39-3.9.20-1.module_el8.10.0+3902+1690be06.src.rpm">
          <filename>python39-test-3.9.20-1.module_el8.10.0+3902+1690be06.s390x.rpm</filename>
          <sum type="sha256">27001a1603c0c1f49be9f88679f8274a3184ff3623fce09649a539dc0dd04e93</sum>
        </package>
        <package name="python39-pip-wheel" version="20.2.4" release="9.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python3x-pip-20.2.4-9.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-pip-wheel-20.2.4-9.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">2a77862adcd93af6aa76bbbf2467fbd468eef1d9d6265d21cb2316e69d48cae1</sum>
        </package>
        <package name="python39-idna" version="2.10" release="4.module_el8.10.0+3849+a48d89aa" epoch="0" arch="noarch" src="python-idna-2.10-4.module_el8.10.0+3849+a48d89aa.src.rpm">
          <filename>python39-idna-2.10-4.module_el8.10.0+3849+a48d89aa.noarch.rpm</filename>
          <sum type="sha256">381f6f79555962d405b57a48952a958cf6f71a88772061ae3a017ad2a49f40c6</sum>
        </package>
        <package name="python39-psycopg2" version="2.8.6" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">3938e67a4a4560730a8004aa6291d4a5162286bd6f68bc00b16e2ed49d466377</sum>
        </package>
        <package name="python39-idle" version="3.9.20" release="1.module_el8.10.0+3902+1690be06" epoch="0" arch="s390x" src="python39-3.9.20-1.module_el8.10.0+3902+1690be06.src.rpm">
          <filename>python39-idle-3.9.20-1.module_el8.10.0+3902+1690be06.s390x.rpm</filename>
          <sum type="sha256">4aef33871eb2df1bf90a39519cd32d6d56c4ee9282da0a25999f953fc2830e8f</sum>
        </package>
        <package name="python39-numpy-f2py" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-f2py-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">56f4a39fc3b7cacfec741e84c3c59e67da9e3b2f122f09e59cac8a8020a4ba7c</sum>
        </package>
        <package name="python39-psycopg2-doc" version="2.8.6" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-psycopg2-doc-2.8.6-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">5c33f9b35f95710fe82294dc826e72f8a2af5309c9f694687b92f36df933e837</sum>
        </package>
        <package name="python39-scipy" version="1.5.4" release="5.module_el8.9.0+3634+fb2a896c" epoch="0" arch="s390x" src="scipy-1.5.4-5.module_el8.9.0+3634+fb2a896c.src.rpm">
          <filename>python39-scipy-1.5.4-5.module_el8.9.0+3634+fb2a896c.s390x.rpm</filename>
          <sum type="sha256">68206ec5b6bf886e1266c848bf014248b598bea11cce32708352e16fceaa4475</sum>
        </package>
        <package name="python39-setuptools" version="50.3.2" release="6.module_el8.10.0+3885+d986a391" epoch="0" arch="noarch" src="python3x-setuptools-50.3.2-6.module_el8.10.0+3885+d986a391.src.rpm">
          <filename>python39-setuptools-50.3.2-6.module_el8.10.0+3885+d986a391.noarch.rpm</filename>
          <sum type="sha256">715bf17ab3ab070828be20ba0e485b383bacfe6244860a01169d79e309c3aef0</sum>
        </package>
        <package name="python39-rpm-macros" version="3.9.20" release="1.module_el8.10.0+3902+1690be06" epoch="0" arch="noarch" src="python39-3.9.20-1.module_el8.10.0+3902+1690be06.src.rpm">
          <filename>python39-rpm-macros-3.9.20-1.module_el8.10.0+3902+1690be06.noarch.rpm</filename>
          <sum type="sha256">7da9f8a4661ec91e76331a64468713442c84a2796445a54ffb51582996643a34</sum>
        </package>
        <package name="python39-cryptography" version="3.3.1" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-cryptography-3.3.1-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-cryptography-3.3.1-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">8834a7762b7982546305749c0b8ab5193a8b777110eaddbdbb80e69fdaf6ea8a</sum>
        </package>
        <package name="python39-psutil" version="5.8.0" release="4.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9300840b5b4e742063f5617bc74cc2b05b4f3d5bdcd113ee5b3a9745baf3d0dc</sum>
        </package>
        <package name="python39-numpy" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9ffe33f6e51a25e79b88e45fa5cdca37a3b77d0868fe40e156f615224308810c</sum>
        </package>
        <package name="python39-libs" version="3.9.20" release="1.module_el8.10.0+3902+1690be06" epoch="0" arch="s390x" src="python39-3.9.20-1.module_el8.10.0+3902+1690be06.src.rpm">
          <filename>python39-libs-3.9.20-1.module_el8.10.0+3902+1690be06.s390x.rpm</filename>
          <sum type="sha256">a64f21bd108427202e973f95e7c18098d1168a329d6f586b1b973bf3a8e0c1b1</sum>
        </package>
        <package name="python39-tkinter" version="3.9.20" release="1.module_el8.10.0+3902+1690be06" epoch="0" arch="s390x" src="python39-3.9.20-1.module_el8.10.0+3902+1690be06.src.rpm">
          <filename>python39-tkinter-3.9.20-1.module_el8.10.0+3902+1690be06.s390x.rpm</filename>
          <sum type="sha256">ba3239cf964d66396f03f332634cfe8e145cf46555bbee6371d63b386db1ffcd</sum>
        </package>
        <package name="python39-requests" version="2.25.0" release="3.module_el8.9.0+3634+fb2a896c" epoch="0" arch="noarch" src="python-requests-2.25.0-3.module_el8.9.0+3634+fb2a896c.src.rpm">
          <filename>python39-requests-2.25.0-3.module_el8.9.0+3634+fb2a896c.noarch.rpm</filename>
          <sum type="sha256">d021b1b5bb6a395348b4764885ec17842861193b8e60c25abcf8e1ad7a047641</sum>
        </package>
        <package name="python39-mod_wsgi" version="4.7.1" release="7.module_el8.9.0+3634+fb2a896c" epoch="0" arch="s390x" src="mod_wsgi-4.7.1-7.module_el8.9.0+3634+fb2a896c.src.rpm">
          <filename>python39-mod_wsgi-4.7.1-7.module_el8.9.0+3634+fb2a896c.s390x.rpm</filename>
          <sum type="sha256">dc14410284d94a7140daaaefd4c18ea74368f0acc6515ea0f2332b7b14b61f38</sum>
        </package>
        <package name="python39-lxml" version="4.6.5" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">dc2ce0990738ea69e2b3641de1886825066554244cf58815971db30e321b56b2</sum>
        </package>
        <package name="python39" version="3.9.20" release="1.module_el8.10.0+3902+1690be06" epoch="0" arch="s390x" src="python39-3.9.20-1.module_el8.10.0+3902+1690be06.src.rpm">
          <filename>python39-3.9.20-1.module_el8.10.0+3902+1690be06.s390x.rpm</filename>
          <sum type="sha256">eb0eae87ccf834940d6849fc43054bfc4cd6373f47de6df41860ca96611c01d5</sum>
        </package>
        <package name="python39-cffi" version="1.14.3" release="2.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">ec3acbe8ceecf82559556caacd8c41e2b40e69348f2e6893f0b7598aa36371fd</sum>
        </package>
        <package name="python39-setuptools-wheel" version="50.3.2" release="6.module_el8.10.0+3885+d986a391" epoch="0" arch="noarch" src="python3x-setuptools-50.3.2-6.module_el8.10.0+3885+d986a391.src.rpm">
          <filename>python39-setuptools-wheel-50.3.2-6.module_el8.10.0+3885+d986a391.noarch.rpm</filename>
          <sum type="sha256">f24400c76f23e4e3ce4c36e34154b4d10aeceaf76cbc0f9470f61ebc8bbfdb16</sum>
        </package>
        <package name="python39-pyyaml" version="5.4.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="PyYAML-5.4.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pyyaml-5.4.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">faa90d54ace8329c64942f01e18434bce14edf19cc3a534ae07de7bc301cd27f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8729</id>
    <title>Moderate: firefox security update</title>
    <issued date="2024-10-31 00:00:00"/>
    <updated date="2024-11-03 22:01:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: History interface could have been used to cause a Denial of Service condition in the browser (CVE-2024-10464)
  * firefox: thunderbird: XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response (CVE-2024-10461)
  * firefox: thunderbird: Permission leak via embed or object elements (CVE-2024-10458)
  * firefox: thunderbird: Use-after-free in layout with accessibility (CVE-2024-10459)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 132, Thunderbird 132, Firefox ESR 128.4, and Thunderbird 128.4 (CVE-2024-10467)
  * firefox: thunderbird: Clipboard "paste" button persisted across tabs (CVE-2024-10465)
  * firefox: DOM push subscription message could hang Firefox (CVE-2024-10466)
  * firefox: thunderbird: Cross origin video frame leak (CVE-2024-10463)
  * firefox: thunderbird: Origin of permission prompt could be spoofed by long URL (CVE-2024-10462)
  * firefox: thunderbird: Confusing display of origin for external protocol handler prompt (CVE-2024-10460)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8729" id="RHSA-2024:8729" type="rhsa" title="RHSA-2024:8729"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10458" id="CVE-2024-10458" type="cve" title="CVE-2024-10458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10459" id="CVE-2024-10459" type="cve" title="CVE-2024-10459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10460" id="CVE-2024-10460" type="cve" title="CVE-2024-10460"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10461" id="CVE-2024-10461" type="cve" title="CVE-2024-10461"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10462" id="CVE-2024-10462" type="cve" title="CVE-2024-10462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10463" id="CVE-2024-10463" type="cve" title="CVE-2024-10463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10464" id="CVE-2024-10464" type="cve" title="CVE-2024-10464"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10465" id="CVE-2024-10465" type="cve" title="CVE-2024-10465"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10466" id="CVE-2024-10466" type="cve" title="CVE-2024-10466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10467" id="CVE-2024-10467" type="cve" title="CVE-2024-10467"/>
      <reference href="https://bugzilla.redhat.com/2322424" id="2322424" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322425" id="2322425" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322428" id="2322428" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322429" id="2322429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322433" id="2322433" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322434" id="2322434" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322438" id="2322438" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322439" id="2322439" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322440" id="2322440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322444" id="2322444" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8729.html" id="ALSA-2024:8729" type="self" title="ALSA-2024:8729"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="128.4.0" release="1.el8_10" epoch="0" arch="s390x" src="firefox-128.4.0-1.el8_10.src.rpm">
          <filename>firefox-128.4.0-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c62cfee6a963ac9fe0385ae66a8c5957e81bc5fd4a187648a1f54ea6dfb41c77</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8790</id>
    <title>Moderate: thunderbird security update</title>
    <issued date="2024-11-04 00:00:00"/>
    <updated date="2024-11-04 22:59:59"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: thunderbird: History interface could have been used to cause a Denial of Service condition in the browser (CVE-2024-10464)
  * firefox: thunderbird: XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response (CVE-2024-10461)
  * firefox: thunderbird: Permission leak via embed or object elements (CVE-2024-10458)
  * firefox: thunderbird: Use-after-free in layout with accessibility (CVE-2024-10459)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 132, Thunderbird 132, Firefox ESR 128.4, and Thunderbird 128.4 (CVE-2024-10467)
  * firefox: thunderbird: Clipboard "paste" button persisted across tabs (CVE-2024-10465)
  * firefox: DOM push subscription message could hang Firefox (CVE-2024-10466)
  * firefox: thunderbird: Cross origin video frame leak (CVE-2024-10463)
  * firefox: thunderbird: Origin of permission prompt could be spoofed by long URL (CVE-2024-10462)
  * firefox: thunderbird: Confusing display of origin for external protocol handler prompt (CVE-2024-10460)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8790" id="RHSA-2024:8790" type="rhsa" title="RHSA-2024:8790"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10458" id="CVE-2024-10458" type="cve" title="CVE-2024-10458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10459" id="CVE-2024-10459" type="cve" title="CVE-2024-10459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10460" id="CVE-2024-10460" type="cve" title="CVE-2024-10460"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10461" id="CVE-2024-10461" type="cve" title="CVE-2024-10461"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10462" id="CVE-2024-10462" type="cve" title="CVE-2024-10462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10463" id="CVE-2024-10463" type="cve" title="CVE-2024-10463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10464" id="CVE-2024-10464" type="cve" title="CVE-2024-10464"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10465" id="CVE-2024-10465" type="cve" title="CVE-2024-10465"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10466" id="CVE-2024-10466" type="cve" title="CVE-2024-10466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10467" id="CVE-2024-10467" type="cve" title="CVE-2024-10467"/>
      <reference href="https://bugzilla.redhat.com/2322424" id="2322424" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322425" id="2322425" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322428" id="2322428" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322429" id="2322429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322433" id="2322433" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322434" id="2322434" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322438" id="2322438" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322439" id="2322439" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322440" id="2322440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322444" id="2322444" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8790.html" id="ALSA-2024:8790" type="self" title="ALSA-2024:8790"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="128.4.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-128.4.0-1.el8_10.alma.1.src.rpm">
          <filename>thunderbird-128.4.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">a68397076f3bb76210a823a6db9d43021d4173e2ad0ad81ca0ef34ee84820a58</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8798</id>
    <title>Moderate: xorg-x11-server and xorg-x11-server-Xwayland security update</title>
    <issued date="2024-11-04 00:00:00"/>
    <updated date="2024-11-06 10:17:27"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server and xorg-x11-server-Xwayland security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8798" id="RHSA-2024:8798" type="rhsa" title="RHSA-2024:8798"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9632" id="CVE-2024-9632" type="cve" title="CVE-2024-9632"/>
      <reference href="https://bugzilla.redhat.com/2317233" id="2317233" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8798.html" id="ALSA-2024:8798" type="self" title="ALSA-2024:8798"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="xorg-x11-server-Xnest" version="1.20.11" release="25.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-25.el8_10.src.rpm">
          <filename>xorg-x11-server-Xnest-1.20.11-25.el8_10.s390x.rpm</filename>
          <sum type="sha256">0d42b5e07d567218668352f6a1b1d855e8d12e5ade77e8a2c861903ee2dc034b</sum>
        </package>
        <package name="xorg-x11-server-Xephyr" version="1.20.11" release="25.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-25.el8_10.src.rpm">
          <filename>xorg-x11-server-Xephyr-1.20.11-25.el8_10.s390x.rpm</filename>
          <sum type="sha256">2f9d8436bd130ae0c8c3236c10714f771604c1c710785984192a227689b74d5a</sum>
        </package>
        <package name="xorg-x11-server-Xdmx" version="1.20.11" release="25.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-25.el8_10.src.rpm">
          <filename>xorg-x11-server-Xdmx-1.20.11-25.el8_10.s390x.rpm</filename>
          <sum type="sha256">3d2589b5c3aea0caef9c9fb343eaffaaf00f020aa6c1a796bae06c05ed0989f4</sum>
        </package>
        <package name="xorg-x11-server-Xorg" version="1.20.11" release="25.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-25.el8_10.src.rpm">
          <filename>xorg-x11-server-Xorg-1.20.11-25.el8_10.s390x.rpm</filename>
          <sum type="sha256">467a600970b8b26195de7db0ab313bfca9386013b26046af16358e44095ea1a9</sum>
        </package>
        <package name="xorg-x11-server-common" version="1.20.11" release="25.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-25.el8_10.src.rpm">
          <filename>xorg-x11-server-common-1.20.11-25.el8_10.s390x.rpm</filename>
          <sum type="sha256">9f8948ac6570cd03404dbaab8e967352173019ab77dbf09a3a6f2366dc99e4d1</sum>
        </package>
        <package name="xorg-x11-server-Xvfb" version="1.20.11" release="25.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-25.el8_10.src.rpm">
          <filename>xorg-x11-server-Xvfb-1.20.11-25.el8_10.s390x.rpm</filename>
          <sum type="sha256">e39f26144624b5037561ad54128ff9bfbfcede22090daf2f9031ec2d21989c85</sum>
        </package>
        <package name="xorg-x11-server-Xwayland" version="21.1.3" release="17.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-21.1.3-17.el8_10.src.rpm">
          <filename>xorg-x11-server-Xwayland-21.1.3-17.el8_10.s390x.rpm</filename>
          <sum type="sha256">fe3ac61ea2cf83ab5008930aad458b68e7bced5e87bd3b28bb45f6854fb18d00</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8830</id>
    <title>Low: bpftrace security update</title>
    <issued date="2024-11-05 00:00:00"/>
    <updated date="2024-11-06 10:15:43"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>bpftrace security update</summary>
    <description>BPFtrace is a high-level tracing language for Linux enhanced Berkeley Packet Filter (eBPF) available in recent Linux kernels (4.x). BPFtrace uses LLVM as a backend to compile scripts to BPF-bytecode and makes use of BCC for interacting with the Linux BPF system, as well as existing Linux tracing capabilities: kernel dynamic tracing (kprobes), user-level dynamic tracing (uprobes), and tracepoints. The BPFtrace language is inspired by awk and C, and predecessor tracers such as DTrace and SystemTap  

Security Fix(es):  

  * bpftrace: unprivileged users can force loading of compromised linux headers (CVE-2024-2313)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8830" id="RHSA-2024:8830" type="rhsa" title="RHSA-2024:8830"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2313" id="CVE-2024-2313" type="cve" title="CVE-2024-2313"/>
      <reference href="https://bugzilla.redhat.com/2269014" id="2269014" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8830.html" id="ALSA-2024:8830" type="self" title="ALSA-2024:8830"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="bpftrace" version="0.16.0" release="6.el8_10" epoch="0" arch="s390x" src="bpftrace-0.16.0-6.el8_10.src.rpm">
          <filename>bpftrace-0.16.0-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">768c20fe1316b24bd30538ff081730218888b9e2ad133fb1be752375b7746957</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8833</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2024-11-05 00:00:00"/>
    <updated date="2024-11-06 10:13:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: NULL pointer dereference in tif_dirinfo.c (CVE-2024-7006)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8833" id="RHSA-2024:8833" type="rhsa" title="RHSA-2024:8833"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7006" id="CVE-2024-7006" type="cve" title="CVE-2024-7006"/>
      <reference href="https://bugzilla.redhat.com/2302996" id="2302996" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8833.html" id="ALSA-2024:8833" type="self" title="ALSA-2024:8833"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libtiff" version="4.0.9" release="33.el8_10" epoch="0" arch="s390x" src="libtiff-4.0.9-33.el8_10.src.rpm">
          <filename>libtiff-4.0.9-33.el8_10.s390x.rpm</filename>
          <sum type="sha256">dffae50f28c1d9f262229cd208868d929c44a2d032865d3882c463c51b265613</sum>
        </package>
        <package name="libtiff-devel" version="4.0.9" release="33.el8_10" epoch="0" arch="s390x" src="libtiff-4.0.9-33.el8_10.src.rpm">
          <filename>libtiff-devel-4.0.9-33.el8_10.s390x.rpm</filename>
          <sum type="sha256">fd45d843f4d3fa77aeb3c3f9f256d0d70314c18c8f07ed0ff64d50ecf89d7c62</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8834</id>
    <title>Important: python-gevent security update</title>
    <issued date="2024-11-05 00:00:00"/>
    <updated date="2024-11-06 10:11:50"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python-gevent security update</summary>
    <description>gevent is a coroutine-based Python networking library that uses greenlet to provide a high-level synchronous API on top of libevent event loop. Features include: * convenient API around greenlets * familiar synchronization primitives (gevent.event, gevent.queue) * socket module that cooperates * WSGI server on top of libevent-http * DNS requests done through libevent-dns * monkey patching utility to get pure Python modules to cooperate  

Security Fix(es):  

  * python-gevent: privilege escalation via a crafted script to the WSGIServer component (CVE-2023-41419)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8834" id="RHSA-2024:8834" type="rhsa" title="RHSA-2024:8834"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41419" id="CVE-2023-41419" type="cve" title="CVE-2023-41419"/>
      <reference href="https://bugzilla.redhat.com/2240651" id="2240651" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8834.html" id="ALSA-2024:8834" type="self" title="ALSA-2024:8834"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3-gevent" version="1.2.2" release="5.el8_10" epoch="0" arch="s390x" src="python-gevent-1.2.2-5.el8_10.src.rpm">
          <filename>python3-gevent-1.2.2-5.el8_10.s390x.rpm</filename>
          <sum type="sha256">10a2c7c4affa40db39d292e1ea3d68b2bd1e2dbebded072bdc97716386077180</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8836</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2024-11-05 00:00:00"/>
    <updated date="2024-11-06 10:10:27"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.12-docs package. Packages containing additional libraries for Python are generally named with the "python3.12-" prefix. For the unversioned "python" executable, see manual page "unversioned-python".  

Security Fix(es):  

  * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8836" id="RHSA-2024:8836" type="rhsa" title="RHSA-2024:8836"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8836.html" id="ALSA-2024:8836" type="self" title="ALSA-2024:8836"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.12-tkinter" version="3.12.6" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.6-1.el8_10.src.rpm">
          <filename>python3.12-tkinter-3.12.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">6cb72cf682ef1268ca34728e39c3c11f9889ebc38ec729fa11ccde2a0a661efc</sum>
        </package>
        <package name="python3.12-devel" version="3.12.6" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.6-1.el8_10.src.rpm">
          <filename>python3.12-devel-3.12.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">856b3d16bd990da82ea3e4402271ec61334460a1270e66e15ea06c34c1bda12f</sum>
        </package>
        <package name="python3.12" version="3.12.6" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.6-1.el8_10.src.rpm">
          <filename>python3.12-3.12.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">86eede339551d664196fcf09deb7b784f329d89e769730f9a2a98b39b514d177</sum>
        </package>
        <package name="python3.12-rpm-macros" version="3.12.6" release="1.el8_10" epoch="0" arch="noarch" src="python3.12-3.12.6-1.el8_10.src.rpm">
          <filename>python3.12-rpm-macros-3.12.6-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">e5b690cfd07066914ac7598742df0b90e2e22692b3a657fb95495ace4c33e5b5</sum>
        </package>
        <package name="python3.12-libs" version="3.12.6" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.6-1.el8_10.src.rpm">
          <filename>python3.12-libs-3.12.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">f5a9de0bfa0583f90679c000b853ece8e52e0a9c806a38084646cfa857b46a85</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8838</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-11-05 00:00:00"/>
    <updated date="2024-11-06 10:08:29"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8838" id="RHSA-2024:8838" type="rhsa" title="RHSA-2024:8838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8838.html" id="ALSA-2024:8838" type="self" title="ALSA-2024:8838"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.11" version="3.11.10" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.10-1.el8_10.src.rpm">
          <filename>python3.11-3.11.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">333e4b5b0f9538240f11dc9925a179c04c1a3b33988da170165184c5c01b799e</sum>
        </package>
        <package name="python3.11-rpm-macros" version="3.11.10" release="1.el8_10" epoch="0" arch="noarch" src="python3.11-3.11.10-1.el8_10.src.rpm">
          <filename>python3.11-rpm-macros-3.11.10-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">5f0675f43a903094c07d78317e8372f51dbbe4872a6281ca3e4a8ba393f422b1</sum>
        </package>
        <package name="python3.11-libs" version="3.11.10" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.10-1.el8_10.src.rpm">
          <filename>python3.11-libs-3.11.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">80284b723e5f4056e254fd3e317cadbb8468d4aacdcfd8667b753bef0bda801a</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.10" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.10-1.el8_10.src.rpm">
          <filename>python3.11-tkinter-3.11.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">bcc05fc5472998e1b62ff5f0a5b3a2e1cbfea4e95f0ca23c34d4beab837c8469</sum>
        </package>
        <package name="python3.11-devel" version="3.11.10" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.10-1.el8_10.src.rpm">
          <filename>python3.11-devel-3.11.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">f0df9fcedae7e4e1e43735fb4ff46d6885208199277dfb7807133a7905afd275</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8842</id>
    <title>Moderate: python3.12-urllib3 security update</title>
    <issued date="2024-11-05 00:00:00"/>
    <updated date="2024-11-06 10:06:23"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12-urllib3 security update</summary>
    <description>urllib3 is a powerful, user-friendly HTTP client for Python. urllib3 brings many critical features that are missing from the Python standard libraries:   
• Thread safety.  
• Connection pooling.  
• Client-side SSL/TLS verification.  
• File uploads with multipart encoding.  
• Helpers for retrying requests and dealing with HTTP redirects.  
• Support for gzip, deflate, brotli, and zstd encoding.  
• Proxy support for HTTP and SOCKS.  
• 100% test coverage.  

Security Fix(es):  

  * urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8842" id="RHSA-2024:8842" type="rhsa" title="RHSA-2024:8842"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37891" id="CVE-2024-37891" type="cve" title="CVE-2024-37891"/>
      <reference href="https://bugzilla.redhat.com/2292788" id="2292788" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8842.html" id="ALSA-2024:8842" type="self" title="ALSA-2024:8842"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.12-urllib3" version="1.26.19" release="1.el8_10" epoch="0" arch="noarch" src="python3.12-urllib3-1.26.19-1.el8_10.src.rpm">
          <filename>python3.12-urllib3-1.26.19-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">e9c6302ea753f2b67dd0a7115b1dd94cb6e7337ebbd11269214b2aa7c8d9f95b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8843</id>
    <title>Moderate: python3.11-urllib3 security update</title>
    <issued date="2024-11-05 00:00:00"/>
    <updated date="2024-11-06 10:04:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11-urllib3 security update</summary>
    <description>The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities.  

Security Fix(es):  

  * urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8843" id="RHSA-2024:8843" type="rhsa" title="RHSA-2024:8843"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37891" id="CVE-2024-37891" type="cve" title="CVE-2024-37891"/>
      <reference href="https://bugzilla.redhat.com/2292788" id="2292788" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8843.html" id="ALSA-2024:8843" type="self" title="ALSA-2024:8843"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.11-urllib3" version="1.26.12" release="4.el8_10" epoch="0" arch="noarch" src="python3.11-urllib3-1.26.12-4.el8_10.src.rpm">
          <filename>python3.11-urllib3-1.26.12-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">01bf3ff05768b9d38effd62ff676507732596886a4caf2fde5f9fa7fcf012432</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8846</id>
    <title>Important: container-tools:rhel8 security update</title>
    <issued date="2024-11-05 00:00:00"/>
    <updated date="2024-11-06 10:20:18"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>container-tools:rhel8 security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.  

Security Fix(es):  

  * Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (CVE-2024-9341)
  * Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction (CVE-2024-9407)
  * buildah: Buildah allows arbitrary directory mount (CVE-2024-9675)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8846" id="RHSA-2024:8846" type="rhsa" title="RHSA-2024:8846"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9341" id="CVE-2024-9341" type="cve" title="CVE-2024-9341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9407" id="CVE-2024-9407" type="cve" title="CVE-2024-9407"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9675" id="CVE-2024-9675" type="cve" title="CVE-2024-9675"/>
      <reference href="https://bugzilla.redhat.com/2315691" id="2315691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315887" id="2315887" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317458" id="2317458" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8846.html" id="ALSA-2024:8846" type="self" title="ALSA-2024:8846"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="container-tools" stream="rhel8" version="8100020240813140059" context="20125149" arch="s390x"/>
        <package name="crun" version="1.14.3" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="crun-1.14.3-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>crun-1.14.3-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">1803f41cb3e0828fe770ce7de14a940b9fad458fd84f420baab724674e2041e7</sum>
        </package>
        <package name="skopeo-tests" version="1.14.5" release="3.module_el8.10.0+3876+e55593a8" epoch="2" arch="s390x" src="skopeo-1.14.5-3.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>skopeo-tests-1.14.5-3.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">29a7b74a18e0a1b63825ee2eb5c3f36a2a3971da39a546401e9c9d07b00cd50e</sum>
        </package>
        <package name="netavark" version="1.10.3" release="1.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="s390x" src="netavark-1.10.3-1.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>netavark-1.10.3-1.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">32a9b85eb96899065a74a3a7e7758a6c450e8351a358c2c747d80e8b2117f7b6</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.10" release="1.module_el8.10.0+3909+6e1c1eb7" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">335953655f25bd1ac71964d14ffc9ab6adaa73033e74e2b3a851b88683283196</sum>
        </package>
        <package name="aardvark-dns" version="1.10.1" release="2.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="s390x" src="aardvark-dns-1.10.1-2.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>aardvark-dns-1.10.1-2.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">33f0e53072f8851c287e97dada126b7e760aa82256964e34ed5d94a5bb61724c</sum>
        </package>
        <package name="podman-plugins" version="4.9.4" release="15.module_el8.10.0+3909+6e1c1eb7" epoch="4" arch="s390x" src="podman-4.9.4-15.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>podman-plugins-4.9.4-15.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">36f60031eaf7e06e9e19d9d89d42ed6d57d65642533254afe6212943bb71c165</sum>
        </package>
        <package name="container-selinux" version="2.229.0" release="2.module_el8.10.0+3909+6e1c1eb7" epoch="2" arch="noarch" src="container-selinux-2.229.0-2.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>container-selinux-2.229.0-2.module_el8.10.0+3909+6e1c1eb7.noarch.rpm</filename>
          <sum type="sha256">39df1f8e08cf61f1d3399b9d32cdaa93153cdbd001ff380fa9145a2012d1190c</sum>
        </package>
        <package name="buildah" version="1.33.10" release="1.module_el8.10.0+3909+6e1c1eb7" epoch="2" arch="s390x" src="buildah-1.33.10-1.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>buildah-1.33.10-1.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">3d0dbe8265f3738c376922b85fc7ef9128fcb07c0277ad0d66fff88881754905</sum>
        </package>
        <package name="python3-podman" version="4.9.0" release="2.module_el8.10.0+3876+e55593a8" epoch="0" arch="noarch" src="python-podman-4.9.0-2.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>python3-podman-4.9.0-2.module_el8.10.0+3876+e55593a8.noarch.rpm</filename>
          <sum type="sha256">437316c120844707bd3e7921d302269491e58d4266339b9e5dd59fd6ad67d5a1</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="15.module_el8.10.0+3909+6e1c1eb7" epoch="4" arch="noarch" src="podman-4.9.4-15.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>podman-docker-4.9.4-15.module_el8.10.0+3909+6e1c1eb7.noarch.rpm</filename>
          <sum type="sha256">50c6cc019ff1769b8109f7860b330f29c6234c57b34f6f5f70e17162f963c805</sum>
        </package>
        <package name="udica" version="0.2.6" release="21.module_el8.10.0+3876+e55593a8" epoch="0" arch="noarch" src="udica-0.2.6-21.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>udica-0.2.6-21.module_el8.10.0+3876+e55593a8.noarch.rpm</filename>
          <sum type="sha256">55469040dd62b0fa6078a3436651230dae541d4e4bd0ca8e4f35b619bedd0de0</sum>
        </package>
        <package name="cockpit-podman" version="84.1" release="1.module_el8.10.0+3876+e55593a8" epoch="0" arch="noarch" src="cockpit-podman-84.1-1.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>cockpit-podman-84.1-1.module_el8.10.0+3876+e55593a8.noarch.rpm</filename>
          <sum type="sha256">55b45ab38b4e2f9aba55c370f27cf80f15945bd3f4c400837f83b38782fd38b8</sum>
        </package>
        <package name="skopeo" version="1.14.5" release="3.module_el8.10.0+3909+6e1c1eb7" epoch="2" arch="s390x" src="skopeo-1.14.5-3.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>skopeo-1.14.5-3.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">58dd688a7d9090c672382ae53059ed98d14b6b4784899787384be0e51ed8e2cd</sum>
        </package>
        <package name="python3-criu" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>python3-criu-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">632fe45692e3679dbd77ca62f4dd56c66dd4675de7f1874459025927e78d1db3</sum>
        </package>
        <package name="containernetworking-plugins" version="1.4.0" release="5.module_el8.10.0+3901+4b80ecd7" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-5.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>containernetworking-plugins-1.4.0-5.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">78e830e6f9990071123840c84580828b72b4833dc9a632ebc3fdbb0855224a4a</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>libslirp-4.4.0-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">7f6ee088719dda6b4abc4b0005f17b1a478bc5a1f5b85602af95ab2379a13ded</sum>
        </package>
        <package name="fuse-overlayfs" version="1.13" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="s390x" src="fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">8118067655696462cee9dfc553f57e4501b089590d837bc88091716914c8d3f5</sum>
        </package>
        <package name="buildah-tests" version="1.33.10" release="1.module_el8.10.0+3909+6e1c1eb7" epoch="2" arch="s390x" src="buildah-1.33.10-1.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>buildah-tests-1.33.10-1.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">87c62addec324b97430188cd41936cb8802994499414ed4fc2016b601570bf38</sum>
        </package>
        <package name="podman-catatonit" version="4.9.4" release="15.module_el8.10.0+3909+6e1c1eb7" epoch="4" arch="s390x" src="podman-4.9.4-15.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>podman-catatonit-4.9.4-15.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">8ca2323f76c89b4148c3287a439148eec513f6ae89ab280399e6d656c12d26ee</sum>
        </package>
        <package name="toolbox" version="0.0.99.5" release="2.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>toolbox-0.0.99.5-2.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">8df71d94e465a66228dced33f5189e4789bc2ac13946b5e79a11e8091af4f33e</sum>
        </package>
        <package name="containers-common" version="1" release="82.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="s390x" src="containers-common-1-82.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>containers-common-1-82.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">98eb0c5785e1d53743858e76ac35aab0b199a918b88c02e20aa6f64cc6f89618</sum>
        </package>
        <package name="podman" version="4.9.4" release="15.module_el8.10.0+3909+6e1c1eb7" epoch="4" arch="s390x" src="podman-4.9.4-15.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>podman-4.9.4-15.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">a8ee4f01e94b713de6e033decf845fe2032b38aef1ed62915c7774e80d39d823</sum>
        </package>
        <package name="crit" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>crit-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">aeb27c5bcec90a9452f93ad79ef0d4f00ecedf4442f32f9bedb481509db12683</sum>
        </package>
        <package name="criu" version="3.18" release="5.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>criu-3.18-5.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">bdaddee931f3746ac7472d9ccee504acd0be805433b3d160b1e7caf8bf361cb8</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="15.module_el8.10.0+3909+6e1c1eb7" epoch="4" arch="s390x" src="podman-4.9.4-15.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>podman-remote-4.9.4-15.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">bdfce25571abfc4dd8b37c4790292c8ba466e65559dcb8e7d18d199e2ffd8a45</sum>
        </package>
        <package name="runc" version="1.1.12" release="5.module_el8.10.0+3909+6e1c1eb7" epoch="1" arch="s390x" src="runc-1.1.12-5.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>runc-1.1.12-5.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">bf3ce8a59c28361dc48b0d52763568c605ad7951832de31c2a88d234c8d1926c</sum>
        </package>
        <package name="slirp4netns" version="1.2.3" release="1.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="slirp4netns-1.2.3-1.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>slirp4netns-1.2.3-1.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">d750de35a600a89a6edbd8c2178e292766005ce3339a84c33adecfdef70e7a57</sum>
        </package>
        <package name="criu-libs" version="3.18" release="5.module_el8.10.0+3909+6e1c1eb7" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>criu-libs-3.18-5.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">e0d274cf0f5db049af121f476769c0d601e70c7566ea3aec4e608aca5317b4eb</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.5" release="2.module_el8.10.0+3909+6e1c1eb7" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>toolbox-tests-0.0.99.5-2.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">e5fff3c3d6b6f6023e100d0922c2e8096f567b7f5cfbb57efe322eadd2f43465</sum>
        </package>
        <package name="podman-gvproxy" version="4.9.4" release="15.module_el8.10.0+3909+6e1c1eb7" epoch="4" arch="s390x" src="podman-4.9.4-15.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>podman-gvproxy-4.9.4-15.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">e7c1b18bc103a5a9d20f1ddd06fe79e92cd51f0ee5e82cd3c8b06051cf03cfe5</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="2.module_el8.10.0+3901+4b80ecd7" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>libslirp-devel-4.4.0-2.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">ea8f3e70f2a1a7886cb1abcdb80e7b2ea3cf36a174dc5158142c286d69fae136</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="15.module_el8.10.0+3909+6e1c1eb7" epoch="4" arch="s390x" src="podman-4.9.4-15.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>podman-tests-4.9.4-15.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">f3b7c67f8a398c5c4b711d84ff9c160ff3c8cb6980db47bb15e2d787dd737b91</sum>
        </package>
        <package name="conmon" version="2.1.10" release="1.module_el8.10.0+3845+87b84552" epoch="3" arch="s390x" src="conmon-2.1.10-1.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>conmon-2.1.10-1.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">f8f7e631b6103852487fcb99e1c6baaf8c5e60e3654c2f5a4bddc238ed708563</sum>
        </package>
        <package name="criu-devel" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>criu-devel-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">ffa71276e65ae92bb9c7b93241ba28ad74337aa5770f3cf3390d73b2552e73ae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8847</id>
    <title>Moderate: grafana-pcp security update</title>
    <issued date="2024-11-05 00:00:00"/>
    <updated date="2024-11-06 10:01:27"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grafana-pcp security update</summary>
    <description>The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.  

Security Fix(es):  

  * golang-fips: Golang FIPS zeroed buffer (CVE-2024-9355)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8847" id="RHSA-2024:8847" type="rhsa" title="RHSA-2024:8847"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9355" id="CVE-2024-9355" type="cve" title="CVE-2024-9355"/>
      <reference href="https://bugzilla.redhat.com/2315719" id="2315719" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8847.html" id="ALSA-2024:8847" type="self" title="ALSA-2024:8847"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="grafana-pcp" version="5.1.1" release="9.el8_10" epoch="0" arch="s390x" src="grafana-pcp-5.1.1-9.el8_10.src.rpm">
          <filename>grafana-pcp-5.1.1-9.el8_10.s390x.rpm</filename>
          <sum type="sha256">6e550273752a53c20be12b9a2aac4b049c53d13059673d65971dc91a228b2109</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8849</id>
    <title>Moderate: haproxy security update</title>
    <issued date="2024-11-05 00:00:00"/>
    <updated date="2024-11-06 09:59:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>haproxy security update</summary>
    <description>The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications.  

Security Fix(es):  

  * haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers (CVE-2023-45539)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8849" id="RHSA-2024:8849" type="rhsa" title="RHSA-2024:8849"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45539" id="CVE-2023-45539" type="cve" title="CVE-2023-45539"/>
      <reference href="https://bugzilla.redhat.com/2253037" id="2253037" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8849.html" id="ALSA-2024:8849" type="self" title="ALSA-2024:8849"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="haproxy" version="1.8.27" release="5.el8_10.1" epoch="0" arch="s390x" src="haproxy-1.8.27-5.el8_10.1.src.rpm">
          <filename>haproxy-1.8.27-5.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">eba302de373444454ad31fe3687f227fd76c607f2e92e1f27c8489f0eccb4712</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9056</id>
    <title>Moderate: gstreamer1-plugins-base security update</title>
    <issued date="2024-11-11 00:00:00"/>
    <updated date="2024-11-12 07:10:51"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gstreamer1-plugins-base security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins.  

Security Fix(es):  

  * gstreamer: EXIF Metadata Parsing Integer Overflow (CVE-2024-4453)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9056" id="RHSA-2024:9056" type="rhsa" title="RHSA-2024:9056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4453" id="CVE-2024-4453" type="cve" title="CVE-2024-4453"/>
      <reference href="https://bugzilla.redhat.com/2282999" id="2282999" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-9056.html" id="ALSA-2024:9056" type="self" title="ALSA-2024:9056"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="gstreamer1-plugins-base" version="1.16.1" release="4.el8_10" epoch="0" arch="s390x" src="gstreamer1-plugins-base-1.16.1-4.el8_10.src.rpm">
          <filename>gstreamer1-plugins-base-1.16.1-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">4c2f80a26827d39a07e13c8bfdd0b820c6e5ad39ccc2dd01111df95596951825</sum>
        </package>
        <package name="gstreamer1-plugins-base-devel" version="1.16.1" release="4.el8_10" epoch="0" arch="s390x" src="gstreamer1-plugins-base-1.16.1-4.el8_10.src.rpm">
          <filename>gstreamer1-plugins-base-devel-1.16.1-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">db57d44e7b5413bbe2aa2f39fafe362bbd71d07ed7cc1797773aea82a0da812e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9540</id>
    <title>Important: tigervnc security update</title>
    <issued date="2024-11-13 00:00:00"/>
    <updated date="2024-11-15 12:49:29"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.  

Security Fix(es):  

  * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9540" id="RHSA-2024:9540" type="rhsa" title="RHSA-2024:9540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9632" id="CVE-2024-9632" type="cve" title="CVE-2024-9632"/>
      <reference href="https://bugzilla.redhat.com/2317233" id="2317233" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-9540.html" id="ALSA-2024:9540" type="self" title="ALSA-2024:9540"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="tigervnc" version="1.13.1" release="14.el8_10" epoch="0" arch="s390x" src="tigervnc-1.13.1-14.el8_10.src.rpm">
          <filename>tigervnc-1.13.1-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">0854237219cbf3ac8a4fd02c885ca474504eca13c9a18a25f34070cec3660d8c</sum>
        </package>
        <package name="tigervnc-license" version="1.13.1" release="14.el8_10" epoch="0" arch="noarch" src="tigervnc-1.13.1-14.el8_10.src.rpm">
          <filename>tigervnc-license-1.13.1-14.el8_10.noarch.rpm</filename>
          <sum type="sha256">2bc4724f4fc888961942f681ccca4b3c124940c6b70929cced05b350e235727d</sum>
        </package>
        <package name="tigervnc-selinux" version="1.13.1" release="14.el8_10" epoch="0" arch="noarch" src="tigervnc-1.13.1-14.el8_10.src.rpm">
          <filename>tigervnc-selinux-1.13.1-14.el8_10.noarch.rpm</filename>
          <sum type="sha256">513434d9b8729397d1726ba425ec3d90995ccfcd337ef59b8e78fd2799c58349</sum>
        </package>
        <package name="tigervnc-icons" version="1.13.1" release="14.el8_10" epoch="0" arch="noarch" src="tigervnc-1.13.1-14.el8_10.src.rpm">
          <filename>tigervnc-icons-1.13.1-14.el8_10.noarch.rpm</filename>
          <sum type="sha256">574fda6a339a5b753a3bc378d1d7e2b5deb9dcf74bbb324c1cd6a907a773c104</sum>
        </package>
        <package name="tigervnc-server-minimal" version="1.13.1" release="14.el8_10" epoch="0" arch="s390x" src="tigervnc-1.13.1-14.el8_10.src.rpm">
          <filename>tigervnc-server-minimal-1.13.1-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">b42334f4203db42c35948f0d714d231aca99da1b41959e14aeeee38eb5824064</sum>
        </package>
        <package name="tigervnc-server-module" version="1.13.1" release="14.el8_10" epoch="0" arch="s390x" src="tigervnc-1.13.1-14.el8_10.src.rpm">
          <filename>tigervnc-server-module-1.13.1-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">dc17996de4c2d7701d158ff497d0521dfcb3bdb980b226d30ef89847526ecbee</sum>
        </package>
        <package name="tigervnc-server" version="1.13.1" release="14.el8_10" epoch="0" arch="s390x" src="tigervnc-1.13.1-14.el8_10.src.rpm">
          <filename>tigervnc-server-1.13.1-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">eebf296ba978f1df68090d6b1452e87c3e8e4c569c43bfd9791edf5fe5d9fda0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9573</id>
    <title>Important: libsoup security update</title>
    <issued date="2024-11-13 00:00:00"/>
    <updated date="2024-11-14 08:09:34"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsoup security update</summary>
    <description>The libsoup packages provide an HTTP client and server library for GNOME.  

Security Fix(es):  

  * libsoup: infinite loop while reading websocket data (CVE-2024-52532)
  * libsoup: HTTP request smuggling via stripping null bytes from the ends of header names (CVE-2024-52530)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9573" id="RHSA-2024:9573" type="rhsa" title="RHSA-2024:9573"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52530" id="CVE-2024-52530" type="cve" title="CVE-2024-52530"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52532" id="CVE-2024-52532" type="cve" title="CVE-2024-52532"/>
      <reference href="https://bugzilla.redhat.com/2325276" id="2325276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325284" id="2325284" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-9573.html" id="ALSA-2024:9573" type="self" title="ALSA-2024:9573"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libsoup-devel" version="2.62.3" release="6.el8_10" epoch="0" arch="s390x" src="libsoup-2.62.3-6.el8_10.src.rpm">
          <filename>libsoup-devel-2.62.3-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">6b9c3c9eac5518defbbcc1a90f312d1601146004d72fc05635a9666649e3c43b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9636</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2024-11-14 00:00:00"/>
    <updated date="2024-11-15 12:47:21"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * chromium-browser: Use after free in ANGLE (CVE-2024-4558)
  * webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-40789)
  * webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40780)
  * webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40779)
  * webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management (CVE-2024-40782)
  * webkitgtk: Visiting a malicious website may lead to address bar spoofing (CVE-2024-40866)
  * webkitgtk: A malicious website may cause unexpected cross-origin behavior (CVE-2024-23271)
  * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-27820)
  * webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-27838)
  * webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2024-27851)
  * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-44187)
  * webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44185)
  * webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44244)
  * webkitgtk: webkit2gtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2024-44296)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9636" id="RHSA-2024:9636" type="rhsa" title="RHSA-2024:9636"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23271" id="CVE-2024-23271" type="cve" title="CVE-2024-23271"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27820" id="CVE-2024-27820" type="cve" title="CVE-2024-27820"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27838" id="CVE-2024-27838" type="cve" title="CVE-2024-27838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27851" id="CVE-2024-27851" type="cve" title="CVE-2024-27851"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40779" id="CVE-2024-40779" type="cve" title="CVE-2024-40779"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40780" id="CVE-2024-40780" type="cve" title="CVE-2024-40780"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40782" id="CVE-2024-40782" type="cve" title="CVE-2024-40782"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40789" id="CVE-2024-40789" type="cve" title="CVE-2024-40789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40866" id="CVE-2024-40866" type="cve" title="CVE-2024-40866"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-44185" id="CVE-2024-44185" type="cve" title="CVE-2024-44185"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-44187" id="CVE-2024-44187" type="cve" title="CVE-2024-44187"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-44244" id="CVE-2024-44244" type="cve" title="CVE-2024-44244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-44296" id="CVE-2024-44296" type="cve" title="CVE-2024-44296"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4558" id="CVE-2024-4558" type="cve" title="CVE-2024-4558"/>
      <reference href="https://bugzilla.redhat.com/2279689" id="2279689" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302067" id="2302067" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302069" id="2302069" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302070" id="2302070" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302071" id="2302071" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2312724" id="2312724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2314696" id="2314696" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2314698" id="2314698" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2314702" id="2314702" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2314704" id="2314704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2314706" id="2314706" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323263" id="2323263" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323278" id="2323278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323289" id="2323289" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-9636.html" id="ALSA-2024:9636" type="self" title="ALSA-2024:9636"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="webkit2gtk3" version="2.46.3" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.46.3-1.el8_10.src.rpm">
          <filename>webkit2gtk3-2.46.3-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0535b1dff3b5873432c348cf64a561bc122f1741dff14769c5879eb6c94953ae</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.46.3" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.46.3-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.46.3-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0a2dc4b7767a6bc27048ca8572bc727826560750ac57d589af9e2e3534a26139</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.46.3" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.46.3-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-2.46.3-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">55c6d5af884b2f51dde3befd8375d11c3225ac6b5da9213d052ab66f5b509ca0</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.46.3" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.46.3-1.el8_10.src.rpm">
          <filename>webkit2gtk3-devel-2.46.3-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">e37fdcafcceb9cbd8a7a908264cd34d056a61c32ecc5efcfc9716e56bc9cb64d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9644</id>
    <title>Important: squid:4 security update</title>
    <issued date="2024-11-14 00:00:00"/>
    <updated date="2024-11-15 12:51:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>squid:4 security update</summary>
    <description>Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.  

Security Fix(es):  

  * squid: vulnerable to a Denial of Service attack against Cache Manager error responses (CVE-2024-23638)
  * squid: Denial of Service processing ESI response content (CVE-2024-45802)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9644" id="RHSA-2024:9644" type="rhsa" title="RHSA-2024:9644"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23638" id="CVE-2024-23638" type="cve" title="CVE-2024-23638"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45802" id="CVE-2024-45802" type="cve" title="CVE-2024-45802"/>
      <reference href="https://bugzilla.redhat.com/2260051" id="2260051" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322154" id="2322154" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-9644.html" id="ALSA-2024:9644" type="self" title="ALSA-2024:9644"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="squid" stream="4" version="8100020241114151505" context="9edba152" arch="s390x"/>
        <package name="squid" version="4.15" release="10.module_el8.10.0+3916+ed00a4a0.3" epoch="7" arch="s390x" src="squid-4.15-10.module_el8.10.0+3916+ed00a4a0.3.src.rpm">
          <filename>squid-4.15-10.module_el8.10.0+3916+ed00a4a0.3.s390x.rpm</filename>
          <sum type="sha256">5d63eb865d92ce0798ae3274ab559e3c55e4d78d497b2088baedae8beef82fa1</sum>
        </package>
        <package name="libecap" version="1.0.1" release="2.module_el8.6.0+3048+383bc947" epoch="0" arch="s390x" src="libecap-1.0.1-2.module_el8.6.0+3048+383bc947.src.rpm">
          <filename>libecap-1.0.1-2.module_el8.6.0+3048+383bc947.s390x.rpm</filename>
          <sum type="sha256">6f8eb1f500a9dca1949f5f05aedf6b97764817d9f17284be3612eec04618f4e1</sum>
        </package>
        <package name="libecap-devel" version="1.0.1" release="2.module_el8.6.0+3048+383bc947" epoch="0" arch="s390x" src="libecap-1.0.1-2.module_el8.6.0+3048+383bc947.src.rpm">
          <filename>libecap-devel-1.0.1-2.module_el8.6.0+3048+383bc947.s390x.rpm</filename>
          <sum type="sha256">96f15e87a90682f6ec87bc4ed7c8edae439f414cd0382f1865dcf76ac3a7807d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9689</id>
    <title>Low: binutils security update</title>
    <issued date="2024-11-14 00:00:00"/>
    <updated date="2024-11-15 12:45:11"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>binutils security update</summary>
    <description>The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities.  

Security Fix(es):  

  * binutils: heap-based buffer overflow in finish_stab in stabs.c (CVE-2018-12699)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9689" id="RHSA-2024:9689" type="rhsa" title="RHSA-2024:9689"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2018-12699" id="CVE-2018-12699" type="cve" title="CVE-2018-12699"/>
      <reference href="https://bugzilla.redhat.com/1595427" id="1595427" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-9689.html" id="ALSA-2024:9689" type="self" title="ALSA-2024:9689"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="binutils-devel" version="2.30" release="125.el8_10" epoch="0" arch="s390x" src="binutils-2.30-125.el8_10.src.rpm">
          <filename>binutils-devel-2.30-125.el8_10.s390x.rpm</filename>
          <sum type="sha256">7df5a70ac11540239dced6c6bc65bc2719f4fea6fe59d36351c6c68922450499</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0083</id>
    <title>Low: cups security update</title>
    <issued date="2025-01-08 00:00:00"/>
    <updated date="2025-01-08 17:48:06"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>cups security update</summary>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.  

Security Fix(es):  

  * cups: libppd: remote command injection via attacker controlled data in PPD file (CVE-2024-47175)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0083" id="RHSA-2025:0083" type="rhsa" title="RHSA-2025:0083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47175" id="CVE-2024-47175" type="cve" title="CVE-2024-47175"/>
      <reference href="https://bugzilla.redhat.com/2314256" id="2314256" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0083.html" id="ALSA-2025:0083" type="self" title="ALSA-2025:0083"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="cups" version="2.2.6" release="62.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-62.el8_10.src.rpm">
          <filename>cups-2.2.6-62.el8_10.s390x.rpm</filename>
          <sum type="sha256">14ba45b891ac045710438d322100fce2322cf85ef49bca9576256dd28862464b</sum>
        </package>
        <package name="cups-ipptool" version="2.2.6" release="62.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-62.el8_10.src.rpm">
          <filename>cups-ipptool-2.2.6-62.el8_10.s390x.rpm</filename>
          <sum type="sha256">5066a5288839fdfa0529ec9d2d5c8360a076120ece07628d913a070ed2cbf7b5</sum>
        </package>
        <package name="cups-filesystem" version="2.2.6" release="62.el8_10" epoch="1" arch="noarch" src="cups-2.2.6-62.el8_10.src.rpm">
          <filename>cups-filesystem-2.2.6-62.el8_10.noarch.rpm</filename>
          <sum type="sha256">c3dfe5881ab3c83daa686f4a7ff0a3839f5877ba5857224236cc67ab96b76572</sum>
        </package>
        <package name="cups-lpd" version="2.2.6" release="62.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-62.el8_10.src.rpm">
          <filename>cups-lpd-2.2.6-62.el8_10.s390x.rpm</filename>
          <sum type="sha256">de9274bb02b6cc91555044e47f0f2cd80db3059af68de14b24d740060a4ee410</sum>
        </package>
        <package name="cups-client" version="2.2.6" release="62.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-62.el8_10.src.rpm">
          <filename>cups-client-2.2.6-62.el8_10.s390x.rpm</filename>
          <sum type="sha256">e386e532dddb51c46a234b61e3b00eb3678c91ee3bf9562a667c81dd282fb7f5</sum>
        </package>
        <package name="cups-devel" version="2.2.6" release="62.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-62.el8_10.src.rpm">
          <filename>cups-devel-2.2.6-62.el8_10.s390x.rpm</filename>
          <sum type="sha256">e58a3e206b6d6be9172baf5a8e69e9cf5fbd77984cd9973df0d8ceff42b99049</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0144</id>
    <title>Important: firefox security update</title>
    <issued date="2025-01-09 00:00:00"/>
    <updated date="2025-01-10 12:55:50"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: Use-after-free when breaking lines in text (CVE-2025-0238)
  * firefox: Memory corruption when using JavaScript Text Segmentation (CVE-2025-0241)
  * firefox: Alt-Svc ALPN validation failure when redirected (CVE-2025-0239)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6 (CVE-2025-0243)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 (CVE-2025-0242)
  * firefox: WebChannel APIs susceptible to confused deputy attack (CVE-2025-0237)
  * firefox: Compartment mismatch when parsing JavaScript JSON module (CVE-2025-0240)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0144" id="RHSA-2025:0144" type="rhsa" title="RHSA-2025:0144"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0237" id="CVE-2025-0237" type="cve" title="CVE-2025-0237"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0238" id="CVE-2025-0238" type="cve" title="CVE-2025-0238"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0239" id="CVE-2025-0239" type="cve" title="CVE-2025-0239"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0240" id="CVE-2025-0240" type="cve" title="CVE-2025-0240"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0241" id="CVE-2025-0241" type="cve" title="CVE-2025-0241"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0242" id="CVE-2025-0242" type="cve" title="CVE-2025-0242"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0243" id="CVE-2025-0243" type="cve" title="CVE-2025-0243"/>
      <reference href="https://bugzilla.redhat.com/2336165" id="2336165" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2336168" id="2336168" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2336170" id="2336170" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2336175" id="2336175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2336181" id="2336181" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2336182" id="2336182" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2336188" id="2336188" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0144.html" id="ALSA-2025:0144" type="self" title="ALSA-2025:0144"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="128.6.0" release="1.el8_10" epoch="0" arch="s390x" src="firefox-128.6.0-1.el8_10.src.rpm">
          <filename>firefox-128.6.0-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">998ed1dcdbda82560fc73514fedbf1f63b5d87ef1ce5c8eff9596246e426f247</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0145</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2025-01-09 00:00:00"/>
    <updated date="2025-01-10 12:54:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * WebKitGTK: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-54479)
  * webkit: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-54502)
  * webkit: Processing maliciously crafted web content may lead to memory corruption (CVE-2024-54505)
  * webkit: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-54508)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0145" id="RHSA-2025:0145" type="rhsa" title="RHSA-2025:0145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-54479" id="CVE-2024-54479" type="cve" title="CVE-2024-54479"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-54502" id="CVE-2024-54502" type="cve" title="CVE-2024-54502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-54505" id="CVE-2024-54505" type="cve" title="CVE-2024-54505"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-54508" id="CVE-2024-54508" type="cve" title="CVE-2024-54508"/>
      <reference href="https://bugzilla.redhat.com/2333841" id="2333841" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2333843" id="2333843" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2333844" id="2333844" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2333845" id="2333845" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0145.html" id="ALSA-2025:0145" type="self" title="ALSA-2025:0145"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="webkit2gtk3-jsc-devel" version="2.46.5" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.46.5-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.46.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">2772b91db75afec223b2d46a1b68e897fe2820e048c3921d1de9b7ff88f5c8e9</sum>
        </package>
        <package name="webkit2gtk3" version="2.46.5" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.46.5-1.el8_10.src.rpm">
          <filename>webkit2gtk3-2.46.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">54cc5c91cb514a670f5e939bb7a4aeb6835edfb445756e7ece70f044bb7cbd9d</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.46.5" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.46.5-1.el8_10.src.rpm">
          <filename>webkit2gtk3-devel-2.46.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">55e2c7bdcd3b95f1c921ff7240c4a53617c34883bfbd0759f328b3c1426334c7</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.46.5" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.46.5-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-2.46.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">e4d1c87454ab93dcdb5ab559b51a9798cd3aa94640c626630f65774a0292d7b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0168</id>
    <title>Important: iperf3 security update</title>
    <issued date="2025-01-09 00:00:00"/>
    <updated date="2025-01-10 12:50:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>iperf3 security update</summary>
    <description>Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.  

Security Fix(es):  

  * iperf: Denial of Service in iperf Due to Improper JSON Handling (CVE-2024-53580)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0168" id="RHSA-2025:0168" type="rhsa" title="RHSA-2025:0168"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53580" id="CVE-2024-53580" type="cve" title="CVE-2024-53580"/>
      <reference href="https://bugzilla.redhat.com/2333146" id="2333146" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0168.html" id="ALSA-2025:0168" type="self" title="ALSA-2025:0168"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="iperf3" version="3.5" release="11.el8_10" epoch="0" arch="s390x" src="iperf3-3.5-11.el8_10.src.rpm">
          <filename>iperf3-3.5-11.el8_10.s390x.rpm</filename>
          <sum type="sha256">b4b518c0d0475a794c16fc6463aa12d573f7fd15012d90480128715223624c65</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0222</id>
    <title>Important: dpdk security update</title>
    <issued date="2025-01-09 00:00:00"/>
    <updated date="2025-01-10 12:45:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dpdk security update</summary>
    <description>The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space.  

Security Fix(es):  

  * dpdk: Denial Of Service from malicious guest on hypervisors using DPDK Vhost library (CVE-2024-11614)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0222" id="RHSA-2025:0222" type="rhsa" title="RHSA-2025:0222"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11614" id="CVE-2024-11614" type="cve" title="CVE-2024-11614"/>
      <reference href="https://bugzilla.redhat.com/2327955" id="2327955" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0222.html" id="ALSA-2025:0222" type="self" title="ALSA-2025:0222"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="dpdk-doc" version="23.11" release="2.el8_10" epoch="0" arch="noarch" src="dpdk-23.11-2.el8_10.src.rpm">
          <filename>dpdk-doc-23.11-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">984dd12c42d82b043626d54b4e246bec03471cd2f37cd47dc89c98685313d54a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0281</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-01-13 00:00:00"/>
    <updated date="2025-01-13 20:20:37"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6 (CVE-2025-0243)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 (CVE-2025-0242)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0281" id="RHSA-2025:0281" type="rhsa" title="RHSA-2025:0281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0242" id="CVE-2025-0242" type="cve" title="CVE-2025-0242"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0243" id="CVE-2025-0243" type="cve" title="CVE-2025-0243"/>
      <reference href="https://bugzilla.redhat.com/2336175" id="2336175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2336181" id="2336181" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0281.html" id="ALSA-2025:0281" type="self" title="ALSA-2025:0281"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="128.6.0" release="3.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-128.6.0-3.el8_10.alma.1.src.rpm">
          <filename>thunderbird-128.6.0-3.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">61c964e357ca2646eb16652e348af1b9a362b7c37d6fc2d7fc4807d84fc98223</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0288</id>
    <title>Moderate: Bug fix of NetworkManager</title>
    <issued date="2025-01-13 00:00:00"/>
    <updated date="2025-01-13 21:27:07"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>Bug fix of NetworkManager</summary>
    <description>Security and Bug Fix(es):  

  * NetworkManager: DHCP routing options can manipulate interface-based VPN traffic (CVE-2024-3661)
  * Route to VPN server not stored in routing table that is specified by ipv4.route-table (JIRA:AlmaLinux-73051)
  * VPN connections do not support ipv4.routing-rules settings (JIRA:AlmaLinux-73052)


</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0288" id="RHSA-2025:0288" type="rhsa" title="RHSA-2025:0288"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3661" id="CVE-2024-3661" type="cve" title="CVE-2024-3661"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0288.html" id="ALSA-2025:0288" type="self" title="ALSA-2025:0288"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="NetworkManager-cloud-setup" version="1.40.16" release="18.el8_10" epoch="1" arch="s390x" src="NetworkManager-1.40.16-18.el8_10.src.rpm">
          <filename>NetworkManager-cloud-setup-1.40.16-18.el8_10.s390x.rpm</filename>
          <sum type="sha256">4fd94083a9b584c6a50aec6de58c3fb14c8f4550ec28f8924397f5dea83ee96b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0314</id>
    <title>Important: raptor2 security update</title>
    <issued date="2025-01-14 00:00:00"/>
    <updated date="2025-01-15 13:08:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>raptor2 security update</summary>
    <description>Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples.   

Security Fix(es):  

  * raptor: integer underflow when normalizing a URI with the turtle parser (CVE-2024-57823)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0314" id="RHSA-2025:0314" type="rhsa" title="RHSA-2025:0314"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57823" id="CVE-2024-57823" type="cve" title="CVE-2024-57823"/>
      <reference href="https://bugzilla.redhat.com/2336921" id="2336921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0314.html" id="ALSA-2025:0314" type="self" title="ALSA-2025:0314"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="raptor2" version="2.0.15" release="17.el8_10" epoch="0" arch="s390x" src="raptor2-2.0.15-17.el8_10.src.rpm">
          <filename>raptor2-2.0.15-17.el8_10.s390x.rpm</filename>
          <sum type="sha256">10497eaf4644e514a9b71bbd51e706fb76f7b3bfe84c410b5bd8c1b1b696c02b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0381</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2025-01-16 00:00:00"/>
    <updated date="2025-01-17 21:10:58"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.112 and .NET Runtime 8.0.1.12.  

Security Fix(es):  

  * dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)
  * dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)
  * dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):  

  * dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)
  * dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)
  * dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0381" id="RHSA-2025:0381" type="rhsa" title="RHSA-2025:0381"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21172" id="CVE-2025-21172" type="cve" title="CVE-2025-21172"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21173" id="CVE-2025-21173" type="cve" title="CVE-2025-21173"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21176" id="CVE-2025-21176" type="cve" title="CVE-2025-21176"/>
      <reference href="https://bugzilla.redhat.com/2337893" id="2337893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337926" id="2337926" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337927" id="2337927" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0381.html" id="ALSA-2025:0381" type="self" title="ALSA-2025:0381"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.12" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.112-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.12-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0f65ce2bf2ad4a950e464a494b3eb3b7a136797961b9b32dca56c2a14c46e206</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.12" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.112-1.el8_10.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.12-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">2ab4aebe695bec1f58584e03fa4a685a51e8220755a0757ac285464023380f87</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.12" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.112-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.12-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">51c0e30e584cc7866ce87f584ffa35068a67b832fe960c3766c6f395e03808c1</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.12" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.112-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.12-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5b2640d90b49bc3a216d51043226aac5593c799edfdc05e0a556b336e4cfb709</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.12" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.112-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.12-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">6f88ede7c4ff935b6d47da9824687d322030b0baab35c1029578e17e0fae853e</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.112" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.112-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.112-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">86123e0553e9959abc19fb17a971d764e40f1b978a87f4ff80c00c2c7367fb0b</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.12" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.112-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.12-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">903e28d3ebde80bd51fbdfbedcf29724a06853047201ac40dd0f73e2217268a2</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.112" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.112-1.el8_10.src.rpm">
          <filename>dotnet-templates-8.0-8.0.112-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a537215aca2894b2f0c72da5ec1c6e18989384378ac0de977d09254735948893</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.112" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.112-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.112-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c283278d19bff90f089821c0c5c2a2f1d3b5666e86fc73ccc5a937e2dc8dfaad</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.12" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.112-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.12-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">e3af14403912f94c3556e51871b2c12dbaa5e603590a1d121be86bc00901dce3</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.12" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.112-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.12-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">f87233f51886a9ab1deaaf35fc2239f113e2299519e78a9bdfabdcf72b55fe23</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0382</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2025-01-16 00:00:00"/>
    <updated date="2025-01-17 21:07:26"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.102 and .NET Runtime 9.0.1.  

Security Fix(es):  

  * dotnet: .NET Remote Code Execution Vulnerability (CVE-2025-21171)
  * dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)
  * dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)
  * dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):  

  * dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)
  * dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)
  * dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)
  * dotnet: .NET Remote Code Execution Vulnerability (CVE-2025-21171)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0382" id="RHSA-2025:0382" type="rhsa" title="RHSA-2025:0382"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21171" id="CVE-2025-21171" type="cve" title="CVE-2025-21171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21172" id="CVE-2025-21172" type="cve" title="CVE-2025-21172"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21173" id="CVE-2025-21173" type="cve" title="CVE-2025-21173"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21176" id="CVE-2025-21176" type="cve" title="CVE-2025-21176"/>
      <reference href="https://bugzilla.redhat.com/2337893" id="2337893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337926" id="2337926" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337927" id="2337927" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337958" id="2337958" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0382.html" id="ALSA-2025:0382" type="self" title="ALSA-2025:0382"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="netstandard-targeting-pack-2.1" version="9.0.102" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.102-1.el8_10.src.rpm">
          <filename>netstandard-targeting-pack-2.1-9.0.102-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">058cf14d6cb2d2d0c4d643fccf5c55c8c0b09b45b3056878fe510f06d19c4f4e</sum>
        </package>
        <package name="dotnet-sdk-9.0" version="9.0.102" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.102-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-9.0.102-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">09ba386149715db8e18dffba291a30efa544357dd3bc845faa9039216496395b</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-9.0" version="9.0.1" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.102-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-9.0-9.0.1-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">1f31d05f87ab1e8cfe7d4be70c4f651d70610f45c3ed0aacc2ccca40ab38d598</sum>
        </package>
        <package name="dotnet-apphost-pack-9.0" version="9.0.1" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.102-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-9.0-9.0.1-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">44e9673373244a48f520329fca552917d5d3681da97ad8df7810af4fd7df5e59</sum>
        </package>
        <package name="dotnet-targeting-pack-9.0" version="9.0.1" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.102-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-9.0-9.0.1-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">52e6e6f71a0a315fd77f689e1fde522ba13b2961e692c473580d1602e82720ae</sum>
        </package>
        <package name="dotnet" version="9.0.102" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.102-1.el8_10.src.rpm">
          <filename>dotnet-9.0.102-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">647845f8407572b81e7a4e6d795b25ba01d11c3567e094136556a7e1498599b1</sum>
        </package>
        <package name="aspnetcore-runtime-9.0" version="9.0.1" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.102-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-9.0-9.0.1-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">76dd7fa193c104dcb41da63ae74217c90b49bddcad90282edcc03748f098c788</sum>
        </package>
        <package name="dotnet-host" version="9.0.1" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.102-1.el8_10.src.rpm">
          <filename>dotnet-host-9.0.1-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">7a47efd830256d52e4931d6d583ef04e9c690b74a3e258f1710e9735b6ba868a</sum>
        </package>
        <package name="dotnet-sdk-dbg-9.0" version="9.0.102" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.102-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-9.0-9.0.102-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">9f115f7e2c544df1ce3d975d9e1b574dc676b53eb28da79b6eae22f7235d5393</sum>
        </package>
        <package name="dotnet-templates-9.0" version="9.0.102" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.102-1.el8_10.src.rpm">
          <filename>dotnet-templates-9.0-9.0.102-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a842380d413b11dab19a68ea88afbd3dd1a923b0989df4ec42c384de51a61057</sum>
        </package>
        <package name="dotnet-hostfxr-9.0" version="9.0.1" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.102-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-9.0-9.0.1-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b4355d50947e8d9a129f9e736353dcda60f8e176081ec1f1b6fd6cb16279eda2</sum>
        </package>
        <package name="aspnetcore-targeting-pack-9.0" version="9.0.1" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.102-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-9.0-9.0.1-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c3d454a6705299a2bf7403b3646fc0372ad24105db9c18ef501092755dc6de0f</sum>
        </package>
        <package name="dotnet-runtime-dbg-9.0" version="9.0.1" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.102-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-9.0-9.0.1-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">e268d576528bfd144c528813acaaa7bfdfdb2bdf2756a6fe26e8498eaa87fd61</sum>
        </package>
        <package name="dotnet-runtime-9.0" version="9.0.1" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.102-1.el8_10.src.rpm">
          <filename>dotnet-runtime-9.0-9.0.1-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">e8ea19267d948a8bbf1f88f8d0891604dc0095ef1e2c8602cbade4ae74a75fde</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0401</id>
    <title>Important: grafana security update</title>
    <issued date="2025-01-20 00:00:00"/>
    <updated date="2025-01-20 13:47:27"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.   

Security Fix(es):  

  * go-git: argument injection via the URL field (CVE-2025-21613)
  * go-git: go-git clients vulnerable to DoS via maliciously crafted Git server replies (CVE-2025-21614)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0401" id="RHSA-2025:0401" type="rhsa" title="RHSA-2025:0401"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21613" id="CVE-2025-21613" type="cve" title="CVE-2025-21613"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21614" id="CVE-2025-21614" type="cve" title="CVE-2025-21614"/>
      <reference href="https://bugzilla.redhat.com/2335888" id="2335888" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2335901" id="2335901" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0401.html" id="ALSA-2025:0401" type="self" title="ALSA-2025:0401"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="grafana" version="9.2.10" release="21.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-21.el8_10.src.rpm">
          <filename>grafana-9.2.10-21.el8_10.s390x.rpm</filename>
          <sum type="sha256">350897d1ff267fad8639ce5e75059434f6bd5fa34356e28aefdb7535ef295132</sum>
        </package>
        <package name="grafana-selinux" version="9.2.10" release="21.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-21.el8_10.src.rpm">
          <filename>grafana-selinux-9.2.10-21.el8_10.s390x.rpm</filename>
          <sum type="sha256">8cfddcaa3a7d098aadd6b749dcfed34c63673d9eee376083433e451896d70aec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0422</id>
    <title>Moderate: java-17-openjdk security update for AlmaLinux 8.6, 8.8, 8.10, 9.4 and 9.5</title>
    <issued date="2025-01-22 00:00:00"/>
    <updated date="2025-01-23 11:12:46"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update for AlmaLinux 8.6, 8.8, 8.10, 9.4 and 9.5</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance array handling (CVE-2025-21502)


Bug Fix(es):  

  * The AlmaLinux OpenJDK packages rely on the copy-jdk-configs package to transfer configuration files to a new updated JDK. With this update, the JDK has been updated to use the latest version of copy-jdk-configs, which has been used for some years on later AlmaLinux versions (AlmaLinux-73867, AlmaLinux-73871, AlmaLinux-73872).


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0422" id="RHSA-2025:0422" type="rhsa" title="RHSA-2025:0422"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21502" id="CVE-2025-21502" type="cve" title="CVE-2025-21502"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0422.html" id="ALSA-2025:0422" type="self" title="ALSA-2025:0422"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.14.0.7" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.14.0.7-3.el8.s390x.rpm</filename>
          <sum type="sha256">11012dff2cde12719d0a307f0c6e6c4cb6996d68ec1733b62230f7e450cb648e</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.14.0.7" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-demo-17.0.14.0.7-3.el8.s390x.rpm</filename>
          <sum type="sha256">3f95e314b49353041ea585f9daf9ce7b601758b21f05d5e1cfaf0d6bdf4b52ce</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.14.0.7" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.14.0.7-3.el8.s390x.rpm</filename>
          <sum type="sha256">4f76562f6e41d9563316aafc725c0fa782edeec7bfb8adef66d85ee62d43261a</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.14.0.7" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-17.0.14.0.7-3.el8.s390x.rpm</filename>
          <sum type="sha256">720f38d16f43935d80d1bcf9a6616cb3d91ebef7383f83ff908badc30daa07de</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.14.0.7" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-src-17.0.14.0.7-3.el8.s390x.rpm</filename>
          <sum type="sha256">82f32b79c9b035dda55063c22eba981b365d13049ea19758a7a014fa5dccf1ab</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.14.0.7" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-headless-17.0.14.0.7-3.el8.s390x.rpm</filename>
          <sum type="sha256">8bc3043bb24a0ebd96b5a579146766f01d358a7fc1990628dac214241c7d78d7</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.14.0.7" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.14.0.7-3.el8.s390x.rpm</filename>
          <sum type="sha256">bb31a13e39937cfe2f47fea89e7077c89cb06d9a4305a82b9fdb1e3b846b99f3</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.14.0.7" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-devel-17.0.14.0.7-3.el8.s390x.rpm</filename>
          <sum type="sha256">cbe6a52217a597e1f5ca0cdaa0a50ea91bf94221c00e7305d31081071c6d6c4e</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.14.0.7" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.14.0.7-3.el8.s390x.rpm</filename>
          <sum type="sha256">cc59ad4e4e785f79ce0731ad15a55b374080631ab3d70541a395277248b3fea6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0426</id>
    <title>Moderate: java-21-openjdk security update for AlmaLinux 8.10, 9.4 and 9.5</title>
    <issued date="2025-01-22 00:00:00"/>
    <updated date="2025-01-23 14:02:40"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security update for AlmaLinux 8.10, 9.4 and 9.5</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance array handling (CVE-2025-21502)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0426" id="RHSA-2025:0426" type="rhsa" title="RHSA-2025:0426"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21502" id="CVE-2025-21502" type="cve" title="CVE-2025-21502"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0426.html" id="ALSA-2025:0426" type="self" title="ALSA-2025:0426"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-21-openjdk-devel" version="21.0.6.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-21.0.6.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">2aba879fa32dd56675593ce31103a5793bdc2552b6b562532a6d20e3e08ec35e</sum>
        </package>
        <package name="java-21-openjdk-javadoc" version="21.0.6.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-javadoc-21.0.6.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">4d642c2b9acc0b71f831bf4cf2bda0df6a8d9157e0fd50719270b22622c026c1</sum>
        </package>
        <package name="java-21-openjdk-javadoc-zip" version="21.0.6.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-javadoc-zip-21.0.6.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">55046b02924e3d8ba2c46660846e8640e88e7b1834086c380e4be87a26bba8cf</sum>
        </package>
        <package name="java-21-openjdk-jmods" version="21.0.6.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-21.0.6.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">6af78a570b5f74d57c4100219b8178816f1d9dab2c81c44d781f6a300625b79a</sum>
        </package>
        <package name="java-21-openjdk-static-libs" version="21.0.6.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-21.0.6.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">83e699ce96130744e4b570784b52552962b6164862afa4aecd629eb071df7d51</sum>
        </package>
        <package name="java-21-openjdk" version="21.0.6.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-21.0.6.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">9aa6e39ffa5752e6e4e07287db8f2124184ccfbf5d3a1b59397585c2329b45b7</sum>
        </package>
        <package name="java-21-openjdk-src" version="21.0.6.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-src-21.0.6.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">cbaebd546d8fe1c8c521cc802031aa745f58538111102ffe029430c7c405affb</sum>
        </package>
        <package name="java-21-openjdk-headless" version="21.0.6.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-21.0.6.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">f1a99f5030ef30c88b651d06e28005ea5b84cf55db7b91d0582b5c2c53b43f61</sum>
        </package>
        <package name="java-21-openjdk-demo" version="21.0.6.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-21.0.6.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">f9388c3b8d9c2e03fc96f901101d62de4e8e87f25f8e7706fa3ca90531a5b4aa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0595</id>
    <title>Important: redis:6 security update</title>
    <issued date="2025-01-22 00:00:00"/>
    <updated date="2025-01-22 23:19:00"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>redis:6 security update</summary>
    <description>Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.  

Security Fix(es):  

  * redis: Integer overflow in the Redis HRANDFIELD and ZRANDMEMBER commands may lead to denial-of-service (CVE-2023-22458)
  * redis: Integer overflow in the Redis SETRANGE and SORT/SORT_RO commands may result with false OOM panic (CVE-2022-35977)
  * redis: Specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands can trigger an integer overflow (CVE-2022-36021)
  * redis: String matching commands (like SCAN or KEYS) with a specially crafted pattern to trigger a denial-of-service attack (CVE-2023-25155)
  * redis: Insufficient validation of HINCRBYFLOAT command (CVE-2023-28856)
  * redis: heap overflow in the lua cjson and cmsgpack libraries (CVE-2022-24834)
  * redis: possible bypass of Unix socket permissions on startup (CVE-2023-45145)
  * redis: Lua library commands may lead to stack overflow and RCE in Redis (CVE-2024-31449)
  * redis: Denial-of-service due to unbounded pattern matching in Redis (CVE-2024-31228)
  * redis: Redis' Lua library commands may lead to remote code execution (CVE-2024-46981)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0595" id="RHSA-2025:0595" type="rhsa" title="RHSA-2025:0595"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24834" id="CVE-2022-24834" type="cve" title="CVE-2022-24834"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-35977" id="CVE-2022-35977" type="cve" title="CVE-2022-35977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36021" id="CVE-2022-36021" type="cve" title="CVE-2022-36021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22458" id="CVE-2023-22458" type="cve" title="CVE-2023-22458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25155" id="CVE-2023-25155" type="cve" title="CVE-2023-25155"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28856" id="CVE-2023-28856" type="cve" title="CVE-2023-28856"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45145" id="CVE-2023-45145" type="cve" title="CVE-2023-45145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31228" id="CVE-2024-31228" type="cve" title="CVE-2024-31228"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31449" id="CVE-2024-31449" type="cve" title="CVE-2024-31449"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46981" id="CVE-2024-46981" type="cve" title="CVE-2024-46981"/>
      <reference href="https://bugzilla.redhat.com/2163132" id="2163132" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2163133" id="2163133" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2174305" id="2174305" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2174306" id="2174306" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187525" id="2187525" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221662" id="2221662" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244940" id="2244940" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317056" id="2317056" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317058" id="2317058" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2336004" id="2336004" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0595.html" id="ALSA-2025:0595" type="self" title="ALSA-2025:0595"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="redis" stream="6" version="8100020250122103005" context="9edba152" arch="s390x"/>
        <package name="redis" version="6.2.17" release="1.module_el8.10.0+3946+3de613d5" epoch="0" arch="s390x" src="redis-6.2.17-1.module_el8.10.0+3946+3de613d5.src.rpm">
          <filename>redis-6.2.17-1.module_el8.10.0+3946+3de613d5.s390x.rpm</filename>
          <sum type="sha256">0c7180bb9a9be5a2244b56777ec60b2500c6110a3c025d55c19ffcb7a4b58975</sum>
        </package>
        <package name="redis-devel" version="6.2.17" release="1.module_el8.10.0+3946+3de613d5" epoch="0" arch="s390x" src="redis-6.2.17-1.module_el8.10.0+3946+3de613d5.src.rpm">
          <filename>redis-devel-6.2.17-1.module_el8.10.0+3946+3de613d5.s390x.rpm</filename>
          <sum type="sha256">6f31efde5740b66cfd3830d6771e6141a80697d8e62762d00ddfee3bfd26f4cc</sum>
        </package>
        <package name="redis-doc" version="6.2.17" release="1.module_el8.10.0+3946+3de613d5" epoch="0" arch="noarch" src="redis-6.2.17-1.module_el8.10.0+3946+3de613d5.src.rpm">
          <filename>redis-doc-6.2.17-1.module_el8.10.0+3946+3de613d5.noarch.rpm</filename>
          <sum type="sha256">f15138be6567e2c02b4d9d8fec75a985deec0ce9660df5551e4d9ae1e3eaa93f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0711</id>
    <title>Important: python-jinja2 security update</title>
    <issued date="2025-01-27 00:00:00"/>
    <updated date="2025-01-29 11:15:13"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python-jinja2 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * jinja2: Jinja has a sandbox breakout through indirect reference to format method (CVE-2024-56326)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0711" id="RHSA-2025:0711" type="rhsa" title="RHSA-2025:0711"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56326" id="CVE-2024-56326" type="cve" title="CVE-2024-56326"/>
      <reference href="https://bugzilla.redhat.com/2333856" id="2333856" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0711.html" id="ALSA-2025:0711" type="self" title="ALSA-2025:0711"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3-jinja2" version="2.10.1" release="6.el8_10" epoch="0" arch="noarch" src="python-jinja2-2.10.1-6.el8_10.src.rpm">
          <filename>python3-jinja2-2.10.1-6.el8_10.noarch.rpm</filename>
          <sum type="sha256">0b4b3b320342cec6a5f0092060a58bb3e821948055e25ce7d2f48a47cbe37122</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0737</id>
    <title>Moderate: mariadb:10.11 security update</title>
    <issued date="2025-01-28 00:00:00"/>
    <updated date="2025-01-29 11:18:22"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mariadb:10.11 security update</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.   

Security Fix(es):  

  * mysql: Client: mysqldump unspecified vulnerability (CPU Apr 2024) (CVE-2024-21096)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0737" id="RHSA-2025:0737" type="rhsa" title="RHSA-2025:0737"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21096" id="CVE-2024-21096" type="cve" title="CVE-2024-21096"/>
      <reference href="https://bugzilla.redhat.com/2275452" id="2275452" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0737.html" id="ALSA-2025:0737" type="self" title="ALSA-2025:0737"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="mariadb" stream="10.5" version="8100020250128084844" context="9edba152" arch="s390x"/>
        <package name="galera" version="26.4.20" release="1.module_el8.10.0+3947+ac422511" epoch="0" arch="s390x" src="galera-26.4.20-1.module_el8.10.0+3947+ac422511.src.rpm">
          <filename>galera-26.4.20-1.module_el8.10.0+3947+ac422511.s390x.rpm</filename>
          <sum type="sha256">044c50132e61605ea7536ddbd6a1514770a6f0380754b18558213df1b6428775</sum>
        </package>
        <package name="mariadb-oqgraph-engine" version="10.11.10" release="1.module_el8.10.0+3955+6534edaf" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el8.10.0+3955+6534edaf.src.rpm">
          <filename>mariadb-oqgraph-engine-10.11.10-1.module_el8.10.0+3955+6534edaf.s390x.rpm</filename>
          <sum type="sha256">070c5b7730162e3cecbb84d4612c61d55b02b0068516859c4518de95b6d10d12</sum>
        </package>
        <package name="mariadb-server-utils" version="10.11.10" release="1.module_el8.10.0+3955+6534edaf" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el8.10.0+3955+6534edaf.src.rpm">
          <filename>mariadb-server-utils-10.11.10-1.module_el8.10.0+3955+6534edaf.s390x.rpm</filename>
          <sum type="sha256">3d5f5e0f5698f0bf8e1e77804175cbad2385ccb89820f9ddca1618d740134195</sum>
        </package>
        <package name="mariadb-embedded-devel" version="10.11.10" release="1.module_el8.10.0+3955+6534edaf" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el8.10.0+3955+6534edaf.src.rpm">
          <filename>mariadb-embedded-devel-10.11.10-1.module_el8.10.0+3955+6534edaf.s390x.rpm</filename>
          <sum type="sha256">445246bfe090546a9c8b072933515cd5daf04be650f54b46c2ee816605b5b34f</sum>
        </package>
        <package name="mariadb-server" version="10.11.10" release="1.module_el8.10.0+3955+6534edaf" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el8.10.0+3955+6534edaf.src.rpm">
          <filename>mariadb-server-10.11.10-1.module_el8.10.0+3955+6534edaf.s390x.rpm</filename>
          <sum type="sha256">4b70267d834708eda944a5aed23dc4a436ba383a7a76ff5c81ee4ae02079ac9d</sum>
        </package>
        <package name="mariadb-common" version="10.11.10" release="1.module_el8.10.0+3955+6534edaf" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el8.10.0+3955+6534edaf.src.rpm">
          <filename>mariadb-common-10.11.10-1.module_el8.10.0+3955+6534edaf.s390x.rpm</filename>
          <sum type="sha256">6d40b8b80650fd5f5a5b3d695a8b2588805252c0cc94005682f5eb2711884329</sum>
        </package>
        <package name="mariadb-devel" version="10.11.10" release="1.module_el8.10.0+3955+6534edaf" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el8.10.0+3955+6534edaf.src.rpm">
          <filename>mariadb-devel-10.11.10-1.module_el8.10.0+3955+6534edaf.s390x.rpm</filename>
          <sum type="sha256">721e217c4f28dd8c4500f1f7ab8ef956af9bc4494a91fb600be1c8d160b93bda</sum>
        </package>
        <package name="mariadb-errmsg" version="10.11.10" release="1.module_el8.10.0+3955+6534edaf" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el8.10.0+3955+6534edaf.src.rpm">
          <filename>mariadb-errmsg-10.11.10-1.module_el8.10.0+3955+6534edaf.s390x.rpm</filename>
          <sum type="sha256">ac0bee7164e4dfe9da2ff6f9c79029d2eb7176942a2df60d843bd7ec302f506f</sum>
        </package>
        <package name="mariadb-test" version="10.11.10" release="1.module_el8.10.0+3955+6534edaf" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el8.10.0+3955+6534edaf.src.rpm">
          <filename>mariadb-test-10.11.10-1.module_el8.10.0+3955+6534edaf.s390x.rpm</filename>
          <sum type="sha256">b62797464699a5e362a4e9688e14e672d418995c9f2c4a59d839fbf5694a9b4f</sum>
        </package>
        <package name="mariadb-backup" version="10.11.10" release="1.module_el8.10.0+3955+6534edaf" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el8.10.0+3955+6534edaf.src.rpm">
          <filename>mariadb-backup-10.11.10-1.module_el8.10.0+3955+6534edaf.s390x.rpm</filename>
          <sum type="sha256">cfca3f0c55b5e7e3beed128faf3a7def3c39079430c4fa86249637787212b8ff</sum>
        </package>
        <package name="mariadb" version="10.11.10" release="1.module_el8.10.0+3955+6534edaf" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el8.10.0+3955+6534edaf.src.rpm">
          <filename>mariadb-10.11.10-1.module_el8.10.0+3955+6534edaf.s390x.rpm</filename>
          <sum type="sha256">d1dd5e4cd3140cc2309b091b2b776a0727568d04547fa4c9d0b2314a55950719</sum>
        </package>
        <package name="Judy" version="1.0.5" release="18.module_el8.10.0+3947+ac422511" epoch="0" arch="s390x" src="Judy-1.0.5-18.module_el8.10.0+3947+ac422511.src.rpm">
          <filename>Judy-1.0.5-18.module_el8.10.0+3947+ac422511.s390x.rpm</filename>
          <sum type="sha256">e004c007bad35247f91e70787432966941e40d2b399880da0818c23178f1d260</sum>
        </package>
        <package name="mariadb-gssapi-server" version="10.11.10" release="1.module_el8.10.0+3955+6534edaf" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el8.10.0+3955+6534edaf.src.rpm">
          <filename>mariadb-gssapi-server-10.11.10-1.module_el8.10.0+3955+6534edaf.s390x.rpm</filename>
          <sum type="sha256">e3e7db5cd329172a480ac2a864abb01871c98432449bb30d2f7051a4e451a582</sum>
        </package>
        <package name="mariadb-pam" version="10.11.10" release="1.module_el8.10.0+3955+6534edaf" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el8.10.0+3955+6534edaf.src.rpm">
          <filename>mariadb-pam-10.11.10-1.module_el8.10.0+3955+6534edaf.s390x.rpm</filename>
          <sum type="sha256">eeaf2be6bec3f0b64be73164d3f9f67074ec37ba3144a7fedf04441b5611e250</sum>
        </package>
        <package name="mariadb-server-galera" version="10.11.10" release="1.module_el8.10.0+3955+6534edaf" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el8.10.0+3955+6534edaf.src.rpm">
          <filename>mariadb-server-galera-10.11.10-1.module_el8.10.0+3955+6534edaf.s390x.rpm</filename>
          <sum type="sha256">f462294b95aa8306cb58356eb541ffe8b55519ed15aba03b641638b3b7b9fec5</sum>
        </package>
        <package name="mariadb-embedded" version="10.11.10" release="1.module_el8.10.0+3955+6534edaf" epoch="3" arch="s390x" src="mariadb-10.11.10-1.module_el8.10.0+3955+6534edaf.src.rpm">
          <filename>mariadb-embedded-10.11.10-1.module_el8.10.0+3955+6534edaf.s390x.rpm</filename>
          <sum type="sha256">f6ee0732de1ff9466b7ce9b225fc796e1f7e3f9227fed0b7c8535dabf1a28c2f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0739</id>
    <title>Moderate: mariadb:10.5 security update</title>
    <issued date="2025-01-28 00:00:00"/>
    <updated date="2025-01-29 11:20:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mariadb:10.5 security update</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.   

Security Fix(es):  

  * mysql: InnoDB unspecified vulnerability (CPU Oct 2023) (CVE-2023-22084)
  * mysql: Client: mysqldump unspecified vulnerability (CPU Apr 2024) (CVE-2024-21096)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0739" id="RHSA-2025:0739" type="rhsa" title="RHSA-2025:0739"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22084" id="CVE-2023-22084" type="cve" title="CVE-2023-22084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21096" id="CVE-2024-21096" type="cve" title="CVE-2024-21096"/>
      <reference href="https://bugzilla.redhat.com/2245023" id="2245023" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275452" id="2275452" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0739.html" id="ALSA-2025:0739" type="self" title="ALSA-2025:0739"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="mariadb" stream="10.5" version="8100020250128084844" context="9edba152" arch="s390x"/>
        <package name="galera" version="26.4.20" release="1.module_el8.10.0+3947+ac422511" epoch="0" arch="s390x" src="galera-26.4.20-1.module_el8.10.0+3947+ac422511.src.rpm">
          <filename>galera-26.4.20-1.module_el8.10.0+3947+ac422511.s390x.rpm</filename>
          <sum type="sha256">044c50132e61605ea7536ddbd6a1514770a6f0380754b18558213df1b6428775</sum>
        </package>
        <package name="mariadb-errmsg" version="10.5.27" release="1.module_el8.10.0+3947+ac422511" epoch="3" arch="s390x" src="mariadb-10.5.27-1.module_el8.10.0+3947+ac422511.src.rpm">
          <filename>mariadb-errmsg-10.5.27-1.module_el8.10.0+3947+ac422511.s390x.rpm</filename>
          <sum type="sha256">1caa6ec689975772adb53ea6fa6aff6e3252734db303e1c0171c50ce230c83cc</sum>
        </package>
        <package name="mariadb-server-galera" version="10.5.27" release="1.module_el8.10.0+3947+ac422511" epoch="3" arch="s390x" src="mariadb-10.5.27-1.module_el8.10.0+3947+ac422511.src.rpm">
          <filename>mariadb-server-galera-10.5.27-1.module_el8.10.0+3947+ac422511.s390x.rpm</filename>
          <sum type="sha256">4479ad7bd7790fab50499a902399c1016b476babb55db03a905a0c7ae25eae48</sum>
        </package>
        <package name="mariadb-embedded-devel" version="10.5.27" release="1.module_el8.10.0+3947+ac422511" epoch="3" arch="s390x" src="mariadb-10.5.27-1.module_el8.10.0+3947+ac422511.src.rpm">
          <filename>mariadb-embedded-devel-10.5.27-1.module_el8.10.0+3947+ac422511.s390x.rpm</filename>
          <sum type="sha256">5e4bd687f749ebb71e1375daa76931a959ed9a20a1fd30f913b5454b2c89769b</sum>
        </package>
        <package name="mariadb-common" version="10.5.27" release="1.module_el8.10.0+3947+ac422511" epoch="3" arch="s390x" src="mariadb-10.5.27-1.module_el8.10.0+3947+ac422511.src.rpm">
          <filename>mariadb-common-10.5.27-1.module_el8.10.0+3947+ac422511.s390x.rpm</filename>
          <sum type="sha256">6ec50ca6ead7402dce257ce1be42e70bce65a6d7e6f59a51c3284ef1ebfa4705</sum>
        </package>
        <package name="mariadb-server" version="10.5.27" release="1.module_el8.10.0+3947+ac422511" epoch="3" arch="s390x" src="mariadb-10.5.27-1.module_el8.10.0+3947+ac422511.src.rpm">
          <filename>mariadb-server-10.5.27-1.module_el8.10.0+3947+ac422511.s390x.rpm</filename>
          <sum type="sha256">6f1b5bd5d9a9158131098cfb1fced99d7499931c39a8c62176cf8cd2ad11356a</sum>
        </package>
        <package name="mariadb-test" version="10.5.27" release="1.module_el8.10.0+3947+ac422511" epoch="3" arch="s390x" src="mariadb-10.5.27-1.module_el8.10.0+3947+ac422511.src.rpm">
          <filename>mariadb-test-10.5.27-1.module_el8.10.0+3947+ac422511.s390x.rpm</filename>
          <sum type="sha256">849bf908b4605f2bfc4a21eb649f7f4be713ce8f70709c13cae851c6565dae96</sum>
        </package>
        <package name="mariadb-backup" version="10.5.27" release="1.module_el8.10.0+3947+ac422511" epoch="3" arch="s390x" src="mariadb-10.5.27-1.module_el8.10.0+3947+ac422511.src.rpm">
          <filename>mariadb-backup-10.5.27-1.module_el8.10.0+3947+ac422511.s390x.rpm</filename>
          <sum type="sha256">86ef5f141214560a23787a22bfbe1c54cdd52a03d877d750967e57a0ab664213</sum>
        </package>
        <package name="mariadb" version="10.5.27" release="1.module_el8.10.0+3947+ac422511" epoch="3" arch="s390x" src="mariadb-10.5.27-1.module_el8.10.0+3947+ac422511.src.rpm">
          <filename>mariadb-10.5.27-1.module_el8.10.0+3947+ac422511.s390x.rpm</filename>
          <sum type="sha256">9f8a1b1ca24f682cb7fbf14fd07e7ee365e0967d3579a08bd5225f7bd4690372</sum>
        </package>
        <package name="mariadb-embedded" version="10.5.27" release="1.module_el8.10.0+3947+ac422511" epoch="3" arch="s390x" src="mariadb-10.5.27-1.module_el8.10.0+3947+ac422511.src.rpm">
          <filename>mariadb-embedded-10.5.27-1.module_el8.10.0+3947+ac422511.s390x.rpm</filename>
          <sum type="sha256">d2030e23352d032be9436fdfcad2687bd1aa556e4c29f190728bcf2aeb8b8c3d</sum>
        </package>
        <package name="mariadb-oqgraph-engine" version="10.5.27" release="1.module_el8.10.0+3947+ac422511" epoch="3" arch="s390x" src="mariadb-10.5.27-1.module_el8.10.0+3947+ac422511.src.rpm">
          <filename>mariadb-oqgraph-engine-10.5.27-1.module_el8.10.0+3947+ac422511.s390x.rpm</filename>
          <sum type="sha256">dc5909c0bf1f900c0f64c71b0c3c25c97eadcabb42f81d9c28e516c94f29e13a</sum>
        </package>
        <package name="Judy" version="1.0.5" release="18.module_el8.10.0+3947+ac422511" epoch="0" arch="s390x" src="Judy-1.0.5-18.module_el8.10.0+3947+ac422511.src.rpm">
          <filename>Judy-1.0.5-18.module_el8.10.0+3947+ac422511.s390x.rpm</filename>
          <sum type="sha256">e004c007bad35247f91e70787432966941e40d2b399880da0818c23178f1d260</sum>
        </package>
        <package name="mariadb-devel" version="10.5.27" release="1.module_el8.10.0+3947+ac422511" epoch="3" arch="s390x" src="mariadb-10.5.27-1.module_el8.10.0+3947+ac422511.src.rpm">
          <filename>mariadb-devel-10.5.27-1.module_el8.10.0+3947+ac422511.s390x.rpm</filename>
          <sum type="sha256">e045d6e0907b19bde7ccc4b3cb3657abc6921184b3d78cbf4142685bc4ab7963</sum>
        </package>
        <package name="mariadb-server-utils" version="10.5.27" release="1.module_el8.10.0+3947+ac422511" epoch="3" arch="s390x" src="mariadb-10.5.27-1.module_el8.10.0+3947+ac422511.src.rpm">
          <filename>mariadb-server-utils-10.5.27-1.module_el8.10.0+3947+ac422511.s390x.rpm</filename>
          <sum type="sha256">e96bf77c3b96dc6a844a222388865ac85345af222c1103b299a4b1adf6dd6f83</sum>
        </package>
        <package name="mariadb-gssapi-server" version="10.5.27" release="1.module_el8.10.0+3947+ac422511" epoch="3" arch="s390x" src="mariadb-10.5.27-1.module_el8.10.0+3947+ac422511.src.rpm">
          <filename>mariadb-gssapi-server-10.5.27-1.module_el8.10.0+3947+ac422511.s390x.rpm</filename>
          <sum type="sha256">ecc9ef06c99188c4b7ab4a7da9f3286f86fe67de554e8b4b3fdde2ad84f970c0</sum>
        </package>
        <package name="mariadb-pam" version="10.5.27" release="1.module_el8.10.0+3947+ac422511" epoch="3" arch="s390x" src="mariadb-10.5.27-1.module_el8.10.0+3947+ac422511.src.rpm">
          <filename>mariadb-pam-10.5.27-1.module_el8.10.0+3947+ac422511.s390x.rpm</filename>
          <sum type="sha256">f4b60744d14ea5900fab6078c7db7334d270a01ae796e24bbbd302e2341127ae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0743</id>
    <title>Moderate: keepalived security update</title>
    <issued date="2025-01-28 00:00:00"/>
    <updated date="2025-01-29 10:53:29"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>keepalived security update</summary>
    <description>The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the well-known and widely used IP Virtual Server (IPVS) kernel module providing layer-4 (transport layer) load balancing. Keepalived implements a set of checkers to dynamically and adaptively maintain and manage a load balanced server pool according to the health of the servers. Keepalived also implements the Virtual Router Redundancy Protocol (VRRPv2) to achieve high availability with director failover.  

Security Fix(es):  

  * keepalived: Integer overflow vulnerability in vrrp_ipsets_handler (CVE-2024-41184)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0743" id="RHSA-2025:0743" type="rhsa" title="RHSA-2025:0743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41184" id="CVE-2024-41184" type="cve" title="CVE-2024-41184"/>
      <reference href="https://bugzilla.redhat.com/2298532" id="2298532" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0743.html" id="ALSA-2025:0743" type="self" title="ALSA-2025:0743"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="keepalived" version="2.1.5" release="10.el8_10" epoch="0" arch="s390x" src="keepalived-2.1.5-10.el8_10.src.rpm">
          <filename>keepalived-2.1.5-10.el8_10.s390x.rpm</filename>
          <sum type="sha256">a8a202a6331ef0fab4c4772e0b74420b251d1137d4fec2a20a15ef4739751981</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0746</id>
    <title>Important: gimp:2.8 security update</title>
    <issued date="2025-01-28 00:00:00"/>
    <updated date="2025-01-29 11:22:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gimp:2.8 security update</summary>
    <description>The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.  

Security Fix(es):  

  * gimp: PSD buffer overflow RCE (CVE-2023-44442)
  * gimp: psp integer overflow RCE (CVE-2023-44443)
  * gimp: psp off-by-one RCE (CVE-2023-44444)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0746" id="RHSA-2025:0746" type="rhsa" title="RHSA-2025:0746"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44442" id="CVE-2023-44442" type="cve" title="CVE-2023-44442"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44443" id="CVE-2023-44443" type="cve" title="CVE-2023-44443"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44444" id="CVE-2023-44444" type="cve" title="CVE-2023-44444"/>
      <reference href="https://bugzilla.redhat.com/2249942" id="2249942" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2249944" id="2249944" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2249946" id="2249946" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0746.html" id="ALSA-2025:0746" type="self" title="ALSA-2025:0746"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="gimp" stream="2.8" version="8100020250128092246" context="77fc8825" arch="s390x"/>
        <package name="gimp-devel-tools" version="2.8.22" release="26.module_el8.10.0+3952+571e801c" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>gimp-devel-tools-2.8.22-26.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">0cfebe802e3ce11ee87e24b4d24f537bc323e4e76a43434af3faee6293cc7497</sum>
        </package>
        <package name="pygobject2-codegen" version="2.28.7" release="5.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>pygobject2-codegen-2.28.7-5.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">1a42f4acacfe6991c3ea72ee10bdbe8bb963fe6e94e725c0c6cc5162d35f2e55</sum>
        </package>
        <package name="gimp-libs" version="2.8.22" release="26.module_el8.10.0+3952+571e801c" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>gimp-libs-2.8.22-26.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">25a569a3b88e5e84e04d0e0378caf46c95b8f42fb782713e54af8bb86975972d</sum>
        </package>
        <package name="pygtk2-devel" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="s390x" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-devel-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">42ea8b58abfff83cebc7a09a7f6f264b168a95782decbb03b4fcfef37fd7c062</sum>
        </package>
        <package name="pygtk2" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="s390x" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">43c790ef899908821a64cfad4af33097d1a9d9351a75d63d45e4363e0d91eec8</sum>
        </package>
        <package name="gimp" version="2.8.22" release="26.module_el8.10.0+3952+571e801c" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>gimp-2.8.22-26.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">509ece5cbe690f25379beedf73756c6b3a3822725e04f87fac16e3c1d26e08e3</sum>
        </package>
        <package name="pygobject2-doc" version="2.28.7" release="5.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>pygobject2-doc-2.28.7-5.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">5104a2191c14aaf70d6f3d9ebf6374c054a182a2a7b0f63f32c1adc918ad4111</sum>
        </package>
        <package name="pygobject2-devel" version="2.28.7" release="5.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>pygobject2-devel-2.28.7-5.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">753e845a487e2072a62bfa272332266761c207df3360102c42900695a0fe3d32</sum>
        </package>
        <package name="pygtk2-codegen" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="s390x" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-codegen-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">91402fea22feef9d15400358a93ae5d2ff0b95b332edfbae2245ac5846848476</sum>
        </package>
        <package name="pygtk2-doc" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="noarch" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-doc-2.24.0-25.module_el8.9.0+3725+d1441900.noarch.rpm</filename>
          <sum type="sha256">bec32577bca5233d67a34af1ef0ae0d1ca15f8896607b22d94cc18d8d4c93d70</sum>
        </package>
        <package name="pygobject2" version="2.28.7" release="5.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">d9c541afe98fa2f9c4fb770991f7c15dae66b0b36616ff2b94ae7c824b1b0e84</sum>
        </package>
        <package name="python2-cairo" version="1.16.3" release="7.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="python2-pycairo-1.16.3-7.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>python2-cairo-1.16.3-7.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">e015ce54a4c31a35c21aa3d77fd6d10674ff10a9058f1dd194a9167328d8a0d9</sum>
        </package>
        <package name="python2-cairo-devel" version="1.16.3" release="7.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="python2-pycairo-1.16.3-7.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>python2-cairo-devel-1.16.3-7.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">ecc0dda98450cefa8281d354f444d8e91876cc91f2cf6c8fd8ecf460a4dbdc8b</sum>
        </package>
        <package name="gimp-devel" version="2.8.22" release="26.module_el8.10.0+3952+571e801c" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>gimp-devel-2.8.22-26.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">f0e2e54e76647ce0210ec656f746c12c7b79c1fb6a0544859a30f2a44ebd7d8d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0837</id>
    <title>Important: unbound security update</title>
    <issued date="2025-01-30 00:00:00"/>
    <updated date="2025-01-31 11:22:15"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.   

Security Fix(es):  

  * unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation (CVE-2024-1488)
  * unbound: Unbounded name compression could lead to Denial of Service (CVE-2024-8508)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0837" id="RHSA-2025:0837" type="rhsa" title="RHSA-2025:0837"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1488" id="CVE-2024-1488" type="cve" title="CVE-2024-1488"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8508" id="CVE-2024-8508" type="cve" title="CVE-2024-8508"/>
      <reference href="https://bugzilla.redhat.com/2264183" id="2264183" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2316321" id="2316321" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0837.html" id="ALSA-2025:0837" type="self" title="ALSA-2025:0837"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="unbound-libs" version="1.16.2" release="5.8.el8_10" epoch="0" arch="s390x" src="unbound-1.16.2-5.8.el8_10.src.rpm">
          <filename>unbound-libs-1.16.2-5.8.el8_10.s390x.rpm</filename>
          <sum type="sha256">4204445400749cd2c4412a8384035171d979bf7491062fd732daa44d2ae7006b</sum>
        </package>
        <package name="python3-unbound" version="1.16.2" release="5.8.el8_10" epoch="0" arch="s390x" src="unbound-1.16.2-5.8.el8_10.src.rpm">
          <filename>python3-unbound-1.16.2-5.8.el8_10.s390x.rpm</filename>
          <sum type="sha256">6fb6cd870e86cae75f42a24e7b117a2135d111d205ec1139324d949d69a34cce</sum>
        </package>
        <package name="unbound" version="1.16.2" release="5.8.el8_10" epoch="0" arch="s390x" src="unbound-1.16.2-5.8.el8_10.src.rpm">
          <filename>unbound-1.16.2-5.8.el8_10.s390x.rpm</filename>
          <sum type="sha256">786ea9d8c6e30ed11263b2ccc846d6898657ba8f7fa5df203ea9b2d0e65c2e1f</sum>
        </package>
        <package name="unbound-devel" version="1.16.2" release="5.8.el8_10" epoch="0" arch="s390x" src="unbound-1.16.2-5.8.el8_10.src.rpm">
          <filename>unbound-devel-1.16.2-5.8.el8_10.s390x.rpm</filename>
          <sum type="sha256">b0a967745a2e1725cd0ef42241cb175db45a78426598218f16570b33390463bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0838</id>
    <title>Important: libsoup security update</title>
    <issued date="2025-01-30 00:00:00"/>
    <updated date="2025-01-31 11:19:08"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsoup security update</summary>
    <description>The libsoup packages provide an HTTP client and server library for GNOME.  

Security Fix(es):  

  * libsoup: buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict (CVE-2024-52531)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0838" id="RHSA-2025:0838" type="rhsa" title="RHSA-2025:0838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52531" id="CVE-2024-52531" type="cve" title="CVE-2024-52531"/>
      <reference href="https://bugzilla.redhat.com/2325277" id="2325277" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0838.html" id="ALSA-2025:0838" type="self" title="ALSA-2025:0838"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libsoup-devel" version="2.62.3" release="7.el8_10" epoch="0" arch="s390x" src="libsoup-2.62.3-7.el8_10.src.rpm">
          <filename>libsoup-devel-2.62.3-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">25a74c056a99451011a098e430a029b86ed51010b8302c4edc15dbb91991509c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0845</id>
    <title>Important: git-lfs security update</title>
    <issued date="2025-01-30 00:00:00"/>
    <updated date="2025-01-31 11:16:49"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git-lfs security update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.  

Security Fix(es):  

  * git-lfs: Git LFS permits exfiltration of credentials via crafted HTTP URLs (CVE-2024-53263)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0845" id="RHSA-2025:0845" type="rhsa" title="RHSA-2025:0845"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53263" id="CVE-2024-53263" type="cve" title="CVE-2024-53263"/>
      <reference href="https://bugzilla.redhat.com/2338002" id="2338002" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0845.html" id="ALSA-2025:0845" type="self" title="ALSA-2025:0845"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="git-lfs" version="3.4.1" release="4.el8_10" epoch="0" arch="s390x" src="git-lfs-3.4.1-4.el8_10.src.rpm">
          <filename>git-lfs-3.4.1-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">bf4adde215f5119c9407241a4b8d445f3e27784140e5fbb814e766e589f3c940</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10026</id>
    <title>Important: python3.11 security update</title>
    <issued date="2025-07-01 00:00:00"/>
    <updated date="2025-07-01 19:35:28"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)
  * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718)
  * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)
  * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)
  * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10026" id="RHSA-2025:10026" type="rhsa" title="RHSA-2025:10026"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12718" id="CVE-2024-12718" type="cve" title="CVE-2024-12718"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4138" id="CVE-2025-4138" type="cve" title="CVE-2025-4138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4330" id="CVE-2025-4330" type="cve" title="CVE-2025-4330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4435" id="CVE-2025-4435" type="cve" title="CVE-2025-4435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4517" id="CVE-2025-4517" type="cve" title="CVE-2025-4517"/>
      <reference href="https://bugzilla.redhat.com/2370010" id="2370010" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370013" id="2370013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370014" id="2370014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370016" id="2370016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2372426" id="2372426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10026.html" id="ALSA-2025:10026" type="self" title="ALSA-2025:10026"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.11-rpm-macros" version="3.11.13" release="1.el8_10" epoch="0" arch="noarch" src="python3.11-3.11.13-1.el8_10.src.rpm">
          <filename>python3.11-rpm-macros-3.11.13-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">0eebe8b0e759d8639bdbb926786c15e87583b810f17acdd0bf5df4d184a784b2</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.13" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-1.el8_10.src.rpm">
          <filename>python3.11-tkinter-3.11.13-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">688f2d73644f4eca19d5d347a6afa9c0b65233e0f189e24f8d7d5045a9b820c8</sum>
        </package>
        <package name="python3.11-devel" version="3.11.13" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-1.el8_10.src.rpm">
          <filename>python3.11-devel-3.11.13-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">71ca0708c4cbcd6657a2fcdd26672063faae3edb04646baab5d98d08fb44215d</sum>
        </package>
        <package name="python3.11" version="3.11.13" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-1.el8_10.src.rpm">
          <filename>python3.11-3.11.13-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c32617c4deffd7fb634ec8d8e1a3f4326962c3643bb150a29bd9aafaf6ca324d</sum>
        </package>
        <package name="python3.11-libs" version="3.11.13" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-1.el8_10.src.rpm">
          <filename>python3.11-libs-3.11.13-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c440444ebd6606e84acf8f4e966bbe92d664eb0c808a4912628563e47fb5d2f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10031</id>
    <title>Important: python3.12 security update</title>
    <issued date="2025-07-01 00:00:00"/>
    <updated date="2025-07-01 19:39:25"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)
  * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718)
  * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)
  * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)
  * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10031" id="RHSA-2025:10031" type="rhsa" title="RHSA-2025:10031"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12718" id="CVE-2024-12718" type="cve" title="CVE-2024-12718"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4138" id="CVE-2025-4138" type="cve" title="CVE-2025-4138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4330" id="CVE-2025-4330" type="cve" title="CVE-2025-4330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4435" id="CVE-2025-4435" type="cve" title="CVE-2025-4435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4517" id="CVE-2025-4517" type="cve" title="CVE-2025-4517"/>
      <reference href="https://bugzilla.redhat.com/2370010" id="2370010" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370013" id="2370013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370014" id="2370014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370016" id="2370016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2372426" id="2372426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10031.html" id="ALSA-2025:10031" type="self" title="ALSA-2025:10031"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.12-devel" version="3.12.11" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.11-1.el8_10.src.rpm">
          <filename>python3.12-devel-3.12.11-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">1bc14ab2e8288409f102de337cb6adf70485f428ef1fa311635f37f1d13a4bbb</sum>
        </package>
        <package name="python3.12-rpm-macros" version="3.12.11" release="1.el8_10" epoch="0" arch="noarch" src="python3.12-3.12.11-1.el8_10.src.rpm">
          <filename>python3.12-rpm-macros-3.12.11-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">1e6df4cd5104fb8fdd1140db10870c3a3f751ef0ea2f1df95a1aa9557e2e9df3</sum>
        </package>
        <package name="python3.12-tkinter" version="3.12.11" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.11-1.el8_10.src.rpm">
          <filename>python3.12-tkinter-3.12.11-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">458ed7af066c050f23ee6c82a86c847d76b922dbab7b058c7a578293c8584ed1</sum>
        </package>
        <package name="python3.12-libs" version="3.12.11" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.11-1.el8_10.src.rpm">
          <filename>python3.12-libs-3.12.11-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5e7df222072717754fb16a9b73076607e9b32284809777f366d336639223963e</sum>
        </package>
        <package name="python3.12" version="3.12.11" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.11-1.el8_10.src.rpm">
          <filename>python3.12-3.12.11-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a8c3b292dc5fbd6baab1c7f6bfb43fb6ba3a0ff12a6301056290332010cf23fa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10074</id>
    <title>Important: firefox security update</title>
    <issued date="2025-07-01 00:00:00"/>
    <updated date="2025-07-01 19:42:56"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: Content-Disposition header ignored when a file is included in an embed or object tag (CVE-2025-6430)
  * firefox: Use-after-free in FontFaceSet (CVE-2025-6424)
  * firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429)
  * firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10074" id="RHSA-2025:10074" type="rhsa" title="RHSA-2025:10074"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6424" id="CVE-2025-6424" type="cve" title="CVE-2025-6424"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6425" id="CVE-2025-6425" type="cve" title="CVE-2025-6425"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6429" id="CVE-2025-6429" type="cve" title="CVE-2025-6429"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6430" id="CVE-2025-6430" type="cve" title="CVE-2025-6430"/>
      <reference href="https://bugzilla.redhat.com/2374555" id="2374555" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2374559" id="2374559" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2374561" id="2374561" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2374562" id="2374562" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10074.html" id="ALSA-2025:10074" type="self" title="ALSA-2025:10074"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="128.12.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-128.12.0-1.el8_10.alma.1.src.rpm">
          <filename>firefox-128.12.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">eb2837217f71f079462ac10d2d7348be9914d8ccabbde275e6c543b662bdd241</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10128</id>
    <title>Important: python3 security update</title>
    <issued date="2025-07-01 00:00:00"/>
    <updated date="2025-07-02 07:44:17"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)
  * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718)
  * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)
  * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)
  * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10128" id="RHSA-2025:10128" type="rhsa" title="RHSA-2025:10128"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12718" id="CVE-2024-12718" type="cve" title="CVE-2024-12718"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4138" id="CVE-2025-4138" type="cve" title="CVE-2025-4138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4330" id="CVE-2025-4330" type="cve" title="CVE-2025-4330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4435" id="CVE-2025-4435" type="cve" title="CVE-2025-4435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4517" id="CVE-2025-4517" type="cve" title="CVE-2025-4517"/>
      <reference href="https://bugzilla.redhat.com/2370010" id="2370010" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370013" id="2370013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370014" id="2370014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370016" id="2370016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2372426" id="2372426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10128.html" id="ALSA-2025:10128" type="self" title="ALSA-2025:10128"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="platform-python-devel" version="3.6.8" release="70.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-70.el8_10.alma.1.src.rpm">
          <filename>platform-python-devel-3.6.8-70.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">5d0a811aa3c33deb07c6aca7c9afcb79f58f7d735f2f2ce17af0b7d936b5fbe5</sum>
        </package>
        <package name="platform-python-debug" version="3.6.8" release="70.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-70.el8_10.alma.1.src.rpm">
          <filename>platform-python-debug-3.6.8-70.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">6bc6a0b5f85f62eebee28de789816dcbab21ef6ac8ae86cf5858a4137753cde0</sum>
        </package>
        <package name="python3-idle" version="3.6.8" release="70.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-70.el8_10.alma.1.src.rpm">
          <filename>python3-idle-3.6.8-70.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">c3ef68866413c628e97e5033a49eea3c4a7cf83b8d540e80f7770583f12bfca3</sum>
        </package>
        <package name="python3-tkinter" version="3.6.8" release="70.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-70.el8_10.alma.1.src.rpm">
          <filename>python3-tkinter-3.6.8-70.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">dffc7ca2f1c1ee0ba06a1f58e0c105ca2887e48a4d877e606055a89c9a1a274f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10217</id>
    <title>Moderate: ruby:3.3 security update</title>
    <issued date="2025-07-02 00:00:00"/>
    <updated date="2025-07-03 12:04:40"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby:3.3 security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  

Security Fix(es):  

  * net-imap: Net::IMAP vulnerable to possible DoS by memory exhaustion (CVE-2025-25186)
  * CGI: Denial of Service in CGI::Cookie.parse (CVE-2025-27219)
  * uri: userinfo leakage in URI#join, URI#merge and URI#+ (CVE-2025-27221)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10217" id="RHSA-2025:10217" type="rhsa" title="RHSA-2025:10217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-25186" id="CVE-2025-25186" type="cve" title="CVE-2025-25186"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27219" id="CVE-2025-27219" type="cve" title="CVE-2025-27219"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27221" id="CVE-2025-27221" type="cve" title="CVE-2025-27221"/>
      <reference href="https://bugzilla.redhat.com/2344680" id="2344680" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349699" id="2349699" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349700" id="2349700" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10217.html" id="ALSA-2025:10217" type="self" title="ALSA-2025:10217"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="ruby" stream="3.3" version="8100020250703081234" context="9edba152" arch="s390x"/>
        <package name="rubygem-mysql2" version="0.5.5" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="s390x" src="rubygem-mysql2-0.5.5-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-mysql2-0.5.5-1.module_el8.10.0+3799+191214cc.s390x.rpm</filename>
          <sum type="sha256">0212e4bd0a248fdb4c10424d90e73d4c0400b209c24f90e3a5fac26348adcdc3</sum>
        </package>
        <package name="rubygem-typeprof" version="0.21.9" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="noarch" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>rubygem-typeprof-0.21.9-4.module_el8.10.0+4022+8b66723c.noarch.rpm</filename>
          <sum type="sha256">05cd832d0b36ac86b4098fbd4ac672bd14a11cc4c34de1ff318c518d2906e2b8</sum>
        </package>
        <package name="rubygem-rdoc" version="6.6.3.1" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="noarch" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>rubygem-rdoc-6.6.3.1-4.module_el8.10.0+4022+8b66723c.noarch.rpm</filename>
          <sum type="sha256">071a5afc2687efa7f991f351f11cd379b36029fbf99578095495e7a4126387c3</sum>
        </package>
        <package name="rubygem-bigdecimal" version="3.1.5" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="s390x" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>rubygem-bigdecimal-3.1.5-4.module_el8.10.0+4022+8b66723c.s390x.rpm</filename>
          <sum type="sha256">1f86c4e301faa8885bbee2f9f338ddefb1d773284995e9fec34569dd3a76b8e9</sum>
        </package>
        <package name="rubygem-rss" version="0.3.1" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="noarch" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>rubygem-rss-0.3.1-4.module_el8.10.0+4022+8b66723c.noarch.rpm</filename>
          <sum type="sha256">2071ab0d1803a45375b447b3950c582d8fe8b024d7e84d9a49c9d40c004c1a25</sum>
        </package>
        <package name="rubygem-minitest" version="5.20.0" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="noarch" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>rubygem-minitest-5.20.0-4.module_el8.10.0+4022+8b66723c.noarch.rpm</filename>
          <sum type="sha256">2a23a47c6de209a5857e2c917824c9977f42bd7025993201d168724202fae327</sum>
        </package>
        <package name="rubygem-rbs" version="3.4.0" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="s390x" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>rubygem-rbs-3.4.0-4.module_el8.10.0+4022+8b66723c.s390x.rpm</filename>
          <sum type="sha256">327a40b1973987b80a435bfbc10436326549b66f3f181a968777954f5c8f4c0e</sum>
        </package>
        <package name="ruby" version="3.3.8" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="s390x" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.s390x.rpm</filename>
          <sum type="sha256">36ad4490c38b78829fe27efffbcecb6517885d7ec0a6df79b1c936e2de49f911</sum>
        </package>
        <package name="rubygem-io-console" version="0.7.1" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="s390x" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>rubygem-io-console-0.7.1-4.module_el8.10.0+4022+8b66723c.s390x.rpm</filename>
          <sum type="sha256">4668faf93face2a28f259ed8d098e056d6ae557f02e5960552b5af0da953d62d</sum>
        </package>
        <package name="rubygem-irb" version="1.13.1" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="noarch" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>rubygem-irb-1.13.1-4.module_el8.10.0+4022+8b66723c.noarch.rpm</filename>
          <sum type="sha256">6ea7f24b5aabd514ed4247480fd13a55211b60e44fde7c4e85e39f1d3db13f9f</sum>
        </package>
        <package name="ruby-libs" version="3.3.8" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="s390x" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>ruby-libs-3.3.8-4.module_el8.10.0+4022+8b66723c.s390x.rpm</filename>
          <sum type="sha256">7cf3d7043cb8e890369f15281ff30cee2a21c732295c3b45535d9262b82ac24c</sum>
        </package>
        <package name="ruby-default-gems" version="3.3.8" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="noarch" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>ruby-default-gems-3.3.8-4.module_el8.10.0+4022+8b66723c.noarch.rpm</filename>
          <sum type="sha256">82cc87e74f86a207c818e9c76ad437beadcf9daf43e4e09386630f4c55ac151b</sum>
        </package>
        <package name="rubygem-test-unit" version="3.6.1" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="noarch" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>rubygem-test-unit-3.6.1-4.module_el8.10.0+4022+8b66723c.noarch.rpm</filename>
          <sum type="sha256">94255f827567ccaea5289178e27bf75fa5c907d36a88017e8c989d066719e4c9</sum>
        </package>
        <package name="rubygem-racc" version="1.7.3" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="s390x" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>rubygem-racc-1.7.3-4.module_el8.10.0+4022+8b66723c.s390x.rpm</filename>
          <sum type="sha256">9c46f8abe255096ee9a2156aff726239309b416fda447ca09e46771780b2ca27</sum>
        </package>
        <package name="rubygem-rexml" version="3.3.9" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="noarch" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>rubygem-rexml-3.3.9-4.module_el8.10.0+4022+8b66723c.noarch.rpm</filename>
          <sum type="sha256">a08ad63271d5d47e9ca8c94ce09fd00c869d766736671015b489e7ee5e0a1682</sum>
        </package>
        <package name="rubygem-mysql2-doc" version="0.5.5" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-mysql2-0.5.5-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-mysql2-doc-0.5.5-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">a1e84a63a7afd9043eb9ee27d2b4a2784de6e4790859efeb6e29353b8922b91f</sum>
        </package>
        <package name="rubygem-pg" version="1.5.4" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="s390x" src="rubygem-pg-1.5.4-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-pg-1.5.4-1.module_el8.10.0+3799+191214cc.s390x.rpm</filename>
          <sum type="sha256">b17f6e9ce3697902b5d1a0a00f804510913440b751583002e5226f0f1bafcfad</sum>
        </package>
        <package name="rubygem-pg-doc" version="1.5.4" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-pg-1.5.4-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-pg-doc-1.5.4-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">b8da427ba088e5a263b5c71d592a6515861cf12932be7ac5577f51afc1c68900</sum>
        </package>
        <package name="ruby-bundled-gems" version="3.3.8" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="s390x" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>ruby-bundled-gems-3.3.8-4.module_el8.10.0+4022+8b66723c.s390x.rpm</filename>
          <sum type="sha256">b96f8e51de0550932d1feb44eca9b641969e9d0f35beb77b1facae7029a5c693</sum>
        </package>
        <package name="rubygem-abrt-doc" version="0.4.0" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-abrt-0.4.0-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-abrt-doc-0.4.0-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">c7018cb7e3cfdd28f00117935672e78df8eddf81f308a36b9be1dd8a3fec2afe</sum>
        </package>
        <package name="rubygem-json" version="2.7.2" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="s390x" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>rubygem-json-2.7.2-4.module_el8.10.0+4022+8b66723c.s390x.rpm</filename>
          <sum type="sha256">cb6f59a734f460f18874d1e76af8b581942f641d051f1ea73d8cd18fd8546ae3</sum>
        </package>
        <package name="rubygem-power_assert" version="2.0.3" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="noarch" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>rubygem-power_assert-2.0.3-4.module_el8.10.0+4022+8b66723c.noarch.rpm</filename>
          <sum type="sha256">d2ddd10cfec735fe2a04d78e7204e9fe4f44f825788c0135db8b66907e70a7ff</sum>
        </package>
        <package name="rubygem-bundler" version="2.5.22" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="noarch" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>rubygem-bundler-2.5.22-4.module_el8.10.0+4022+8b66723c.noarch.rpm</filename>
          <sum type="sha256">d91a282b29b3815cefd319daa5b42940ac8bff8cb6a9ae20bb967f9346d3fdc5</sum>
        </package>
        <package name="rubygem-psych" version="5.1.2" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="s390x" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>rubygem-psych-5.1.2-4.module_el8.10.0+4022+8b66723c.s390x.rpm</filename>
          <sum type="sha256">dddc9874b3030682656469538abfe3afdb46a39a91584e4f8e2a152b51ad99ec</sum>
        </package>
        <package name="rubygems" version="3.5.22" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="noarch" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>rubygems-3.5.22-4.module_el8.10.0+4022+8b66723c.noarch.rpm</filename>
          <sum type="sha256">dea25305403eb9183b860ff092b0872912c33fb7503d35c683df9f94977069b2</sum>
        </package>
        <package name="ruby-doc" version="3.3.8" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="noarch" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>ruby-doc-3.3.8-4.module_el8.10.0+4022+8b66723c.noarch.rpm</filename>
          <sum type="sha256">e36ee6cfc9965bd0c4b1d85ccedac6119042be108de5b0074a2effdeeecd151a</sum>
        </package>
        <package name="rubygems-devel" version="3.5.22" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="noarch" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>rubygems-devel-3.5.22-4.module_el8.10.0+4022+8b66723c.noarch.rpm</filename>
          <sum type="sha256">e424eac1578b01e70c84ebe16f2786fe7e1b936c668ea646486478d231bc651b</sum>
        </package>
        <package name="rubygem-abrt" version="0.4.0" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-abrt-0.4.0-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-abrt-0.4.0-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">eb0f7cad4d0f103b5e53f11647208a780406db8c8cd8c9556e219bec8e1d9893</sum>
        </package>
        <package name="ruby-devel" version="3.3.8" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="s390x" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>ruby-devel-3.3.8-4.module_el8.10.0+4022+8b66723c.s390x.rpm</filename>
          <sum type="sha256">efd8cedc76807af7b528d66f876991420360181606053cd512e78f0883e30a08</sum>
        </package>
        <package name="rubygem-rake" version="13.1.0" release="4.module_el8.10.0+4022+8b66723c" epoch="0" arch="noarch" src="ruby-3.3.8-4.module_el8.10.0+4022+8b66723c.src.rpm">
          <filename>rubygem-rake-13.1.0-4.module_el8.10.0+4022+8b66723c.noarch.rpm</filename>
          <sum type="sha256">f88feb45c7e990a14d0c03e6712210217cd13173a1cc9e6a984e641a8873d4f3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10246</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-07-02 00:00:00"/>
    <updated date="2025-07-07 07:31:37"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-5986)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10246" id="RHSA-2025:10246" type="rhsa" title="RHSA-2025:10246"/>
      <reference href="https://bugzilla.redhat.com/2372281" id="2372281" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10246.html" id="ALSA-2025:10246" type="self" title="ALSA-2025:10246"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-5986.html" id="CVE-2025-5986" type="cve" title="CVE-2025-5986"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-6424.html" id="CVE-2025-6424" type="cve" title="CVE-2025-6424"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-6425.html" id="CVE-2025-6425" type="cve" title="CVE-2025-6425"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-6429.html" id="CVE-2025-6429" type="cve" title="CVE-2025-6429"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-6430.html" id="CVE-2025-6430" type="cve" title="CVE-2025-6430"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="128.12.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-128.12.0-1.el8_10.alma.1.src.rpm">
          <filename>thunderbird-128.12.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">ce1b5c3e606e4d89ec145e37fb96bc05afcc7b34e83ed2130710f7e152fcfb28</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10551</id>
    <title>Important: container-tools:rhel8 security update</title>
    <issued date="2025-07-08 00:00:00"/>
    <updated date="2025-07-09 08:13:25"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>container-tools:rhel8 security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.  

Security Fix(es):  

  * podman: podman missing TLS verification (CVE-2025-6032)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10551" id="RHSA-2025:10551" type="rhsa" title="RHSA-2025:10551"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6032" id="CVE-2025-6032" type="cve" title="CVE-2025-6032"/>
      <reference href="https://bugzilla.redhat.com/2372501" id="2372501" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10551.html" id="ALSA-2025:10551" type="self" title="ALSA-2025:10551"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="container-tools" stream="rhel8" version="8100020250617080424" context="20125149" arch="s390x"/>
        <package name="containernetworking-plugins" version="1.4.0" release="6.module_el8.10.0+4016+efd18bf8" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-6.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>containernetworking-plugins-1.4.0-6.module_el8.10.0+4016+efd18bf8.s390x.rpm</filename>
          <sum type="sha256">01ce475d6b55bfde8145f5504470f60e087576049049ad624b54efcd0787fe6a</sum>
        </package>
        <package name="python3-podman" version="4.9.0" release="3.module_el8.10.0+4016+efd18bf8" epoch="0" arch="noarch" src="python-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>python3-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.noarch.rpm</filename>
          <sum type="sha256">087549428650af46817206c5d5ddd54bace235c2932b3e2004ac93e3b466cb6d</sum>
        </package>
        <package name="runc" version="1.1.12" release="6.module_el8.10.0+3959+b8dc5e6a" epoch="1" arch="s390x" src="runc-1.1.12-6.module_el8.10.0+3959+b8dc5e6a.src.rpm">
          <filename>runc-1.1.12-6.module_el8.10.0+3959+b8dc5e6a.s390x.rpm</filename>
          <sum type="sha256">0cb9a8dbd3dfd8c842cd2e0ea2e3f51864aba043d336afcab8ee0547d0b3c0d0</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="22.module_el8.10.0+4023+db236c53" epoch="4" arch="s390x" src="podman-4.9.4-22.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>podman-tests-4.9.4-22.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">12d9965e853c8f38c836f581121026399686aa6cd97b4f72f08a41758775c501</sum>
        </package>
        <package name="crun" version="1.14.3" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="crun-1.14.3-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>crun-1.14.3-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">1803f41cb3e0828fe770ce7de14a940b9fad458fd84f420baab724674e2041e7</sum>
        </package>
        <package name="aardvark-dns" version="1.10.1" release="2.module_el8.10.0+4016+efd18bf8" epoch="2" arch="s390x" src="aardvark-dns-1.10.1-2.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>aardvark-dns-1.10.1-2.module_el8.10.0+4016+efd18bf8.s390x.rpm</filename>
          <sum type="sha256">1b902d8206478f42a77204d07243cedda48d7122a3e12c3ed1c307c9d914897c</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="2.module_el8.10.0+4023+db236c53" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>libslirp-4.4.0-2.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">1fb16f13bc4c318fd2714e829a188f97facb4a31222911e078f5604ab7bcd2d9</sum>
        </package>
        <package name="netavark" version="1.10.3" release="1.module_el8.10.0+3926+f12484f5" epoch="2" arch="s390x" src="netavark-1.10.3-1.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>netavark-1.10.3-1.module_el8.10.0+3926+f12484f5.s390x.rpm</filename>
          <sum type="sha256">229bc7970f251b961853b29e4f6c9b17e6fd309418b96ea955e2eaeba74fc773</sum>
        </package>
        <package name="podman-plugins" version="4.9.4" release="22.module_el8.10.0+4023+db236c53" epoch="4" arch="s390x" src="podman-4.9.4-22.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>podman-plugins-4.9.4-22.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">2cf222262c0667c77d06e7da0f0eebd5810ebcf700a64383fc5ef6f9ab3baa86</sum>
        </package>
        <package name="podman-catatonit" version="4.9.4" release="22.module_el8.10.0+4023+db236c53" epoch="4" arch="s390x" src="podman-4.9.4-22.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>podman-catatonit-4.9.4-22.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">2e335beb6e8a7fde75b07901681c239dec6882f868cb1f48ba269f9b2a36317e</sum>
        </package>
        <package name="buildah" version="1.33.12" release="2.module_el8.10.0+4023+db236c53" epoch="2" arch="s390x" src="buildah-1.33.12-2.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>buildah-1.33.12-2.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">30fb3797a34a298dc7f8d5f71599f1e45be546856ef6e3df45e84f107c20a15b</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.10" release="1.module_el8.10.0+3909+6e1c1eb7" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">335953655f25bd1ac71964d14ffc9ab6adaa73033e74e2b3a851b88683283196</sum>
        </package>
        <package name="conmon" version="2.1.10" release="1.module_el8.10.0+3970+8445edf6" epoch="3" arch="s390x" src="conmon-2.1.10-1.module_el8.10.0+3970+8445edf6.src.rpm">
          <filename>conmon-2.1.10-1.module_el8.10.0+3970+8445edf6.s390x.rpm</filename>
          <sum type="sha256">36afcd93148e54bc82b311c3f39d7c1189680ddd0e1865314b0f0346b6ae4650</sum>
        </package>
        <package name="container-selinux" version="2.229.0" release="2.module_el8.10.0+3909+6e1c1eb7" epoch="2" arch="noarch" src="container-selinux-2.229.0-2.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>container-selinux-2.229.0-2.module_el8.10.0+3909+6e1c1eb7.noarch.rpm</filename>
          <sum type="sha256">39df1f8e08cf61f1d3399b9d32cdaa93153cdbd001ff380fa9145a2012d1190c</sum>
        </package>
        <package name="buildah-tests" version="1.33.12" release="2.module_el8.10.0+4023+db236c53" epoch="2" arch="s390x" src="buildah-1.33.12-2.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>buildah-tests-1.33.12-2.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">563f40cab7fa9fdd2f7103a2f36101c54e64d39932f45b870c58730e9017db6f</sum>
        </package>
        <package name="python3-criu" version="3.18" release="5.module_el8.10.0+4023+db236c53" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>python3-criu-3.18-5.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">63a762e1b6963204cd36602216730858805e405178999018be7f659aea67dd29</sum>
        </package>
        <package name="udica" version="0.2.6" release="21.module_el8.10.0+3926+f12484f5" epoch="0" arch="noarch" src="udica-0.2.6-21.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>udica-0.2.6-21.module_el8.10.0+3926+f12484f5.noarch.rpm</filename>
          <sum type="sha256">6926e34b1965f9f26dd6b35b2d9809b5e337f117e6b333fb99c624461afd91d8</sum>
        </package>
        <package name="fuse-overlayfs" version="1.13" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="s390x" src="fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">8118067655696462cee9dfc553f57e4501b089590d837bc88091716914c8d3f5</sum>
        </package>
        <package name="criu-devel" version="3.18" release="5.module_el8.10.0+4023+db236c53" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>criu-devel-3.18-5.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">8757f0644c7ee9f01b51ce4e2b82136a47b2ed724f05b1c0b140cef98db701ab</sum>
        </package>
        <package name="podman" version="4.9.4" release="22.module_el8.10.0+4023+db236c53" epoch="4" arch="s390x" src="podman-4.9.4-22.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>podman-4.9.4-22.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">8b0c8298b9be614fbca1eb0e8cda3a01d695e42c8307a172eb4e9bb66bad0c94</sum>
        </package>
        <package name="toolbox" version="0.0.99.5" release="2.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>toolbox-0.0.99.5-2.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">8df71d94e465a66228dced33f5189e4789bc2ac13946b5e79a11e8091af4f33e</sum>
        </package>
        <package name="containers-common" version="1" release="82.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="s390x" src="containers-common-1-82.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>containers-common-1-82.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">98eb0c5785e1d53743858e76ac35aab0b199a918b88c02e20aa6f64cc6f89618</sum>
        </package>
        <package name="skopeo-tests" version="1.14.5" release="4.module_el8.10.0+4023+db236c53" epoch="2" arch="s390x" src="skopeo-1.14.5-4.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>skopeo-tests-1.14.5-4.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">ac505fbca1e13a7517938a3896b2a3d7654ec2efb1b3b9fe2b8eaeb9737a1921</sum>
        </package>
        <package name="crit" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>crit-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">aeb27c5bcec90a9452f93ad79ef0d4f00ecedf4442f32f9bedb481509db12683</sum>
        </package>
        <package name="criu" version="3.18" release="5.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>criu-3.18-5.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">bdaddee931f3746ac7472d9ccee504acd0be805433b3d160b1e7caf8bf361cb8</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="22.module_el8.10.0+4023+db236c53" epoch="4" arch="s390x" src="podman-4.9.4-22.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>podman-remote-4.9.4-22.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">c1951a5e6910bba76c84851404228d539a45b614bb2634f8107306db73e15937</sum>
        </package>
        <package name="slirp4netns" version="1.2.3" release="1.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="slirp4netns-1.2.3-1.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>slirp4netns-1.2.3-1.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">d750de35a600a89a6edbd8c2178e292766005ce3339a84c33adecfdef70e7a57</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="22.module_el8.10.0+4023+db236c53" epoch="4" arch="noarch" src="podman-4.9.4-22.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>podman-docker-4.9.4-22.module_el8.10.0+4023+db236c53.noarch.rpm</filename>
          <sum type="sha256">d83d5aa7a9037e02f3ea57782cf3897f2a033d91b1f7aa9b3941561998cf0d47</sum>
        </package>
        <package name="criu-libs" version="3.18" release="5.module_el8.10.0+3909+6e1c1eb7" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>criu-libs-3.18-5.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">e0d274cf0f5db049af121f476769c0d601e70c7566ea3aec4e608aca5317b4eb</sum>
        </package>
        <package name="podman-gvproxy" version="4.9.4" release="22.module_el8.10.0+4023+db236c53" epoch="4" arch="s390x" src="podman-4.9.4-22.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>podman-gvproxy-4.9.4-22.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">e487a791fe1bd7d6dacc22325c9ec7a0c21dc01bdb3380ad4d73d05b27ed031b</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.5" release="2.module_el8.10.0+3909+6e1c1eb7" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>toolbox-tests-0.0.99.5-2.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">e5fff3c3d6b6f6023e100d0922c2e8096f567b7f5cfbb57efe322eadd2f43465</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="2.module_el8.10.0+3901+4b80ecd7" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>libslirp-devel-4.4.0-2.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">ea8f3e70f2a1a7886cb1abcdb80e7b2ea3cf36a174dc5158142c286d69fae136</sum>
        </package>
        <package name="skopeo" version="1.14.5" release="4.module_el8.10.0+4016+efd18bf8" epoch="2" arch="s390x" src="skopeo-1.14.5-4.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>skopeo-1.14.5-4.module_el8.10.0+4016+efd18bf8.s390x.rpm</filename>
          <sum type="sha256">ee1637100b6327d45deb6c41fc0f92bfeb58c67eb00bacfac0a080ee3eb4abdb</sum>
        </package>
        <package name="cockpit-podman" version="84.1" release="1.module_el8.10.0+4016+efd18bf8" epoch="0" arch="noarch" src="cockpit-podman-84.1-1.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>cockpit-podman-84.1-1.module_el8.10.0+4016+efd18bf8.noarch.rpm</filename>
          <sum type="sha256">f03872dff2aa7d3da8ebcebbb3adc464fd859f8c0fa9c83ece498edb0d3ce572</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10618</id>
    <title>Moderate: jq security update</title>
    <issued date="2025-07-08 00:00:00"/>
    <updated date="2025-07-09 08:08:04"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>jq security update</summary>
    <description>jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text.  

Security Fix(es):  

  * jq: jq has signed integer overflow in jv.c:jvp_array_write (CVE-2024-23337)
  * jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) (CVE-2025-48060)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10618" id="RHSA-2025:10618" type="rhsa" title="RHSA-2025:10618"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23337" id="CVE-2024-23337" type="cve" title="CVE-2024-23337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48060" id="CVE-2025-48060" type="cve" title="CVE-2025-48060"/>
      <reference href="https://bugzilla.redhat.com/2367807" id="2367807" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367842" id="2367842" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10618.html" id="ALSA-2025:10618" type="self" title="ALSA-2025:10618"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="jq" version="1.6" release="11.el8_10" epoch="0" arch="s390x" src="jq-1.6-11.el8_10.src.rpm">
          <filename>jq-1.6-11.el8_10.s390x.rpm</filename>
          <sum type="sha256">ac8412bc19bbdcaf77183a831703def8e6a2c2586b8edfae91cf428ee83a9c13</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10672</id>
    <title>Moderate: go-toolset:rhel8 security update</title>
    <issued date="2025-07-09 00:00:00"/>
    <updated date="2025-07-11 09:05:26"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>go-toolset:rhel8 security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.   

Security Fix(es):  

  * net/[http:](http:) Sensitive headers not cleared on cross-origin redirect in net/http (CVE-2025-4673)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10672" id="RHSA-2025:10672" type="rhsa" title="RHSA-2025:10672"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4673" id="CVE-2025-4673" type="cve" title="CVE-2025-4673"/>
      <reference href="https://bugzilla.redhat.com/2373305" id="2373305" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10672.html" id="ALSA-2025:10672" type="self" title="ALSA-2025:10672"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="go-toolset" stream="rhel8" version="8100020250711080407" context="9edba152" arch="s390x"/>
        <package name="golang-bin" version="1.24.4" release="1.module_el8.10.0+4027+41c6fed2" epoch="0" arch="s390x" src="golang-1.24.4-1.module_el8.10.0+4027+41c6fed2.src.rpm">
          <filename>golang-bin-1.24.4-1.module_el8.10.0+4027+41c6fed2.s390x.rpm</filename>
          <sum type="sha256">0252a4c56919bc17afd3b995307c6fa767f398e408a837cb65155067be3f7ee6</sum>
        </package>
        <package name="go-toolset" version="1.24.4" release="1.module_el8.10.0+4027+41c6fed2" epoch="0" arch="s390x" src="go-toolset-1.24.4-1.module_el8.10.0+4027+41c6fed2.src.rpm">
          <filename>go-toolset-1.24.4-1.module_el8.10.0+4027+41c6fed2.s390x.rpm</filename>
          <sum type="sha256">0577bdb7e0aaebf074dfad70d8b25eb8a5dcef3d423a984eb32cf6d86bb415ad</sum>
        </package>
        <package name="golang-misc" version="1.24.4" release="1.module_el8.10.0+4027+41c6fed2" epoch="0" arch="noarch" src="golang-1.24.4-1.module_el8.10.0+4027+41c6fed2.src.rpm">
          <filename>golang-misc-1.24.4-1.module_el8.10.0+4027+41c6fed2.noarch.rpm</filename>
          <sum type="sha256">5bd223f118155727b50752e4a89b9192550711f938df3e9bf05588a08a7d45dc</sum>
        </package>
        <package name="golang-src" version="1.24.4" release="1.module_el8.10.0+4027+41c6fed2" epoch="0" arch="noarch" src="golang-1.24.4-1.module_el8.10.0+4027+41c6fed2.src.rpm">
          <filename>golang-src-1.24.4-1.module_el8.10.0+4027+41c6fed2.noarch.rpm</filename>
          <sum type="sha256">6e9c02a6215e0785341a4b321176645fde8ed048a5c8ff60d4cbd436bb42d7cb</sum>
        </package>
        <package name="golang-tests" version="1.24.4" release="1.module_el8.10.0+4027+41c6fed2" epoch="0" arch="noarch" src="golang-1.24.4-1.module_el8.10.0+4027+41c6fed2.src.rpm">
          <filename>golang-tests-1.24.4-1.module_el8.10.0+4027+41c6fed2.noarch.rpm</filename>
          <sum type="sha256">abbc0141867b8abb0837cbb92e4e57f4176b0f25af92225a243564f8be3e8b9d</sum>
        </package>
        <package name="golang-docs" version="1.24.4" release="1.module_el8.10.0+4027+41c6fed2" epoch="0" arch="noarch" src="golang-1.24.4-1.module_el8.10.0+4027+41c6fed2.src.rpm">
          <filename>golang-docs-1.24.4-1.module_el8.10.0+4027+41c6fed2.noarch.rpm</filename>
          <sum type="sha256">d72f0172ec6d4bffe6dab52ba79354d79be73197ab7e260c69f814f948ab7fcc</sum>
        </package>
        <package name="golang" version="1.24.4" release="1.module_el8.10.0+4027+41c6fed2" epoch="0" arch="s390x" src="golang-1.24.4-1.module_el8.10.0+4027+41c6fed2.src.rpm">
          <filename>golang-1.24.4-1.module_el8.10.0+4027+41c6fed2.s390x.rpm</filename>
          <sum type="sha256">f686dc24b852080283b6414b38272ba2575b0af6ed2ceec85065d7a8e292f5eb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10698</id>
    <title>Important: libxml2 security update</title>
    <issued date="2025-07-09 00:00:00"/>
    <updated date="2025-07-10 12:55:09"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxml: Heap use after free (UAF) leads to Denial of service (DoS) (CVE-2025-49794)
  * libxml: Type confusion leads to Denial of service (DoS) (CVE-2025-49796)
  * libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2 (CVE-2025-6021)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10698" id="RHSA-2025:10698" type="rhsa" title="RHSA-2025:10698"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49794" id="CVE-2025-49794" type="cve" title="CVE-2025-49794"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49796" id="CVE-2025-49796" type="cve" title="CVE-2025-49796"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6021" id="CVE-2025-6021" type="cve" title="CVE-2025-6021"/>
      <reference href="https://bugzilla.redhat.com/2372373" id="2372373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2372385" id="2372385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2372406" id="2372406" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10698.html" id="ALSA-2025:10698" type="self" title="ALSA-2025:10698"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libxml2-devel" version="2.9.7" release="21.el8_10.1" epoch="0" arch="s390x" src="libxml2-2.9.7-21.el8_10.1.src.rpm">
          <filename>libxml2-devel-2.9.7-21.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">36db982027103fe508454e2baa8342b421d5e079c721c796e25117b863fd8eb4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10742</id>
    <title>Moderate: gnome-remote-desktop security update</title>
    <issued date="2025-07-09 00:00:00"/>
    <updated date="2025-07-10 12:50:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnome-remote-desktop security update</summary>
    <description>GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment.  

Security Fix(es):  

  * gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs (CVE-2025-5024)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10742" id="RHSA-2025:10742" type="rhsa" title="RHSA-2025:10742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5024" id="CVE-2025-5024" type="cve" title="CVE-2025-5024"/>
      <reference href="https://bugzilla.redhat.com/2367717" id="2367717" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10742.html" id="ALSA-2025:10742" type="self" title="ALSA-2025:10742"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="gnome-remote-desktop" version="0.1.8" release="4.el8_10" epoch="0" arch="s390x" src="gnome-remote-desktop-0.1.8-4.el8_10.src.rpm">
          <filename>gnome-remote-desktop-0.1.8-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">fb9dad70203af31cf3ae43b68c9733a3f263a748ce03eb1f6aeea4609996b282</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10862</id>
    <title>Important: java-1.8.0-openjdk security update</title>
    <issued date="2025-07-17 00:00:00"/>
    <updated date="2025-07-21 09:43:41"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better Glyph drawing (CVE-2025-30749)
  * JDK: Enhance TLS protocol support (CVE-2025-30754)
  * JDK: Improve scripting supports (CVE-2025-30761)
  * JDK: Better Glyph drawing redux (CVE-2025-50106)


Bug Fix(es):  

  * On certain system configurations where the IPv4 stack was preferred over IPv6 (either due to -Djava.net.preferIPv4Stack=true being specified or no IPv6 interfaces being present), the method java.net.InetAddress.getLocalHost().getHostName() would return the fully qualified hostname instead of the short hostname. This behavior was only ever intended for Solaris systems and it deviated from the method's behavior for IPv6 interfaces. In this release, the method will return the short hostname on all interfaces. (AlmaLinux-102904, AlmaLinux-102905, AlmaLinux-102906, AlmaLinux-102907, AlmaLinux-102908, AlmaLinux-102909, AlmaLinux-102910, AlmaLinux-102911, AlmaLinux-102912)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10862" id="RHSA-2025:10862" type="rhsa" title="RHSA-2025:10862"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30749" id="CVE-2025-30749" type="cve" title="CVE-2025-30749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30754" id="CVE-2025-30754" type="cve" title="CVE-2025-30754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30761" id="CVE-2025-30761" type="cve" title="CVE-2025-30761"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50106" id="CVE-2025-50106" type="cve" title="CVE-2025-50106"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10862.html" id="ALSA-2025:10862" type="self" title="ALSA-2025:10862"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.462.b08" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.462.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.462.b08-2.el8.s390x.rpm</filename>
          <sum type="sha256">0ba098da592e0721ea27240a9da4d18d847f25923a29dcbc21be47095319738f</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility" version="1.8.0.462.b08" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.462.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-1.8.0.462.b08-2.el8.s390x.rpm</filename>
          <sum type="sha256">1fb345cd6d4b1cd22637fbd9eabebd3b95580fc85474b2c5f598ff9f87309ae5</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.462.b08" release="2.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.462.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.462.b08-2.el8.noarch.rpm</filename>
          <sum type="sha256">34d86117133e5a00c8e3abf6e0fe08ec1140ed197b82f116b2be4508b08e1115</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.462.b08" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.462.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.462.b08-2.el8.s390x.rpm</filename>
          <sum type="sha256">9974fff6016fe12b20acfc75b06161eef77dd145b7d02ffc26e8504d93d5bc85</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.462.b08" release="2.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.462.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.462.b08-2.el8.noarch.rpm</filename>
          <sum type="sha256">9cc6a5393ca365a37f49f0e3561250f1b0ab549509e2375ba601cb6fd009d9b6</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.462.b08" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.462.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.462.b08-2.el8.s390x.rpm</filename>
          <sum type="sha256">cbb06065e304ef5c481f000d43b71002a55221fc8b758f2e03ccf6af00f3a7b3</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.462.b08" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.462.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.462.b08-2.el8.s390x.rpm</filename>
          <sum type="sha256">f932254efeac1a5c0938ade16f287cdd85a5dd932ea7ec7b35d2f003b8229d29</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.462.b08" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.462.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.462.b08-2.el8.s390x.rpm</filename>
          <sum type="sha256">fc778f95210468a9691703d2844fd457328247fdb7e05844bda2a402acd90e14</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10867</id>
    <title>Important: java-17-openjdk security update</title>
    <issued date="2025-07-15 00:00:00"/>
    <updated date="2025-07-16 12:47:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better Glyph drawing (CVE-2025-30749)
  * JDK: Enhance TLS protocol support (CVE-2025-30754)
  * JDK: Improve HTTP client header handling (CVE-2025-50059)
  * JDK: Better Glyph drawing redux (CVE-2025-50106)


Bug Fix(es):  

  * In AlmaLinuxand AlmaLinux systems, the default graphical display system is Wayland. The use of Wayland in these systems causes a failure in the traditional X11 method that java.awt.Robot uses to take a screen capture, producing a blank image. With this update, the RPM now recommends installing the PipeWire package, which the JDK can use to take screen captures in Wayland systems (AlmaLinux-102668, AlmaLinux-102669, AlmaLinux-102670, AlmaLinux-102672)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10867" id="RHSA-2025:10867" type="rhsa" title="RHSA-2025:10867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30749" id="CVE-2025-30749" type="cve" title="CVE-2025-30749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30754" id="CVE-2025-30754" type="cve" title="CVE-2025-30754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50059" id="CVE-2025-50059" type="cve" title="CVE-2025-50059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50106" id="CVE-2025-50106" type="cve" title="CVE-2025-50106"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10867.html" id="ALSA-2025:10867" type="self" title="ALSA-2025:10867"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-17-openjdk-src" version="17.0.16.0.8" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-src-17.0.16.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">021012f48be4b7fe3974e761e77ee79fd004f3ce23ff2e09abaf14a1b77975ef</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.16.0.8" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.16.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">1a43b1e1ab16a825f58428e9371758cc676fa1abb9ce4e62b42b57255c460daa</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.16.0.8" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-17.0.16.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">31268317eee5e0ac1d69037fc06d571f80b579123073a5bc83c6f18091d0e370</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.16.0.8" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.16.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">415dfc5c051da91ec31d60c2c1396161cf794832b0edde20d2fca78a6c81f6be</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.16.0.8" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-17.0.16.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">559061825d7950caab63544337d12293285d5cde892f356ac49bc0843938ea68</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.16.0.8" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.16.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">87ccfcda6c26755921d4c73f703dd72e274cf99d877c7cf50aa83a6de915c238</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.16.0.8" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-17.0.16.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">a3b4275bfc9f371447f22bfb16387cfd6889c03f0052a91990e155ab73dac6b1</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.16.0.8" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-17.0.16.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">add7e4a56a428b401947e4bd0003263e0a1ce6f65a6c415ca2ab9caa97c00f3d</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.16.0.8" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.16.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">f416cd360536b3aee4829b3b9c4085eb1785f9a264c2c09d00ab2b3f01395dd1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10873</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2025-07-16 00:00:00"/>
    <updated date="2025-07-30 13:16:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better Glyph drawing (CVE-2025-30749)
  * JDK: Enhance TLS protocol support (CVE-2025-30754)
  * JDK: Improve HTTP client header handling (CVE-2025-50059)
  * JDK: Better Glyph drawing redux (CVE-2025-50106)


Bug Fix(es):  

  * In AlmaLinuxand AlmaLinux systems, the default graphical display system is Wayland. The use of Wayland in these systems causes a failure in the traditional X11 method that java.awt.Robot uses to take a screen capture, producing a blank image. With this update, the RPM now recommends installing the PipeWire package, which the JDK can use to take screen captures in Wayland systems (AlmaLinux-102683, AlmaLinux-102684, AlmaLinux-102685)
  * On NUMA systems, the operating system can choose to migrate a task from one NUMA node to another. In the G1 garbage collector, G1AllocRegion objects are associated with NUMA nodes. The G1Allocator code assumes that obtaining the G1AllocRegion object for the current thread is sufficient, but OS scheduling can lead to arbitrary changes in the NUMA-to-thread association. This can cause crashes when the G1AllocRegion being used changes mid-operation. This update resolves this issue by always using the same NUMA node and associated G1AllocRegion object throughout an operation. (AlmaLinux-90307, AlmaLinux-90308, AlmaLinux-90311)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10873" id="RHSA-2025:10873" type="rhsa" title="RHSA-2025:10873"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30749" id="CVE-2025-30749" type="cve" title="CVE-2025-30749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30754" id="CVE-2025-30754" type="cve" title="CVE-2025-30754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50059" id="CVE-2025-50059" type="cve" title="CVE-2025-50059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50106" id="CVE-2025-50106" type="cve" title="CVE-2025-50106"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10873.html" id="ALSA-2025:10873" type="self" title="ALSA-2025:10873"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-21-openjdk-devel" version="21.0.8.0.9" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-21.0.8.0.9-1.el8.s390x.rpm</filename>
          <sum type="sha256">058ebc9bbb5c274096767046a4020881ac1e82a71e15332db92ca1aa634274a7</sum>
        </package>
        <package name="java-21-openjdk" version="21.0.8.0.9" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-21.0.8.0.9-1.el8.s390x.rpm</filename>
          <sum type="sha256">06fd639ac3ad8f8527b1f370ff32317bf566a04f7e7aa937899bf7201835139e</sum>
        </package>
        <package name="java-21-openjdk-headless" version="21.0.8.0.9" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-21.0.8.0.9-1.el8.s390x.rpm</filename>
          <sum type="sha256">06fe793dcb63806f592bd68dfcccb8bb2ebcd8367a8d0948393759d5ac1a84a4</sum>
        </package>
        <package name="java-21-openjdk-static-libs" version="21.0.8.0.9" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-21.0.8.0.9-1.el8.s390x.rpm</filename>
          <sum type="sha256">0a5f18c46d9d386dc107704f87fd1885fa34093c8ba70457e512413ed926b5a5</sum>
        </package>
        <package name="java-21-openjdk-demo" version="21.0.8.0.9" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-21.0.8.0.9-1.el8.s390x.rpm</filename>
          <sum type="sha256">408443026ad6bd530e97a2c3d15eac6d7516df90c4b3a7a42b657bed1cecc549</sum>
        </package>
        <package name="java-21-openjdk-jmods" version="21.0.8.0.9" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-21.0.8.0.9-1.el8.s390x.rpm</filename>
          <sum type="sha256">65da97b7a890b312a66d990d12477dc133c60b42f0ba5b77dbc4b9b142815d59</sum>
        </package>
        <package name="java-21-openjdk-javadoc-zip" version="21.0.8.0.9" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-javadoc-zip-21.0.8.0.9-1.el8.s390x.rpm</filename>
          <sum type="sha256">8db95e0fab924595280dadfa3de6dff6a6fd30fc95e9193ba98487275a82869b</sum>
        </package>
        <package name="java-21-openjdk-javadoc" version="21.0.8.0.9" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-javadoc-21.0.8.0.9-1.el8.s390x.rpm</filename>
          <sum type="sha256">a0d8fa84f14edd810be5ba09bbc2036cccbc601113e881ea4b04379f909ac0be</sum>
        </package>
        <package name="java-21-openjdk-src" version="21.0.8.0.9" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-src-21.0.8.0.9-1.el8.s390x.rpm</filename>
          <sum type="sha256">fa063fb5179b3a27c738268ce9559488d6e10f37d7f8911809cc9f5192d22bd2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11030</id>
    <title>Moderate: emacs security update</title>
    <issued date="2025-07-15 00:00:00"/>
    <updated date="2025-07-16 07:58:14"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>emacs security update</summary>
    <description>GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.  

Security Fix(es):  

  * emacs: arbitrary code execution via Lisp macro expansion (CVE-2024-53920)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11030" id="RHSA-2025:11030" type="rhsa" title="RHSA-2025:11030"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53920" id="CVE-2024-53920" type="cve" title="CVE-2024-53920"/>
      <reference href="https://bugzilla.redhat.com/2329161" id="2329161" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-11030.html" id="ALSA-2025:11030" type="self" title="ALSA-2025:11030"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="emacs-terminal" version="26.1" release="15.el8_10" epoch="1" arch="noarch" src="emacs-26.1-15.el8_10.src.rpm">
          <filename>emacs-terminal-26.1-15.el8_10.noarch.rpm</filename>
          <sum type="sha256">2d6280b57684f85cdf346306b04d5e4e4777405d8d14693ea144490a2e9c7639</sum>
        </package>
        <package name="emacs" version="26.1" release="15.el8_10" epoch="1" arch="s390x" src="emacs-26.1-15.el8_10.src.rpm">
          <filename>emacs-26.1-15.el8_10.s390x.rpm</filename>
          <sum type="sha256">5fe8a39f174cec6eab97842c72d4c70bbb488472c937afdcb47498c38f62e82b</sum>
        </package>
        <package name="emacs-nox" version="26.1" release="15.el8_10" epoch="1" arch="s390x" src="emacs-26.1-15.el8_10.src.rpm">
          <filename>emacs-nox-26.1-15.el8_10.s390x.rpm</filename>
          <sum type="sha256">86825afd474c8551d569ca7d55b4b016be5320d07605673fc6a81447530ec1c3</sum>
        </package>
        <package name="emacs-common" version="26.1" release="15.el8_10" epoch="1" arch="s390x" src="emacs-26.1-15.el8_10.src.rpm">
          <filename>emacs-common-26.1-15.el8_10.s390x.rpm</filename>
          <sum type="sha256">df109ab86174bf55771cebd50c411523358b8df47b0ab2d3e5a6d9f75c5279a3</sum>
        </package>
        <package name="emacs-lucid" version="26.1" release="15.el8_10" epoch="1" arch="s390x" src="emacs-26.1-15.el8_10.src.rpm">
          <filename>emacs-lucid-26.1-15.el8_10.s390x.rpm</filename>
          <sum type="sha256">e35450f5386eb72f14d347bb504a705ab2528220db2f6d6aca6099d34d71ddb9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11042</id>
    <title>Moderate: socat security update</title>
    <issued date="2025-07-15 00:00:00"/>
    <updated date="2025-07-16 08:00:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>socat security update</summary>
    <description>The socat utility establishes bi-directional byte streams and transfers data between them. The utility can establish streams between a large set of channels, such as files, pipes, devices, and sockets.  

Security Fix(es):  

  * socat: arbitrary file overwrite via predictable /tmp directory (CVE-2024-54661)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11042" id="RHSA-2025:11042" type="rhsa" title="RHSA-2025:11042"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-54661" id="CVE-2024-54661" type="cve" title="CVE-2024-54661"/>
      <reference href="https://bugzilla.redhat.com/2330297" id="2330297" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-11042.html" id="ALSA-2025:11042" type="self" title="ALSA-2025:11042"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="socat" version="1.7.4.1" release="2.el8_10" epoch="0" arch="s390x" src="socat-1.7.4.1-2.el8_10.src.rpm">
          <filename>socat-1.7.4.1-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">4a360700e587adc38660cc5c9e734417bfc751416ae2db6391df2f9f237801d1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11043</id>
    <title>Moderate: python3.11-setuptools security update</title>
    <issued date="2025-07-15 00:00:00"/>
    <updated date="2025-07-16 08:02:22"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11-setuptools security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11043" id="RHSA-2025:11043" type="rhsa" title="RHSA-2025:11043"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47273" id="CVE-2025-47273" type="cve" title="CVE-2025-47273"/>
      <reference href="https://bugzilla.redhat.com/2366982" id="2366982" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-11043.html" id="ALSA-2025:11043" type="self" title="ALSA-2025:11043"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.11-setuptools" version="65.5.1" release="4.el8_10" epoch="0" arch="noarch" src="python3.11-setuptools-65.5.1-4.el8_10.src.rpm">
          <filename>python3.11-setuptools-65.5.1-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">6df6d59f2f9267b05ef9fd14a0944b97af787070de2a37ea0b3aebbac325a693</sum>
        </package>
        <package name="python3.11-setuptools-wheel" version="65.5.1" release="4.el8_10" epoch="0" arch="noarch" src="python3.11-setuptools-65.5.1-4.el8_10.src.rpm">
          <filename>python3.11-setuptools-wheel-65.5.1-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">868440bd842018c47bcd4ea377cc9a2e7f360cd510e2351fe5b5b7b57489bf54</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11324</id>
    <title>Important: cloud-init security update</title>
    <issued date="2025-07-16 00:00:00"/>
    <updated date="2025-07-17 08:11:16"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>cloud-init security update</summary>
    <description>The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts.  

Security Fix(es):  

  * cloud-init: Cloud init permissions flaw (CVE-2024-6174)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11324" id="RHSA-2025:11324" type="rhsa" title="RHSA-2025:11324"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6174" id="CVE-2024-6174" type="cve" title="CVE-2024-6174"/>
      <reference href="https://bugzilla.redhat.com/2374924" id="2374924" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-11324.html" id="ALSA-2025:11324" type="self" title="ALSA-2025:11324"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="cloud-init" version="23.4" release="7.el8_10.10.alma.1" epoch="0" arch="noarch" src="cloud-init-23.4-7.el8_10.10.alma.1.src.rpm">
          <filename>cloud-init-23.4-7.el8_10.10.alma.1.noarch.rpm</filename>
          <sum type="sha256">c86ed0b519c2fddb9ffe0fb746f03592d67b7e12aaf1970a711a509e19cd7ca6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11333</id>
    <title>Important: tomcat security update</title>
    <issued date="2025-07-16 00:00:00"/>
    <updated date="2025-07-17 08:17:04"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tomcat security update</summary>
    <description>Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.  

Security Fix(es):  

  * tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337)
  * tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11333" id="RHSA-2025:11333" type="rhsa" title="RHSA-2025:11333"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56337" id="CVE-2024-56337" type="cve" title="CVE-2024-56337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31650" id="CVE-2025-31650" type="cve" title="CVE-2025-31650"/>
      <reference href="https://bugzilla.redhat.com/2333521" id="2333521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2362783" id="2362783" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-11333.html" id="ALSA-2025:11333" type="self" title="ALSA-2025:11333"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="tomcat-webapps" version="9.0.87" release="1.el8_10.4" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.4.src.rpm">
          <filename>tomcat-webapps-9.0.87-1.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">0c884263b9c44a63da1419eb57a06a0e7ac0e0652cf762334e190cc035625949</sum>
        </package>
        <package name="tomcat-docs-webapp" version="9.0.87" release="1.el8_10.4" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.4.src.rpm">
          <filename>tomcat-docs-webapp-9.0.87-1.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">197a630f1d22b8fc26f53c49d79f979a04d1112b3f9eaa85ad7a091597c018b6</sum>
        </package>
        <package name="tomcat-jsp-2.3-api" version="9.0.87" release="1.el8_10.4" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.4.src.rpm">
          <filename>tomcat-jsp-2.3-api-9.0.87-1.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">487e0e81a85b7cfe62f13b44b0655a9ef5737c4c7098448dd5d657014ba05b55</sum>
        </package>
        <package name="tomcat" version="9.0.87" release="1.el8_10.4" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.4.src.rpm">
          <filename>tomcat-9.0.87-1.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">4e08861c6e894ac227518940ad8ac8e499f9aafd226edfbd14bf64b10340b2ad</sum>
        </package>
        <package name="tomcat-lib" version="9.0.87" release="1.el8_10.4" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.4.src.rpm">
          <filename>tomcat-lib-9.0.87-1.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">65d0de700ade5fc5ade064bcc078d376d28813f13f2f28a5deb8ea0b4c596dc9</sum>
        </package>
        <package name="tomcat-servlet-4.0-api" version="9.0.87" release="1.el8_10.4" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.4.src.rpm">
          <filename>tomcat-servlet-4.0-api-9.0.87-1.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">9864c900a3d26cc7d49bce07bbe86ade22822f39b462c42df131db57c3841a41</sum>
        </package>
        <package name="tomcat-el-3.0-api" version="9.0.87" release="1.el8_10.4" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.4.src.rpm">
          <filename>tomcat-el-3.0-api-9.0.87-1.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">a12e4047d4d885c8506000dd9b34f2703aedb9240d4146c3cfaaac62a6609402</sum>
        </package>
        <package name="tomcat-admin-webapps" version="9.0.87" release="1.el8_10.4" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.4.src.rpm">
          <filename>tomcat-admin-webapps-9.0.87-1.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">f91a87779d18bbb39e6f6264d0332ce49752416ef8b703e15f8ff8a5d3a409ef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11534</id>
    <title>Important: git security update</title>
    <issued date="2025-07-22 00:00:00"/>
    <updated date="2025-07-23 08:07:31"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git security update</summary>
    <description>Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.  

Security Fix(es):  

  * git: Git does not sanitize URLs when asking for credentials interactively (CVE-2024-50349)
  * git: Newline confusion in credential helpers can lead to credential exfiltration in git (CVE-2024-52006)
  * git: Git arbitrary code execution (CVE-2025-48384)
  * git: Git arbitrary file writes (CVE-2025-48385)
  * gitk: Git file creation flaw (CVE-2025-27613)
  * gitk: git script execution flaw (CVE-2025-27614)
  * git: Git GUI can create and overwrite files for which the user has write permission (CVE-2025-46835)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11534" id="RHSA-2025:11534" type="rhsa" title="RHSA-2025:11534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50349" id="CVE-2024-50349" type="cve" title="CVE-2024-50349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52006" id="CVE-2024-52006" type="cve" title="CVE-2024-52006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27613" id="CVE-2025-27613" type="cve" title="CVE-2025-27613"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27614" id="CVE-2025-27614" type="cve" title="CVE-2025-27614"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46835" id="CVE-2025-46835" type="cve" title="CVE-2025-46835"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48384" id="CVE-2025-48384" type="cve" title="CVE-2025-48384"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48385" id="CVE-2025-48385" type="cve" title="CVE-2025-48385"/>
      <reference href="https://bugzilla.redhat.com/2337824" id="2337824" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337956" id="2337956" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2378806" id="2378806" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2378808" id="2378808" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379124" id="2379124" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379125" id="2379125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379326" id="2379326" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-11534.html" id="ALSA-2025:11534" type="self" title="ALSA-2025:11534"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="git-credential-libsecret" version="2.43.7" release="1.el8_10" epoch="0" arch="s390x" src="git-2.43.7-1.el8_10.src.rpm">
          <filename>git-credential-libsecret-2.43.7-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0f05a1d19d158a5a64e76fe9752123fe08bbe14caebb868cefc84c7da881d931</sum>
        </package>
        <package name="git-core" version="2.43.7" release="1.el8_10" epoch="0" arch="s390x" src="git-2.43.7-1.el8_10.src.rpm">
          <filename>git-core-2.43.7-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">2bc1ea0f38a362b124a670702f68863e860d436df8ca5c932c2b664aeb4fcc12</sum>
        </package>
        <package name="git-all" version="2.43.7" release="1.el8_10" epoch="0" arch="noarch" src="git-2.43.7-1.el8_10.src.rpm">
          <filename>git-all-2.43.7-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">3678d5abf5c8e0d8f1eba109dd36c26db2729e91574d3dd2b643382abe3d60fd</sum>
        </package>
        <package name="gitweb" version="2.43.7" release="1.el8_10" epoch="0" arch="noarch" src="git-2.43.7-1.el8_10.src.rpm">
          <filename>gitweb-2.43.7-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">388934413486f13f838e37cf2d7be610b3edd0dcc904a90c82360e97587ea231</sum>
        </package>
        <package name="git-email" version="2.43.7" release="1.el8_10" epoch="0" arch="noarch" src="git-2.43.7-1.el8_10.src.rpm">
          <filename>git-email-2.43.7-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">449910bb35edd777707b96006d07e71e742222f41dbef9d892b1952c9bd96fee</sum>
        </package>
        <package name="git-svn" version="2.43.7" release="1.el8_10" epoch="0" arch="noarch" src="git-2.43.7-1.el8_10.src.rpm">
          <filename>git-svn-2.43.7-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">4e323a417e7250302de8a93bdbca392f0386027df716a456d192944bfd40688d</sum>
        </package>
        <package name="git-instaweb" version="2.43.7" release="1.el8_10" epoch="0" arch="noarch" src="git-2.43.7-1.el8_10.src.rpm">
          <filename>git-instaweb-2.43.7-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">539f090e76095933eb5f40616cc2ef61da1dcaf0bdc704070e276090a481c45b</sum>
        </package>
        <package name="perl-Git-SVN" version="2.43.7" release="1.el8_10" epoch="0" arch="noarch" src="git-2.43.7-1.el8_10.src.rpm">
          <filename>perl-Git-SVN-2.43.7-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">56486c8633ebc390f617a15f2fdf6661566cc2b4d53101bcf4ff545fd8777852</sum>
        </package>
        <package name="git-gui" version="2.43.7" release="1.el8_10" epoch="0" arch="noarch" src="git-2.43.7-1.el8_10.src.rpm">
          <filename>git-gui-2.43.7-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">621b3cf9923cc3c2e825b3d1b1bd46422dbe72ae19c358bc7930e3a7dda600ba</sum>
        </package>
        <package name="gitk" version="2.43.7" release="1.el8_10" epoch="0" arch="noarch" src="git-2.43.7-1.el8_10.src.rpm">
          <filename>gitk-2.43.7-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">6bce245b0ebc7ed18744cdaaabb73fdddb37912828593476e1b7ecc528bcaf93</sum>
        </package>
        <package name="git-daemon" version="2.43.7" release="1.el8_10" epoch="0" arch="s390x" src="git-2.43.7-1.el8_10.src.rpm">
          <filename>git-daemon-2.43.7-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">8738fc35bd20f499926e42abd4b914fb56294793e0c934a2f8a6fcd0342ff64f</sum>
        </package>
        <package name="git" version="2.43.7" release="1.el8_10" epoch="0" arch="s390x" src="git-2.43.7-1.el8_10.src.rpm">
          <filename>git-2.43.7-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">87e4f5d6141bcf7d7a896191dbfddc83a7194433a36f6ad3f11de1402acd6b8a</sum>
        </package>
        <package name="git-subtree" version="2.43.7" release="1.el8_10" epoch="0" arch="s390x" src="git-2.43.7-1.el8_10.src.rpm">
          <filename>git-subtree-2.43.7-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">9ad374cfa70563abb99ec580d01cb72ce593eb219337ba81176cacd15b276e6e</sum>
        </package>
        <package name="perl-Git" version="2.43.7" release="1.el8_10" epoch="0" arch="noarch" src="git-2.43.7-1.el8_10.src.rpm">
          <filename>perl-Git-2.43.7-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">f1da4bcc112d826cb799a0883984282fb0ffe353b00e666888a33575ec28e96b</sum>
        </package>
        <package name="git-core-doc" version="2.43.7" release="1.el8_10" epoch="0" arch="noarch" src="git-2.43.7-1.el8_10.src.rpm">
          <filename>git-core-doc-2.43.7-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">f1e8739ca8b5c89b00150268df6589219b370b7e36cd1fe4be9114f9fc209218</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11747</id>
    <title>Important: firefox security update</title>
    <issued date="2025-07-24 00:00:00"/>
    <updated date="2025-07-30 09:15:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: Large branch table could lead to truncated instruction (CVE-2025-8028)
  * firefox: thunderbird: Memory safety bugs (CVE-2025-8035)
  * firefox: thunderbird: Incorrect URL stripping in CSP reports (CVE-2025-8031)
  * firefox: thunderbird: JavaScript engine only wrote partial return value to stack (CVE-2025-8027)
  * firefox: thunderbird: Potential user-assisted code execution in ?Copy as cURL? command (CVE-2025-8030)
  * firefox: Memory safety bugs (CVE-2025-8034)
  * firefox: thunderbird: Incorrect JavaScript state machine for generators (CVE-2025-8033)
  * firefox: thunderbird: XSLT documents could bypass CSP (CVE-2025-8032)
  * firefox: thunderbird: javascript: URLs executed on object and embed tags (CVE-2025-8029)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11747" id="RHSA-2025:11747" type="rhsa" title="RHSA-2025:11747"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8027" id="CVE-2025-8027" type="cve" title="CVE-2025-8027"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8028" id="CVE-2025-8028" type="cve" title="CVE-2025-8028"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8029" id="CVE-2025-8029" type="cve" title="CVE-2025-8029"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8030" id="CVE-2025-8030" type="cve" title="CVE-2025-8030"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8031" id="CVE-2025-8031" type="cve" title="CVE-2025-8031"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8032" id="CVE-2025-8032" type="cve" title="CVE-2025-8032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8033" id="CVE-2025-8033" type="cve" title="CVE-2025-8033"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8034" id="CVE-2025-8034" type="cve" title="CVE-2025-8034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8035" id="CVE-2025-8035" type="cve" title="CVE-2025-8035"/>
      <reference href="https://bugzilla.redhat.com/2382701" id="2382701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382703" id="2382703" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382704" id="2382704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382707" id="2382707" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382710" id="2382710" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382711" id="2382711" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382717" id="2382717" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382718" id="2382718" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382720" id="2382720" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-11747.html" id="ALSA-2025:11747" type="self" title="ALSA-2025:11747"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="128.13.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-128.13.0-1.el8_10.alma.1.src.rpm">
          <filename>firefox-128.13.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">0a9be5c9d700f6ad1b5c95575b41805b992b7c4087898a2f875753207611aac2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11803</id>
    <title>Important: nodejs:22 security update</title>
    <issued date="2025-07-28 00:00:00"/>
    <updated date="2025-07-28 14:53:46"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:22 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * sqlite: Integer Truncation in SQLite (CVE-2025-6965)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11803" id="RHSA-2025:11803" type="rhsa" title="RHSA-2025:11803"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6965" id="CVE-2025-6965" type="cve" title="CVE-2025-6965"/>
      <reference href="https://bugzilla.redhat.com/2380149" id="2380149" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-11803.html" id="ALSA-2025:11803" type="self" title="ALSA-2025:11803"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="nodejs" stream="22" version="8100020250422085128" context="9c84b808" arch="s390x"/>
        <package name="nodejs-libs" version="22.16.0" release="2.module_el8.10.0+4028+97ddca84" epoch="1" arch="s390x" src="nodejs-22.16.0-2.module_el8.10.0+4028+97ddca84.src.rpm">
          <filename>nodejs-libs-22.16.0-2.module_el8.10.0+4028+97ddca84.s390x.rpm</filename>
          <sum type="sha256">26cd2df521f4c66637d1a3ac16eaea9f288c8ec13074c6efcd4a03d3b9c11455</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el8.10.0+4006+3c416519" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.10.0+4006+3c416519.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el8.10.0+4006+3c416519.noarch.rpm</filename>
          <sum type="sha256">2bd2bc02d533996f2f5591fe5845ffa85fc8cbf2b4c76370d7ed5d8010a16d05</sum>
        </package>
        <package name="npm" version="10.9.2" release="1.22.16.0.2.module_el8.10.0+4028+97ddca84" epoch="1" arch="s390x" src="nodejs-22.16.0-2.module_el8.10.0+4028+97ddca84.src.rpm">
          <filename>npm-10.9.2-1.22.16.0.2.module_el8.10.0+4028+97ddca84.s390x.rpm</filename>
          <sum type="sha256">2f70c01b1489ec548be5e3aa7b65fbe2ecd368d94c111451509f417b0f3f24a7</sum>
        </package>
        <package name="nodejs-full-i18n" version="22.16.0" release="2.module_el8.10.0+4028+97ddca84" epoch="1" arch="s390x" src="nodejs-22.16.0-2.module_el8.10.0+4028+97ddca84.src.rpm">
          <filename>nodejs-full-i18n-22.16.0-2.module_el8.10.0+4028+97ddca84.s390x.rpm</filename>
          <sum type="sha256">3b4e352506ca70d21c05f2418d4585a6751325bd5c98bceefba19c71d6c3487a</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.10.0+3983+391a1a04" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.10.0+3983+391a1a04.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.10.0+3983+391a1a04.noarch.rpm</filename>
          <sum type="sha256">53d47bcd3ba5d6d0d0045485ca1f36974f9a4fcf7250dd99e461957b5569b3bd</sum>
        </package>
        <package name="nodejs" version="22.16.0" release="2.module_el8.10.0+4028+97ddca84" epoch="1" arch="s390x" src="nodejs-22.16.0-2.module_el8.10.0+4028+97ddca84.src.rpm">
          <filename>nodejs-22.16.0-2.module_el8.10.0+4028+97ddca84.s390x.rpm</filename>
          <sum type="sha256">5abce345b4a7409b240ffb736db31e7dd3f5c903d396d90081dfebf6d8c858cf</sum>
        </package>
        <package name="v8-12.4-devel" version="12.4.254.21" release="1.22.16.0.2.module_el8.10.0+4028+97ddca84" epoch="3" arch="s390x" src="nodejs-22.16.0-2.module_el8.10.0+4028+97ddca84.src.rpm">
          <filename>v8-12.4-devel-12.4.254.21-1.22.16.0.2.module_el8.10.0+4028+97ddca84.s390x.rpm</filename>
          <sum type="sha256">955736064d76c2dc7a57fe31b538c48f70633fe377d0d63dfa591673baf3ab3e</sum>
        </package>
        <package name="nodejs-docs" version="22.16.0" release="2.module_el8.10.0+4028+97ddca84" epoch="1" arch="noarch" src="nodejs-22.16.0-2.module_el8.10.0+4028+97ddca84.src.rpm">
          <filename>nodejs-docs-22.16.0-2.module_el8.10.0+4028+97ddca84.noarch.rpm</filename>
          <sum type="sha256">b7a74ff774a58ac41ff9a04f758c2414cde656b1407e210d22d366ce0b2572d4</sum>
        </package>
        <package name="nodejs-devel" version="22.16.0" release="2.module_el8.10.0+4028+97ddca84" epoch="1" arch="s390x" src="nodejs-22.16.0-2.module_el8.10.0+4028+97ddca84.src.rpm">
          <filename>nodejs-devel-22.16.0-2.module_el8.10.0+4028+97ddca84.s390x.rpm</filename>
          <sum type="sha256">ed0810aba4dd15a50412662d3e1a5e34f5546c36a6bd469c4ffd7a7a621c1c7b</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el8.10.0+3961+6a788e57" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.10.0+3961+6a788e57.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el8.10.0+3961+6a788e57.noarch.rpm</filename>
          <sum type="sha256">f68cc5d7a383cbee17ad43acc466061915b2b7309b6696369168e2a3c4a7158c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11805</id>
    <title>Moderate: perl security update</title>
    <issued date="2025-07-28 00:00:00"/>
    <updated date="2025-07-28 09:38:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>perl security update</summary>
    <description>Perl is a high-level programming language that is commonly used for system administration utilities and web programming.  

Security Fix(es):  

  * perl: Perl threads have a working directory race condition where file operations may target unintended paths (CVE-2025-40909)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11805" id="RHSA-2025:11805" type="rhsa" title="RHSA-2025:11805"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40909" id="CVE-2025-40909" type="cve" title="CVE-2025-40909"/>
      <reference href="https://bugzilla.redhat.com/2369407" id="2369407" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-11805.html" id="ALSA-2025:11805" type="self" title="ALSA-2025:11805"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="perl-Module-Loaded" version="0.08" release="423.el8_10" epoch="1" arch="noarch" src="perl-5.26.3-423.el8_10.src.rpm">
          <filename>perl-Module-Loaded-0.08-423.el8_10.noarch.rpm</filename>
          <sum type="sha256">001470b952c459408f6de58c282eb2ba0618831576f0ab35ce5abdf1e2c43e07</sum>
        </package>
        <package name="perl-open" version="1.11" release="423.el8_10" epoch="0" arch="noarch" src="perl-5.26.3-423.el8_10.src.rpm">
          <filename>perl-open-1.11-423.el8_10.noarch.rpm</filename>
          <sum type="sha256">01472c2fbb2a519cb5bb2b781dcd7cbc46a0b19c658335346879d0749670e475</sum>
        </package>
        <package name="perl-tests" version="5.26.3" release="423.el8_10" epoch="4" arch="s390x" src="perl-5.26.3-423.el8_10.src.rpm">
          <filename>perl-tests-5.26.3-423.el8_10.s390x.rpm</filename>
          <sum type="sha256">02cf7575047f9a4fd797714642b8ec181263dab63a881d5000b751fbd42104c5</sum>
        </package>
        <package name="perl-Pod-Html" version="1.22.02" release="423.el8_10" epoch="0" arch="noarch" src="perl-5.26.3-423.el8_10.src.rpm">
          <filename>perl-Pod-Html-1.22.02-423.el8_10.noarch.rpm</filename>
          <sum type="sha256">03e11ffab9ef1d9571c5ea269fe869550c4cb1edc262147587c987079498c548</sum>
        </package>
        <package name="perl-Locale-Maketext-Simple" version="0.21" release="423.el8_10" epoch="1" arch="noarch" src="perl-5.26.3-423.el8_10.src.rpm">
          <filename>perl-Locale-Maketext-Simple-0.21-423.el8_10.noarch.rpm</filename>
          <sum type="sha256">07c9b97325653226b63aa9f1bbd28af01feee060e7aa80f599be6edf9e839d8a</sum>
        </package>
        <package name="perl-SelfLoader" version="1.23" release="423.el8_10" epoch="0" arch="noarch" src="perl-5.26.3-423.el8_10.src.rpm">
          <filename>perl-SelfLoader-1.23-423.el8_10.noarch.rpm</filename>
          <sum type="sha256">142437121a534d5313d92c2460232157a27d5a9fc60ecca1d843d5a1489f4edd</sum>
        </package>
        <package name="perl-Time-Piece" version="1.31" release="423.el8_10" epoch="0" arch="s390x" src="perl-5.26.3-423.el8_10.src.rpm">
          <filename>perl-Time-Piece-1.31-423.el8_10.s390x.rpm</filename>
          <sum type="sha256">15d3b501335d8537d6a3ba0cd2ac7689da84376cd9ecdbf21b8a5afcbd505307</sum>
        </package>
        <package name="perl-utils" version="5.26.3" release="423.el8_10" epoch="0" arch="noarch" src="perl-5.26.3-423.el8_10.src.rpm">
          <filename>perl-utils-5.26.3-423.el8_10.noarch.rpm</filename>
          <sum type="sha256">2ae37d4112b77f0eae9191eb5a068ab85ce1c98dd15f31f566684ad423098015</sum>
        </package>
        <package name="perl-devel" version="5.26.3" release="423.el8_10" epoch="4" arch="s390x" src="perl-5.26.3-423.el8_10.src.rpm">
          <filename>perl-devel-5.26.3-423.el8_10.s390x.rpm</filename>
          <sum type="sha256">3c462f2b5095a42b1ca36b2881cb4198707f534047f28797d1f3f00700481c09</sum>
        </package>
        <package name="perl-ExtUtils-Embed" version="1.34" release="423.el8_10" epoch="0" arch="noarch" src="perl-5.26.3-423.el8_10.src.rpm">
          <filename>perl-ExtUtils-Embed-1.34-423.el8_10.noarch.rpm</filename>
          <sum type="sha256">3f2035b18b73b3abdf2d01c790b7996612000ad9028b4033aea0d69b56841726</sum>
        </package>
        <package name="perl-Net-Ping" version="2.55" release="423.el8_10" epoch="0" arch="noarch" src="perl-5.26.3-423.el8_10.src.rpm">
          <filename>perl-Net-Ping-2.55-423.el8_10.noarch.rpm</filename>
          <sum type="sha256">53435a74e9293f50503451c75b4142f629d764b117fc8631da4039c0b1d09cea</sum>
        </package>
        <package name="perl-libnetcfg" version="5.26.3" release="423.el8_10" epoch="4" arch="noarch" src="perl-5.26.3-423.el8_10.src.rpm">
          <filename>perl-libnetcfg-5.26.3-423.el8_10.noarch.rpm</filename>
          <sum type="sha256">6f2ccaa795a699ce33533f2779b9d88f9488fad9fbcf57f4e67164bee39bf354</sum>
        </package>
        <package name="perl-Memoize" version="1.03" release="423.el8_10" epoch="0" arch="noarch" src="perl-5.26.3-423.el8_10.src.rpm">
          <filename>perl-Memoize-1.03-423.el8_10.noarch.rpm</filename>
          <sum type="sha256">b675cc6654c45daa168a110564039a1ab98933ad210930e31fb76edcdd7bd7e7</sum>
        </package>
        <package name="perl-Devel-Peek" version="1.26" release="423.el8_10" epoch="0" arch="s390x" src="perl-5.26.3-423.el8_10.src.rpm">
          <filename>perl-Devel-Peek-1.26-423.el8_10.s390x.rpm</filename>
          <sum type="sha256">c92fbf5954416339e7ddda89bd6f7966f20fbd6492c177e511e18e143ed1b76f</sum>
        </package>
        <package name="perl-ExtUtils-Miniperl" version="1.06" release="423.el8_10" epoch="0" arch="noarch" src="perl-5.26.3-423.el8_10.src.rpm">
          <filename>perl-ExtUtils-Miniperl-1.06-423.el8_10.noarch.rpm</filename>
          <sum type="sha256">ce875da77d7a9fba09b52caac8d908aa70e8222acc6c9b1b2c41ab95fe933924</sum>
        </package>
        <package name="perl-Test" version="1.30" release="423.el8_10" epoch="0" arch="noarch" src="perl-5.26.3-423.el8_10.src.rpm">
          <filename>perl-Test-1.30-423.el8_10.noarch.rpm</filename>
          <sum type="sha256">d945c28f62417c8604f9c0cda151781a30c65da3d9d65a9af56b15a3acfc14a9</sum>
        </package>
        <package name="perl" version="5.26.3" release="423.el8_10" epoch="4" arch="s390x" src="perl-5.26.3-423.el8_10.src.rpm">
          <filename>perl-5.26.3-423.el8_10.s390x.rpm</filename>
          <sum type="sha256">ea2095f05d7004c164bf1c510787527f66c18886a8d122acdc4472acff7c3d4a</sum>
        </package>
        <package name="perl-Attribute-Handlers" version="0.99" release="423.el8_10" epoch="0" arch="noarch" src="perl-5.26.3-423.el8_10.src.rpm">
          <filename>perl-Attribute-Handlers-0.99-423.el8_10.noarch.rpm</filename>
          <sum type="sha256">ec3080696c02ca00fb3d32a4c6dc0a1b3273534a5b70aff8fd1ec54523719561</sum>
        </package>
        <package name="perl-Devel-SelfStubber" version="1.06" release="423.el8_10" epoch="0" arch="noarch" src="perl-5.26.3-423.el8_10.src.rpm">
          <filename>perl-Devel-SelfStubber-1.06-423.el8_10.noarch.rpm</filename>
          <sum type="sha256">f8c05d26b90793eca156e5b13f9de7cb3ab40e0551309b1366dc9531e121f2f3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11884</id>
    <title>Important: unbound security update</title>
    <issued date="2025-07-28 00:00:00"/>
    <updated date="2025-07-28 14:37:13"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.   

Security Fix(es):  

  * unbound: Unbound Cache poisoning (CVE-2025-5994)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11884" id="RHSA-2025:11884" type="rhsa" title="RHSA-2025:11884"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5994" id="CVE-2025-5994" type="cve" title="CVE-2025-5994"/>
      <reference href="https://bugzilla.redhat.com/2380949" id="2380949" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-11884.html" id="ALSA-2025:11884" type="self" title="ALSA-2025:11884"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="unbound" version="1.16.2" release="5.9.el8_10" epoch="0" arch="s390x" src="unbound-1.16.2-5.9.el8_10.src.rpm">
          <filename>unbound-1.16.2-5.9.el8_10.s390x.rpm</filename>
          <sum type="sha256">5b7c75f5281e078757b2b618fbe2a9c2ddb40ea85601164d83b2892a6f87e437</sum>
        </package>
        <package name="unbound-devel" version="1.16.2" release="5.9.el8_10" epoch="0" arch="s390x" src="unbound-1.16.2-5.9.el8_10.src.rpm">
          <filename>unbound-devel-1.16.2-5.9.el8_10.s390x.rpm</filename>
          <sum type="sha256">99cf08e94c1cfe87d0cc24f2c5743ce15ffe49d7834ffdff8a8831d585d38c27</sum>
        </package>
        <package name="unbound-libs" version="1.16.2" release="5.9.el8_10" epoch="0" arch="s390x" src="unbound-1.16.2-5.9.el8_10.src.rpm">
          <filename>unbound-libs-1.16.2-5.9.el8_10.s390x.rpm</filename>
          <sum type="sha256">acde966e4e847dca5e6a79bc2c79210d86e8faf88598c4cefc10a28e86de0787</sum>
        </package>
        <package name="python3-unbound" version="1.16.2" release="5.9.el8_10" epoch="0" arch="s390x" src="unbound-1.16.2-5.9.el8_10.src.rpm">
          <filename>python3-unbound-1.16.2-5.9.el8_10.s390x.rpm</filename>
          <sum type="sha256">c0fbe9b522e0a1e25f682b24abcb1c2516a6c0dcf3fa21ac379df356380fb364</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12006</id>
    <title>Important: redis:6 security update</title>
    <issued date="2025-07-28 00:00:00"/>
    <updated date="2025-07-30 08:13:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>redis:6 security update</summary>
    <description>Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.  

Security Fix(es):  

  * redis: Redis Unauthenticated Denial of Service (CVE-2025-48367)
  * redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability (CVE-2025-32023)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12006" id="RHSA-2025:12006" type="rhsa" title="RHSA-2025:12006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32023" id="CVE-2025-32023" type="cve" title="CVE-2025-32023"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48367" id="CVE-2025-48367" type="cve" title="CVE-2025-48367"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-12006.html" id="ALSA-2025:12006" type="self" title="ALSA-2025:12006"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="redis" stream="6" version="8100020250729111213" context="9edba152" arch="s390x"/>
        <package name="redis" version="6.2.19" release="1.module_el8.10.0+4030+0c7fcc00" epoch="0" arch="s390x" src="redis-6.2.19-1.module_el8.10.0+4030+0c7fcc00.src.rpm">
          <filename>redis-6.2.19-1.module_el8.10.0+4030+0c7fcc00.s390x.rpm</filename>
          <sum type="sha256">396c7cfcec7eabcacfb96bce2a4af041b47dfba28ec5ba18a6aac5b2e1a92a5b</sum>
        </package>
        <package name="redis-doc" version="6.2.19" release="1.module_el8.10.0+4030+0c7fcc00" epoch="0" arch="noarch" src="redis-6.2.19-1.module_el8.10.0+4030+0c7fcc00.src.rpm">
          <filename>redis-doc-6.2.19-1.module_el8.10.0+4030+0c7fcc00.noarch.rpm</filename>
          <sum type="sha256">4184f90eabacbd6974d92852003bbba29f799cf9df345ec0472669b11894461f</sum>
        </package>
        <package name="redis-devel" version="6.2.19" release="1.module_el8.10.0+4030+0c7fcc00" epoch="0" arch="s390x" src="redis-6.2.19-1.module_el8.10.0+4030+0c7fcc00.src.rpm">
          <filename>redis-devel-6.2.19-1.module_el8.10.0+4030+0c7fcc00.s390x.rpm</filename>
          <sum type="sha256">beeef75a6ea70d3aaf8ff03464d4b8c6755856e2667e5704f433d126093a7bcc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12010</id>
    <title>Important: sqlite security update</title>
    <issued date="2025-07-28 00:00:00"/>
    <updated date="2025-07-29 09:23:03"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>sqlite security update</summary>
    <description>SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server.  

Security Fix(es):  

  * sqlite: Integer Truncation in SQLite (CVE-2025-6965)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12010" id="RHSA-2025:12010" type="rhsa" title="RHSA-2025:12010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6965" id="CVE-2025-6965" type="cve" title="CVE-2025-6965"/>
      <reference href="https://bugzilla.redhat.com/2380149" id="2380149" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-12010.html" id="ALSA-2025:12010" type="self" title="ALSA-2025:12010"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="lemon" version="3.26.0" release="20.el8_10" epoch="0" arch="s390x" src="sqlite-3.26.0-20.el8_10.src.rpm">
          <filename>lemon-3.26.0-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">94b440fd86915ae90b0b7f12eeaf66e337ac4ce03c8a1462fb345403e0503a13</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1215</id>
    <title>Moderate: tbb security update</title>
    <issued date="2025-02-10 00:00:00"/>
    <updated date="2025-02-11 12:06:05"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>tbb security update</summary>
    <description>Threading Building Blocks (TBB) is a C++ runtime library that abstracts the low-level threading details necessary for optimal multi-core performance.   

Security Fix(es):  

  * jquery: Untrusted code execution via &lt;option&gt; tag in HTML passed to DOM manipulation methods (CVE-2020-11023)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1215" id="RHSA-2025:1215" type="rhsa" title="RHSA-2025:1215"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-11023" id="CVE-2020-11023" type="cve" title="CVE-2020-11023"/>
      <reference href="https://bugzilla.redhat.com/1850004" id="1850004" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1215.html" id="ALSA-2025:1215" type="self" title="ALSA-2025:1215"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="tbb-doc" version="2018.2" release="10.el8_10.1" epoch="0" arch="s390x" src="tbb-2018.2-10.el8_10.1.src.rpm">
          <filename>tbb-doc-2018.2-10.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">53af46111ec3fda9f7e0d055f7df7db03bc073135e0b47351d9791b5057b429f</sum>
        </package>
        <package name="python3-tbb" version="2018.2" release="10.el8_10.1" epoch="0" arch="s390x" src="tbb-2018.2-10.el8_10.1.src.rpm">
          <filename>python3-tbb-2018.2-10.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">ab3ac717c9935360df1781c1a966abf54eadfa5d1c327bb159a299db4ac65695</sum>
        </package>
        <package name="tbb-devel" version="2018.2" release="10.el8_10.1" epoch="0" arch="s390x" src="tbb-2018.2-10.el8_10.1.src.rpm">
          <filename>tbb-devel-2018.2-10.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">ad671b3917d622b1a515cf58739f7e5b26e0fbdaa6a8a7e9afd6603a8f3a1479</sum>
        </package>
        <package name="tbb" version="2018.2" release="10.el8_10.1" epoch="0" arch="s390x" src="tbb-2018.2-10.el8_10.1.src.rpm">
          <filename>tbb-2018.2-10.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">bacb988a6cb327a93f3c66a564e9d016044a4114c346a436cab4c6315fb2e7b6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12450</id>
    <title>Important: libxml2 security update</title>
    <issued date="2025-07-31 00:00:00"/>
    <updated date="2025-08-01 13:36:16"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr (CVE-2025-7425)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12450" id="RHSA-2025:12450" type="rhsa" title="RHSA-2025:12450"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-7425" id="CVE-2025-7425" type="cve" title="CVE-2025-7425"/>
      <reference href="https://bugzilla.redhat.com/2379274" id="2379274" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-12450.html" id="ALSA-2025:12450" type="self" title="ALSA-2025:12450"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libxml2-devel" version="2.9.7" release="21.el8_10.2" epoch="0" arch="s390x" src="libxml2-2.9.7-21.el8_10.2.src.rpm">
          <filename>libxml2-devel-2.9.7-21.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">2a013da38f45f91695a90972c088013184fd771dd47245f0d14e0d43d77ed78a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12527</id>
    <title>Moderate: virt:rhel and virt-devel:rhel security update</title>
    <issued date="2025-08-04 00:00:00"/>
    <updated date="2026-04-09 15:27:18"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>virt:rhel and virt-devel:rhel security update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.  

Security Fix(es):  

  * libtpms: Libtpms Out-of-Bounds Read Vulnerability (CVE-2025-49133)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12527" id="RHSA-2025:12527" type="rhsa" title="RHSA-2025:12527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49133" id="CVE-2025-49133" type="cve" title="CVE-2025-49133"/>
      <reference href="https://bugzilla.redhat.com/2371585" id="2371585" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-12527.html" id="ALSA-2025:12527" type="self" title="ALSA-2025:12527"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="virt" stream="rhel" version="8100020240924083209" context="9edba152" arch="s390x"/>
        <package name="qemu-kvm-docs" version="6.2.0" release="53.module_el8.10.0+4031+06966654.4" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+4031+06966654.4.src.rpm">
          <filename>qemu-kvm-docs-6.2.0-53.module_el8.10.0+4031+06966654.4.s390x.rpm</filename>
          <sum type="sha256">040a0e0f0d1aa0386f8a4ea8678eb44107f1cfa2cbcb4c3e1dc7836ead83c20f</sum>
        </package>
        <package name="nbdkit-basic-plugins" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-basic-plugins-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">04adc669a1655a4f4dcadbdd520afd5f6f5dc82b44738fcabde3a280f36fb90f</sum>
        </package>
        <package name="python3-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>python3-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">05372f9ad377c74c0d221dacf23c7510171afbb751c03585fd3c09513d7e1bde</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-nwfilter-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">07cb2b671d93ac66030500fb83a7ed0ac2f4bbc4c57eb44402d588b56f41f260</sum>
        </package>
        <package name="libvirt-client" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-client-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">0d09bdb8d956521a043b45119899363387d72874b63e0f116cedb80f147bd849</sum>
        </package>
        <package name="libguestfs-tools" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-tools-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">116835a3e003417d7186479fbf47960a09588a3ace207d4f34da6a19ab8c07de</sum>
        </package>
        <package name="libnbd-devel" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="s390x" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>libnbd-devel-1.6.0-6.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">13ff008c635e7416a262ccfc52419629b03bcd3da12d32abdc3ee37072fb40ec</sum>
        </package>
        <package name="netcf-devel" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-devel-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1888edc09e8d44539c2c7b84b7a8df91477b8a725fe93436ac4d71106e177d48</sum>
        </package>
        <package name="libguestfs-javadoc" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-javadoc-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">18b9d6c98999a3b289a865504944fb3dc9b2994eff5461933549add50c6faa5b</sum>
        </package>
        <package name="nbdkit" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">1a6f5649d6acd35dd28d2d99042056bc8308fe0910ce6322bf27b0ec71bbee4f</sum>
        </package>
        <package name="hivex-devel" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>hivex-devel-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1aa145aa6a3f900531fc1c8f1c161197f37539d113d47c14efd9c66def20940a</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-storage-logical-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">1f070f681d716e06931288e208daa09f353f4963f436aa27d354fa17c633e780</sum>
        </package>
        <package name="libnbd" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="s390x" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">1f3f644969c542586e0a5467676e856c27df1546e6807a8a890dfd446f76c6d6</sum>
        </package>
        <package name="libvirt-nss" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-nss-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">221e7b8f8bbcc5fb5b906ab8aad9ccefd1e25d2ca5574ac928d958e1233da2c2</sum>
        </package>
        <package name="nbdkit-python-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-python-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">23c394ecc23e544232d78956b610b1403324cb6a46a3d46adc0fd256f19a1e4b</sum>
        </package>
        <package name="nbdkit-tar-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tar-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">2521bcc64ce8e24df611cf9194277fd5f7856f3df3f72be3276748b10d23beb3</sum>
        </package>
        <package name="nbdkit-bash-completion" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="noarch" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-bash-completion-1.24.0-5.module_el8.8.0+3485+7cffc4a3.noarch.rpm</filename>
          <sum type="sha256">254dfbf64036ae05d930d81be90202718fba7b341f0457de4a29ecfca3aea646</sum>
        </package>
        <package name="nbdkit-xz-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-xz-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">263ad615e21aaba0dce020cf1ad8b569c3860640d8074e9f74035ff925c409d0</sum>
        </package>
        <package name="nbdkit-gzip-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-gzip-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">27675a3171d769e7f9ea9b7fa63303b3e51f8221a68feaee1f16aeb7d658dccb</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-secret-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">2861a46f85f00d3580741b9653906060723860d6b1b46e63249f755dc63d9a62</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-config-nwfilter-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">2cbf5704bd28d243d95a378ce3cc292945a5f192980bb3e8178dc2b692eefc1f</sum>
        </package>
        <package name="lua-guestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>lua-guestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">36d15a85e154608cf2bc661120c8a573356cb3e0e1dc77a94387aa3c8bce90ef</sum>
        </package>
        <package name="libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">40e3ffa7c3e67b0fe9a110dbe8bf267fa9906f358a3bd81135b33a624e6429ba</sum>
        </package>
        <package name="ruby-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ruby-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">4428b40d29de3a3eda15340b2cbacebe838ba363b3897a1a91f904b9f2b4f8b9</sum>
        </package>
        <package name="libtpms-devel" version="0.9.1" release="3.20211126git1ff6fe1f43.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libtpms-0.9.1-3.20211126git1ff6fe1f43.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libtpms-devel-0.9.1-3.20211126git1ff6fe1f43.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">48cdd543f8b28754dc028f83386b64554c9e284a8d22429319034a969208eab9</sum>
        </package>
        <package name="nbdkit-basic-filters" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-basic-filters-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">494ad345b2b9b009436ba9a8c8c6bb245e8617e921dae51ab6d9281e95999f31</sum>
        </package>
        <package name="qemu-img" version="6.2.0" release="53.module_el8.10.0+4031+06966654.4" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+4031+06966654.4.src.rpm">
          <filename>qemu-img-6.2.0-53.module_el8.10.0+4031+06966654.4.s390x.rpm</filename>
          <sum type="sha256">4b1b65418779d40ad0450586d60fd3768557d3b5abe9f2763a40811af2d05f91</sum>
        </package>
        <package name="nbdkit-curl-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-curl-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">4fd1a6bbe855d7c4068fcf080b4b0b15b367ef7f635ac869b7bddb1698dafa01</sum>
        </package>
        <package name="libvirt-daemon" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">50acabca0feb3f7b9aa72997ffcb6bc1e5a900b50705d380527c00c279baa569</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">517537474707f98d3659be977cd72804e8b4560f65db419adae773bfea86133d</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-qemu-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">57d98c10721e28a8c587f4a000c693a8f85f372e3ccf4dd5e5f762da11ed815e</sum>
        </package>
        <package name="libguestfs-bash-completion" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-bash-completion-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">5a67ce33e944ee07d6ea976afa13f8c832ce4be22f124591ace620dfe08b5178</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-kvm-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">5b81e3699d4c2d4e5edfb28fd30da7587fff1424b0bef20541cf49185d764e84</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-nodedev-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">5bc4afc9cf9901549895de9e9e7cc7a5bb2558b5f9c78ee93a7cbaf31c09dff4</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">5d188fb37627fcf40795946a762cd1ada2b870e52488402995db6c68da967d05</sum>
        </package>
        <package name="libguestfs-gobject-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gobject-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">5e05d955e58bc16ccb3e4097f338dd34af18225ef9bcd2b420d794a9efdd269b</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-config-network-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">6959fef172f059452dd85ab0f6935aff8a1591f243664d4dfad22820217a3171</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="6.2.0" release="53.module_el8.10.0+4031+06966654.4" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+4031+06966654.4.src.rpm">
          <filename>qemu-kvm-block-iscsi-6.2.0-53.module_el8.10.0+4031+06966654.4.s390x.rpm</filename>
          <sum type="sha256">6c30347ccd1f01c13801bc41a5377c06fadd3845f666a017d0d4fb8140a1e99b</sum>
        </package>
        <package name="libvirt-libs" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-libs-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">6c70c7706f50f8efd4e2cb315301ee671d26fcce9a9c607d5efc5fa1f0c511d4</sum>
        </package>
        <package name="nbdkit-tmpdisk-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tmpdisk-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">6f4728c5aa7cc03d70b241d6947aff1fe49546aac4cc62bd01a59c1b1b73ba35</sum>
        </package>
        <package name="libguestfs-java-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-java-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">6fc6fe19b2e83d70d5f240d776ccc00a181870a485d39667fccb62ec0b851f02</sum>
        </package>
        <package name="nbdkit-server" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-server-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">706c1dd5780f1e48f883702f6c86a985bd057078fcd41326947b283625a77e05</sum>
        </package>
        <package name="qemu-kvm" version="6.2.0" release="53.module_el8.10.0+4031+06966654.4" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+4031+06966654.4.src.rpm">
          <filename>qemu-kvm-6.2.0-53.module_el8.10.0+4031+06966654.4.s390x.rpm</filename>
          <sum type="sha256">72af63730fec7f475dc442d42e3869c5212e1e128b37d21c7f17af06b61553f5</sum>
        </package>
        <package name="qemu-guest-agent" version="6.2.0" release="53.module_el8.10.0+4031+06966654.4" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+4031+06966654.4.src.rpm">
          <filename>qemu-guest-agent-6.2.0-53.module_el8.10.0+4031+06966654.4.s390x.rpm</filename>
          <sum type="sha256">7359376dc26e330cadcdf6f41b9d5e78af258e471e3e684b8e05a3189606a3d5</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">75fd1ae3accffbecf01e98cd742734cfd64d7b6eb2ee087ada87349f473edf8a</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="6.2.0" release="53.module_el8.10.0+4031+06966654.4" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+4031+06966654.4.src.rpm">
          <filename>qemu-kvm-block-rbd-6.2.0-53.module_el8.10.0+4031+06966654.4.s390x.rpm</filename>
          <sum type="sha256">76d3e2639bd8f85a6cfebfb8c5611ffa5a41a503aab5672f9cf5804d463859da</sum>
        </package>
        <package name="perl-Sys-Guestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>perl-Sys-Guestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">77c035cdcf2f7e819dcb6d76b9ba12ae63a6f07d615a9a435b7ec2dc8ca93330</sum>
        </package>
        <package name="libvirt" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">7af92334f15923171783ec3af6baec1ea0aec152fdba79db213d2bc14446efc3</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-gluster" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-storage-gluster-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">7c9cb4acef9f2982128fd195467c8dca85ec19a1af4216e5e585eb38ec4ea38b</sum>
        </package>
        <package name="libguestfs-gfs2" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gfs2-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">7ee36ba216591f26a055c687e5e75e054585c69c86b085d8966cb419ddeb3362</sum>
        </package>
        <package name="libguestfs-gobject" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gobject-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">8292ca96b97184b2ca5475901b46b09f715adbe99d1a5983c9ad4a0d2b3d72bb</sum>
        </package>
        <package name="netcf-libs" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-libs-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">843b61e4019e8cec44d5f5823d3c8c0b803997791aecef6ff1023224147cd6f8</sum>
        </package>
        <package name="libvirt-devel" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-devel-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">85f387bb12e423f68f821c92de412458cfb0ed31dd33542c21ad4ba90dfb8857</sum>
        </package>
        <package name="nbdkit-linuxdisk-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-linuxdisk-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">8673003aa4610f82cbe152021387ac3c6c59d730a79b446aad432030e20f5eff</sum>
        </package>
        <package name="swtpm-tools" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-tools-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">87ce1c2ecc368965a92cf71a29a7cb1331508c7c86394cfaa7e4e87d20897d7b</sum>
        </package>
        <package name="nbdkit-tar-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tar-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">87ec102223607b5d8760ee3d8998a48b3fbce6a1abe6d8056782c1d9f94513ad</sum>
        </package>
        <package name="supermin-devel" version="5.2.1" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="supermin-5.2.1-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>supermin-devel-5.2.1-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">8a47307269cf95719225e1e27dcd1cebdf6a0481948e4a044db972af12de9ce3</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-storage-disk-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">8c3e43a41e7db0fd2551e7ec32211e8f296c56751fb6ef1ea690db4447f5e196</sum>
        </package>
        <package name="libguestfs-man-pages-uk" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-man-pages-uk-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">8cd1a80b657a0373e6dcf0b6699e7574c9874db489201985b16bc1d1d78cc55b</sum>
        </package>
        <package name="swtpm-tools-pkcs11" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-tools-pkcs11-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">8e7eeb060f1253ff8a48085d0b452c2ba2c1837e286fd23d91426f255d72398a</sum>
        </package>
        <package name="libguestfs-rescue" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-rescue-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">92093c28f6226504668df61e0bc2c5d1e7d8bf505a8bf762cdd5d2e7a50bb52f</sum>
        </package>
        <package name="netcf" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">9268b4ab854af88a5e511f78b47cf3c4acd66d76f7ea901452f6efd3f9c8bc7c</sum>
        </package>
        <package name="libtpms" version="0.9.1" release="3.20211126git1ff6fe1f43.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libtpms-0.9.1-3.20211126git1ff6fe1f43.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libtpms-0.9.1-3.20211126git1ff6fe1f43.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">945f5e8c26e39a8c29ce6e42df905d69ed0d696a97c9e2c317450bfdbe8b800c</sum>
        </package>
        <package name="libguestfs-man-pages-ja" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-man-pages-ja-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">968dd115e865d941a07d1728940d84bdfef4f26d43d39aa225f4f4a5a821c89d</sum>
        </package>
        <package name="libvirt-lock-sanlock" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-lock-sanlock-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">9bb70ad869c0661ca891fd51006df4f855f79693a33c976db4e82e1bd3f18f73</sum>
        </package>
        <package name="libguestfs-rsync" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-rsync-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">9cc94d5cec35a9f048fa74c69a8b7d6a0ec48c14074297bb564b91f4cdc4c54f</sum>
        </package>
        <package name="hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">9d259d5ff0ee30b3a2a8e5f897675750f74741ed06d50d3623cf469d1d0f01d8</sum>
        </package>
        <package name="libiscsi" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">a1c871e87ebd136bfd498f13824563fd7428fcaf66bcffb341cfbb8370c2a18d</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-network-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">a708e43887a53a9eb9fe414eef79e18763e3a474e1f5be9e6046c3e7bc26f7a4</sum>
        </package>
        <package name="swtpm" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">a7fbed17619ce4d6d7d43a459be652ec92882b41903ac386ebfd9815806bc622</sum>
        </package>
        <package name="perl-Sys-Virt" version="8.0.0" release="1.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="perl-Sys-Virt-8.0.0-1.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>perl-Sys-Virt-8.0.0-1.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">a8b115eb9ca2707d1d7f800ac1b7730dcc6718168ff355f065464e6778ef5929</sum>
        </package>
        <package name="nbdkit-nbd-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-nbd-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">a9427bee7f157a63f2acd2357032ce829e0561b24193d204072502adad4aa52e</sum>
        </package>
        <package name="python3-libnbd" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="s390x" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>python3-libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">af55cd779b02d3ce09e49f1e8a86893252ce44c2b04cb115e13107018b32841d</sum>
        </package>
        <package name="nbdkit-example-plugins" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-example-plugins-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">b10c0d094e84d5c035dae70b4db36c311eb7ff9cbee00c8443848f049a600ae4</sum>
        </package>
        <package name="libnbd-bash-completion" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="noarch" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>libnbd-bash-completion-1.6.0-6.module_el8.10.0+3897+eb84924d.noarch.rpm</filename>
          <sum type="sha256">b3fd3388c6c1d03a6cbb0a2c371b7e5e0fbfdce2b1481e96c9ad7cb2ef12147d</sum>
        </package>
        <package name="libguestfs-appliance" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-appliance-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">b5add06502e5bda5f39f712640e2ab0e8cf539b7a90370c6c1fd963bb73bc7d7</sum>
        </package>
        <package name="libiscsi-utils" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-utils-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">b6eb101dc2787a7d79b4fe51913319933f5927d1816ea03592d2be849ce21faf</sum>
        </package>
        <package name="ruby-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ruby-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">b8696f7658b7872cb5f4e9fe2319e00ec6b668fe0e9adea787890cb9500e0223</sum>
        </package>
        <package name="nbdkit-ssh-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-ssh-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">b9b590364d69f18da851dea269d4774ff711f44e3ace9b3304e87fe25f26aaa5</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-storage-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">bd279e2f6a60eac16ea3efbd9c2bbaa1ef3e4314c56f9ee63f211d962106b71e</sum>
        </package>
        <package name="virt-dib" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>virt-dib-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">bf4b5929cf910fb7e4671e32c9ac2ce2f456e8b1e577cb0f4f33a0df8d316c27</sum>
        </package>
        <package name="libguestfs-java" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-java-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">bfc05f2dc57991bad44654221ea88f653c916e80637290b69c96e3e0f5aa55a8</sum>
        </package>
        <package name="libvirt-dbus" version="1.3.0" release="2.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libvirt-dbus-1.3.0-2.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libvirt-dbus-1.3.0-2.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">c20042be5784c1f4323e5590891be2a0e33244acff6b45149f36a2eef834064b</sum>
        </package>
        <package name="libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">c685dcd2fb41a700a866919788441d7c80c9a10b9757ea843e7a56c67a5d4be2</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-interface-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">cc03c95b04dd053094973e09440d44930c48239e1f8864b7d19fb070e72dc14c</sum>
        </package>
        <package name="libguestfs-winsupport" version="8.10" release="1.module_el8.10.0+3768+dfd76e10" epoch="0" arch="s390x" src="libguestfs-winsupport-8.10-1.module_el8.10.0+3768+dfd76e10.src.rpm">
          <filename>libguestfs-winsupport-8.10-1.module_el8.10.0+3768+dfd76e10.s390x.rpm</filename>
          <sum type="sha256">ccf203e75a1c0f0de8598ecc0fce3f409a12f34189a7fae21d58c8311062f236</sum>
        </package>
        <package name="qemu-kvm-core" version="6.2.0" release="53.module_el8.10.0+4031+06966654.4" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+4031+06966654.4.src.rpm">
          <filename>qemu-kvm-core-6.2.0-53.module_el8.10.0+4031+06966654.4.s390x.rpm</filename>
          <sum type="sha256">cf2f6b831eba71245c5a2b43f698d26433858457aa09e109d955b95108ade820</sum>
        </package>
        <package name="swtpm-libs" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-libs-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">d077f2d1f54aa47907a883e12d46f0632e33ad5141bd16a25759a580f851b91c</sum>
        </package>
        <package name="libiscsi-devel" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-devel-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">d45a7d8438477f375ed86276eea276fd3bb0965844cb8733a09691fc68d730db</sum>
        </package>
        <package name="nbdkit-devel" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-devel-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">d5bc58eda3110ad1589ab9d239e347e155bf59eaee69e0bea028f67d9e0ea216</sum>
        </package>
        <package name="swtpm-devel" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-devel-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">d69840154560e2ca3f4ea1315bfcca103b2260692f2c3d5fa1a76dbed7ddfbe1</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">da595cdc224f10c26134e485350243f62a250dbf56dec156c62a70205bfff3c0</sum>
        </package>
        <package name="libvirt-wireshark" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-wireshark-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">db032b069b3a97411ed2d23b2e5c7be94845c899edf89470cd980f849894149d</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-storage-core-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">dc38cf4821cbc6482a61cbd9d77190d36ddc3854754e07bc4e44e779ceaae7d4</sum>
        </package>
        <package name="supermin" version="5.2.1" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="supermin-5.2.1-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>supermin-5.2.1-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">e15b529769bbaa1d035eb7e4d4f58f4757e58772523d45cb07cc7533eeef0057</sum>
        </package>
        <package name="qemu-kvm-common" version="6.2.0" release="53.module_el8.10.0+4031+06966654.4" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+4031+06966654.4.src.rpm">
          <filename>qemu-kvm-common-6.2.0-53.module_el8.10.0+4031+06966654.4.s390x.rpm</filename>
          <sum type="sha256">e262ccb686b121c291d1e6559fb7753a37616c80c0713b8e1adff8b08c9abeaa</sum>
        </package>
        <package name="libvirt-docs" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-docs-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">e346fa792bf187e985fae6614788413604ef6e646d94c3555105bec155616b44</sum>
        </package>
        <package name="python3-libvirt" version="8.0.0" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="libvirt-python-8.0.0-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>python3-libvirt-8.0.0-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">e36c5a8c03f3393622b5dd5badefcd4a05ee01b8de17de28812017ddfda63954</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">e7999bf1058ea9ae93873a86be3d1f820a2ccf3a623f58880c542b204ad85824</sum>
        </package>
        <package name="python3-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>python3-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">ec11102e66953715d97704c820c0effcd80944fdd525efca9645f70b1cfa2fa9</sum>
        </package>
        <package name="nbdfuse" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="s390x" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>nbdfuse-1.6.0-6.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">ec2a6b02d5f84f5b5788518aed5038b701ea7ef7c7b7d4c85f8320106d4a9d05</sum>
        </package>
        <package name="libguestfs-inspect-icons" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-inspect-icons-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">ece57f7c833d85599725786783875d496fd9d38644cdc96ce23e4d73c6d5e4c9</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="6.2.0" release="53.module_el8.10.0+4031+06966654.4" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+4031+06966654.4.src.rpm">
          <filename>qemu-kvm-block-curl-6.2.0-53.module_el8.10.0+4031+06966654.4.s390x.rpm</filename>
          <sum type="sha256">f1eb2b98bdba79c58d3288e6a5900511e4867b10c9328ec04fde201c52701d41</sum>
        </package>
        <package name="nbdkit-gzip-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-gzip-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">f3befb065571d5207296b7d7f2db60348cb935ec26b3fcf7a5db2f66dbec7dc5</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="6.2.0" release="53.module_el8.10.0+4031+06966654.4" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+4031+06966654.4.src.rpm">
          <filename>qemu-kvm-block-ssh-6.2.0-53.module_el8.10.0+4031+06966654.4.s390x.rpm</filename>
          <sum type="sha256">f40a9757cc8220b15d2d25360709a2c1c9b45c8e0a905b4b5d06844f3248d63d</sum>
        </package>
        <package name="libguestfs-xfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-xfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">fa8ce4ce15f9b8d5753db18aa569fdbb4c636e16d88c6bb83fc588c594c1ee90</sum>
        </package>
        <package name="perl-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>perl-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">fcc1bade9f3d715b09d2679d6efc9fd94b2faa9e912dcae68dbc372613f90965</sum>
        </package>
        <package name="libguestfs-tools-c" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-tools-c-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">fce060540b90878b0d21bfa525965ac06b8622b0a7cf824c54761c92b79f0764</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1283</id>
    <title>Important: firefox security update</title>
    <issued date="2025-02-11 00:00:00"/>
    <updated date="2025-02-11 22:06:46"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7 (CVE-2025-1017)
  * firefox: thunderbird: Use-after-free in Custom Highlight (CVE-2025-1010)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7 (CVE-2025-1016)
  * firefox: thunderbird: Potential opening of private browsing tabs in normal browsing windows (CVE-2025-1013)
  * firefox: thunderbird: A bug in WebAssembly code generation could result in a crash (CVE-2025-1011)
  * firefox: thunderbird: Use-after-free in XSLT (CVE-2025-1009)
  * firefox: thunderbird: Certificate length was not properly checked (CVE-2025-1014)
  * firefox: thunderbird: Use-after-free during concurrent delazification (CVE-2025-1012)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1283" id="RHSA-2025:1283" type="rhsa" title="RHSA-2025:1283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1009" id="CVE-2025-1009" type="cve" title="CVE-2025-1009"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1010" id="CVE-2025-1010" type="cve" title="CVE-2025-1010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1011" id="CVE-2025-1011" type="cve" title="CVE-2025-1011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1012" id="CVE-2025-1012" type="cve" title="CVE-2025-1012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1013" id="CVE-2025-1013" type="cve" title="CVE-2025-1013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1014" id="CVE-2025-1014" type="cve" title="CVE-2025-1014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1016" id="CVE-2025-1016" type="cve" title="CVE-2025-1016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1017" id="CVE-2025-1017" type="cve" title="CVE-2025-1017"/>
      <reference href="https://bugzilla.redhat.com/2343748" id="2343748" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343750" id="2343750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343752" id="2343752" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343754" id="2343754" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343756" id="2343756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343760" id="2343760" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343764" id="2343764" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343765" id="2343765" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1283.html" id="ALSA-2025:1283" type="self" title="ALSA-2025:1283"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="128.7.0" release="1.el8_10" epoch="0" arch="s390x" src="firefox-128.7.0-1.el8_10.src.rpm">
          <filename>firefox-128.7.0-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">38c44e5d22118127165a3e37ef397341094f66d157e00ad03e6465339093d377</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1292</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-02-11 00:00:00"/>
    <updated date="2025-02-11 22:09:00"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7 (CVE-2025-1017)
  * firefox: thunderbird: Use-after-free in Custom Highlight (CVE-2025-1010)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7 (CVE-2025-1016)
  * firefox: thunderbird: Potential opening of private browsing tabs in normal browsing windows (CVE-2025-1013)
  * firefox: thunderbird: A bug in WebAssembly code generation could result in a crash (CVE-2025-1011)
  * thunderbird: Unsanitized address book fields (CVE-2025-1015)
  * firefox: thunderbird: Use-after-free in XSLT (CVE-2025-1009)
  * thunderbird: Address of e-mail sender can be spoofed by malicious email (CVE-2025-0510)
  * firefox: thunderbird: Certificate length was not properly checked (CVE-2025-1014)
  * firefox: thunderbird: Use-after-free during concurrent delazification (CVE-2025-1012)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1292" id="RHSA-2025:1292" type="rhsa" title="RHSA-2025:1292"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0510" id="CVE-2025-0510" type="cve" title="CVE-2025-0510"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1009" id="CVE-2025-1009" type="cve" title="CVE-2025-1009"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1010" id="CVE-2025-1010" type="cve" title="CVE-2025-1010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1011" id="CVE-2025-1011" type="cve" title="CVE-2025-1011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1012" id="CVE-2025-1012" type="cve" title="CVE-2025-1012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1013" id="CVE-2025-1013" type="cve" title="CVE-2025-1013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1014" id="CVE-2025-1014" type="cve" title="CVE-2025-1014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1015" id="CVE-2025-1015" type="cve" title="CVE-2025-1015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1016" id="CVE-2025-1016" type="cve" title="CVE-2025-1016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1017" id="CVE-2025-1017" type="cve" title="CVE-2025-1017"/>
      <reference href="https://bugzilla.redhat.com/2343748" id="2343748" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343750" id="2343750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343752" id="2343752" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343754" id="2343754" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343756" id="2343756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343759" id="2343759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343760" id="2343760" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343762" id="2343762" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343764" id="2343764" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343765" id="2343765" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1292.html" id="ALSA-2025:1292" type="self" title="ALSA-2025:1292"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="128.7.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-128.7.0-1.el8_10.alma.1.src.rpm">
          <filename>thunderbird-128.7.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">f704bab4a2592efd1168324c9fc300d5e3683788f0786e06c20e059cc6b23fdd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12980</id>
    <title>Moderate: glibc security update</title>
    <issued date="2025-08-05 00:00:00"/>
    <updated date="2025-08-06 14:24:09"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: Double free in glibc (CVE-2025-8058)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12980" id="RHSA-2025:12980" type="rhsa" title="RHSA-2025:12980"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8058" id="CVE-2025-8058" type="cve" title="CVE-2025-8058"/>
      <reference href="https://bugzilla.redhat.com/2383146" id="2383146" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-12980.html" id="ALSA-2025:12980" type="self" title="ALSA-2025:12980"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="compat-libpthread-nonshared" version="2.28" release="251.el8_10.25" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.25.src.rpm">
          <filename>compat-libpthread-nonshared-2.28-251.el8_10.25.s390x.rpm</filename>
          <sum type="sha256">9f9b7ccb0750cec2a64649a61ac911fc1e251e1326c7f52ae6c6c737f9c88c6c</sum>
        </package>
        <package name="glibc-utils" version="2.28" release="251.el8_10.25" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.25.src.rpm">
          <filename>glibc-utils-2.28-251.el8_10.25.s390x.rpm</filename>
          <sum type="sha256">a33a28b4688fdd4ca5ba67eb8c8730323d8cc4ed992aafe9caec01110b5a23bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1301</id>
    <title>Moderate: gcc security update</title>
    <issued date="2025-02-11 00:00:00"/>
    <updated date="2025-02-17 07:24:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gcc security update</summary>
    <description>The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.  

Security Fix(es):  

  * jquery: Untrusted code execution via &lt;option&gt; tag in HTML passed to DOM manipulation methods (CVE-2020-11023)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1301" id="RHSA-2025:1301" type="rhsa" title="RHSA-2025:1301"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-11023" id="CVE-2020-11023" type="cve" title="CVE-2020-11023"/>
      <reference href="https://bugzilla.redhat.com/1850004" id="1850004" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1301.html" id="ALSA-2025:1301" type="self" title="ALSA-2025:1301"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libstdc++-devel" version="8.5.0" release="23.el8_10.alma.1" epoch="0" arch="s390x" src="gcc-8.5.0-23.el8_10.alma.1.src.rpm">
          <filename>libstdc++-devel-8.5.0-23.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">087d082e816b043f63cd09d027c58e9eb82d7cf5a787a347abb27ef885a43500</sum>
        </package>
        <package name="gcc-c++" version="8.5.0" release="23.el8_10.alma.1" epoch="0" arch="s390x" src="gcc-8.5.0-23.el8_10.alma.1.src.rpm">
          <filename>gcc-c++-8.5.0-23.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">09432f5defcfe606cb809cb3e3309f329f6caf478551f43eef82ecae413be417</sum>
        </package>
        <package name="libstdc++-docs" version="8.5.0" release="23.el8_10.alma.1" epoch="0" arch="s390x" src="gcc-8.5.0-23.el8_10.alma.1.src.rpm">
          <filename>libstdc++-docs-8.5.0-23.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">5b58f01fd67d06eb8836d52dd6a6e73d5db6ddaedc2c13e9e95a06803136217d</sum>
        </package>
        <package name="gcc-plugin-annobin" version="8.5.0" release="23.el8_10.alma.1" epoch="0" arch="s390x" src="gcc-8.5.0-23.el8_10.alma.1.src.rpm">
          <filename>gcc-plugin-annobin-8.5.0-23.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">6b145fc81c99144566cbf0ca98b86daf038697548eeb4e6551e16d76845b13fd</sum>
        </package>
        <package name="gcc" version="8.5.0" release="23.el8_10.alma.1" epoch="0" arch="s390x" src="gcc-8.5.0-23.el8_10.alma.1.src.rpm">
          <filename>gcc-8.5.0-23.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">7cb4da368e77616cb3d2ae37e5d69d29ad15612cd81c2f7e5de08c804d17dc19</sum>
        </package>
        <package name="gcc-gfortran" version="8.5.0" release="23.el8_10.alma.1" epoch="0" arch="s390x" src="gcc-8.5.0-23.el8_10.alma.1.src.rpm">
          <filename>gcc-gfortran-8.5.0-23.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">9a9aac1ea30395ef697d60cfeefc74af24f93d2d3102ae1d72ce550e7154c7cd</sum>
        </package>
        <package name="gcc-gdb-plugin" version="8.5.0" release="23.el8_10.alma.1" epoch="0" arch="s390x" src="gcc-8.5.0-23.el8_10.alma.1.src.rpm">
          <filename>gcc-gdb-plugin-8.5.0-23.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">af2cd779c5258102a3a99b30b206ef6d0d7404737e379cd49784cbccf569d896</sum>
        </package>
        <package name="libitm-devel" version="8.5.0" release="23.el8_10.alma.1" epoch="0" arch="s390x" src="gcc-8.5.0-23.el8_10.alma.1.src.rpm">
          <filename>libitm-devel-8.5.0-23.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">bb26885eb7d101ff5db98ac0958c65e6bcb93111c4b0225f309fbd46d053a1cc</sum>
        </package>
        <package name="cpp" version="8.5.0" release="23.el8_10.alma.1" epoch="0" arch="s390x" src="gcc-8.5.0-23.el8_10.alma.1.src.rpm">
          <filename>cpp-8.5.0-23.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">ea7b4db5ba38a1ea9f67449a022f659589f11034a29ec16c02a76d380014352e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1306</id>
    <title>Moderate: gcc-toolset-13-gcc security update</title>
    <issued date="2025-02-11 00:00:00"/>
    <updated date="2025-02-12 12:19:55"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gcc-toolset-13-gcc security update</summary>
    <description>The gcc-toolset-13-gcc package contains the GNU Compiler Collection version 13.  

Security Fix(es):  

  * jquery: Untrusted code execution via &lt;option&gt; tag in HTML passed to DOM manipulation methods (CVE-2020-11023)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1306" id="RHSA-2025:1306" type="rhsa" title="RHSA-2025:1306"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-11023" id="CVE-2020-11023" type="cve" title="CVE-2020-11023"/>
      <reference href="https://bugzilla.redhat.com/1850004" id="1850004" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1306.html" id="ALSA-2025:1306" type="self" title="ALSA-2025:1306"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="gcc-toolset-13-libatomic-devel" version="13.3.1" release="2.2.el8_10" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el8_10.src.rpm">
          <filename>gcc-toolset-13-libatomic-devel-13.3.1-2.2.el8_10.s390x.rpm</filename>
          <sum type="sha256">19541808a3ad79a8c02969da5745033a2d34678e33d51f3d6b00c1392a69820f</sum>
        </package>
        <package name="gcc-toolset-13-libstdc++-docs" version="13.3.1" release="2.2.el8_10" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el8_10.src.rpm">
          <filename>gcc-toolset-13-libstdc++-docs-13.3.1-2.2.el8_10.s390x.rpm</filename>
          <sum type="sha256">1cae27f75d875cbeb4ce803b9cb4ccd6f9b66f2e5dc247189290c40339a5b3d3</sum>
        </package>
        <package name="gcc-toolset-13-gcc" version="13.3.1" release="2.2.el8_10" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el8_10.src.rpm">
          <filename>gcc-toolset-13-gcc-13.3.1-2.2.el8_10.s390x.rpm</filename>
          <sum type="sha256">34ca8a0a2f241bb15d2cc8ba28cfc727d779e7d98b8a7e2c523e6c077f65cc57</sum>
        </package>
        <package name="gcc-toolset-13-gcc-plugin-annobin" version="13.3.1" release="2.2.el8_10" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el8_10.src.rpm">
          <filename>gcc-toolset-13-gcc-plugin-annobin-13.3.1-2.2.el8_10.s390x.rpm</filename>
          <sum type="sha256">444ed20041c4da8744ce5a3ec4d2028408405ffcb585147f9ae88f3201676a6b</sum>
        </package>
        <package name="gcc-toolset-13-gcc-plugin-devel" version="13.3.1" release="2.2.el8_10" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el8_10.src.rpm">
          <filename>gcc-toolset-13-gcc-plugin-devel-13.3.1-2.2.el8_10.s390x.rpm</filename>
          <sum type="sha256">46f584f28a4874c44b6fde672a8aedae1133b4cefd44138576a461e2809b6161</sum>
        </package>
        <package name="gcc-toolset-13-libitm-devel" version="13.3.1" release="2.2.el8_10" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el8_10.src.rpm">
          <filename>gcc-toolset-13-libitm-devel-13.3.1-2.2.el8_10.s390x.rpm</filename>
          <sum type="sha256">4c7512a4022c53d153a1c438af1448f5362d828a5e8b34c4a0a86faed9b2bb5b</sum>
        </package>
        <package name="gcc-toolset-13-gcc-c++" version="13.3.1" release="2.2.el8_10" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el8_10.src.rpm">
          <filename>gcc-toolset-13-gcc-c++-13.3.1-2.2.el8_10.s390x.rpm</filename>
          <sum type="sha256">4d79b5f2dec6bad159c284a53d290cca2bed9a83ca398f0b7d4517d260e6def1</sum>
        </package>
        <package name="gcc-toolset-13-gcc-gfortran" version="13.3.1" release="2.2.el8_10" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el8_10.src.rpm">
          <filename>gcc-toolset-13-gcc-gfortran-13.3.1-2.2.el8_10.s390x.rpm</filename>
          <sum type="sha256">61d275d576d5899a7f1a8e46426e4ed305ca71b08ff638dd61adf1a6404c5745</sum>
        </package>
        <package name="gcc-toolset-13-libtsan-devel" version="13.3.1" release="2.2.el8_10" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el8_10.src.rpm">
          <filename>gcc-toolset-13-libtsan-devel-13.3.1-2.2.el8_10.s390x.rpm</filename>
          <sum type="sha256">61ecb0412f1b39144f8696b115b8b3dddbe3ef75b86c8a70334247edfbd704f7</sum>
        </package>
        <package name="libasan8" version="13.3.1" release="2.2.el8_10" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el8_10.src.rpm">
          <filename>libasan8-13.3.1-2.2.el8_10.s390x.rpm</filename>
          <sum type="sha256">8ee4f62d6c6fc51f472b6ee6f3a2ec7ccd10f6dfcfd361f1faf9d721c84318f6</sum>
        </package>
        <package name="gcc-toolset-13-libstdc++-devel" version="13.3.1" release="2.2.el8_10" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el8_10.src.rpm">
          <filename>gcc-toolset-13-libstdc++-devel-13.3.1-2.2.el8_10.s390x.rpm</filename>
          <sum type="sha256">b4e3a39d7c28eb1ad9564edd90878006f1eeb1563ed326e4535ba5fae8e6da0f</sum>
        </package>
        <package name="gcc-toolset-13-libgccjit-devel" version="13.3.1" release="2.2.el8_10" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el8_10.src.rpm">
          <filename>gcc-toolset-13-libgccjit-devel-13.3.1-2.2.el8_10.s390x.rpm</filename>
          <sum type="sha256">b809190ea4e67f3d77dff772002121dd86e46425afbd3bb83f6daae9e43bd34e</sum>
        </package>
        <package name="liblsan" version="13.3.1" release="2.2.el8_10" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el8_10.src.rpm">
          <filename>liblsan-13.3.1-2.2.el8_10.s390x.rpm</filename>
          <sum type="sha256">d916af45c107922695ce7601b19bb331d9a8f311e3a299975a80ad90c9400cef</sum>
        </package>
        <package name="gcc-toolset-13-libasan-devel" version="13.3.1" release="2.2.el8_10" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el8_10.src.rpm">
          <filename>gcc-toolset-13-libasan-devel-13.3.1-2.2.el8_10.s390x.rpm</filename>
          <sum type="sha256">da51ecef182cb50aa72519c91c3570d7dbb17bf698c1200be0689f5283ebd9d5</sum>
        </package>
        <package name="gcc-toolset-13-libubsan-devel" version="13.3.1" release="2.2.el8_10" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el8_10.src.rpm">
          <filename>gcc-toolset-13-libubsan-devel-13.3.1-2.2.el8_10.s390x.rpm</filename>
          <sum type="sha256">de0ebcbcd2ae309a2f61e2bf65205202286fdff99103ec4a02d8e759710290f7</sum>
        </package>
        <package name="gcc-toolset-13-libgccjit" version="13.3.1" release="2.2.el8_10" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el8_10.src.rpm">
          <filename>gcc-toolset-13-libgccjit-13.3.1-2.2.el8_10.s390x.rpm</filename>
          <sum type="sha256">e9b71f95487f8806016081f5bfd1aac4dbe41a2fb371caf9a134d2368a2ee823</sum>
        </package>
        <package name="gcc-toolset-13-liblsan-devel" version="13.3.1" release="2.2.el8_10" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el8_10.src.rpm">
          <filename>gcc-toolset-13-liblsan-devel-13.3.1-2.2.el8_10.s390x.rpm</filename>
          <sum type="sha256">f75a68d7d2575b233212a89b7c6c5f21ae37f4868c44dd8921fc359d57485078</sum>
        </package>
        <package name="libtsan2" version="13.3.1" release="2.2.el8_10" epoch="0" arch="s390x" src="gcc-toolset-13-gcc-13.3.1-2.2.el8_10.src.rpm">
          <filename>libtsan2-13.3.1-2.2.el8_10.s390x.rpm</filename>
          <sum type="sha256">f7e84b387d48d8a546985c86dd51fff363041a10e8cf6d6338202a10a85f5c33</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:13203</id>
    <title>Moderate: libxml2 security update</title>
    <issued date="2025-08-06 00:00:00"/>
    <updated date="2025-08-06 15:05:53"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables (CVE-2025-32415)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:13203" id="RHSA-2025:13203" type="rhsa" title="RHSA-2025:13203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32415" id="CVE-2025-32415" type="cve" title="CVE-2025-32415"/>
      <reference href="https://bugzilla.redhat.com/2360768" id="2360768" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-13203.html" id="ALSA-2025:13203" type="self" title="ALSA-2025:13203"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libxml2-devel" version="2.9.7" release="21.el8_10.3" epoch="0" arch="s390x" src="libxml2-2.9.7-21.el8_10.3.src.rpm">
          <filename>libxml2-devel-2.9.7-21.el8_10.3.s390x.rpm</filename>
          <sum type="sha256">b060fdeee0380b3b32a57d2db7fd3bbb816bde2e0522775cd83812d38876a21f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:13315</id>
    <title>Moderate: gdk-pixbuf2 security update</title>
    <issued date="2025-08-07 00:00:00"/>
    <updated date="2025-08-07 09:27:08"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gdk-pixbuf2 security update</summary>
    <description>The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter.  

Security Fix(es):  

  * gdk?pixbuf: Heap?buffer?overflow in gdk?pixbuf (CVE-2025-7345)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:13315" id="RHSA-2025:13315" type="rhsa" title="RHSA-2025:13315"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-7345" id="CVE-2025-7345" type="cve" title="CVE-2025-7345"/>
      <reference href="https://bugzilla.redhat.com/2377063" id="2377063" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-13315.html" id="ALSA-2025:13315" type="self" title="ALSA-2025:13315"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="gdk-pixbuf2-modules" version="2.36.12" release="7.el8_10" epoch="0" arch="s390x" src="gdk-pixbuf2-2.36.12-7.el8_10.src.rpm">
          <filename>gdk-pixbuf2-modules-2.36.12-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">c20e57877473d0d1e2312586821888859e54c3e26f52e65d2cb6ad173cb6722a</sum>
        </package>
        <package name="gdk-pixbuf2-devel" version="2.36.12" release="7.el8_10" epoch="0" arch="s390x" src="gdk-pixbuf2-2.36.12-7.el8_10.src.rpm">
          <filename>gdk-pixbuf2-devel-2.36.12-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">f9e51033dcf167de833572c79d5fceffb941e534b9dd109e100e2f3d1a29ed3c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1338</id>
    <title>Moderate: gcc-toolset-14-gcc security update</title>
    <issued date="2025-02-12 00:00:00"/>
    <updated date="2025-02-18 12:49:18"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gcc-toolset-14-gcc security update</summary>
    <description>The gcc-toolset-14-gcc package contains the GNU Compiler Collection version 14.  

Security Fix(es):  

  * jquery: Untrusted code execution via &lt;option&gt; tag in HTML passed to DOM manipulation methods (CVE-2020-11023)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1338" id="RHSA-2025:1338" type="rhsa" title="RHSA-2025:1338"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-11023" id="CVE-2020-11023" type="cve" title="CVE-2020-11023"/>
      <reference href="https://bugzilla.redhat.com/1850004" id="1850004" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1338.html" id="ALSA-2025:1338" type="self" title="ALSA-2025:1338"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="gcc-toolset-14-libitm-devel" version="14.2.1" release="7.1.el8_10" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-7.1.el8_10.src.rpm">
          <filename>gcc-toolset-14-libitm-devel-14.2.1-7.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">376e162d13e93b0ff0c670defb5082e0d9cba852bed9b565fdcbf55a7ce1ecb3</sum>
        </package>
        <package name="gcc-toolset-14-libgccjit-devel" version="14.2.1" release="7.1.el8_10" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-7.1.el8_10.src.rpm">
          <filename>gcc-toolset-14-libgccjit-devel-14.2.1-7.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">394e2d419c1db1aa9988b99e378b2db673b8b1259170a5f97757cd374e2674fd</sum>
        </package>
        <package name="gcc-toolset-14-libatomic-devel" version="14.2.1" release="7.1.el8_10" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-7.1.el8_10.src.rpm">
          <filename>gcc-toolset-14-libatomic-devel-14.2.1-7.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">3c95295beea4ad88adbb1c71ca60372bb52256c0482e6520e3e6bd710ba4084b</sum>
        </package>
        <package name="gcc-toolset-14-gcc-c++" version="14.2.1" release="7.1.el8_10" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-7.1.el8_10.src.rpm">
          <filename>gcc-toolset-14-gcc-c++-14.2.1-7.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">56441a03cf250f51d64fde4cbbdbda7186b737ae7a93f9457f959df3e4617fa5</sum>
        </package>
        <package name="gcc-toolset-14-liblsan-devel" version="14.2.1" release="7.1.el8_10" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-7.1.el8_10.src.rpm">
          <filename>gcc-toolset-14-liblsan-devel-14.2.1-7.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">59c1e3383c91fe6c61e59eea948abbf2692c1b7ace42a00c21169881813e62d5</sum>
        </package>
        <package name="gcc-toolset-14-libubsan-devel" version="14.2.1" release="7.1.el8_10" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-7.1.el8_10.src.rpm">
          <filename>gcc-toolset-14-libubsan-devel-14.2.1-7.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5ce6474590b067923c372ccbccfbcdc8d204c35867d36e12703573de8b635aa3</sum>
        </package>
        <package name="libasan8" version="14.2.1" release="7.1.el8_10" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-7.1.el8_10.src.rpm">
          <filename>libasan8-14.2.1-7.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5f88c1deadecf587203fd7bae9444eb3164caf2a4fbdfa77b86e680d424258e8</sum>
        </package>
        <package name="gcc-toolset-14-libtsan-devel" version="14.2.1" release="7.1.el8_10" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-7.1.el8_10.src.rpm">
          <filename>gcc-toolset-14-libtsan-devel-14.2.1-7.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">77511e7b1862dd6b3a53e3351bfecd523dc769442ed7b98d80b36fecf468d0bb</sum>
        </package>
        <package name="gcc-toolset-14-libgccjit" version="14.2.1" release="7.1.el8_10" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-7.1.el8_10.src.rpm">
          <filename>gcc-toolset-14-libgccjit-14.2.1-7.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">8f865e4df759846b8a32f775f09a1c8c2a15951a44202946f00d8a90d3536683</sum>
        </package>
        <package name="gcc-toolset-14-gcc-plugin-devel" version="14.2.1" release="7.1.el8_10" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-7.1.el8_10.src.rpm">
          <filename>gcc-toolset-14-gcc-plugin-devel-14.2.1-7.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">8fc04ca8d4db70855a236496cf17a73dffe6490a017e42a23b82c567385bfc4c</sum>
        </package>
        <package name="gcc-toolset-14-gcc-plugin-annobin" version="14.2.1" release="7.1.el8_10" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-7.1.el8_10.src.rpm">
          <filename>gcc-toolset-14-gcc-plugin-annobin-14.2.1-7.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">aa400e8ded63bb7345f2abf448872665770f39a4c1bd51cabee73e39d21f2cbf</sum>
        </package>
        <package name="gcc-toolset-14-gcc" version="14.2.1" release="7.1.el8_10" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-7.1.el8_10.src.rpm">
          <filename>gcc-toolset-14-gcc-14.2.1-7.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">ab08bca77047710e1070f75c45e9789f59cd38fe04e853c6593bfee3088a655d</sum>
        </package>
        <package name="gcc-toolset-14-libstdc++-devel" version="14.2.1" release="7.1.el8_10" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-7.1.el8_10.src.rpm">
          <filename>gcc-toolset-14-libstdc++-devel-14.2.1-7.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b19d32a80b9b606b6a5e15605d4aaf2146a5b4dfdd20fc75472c224c8f49e5d3</sum>
        </package>
        <package name="gcc-toolset-14-gcc-gfortran" version="14.2.1" release="7.1.el8_10" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-7.1.el8_10.src.rpm">
          <filename>gcc-toolset-14-gcc-gfortran-14.2.1-7.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b57303b78d2fc6b1c8cfb8eb7221434899126aa4f64244e1c7950049c92d00dc</sum>
        </package>
        <package name="gcc-toolset-14-libasan-devel" version="14.2.1" release="7.1.el8_10" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-7.1.el8_10.src.rpm">
          <filename>gcc-toolset-14-libasan-devel-14.2.1-7.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">bce5c44aad8b7e77bb3ea3705e416ed40334366fa8fb7c393ff547f557da0abc</sum>
        </package>
        <package name="libtsan2" version="14.2.1" release="7.1.el8_10" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-7.1.el8_10.src.rpm">
          <filename>libtsan2-14.2.1-7.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">d564cfe81c8025f595cda982b49297b3b3f0e5ae09b2c2546f15d420c4e3c35e</sum>
        </package>
        <package name="gcc-toolset-14-libstdc++-docs" version="14.2.1" release="7.1.el8_10" epoch="0" arch="s390x" src="gcc-toolset-14-gcc-14.2.1-7.1.el8_10.src.rpm">
          <filename>gcc-toolset-14-libstdc++-docs-14.2.1-7.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">ed94ff649fcae2c2b954e1d0314d1bf5ce7bedf95b38875adf90da4b0edc1020</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1351</id>
    <title>Important: nodejs:20 security update</title>
    <issued date="2025-02-12 00:00:00"/>
    <updated date="2025-02-14 07:51:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:20 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * undici: Undici Uses Insufficiently Random Values (CVE-2025-22150)
  * nodejs: Node.js Worker Thread Exposure via Diagnostics Channel (CVE-2025-23083)
  * nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1351" id="RHSA-2025:1351" type="rhsa" title="RHSA-2025:1351"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22150" id="CVE-2025-22150" type="cve" title="CVE-2025-22150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23083" id="CVE-2025-23083" type="cve" title="CVE-2025-23083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23085" id="CVE-2025-23085" type="cve" title="CVE-2025-23085"/>
      <reference href="https://bugzilla.redhat.com/2339176" id="2339176" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339392" id="2339392" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2342618" id="2342618" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1351.html" id="ALSA-2025:1351" type="self" title="ALSA-2025:1351"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="nodejs" stream="20" version="8100020250213073133" context="9edba152" arch="s390x"/>
        <package name="nodejs-docs" version="20.18.2" release="1.module_el8.10.0+3958+472a6467" epoch="1" arch="noarch" src="nodejs-20.18.2-1.module_el8.10.0+3958+472a6467.src.rpm">
          <filename>nodejs-docs-20.18.2-1.module_el8.10.0+3958+472a6467.noarch.rpm</filename>
          <sum type="sha256">1d9aa2d875f62b3c99742b05a2e9cb0006cf394ef25f3a44f971ca46bc2d2cfb</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.8.0+3613+1ed8c91d" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.8.0+3613+1ed8c91d.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.8.0+3613+1ed8c91d.noarch.rpm</filename>
          <sum type="sha256">1de153a1170baeaa24f02ebd86d32d508ac48ea9ed54e2a70c5250a81952a65b</sum>
        </package>
        <package name="nodejs" version="20.18.2" release="1.module_el8.10.0+3958+472a6467" epoch="1" arch="s390x" src="nodejs-20.18.2-1.module_el8.10.0+3958+472a6467.src.rpm">
          <filename>nodejs-20.18.2-1.module_el8.10.0+3958+472a6467.s390x.rpm</filename>
          <sum type="sha256">45f6aabf295fe21a4112e1a97d81fe1d8d86fa452140d4492c7f474b827641f9</sum>
        </package>
        <package name="nodejs-full-i18n" version="20.18.2" release="1.module_el8.10.0+3958+472a6467" epoch="1" arch="s390x" src="nodejs-20.18.2-1.module_el8.10.0+3958+472a6467.src.rpm">
          <filename>nodejs-full-i18n-20.18.2-1.module_el8.10.0+3958+472a6467.s390x.rpm</filename>
          <sum type="sha256">5d7b9c39fc4efeb95cecc7f1ab2a60ab3532ed66effaf0c7cff62900e5379571</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el8.7.0+3343+ea2b7901" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el8.7.0+3343+ea2b7901.noarch.rpm</filename>
          <sum type="sha256">9430d44c78a3cfbe1ae3d39b8531f651606661943959bc0c3de87b2f91ea6f67</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el8.10.0+3958+472a6467" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.10.0+3958+472a6467.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el8.10.0+3958+472a6467.noarch.rpm</filename>
          <sum type="sha256">af48fab85994e826d5a0ca5a05df770fb8e54b94556401a5c6a6844f4c6dce64</sum>
        </package>
        <package name="nodejs-devel" version="20.18.2" release="1.module_el8.10.0+3958+472a6467" epoch="1" arch="s390x" src="nodejs-20.18.2-1.module_el8.10.0+3958+472a6467.src.rpm">
          <filename>nodejs-devel-20.18.2-1.module_el8.10.0+3958+472a6467.s390x.rpm</filename>
          <sum type="sha256">ec7b68b2914bccf4f50814aa1349bf39b27d73c2ce027af1c5247aebf62709df</sum>
        </package>
        <package name="npm" version="10.8.2" release="1.20.18.2.1.module_el8.10.0+3958+472a6467" epoch="1" arch="s390x" src="nodejs-20.18.2-1.module_el8.10.0+3958+472a6467.src.rpm">
          <filename>npm-10.8.2-1.20.18.2.1.module_el8.10.0+3958+472a6467.s390x.rpm</filename>
          <sum type="sha256">f9d3f8323754c27b6077531d0ecd2ab89ddab927abf44e96cee9653c254851b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:13676</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-08-12 00:00:00"/>
    <updated date="2025-08-13 12:22:12"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: thunderbird: Large branch table could lead to truncated instruction (CVE-2025-8028)
  * firefox: thunderbird: Memory safety bugs (CVE-2025-8035)
  * firefox: thunderbird: Incorrect URL stripping in CSP reports (CVE-2025-8031)
  * firefox: thunderbird: JavaScript engine only wrote partial return value to stack (CVE-2025-8027)
  * firefox: thunderbird: Potential user-assisted code execution in ?Copy as cURL? command (CVE-2025-8030)
  * firefox: Memory safety bugs (CVE-2025-8034)
  * firefox: thunderbird: Incorrect JavaScript state machine for generators (CVE-2025-8033)
  * firefox: thunderbird: XSLT documents could bypass CSP (CVE-2025-8032)
  * firefox: thunderbird: javascript: URLs executed on object and embed tags (CVE-2025-8029)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:13676" id="RHSA-2025:13676" type="rhsa" title="RHSA-2025:13676"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8027" id="CVE-2025-8027" type="cve" title="CVE-2025-8027"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8028" id="CVE-2025-8028" type="cve" title="CVE-2025-8028"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8029" id="CVE-2025-8029" type="cve" title="CVE-2025-8029"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8030" id="CVE-2025-8030" type="cve" title="CVE-2025-8030"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8031" id="CVE-2025-8031" type="cve" title="CVE-2025-8031"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8032" id="CVE-2025-8032" type="cve" title="CVE-2025-8032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8033" id="CVE-2025-8033" type="cve" title="CVE-2025-8033"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8034" id="CVE-2025-8034" type="cve" title="CVE-2025-8034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8035" id="CVE-2025-8035" type="cve" title="CVE-2025-8035"/>
      <reference href="https://bugzilla.redhat.com/2382701" id="2382701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382703" id="2382703" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382704" id="2382704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382707" id="2382707" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382710" id="2382710" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382711" id="2382711" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382717" id="2382717" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382718" id="2382718" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382720" id="2382720" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-13676.html" id="ALSA-2025:13676" type="self" title="ALSA-2025:13676"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="128.13.0" release="3.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-128.13.0-3.el8_10.alma.1.src.rpm">
          <filename>thunderbird-128.13.0-3.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">22e446cbb6e0c07bb19237091c9cdb37c7c4bad769e56d617c54b8ac3cd76c13</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1372</id>
    <title>Important: container-tools:rhel8 security update</title>
    <issued date="2025-02-13 00:00:00"/>
    <updated date="2025-02-14 07:55:12"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>container-tools:rhel8 security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.  

Security Fix(es):  

  * podman: buildah: Container breakout by using --jobs=2 and a race condition when building a malicious Containerfile (CVE-2024-11218)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1372" id="RHSA-2025:1372" type="rhsa" title="RHSA-2025:1372"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11218" id="CVE-2024-11218" type="cve" title="CVE-2024-11218"/>
      <reference href="https://bugzilla.redhat.com/2326231" id="2326231" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1372.html" id="ALSA-2025:1372" type="self" title="ALSA-2025:1372"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="container-tools" stream="rhel8" version="8100020240813140059" context="20125149" arch="s390x"/>
        <package name="runc" version="1.1.12" release="6.module_el8.10.0+3959+b8dc5e6a" epoch="1" arch="s390x" src="runc-1.1.12-6.module_el8.10.0+3959+b8dc5e6a.src.rpm">
          <filename>runc-1.1.12-6.module_el8.10.0+3959+b8dc5e6a.s390x.rpm</filename>
          <sum type="sha256">0cb9a8dbd3dfd8c842cd2e0ea2e3f51864aba043d336afcab8ee0547d0b3c0d0</sum>
        </package>
        <package name="python3-podman" version="4.9.0" release="3.module_el8.10.0+3926+f12484f5" epoch="0" arch="noarch" src="python-podman-4.9.0-3.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>python3-podman-4.9.0-3.module_el8.10.0+3926+f12484f5.noarch.rpm</filename>
          <sum type="sha256">119eec46b531cd96cf21d959534d70f36f5962b5a68ed11889dfadbc1482481f</sum>
        </package>
        <package name="crun" version="1.14.3" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="crun-1.14.3-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>crun-1.14.3-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">1803f41cb3e0828fe770ce7de14a940b9fad458fd84f420baab724674e2041e7</sum>
        </package>
        <package name="netavark" version="1.10.3" release="1.module_el8.10.0+3926+f12484f5" epoch="2" arch="s390x" src="netavark-1.10.3-1.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>netavark-1.10.3-1.module_el8.10.0+3926+f12484f5.s390x.rpm</filename>
          <sum type="sha256">229bc7970f251b961853b29e4f6c9b17e6fd309418b96ea955e2eaeba74fc773</sum>
        </package>
        <package name="buildah-tests" version="1.33.12" release="1.module_el8.10.0+3959+b8dc5e6a" epoch="2" arch="s390x" src="buildah-1.33.12-1.module_el8.10.0+3959+b8dc5e6a.src.rpm">
          <filename>buildah-tests-1.33.12-1.module_el8.10.0+3959+b8dc5e6a.s390x.rpm</filename>
          <sum type="sha256">28381977daa2fdd04d3501021dcd934fda21cba83528aa56b3d3ce48986359dc</sum>
        </package>
        <package name="skopeo-tests" version="1.14.5" release="3.module_el8.10.0+3876+e55593a8" epoch="2" arch="s390x" src="skopeo-1.14.5-3.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>skopeo-tests-1.14.5-3.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">29a7b74a18e0a1b63825ee2eb5c3f36a2a3971da39a546401e9c9d07b00cd50e</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.10" release="1.module_el8.10.0+3909+6e1c1eb7" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">335953655f25bd1ac71964d14ffc9ab6adaa73033e74e2b3a851b88683283196</sum>
        </package>
        <package name="aardvark-dns" version="1.10.1" release="2.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="s390x" src="aardvark-dns-1.10.1-2.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>aardvark-dns-1.10.1-2.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">33f0e53072f8851c287e97dada126b7e760aa82256964e34ed5d94a5bb61724c</sum>
        </package>
        <package name="container-selinux" version="2.229.0" release="2.module_el8.10.0+3909+6e1c1eb7" epoch="2" arch="noarch" src="container-selinux-2.229.0-2.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>container-selinux-2.229.0-2.module_el8.10.0+3909+6e1c1eb7.noarch.rpm</filename>
          <sum type="sha256">39df1f8e08cf61f1d3399b9d32cdaa93153cdbd001ff380fa9145a2012d1190c</sum>
        </package>
        <package name="cockpit-podman" version="84.1" release="1.module_el8.10.0+3876+e55593a8" epoch="0" arch="noarch" src="cockpit-podman-84.1-1.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>cockpit-podman-84.1-1.module_el8.10.0+3876+e55593a8.noarch.rpm</filename>
          <sum type="sha256">55b45ab38b4e2f9aba55c370f27cf80f15945bd3f4c400837f83b38782fd38b8</sum>
        </package>
        <package name="podman" version="4.9.4" release="19.module_el8.10.0+3959+b8dc5e6a" epoch="4" arch="s390x" src="podman-4.9.4-19.module_el8.10.0+3959+b8dc5e6a.src.rpm">
          <filename>podman-4.9.4-19.module_el8.10.0+3959+b8dc5e6a.s390x.rpm</filename>
          <sum type="sha256">574bc8f4d8543f4f79a546e7e1267955ad8f26220be3205aee3294cee378a6d9</sum>
        </package>
        <package name="skopeo" version="1.14.5" release="3.module_el8.10.0+3909+6e1c1eb7" epoch="2" arch="s390x" src="skopeo-1.14.5-3.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>skopeo-1.14.5-3.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">58dd688a7d9090c672382ae53059ed98d14b6b4784899787384be0e51ed8e2cd</sum>
        </package>
        <package name="python3-criu" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>python3-criu-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">632fe45692e3679dbd77ca62f4dd56c66dd4675de7f1874459025927e78d1db3</sum>
        </package>
        <package name="podman-plugins" version="4.9.4" release="19.module_el8.10.0+3959+b8dc5e6a" epoch="4" arch="s390x" src="podman-4.9.4-19.module_el8.10.0+3959+b8dc5e6a.src.rpm">
          <filename>podman-plugins-4.9.4-19.module_el8.10.0+3959+b8dc5e6a.s390x.rpm</filename>
          <sum type="sha256">64e330cf8eafeb879bdef4c3613b63e772f0a7e8e6bcefe3736b81fca079a648</sum>
        </package>
        <package name="udica" version="0.2.6" release="21.module_el8.10.0+3926+f12484f5" epoch="0" arch="noarch" src="udica-0.2.6-21.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>udica-0.2.6-21.module_el8.10.0+3926+f12484f5.noarch.rpm</filename>
          <sum type="sha256">6926e34b1965f9f26dd6b35b2d9809b5e337f117e6b333fb99c624461afd91d8</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="19.module_el8.10.0+3959+b8dc5e6a" epoch="4" arch="s390x" src="podman-4.9.4-19.module_el8.10.0+3959+b8dc5e6a.src.rpm">
          <filename>podman-remote-4.9.4-19.module_el8.10.0+3959+b8dc5e6a.s390x.rpm</filename>
          <sum type="sha256">6ce357b4838b96717105cf5312df47c456fea65e8e8c3174f3851cc1da11ab87</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="19.module_el8.10.0+3959+b8dc5e6a" epoch="4" arch="noarch" src="podman-4.9.4-19.module_el8.10.0+3959+b8dc5e6a.src.rpm">
          <filename>podman-docker-4.9.4-19.module_el8.10.0+3959+b8dc5e6a.noarch.rpm</filename>
          <sum type="sha256">75af264509aa2ed61b832f8a2177de8d8b0685761a31f3ef610edf10a4b671ae</sum>
        </package>
        <package name="buildah" version="1.33.12" release="1.module_el8.10.0+3959+b8dc5e6a" epoch="2" arch="s390x" src="buildah-1.33.12-1.module_el8.10.0+3959+b8dc5e6a.src.rpm">
          <filename>buildah-1.33.12-1.module_el8.10.0+3959+b8dc5e6a.s390x.rpm</filename>
          <sum type="sha256">7884023e381b4c0f64259018bdcabd8a47925fc73446a1de2d15e984441cb692</sum>
        </package>
        <package name="podman-catatonit" version="4.9.4" release="19.module_el8.10.0+3959+b8dc5e6a" epoch="4" arch="s390x" src="podman-4.9.4-19.module_el8.10.0+3959+b8dc5e6a.src.rpm">
          <filename>podman-catatonit-4.9.4-19.module_el8.10.0+3959+b8dc5e6a.s390x.rpm</filename>
          <sum type="sha256">79e110a71d18fb29a6acf2464a352357539e0faf22ab0caa3e7b9f7feb137e70</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>libslirp-4.4.0-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">7f6ee088719dda6b4abc4b0005f17b1a478bc5a1f5b85602af95ab2379a13ded</sum>
        </package>
        <package name="fuse-overlayfs" version="1.13" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="s390x" src="fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">8118067655696462cee9dfc553f57e4501b089590d837bc88091716914c8d3f5</sum>
        </package>
        <package name="podman-gvproxy" version="4.9.4" release="19.module_el8.10.0+3959+b8dc5e6a" epoch="4" arch="s390x" src="podman-4.9.4-19.module_el8.10.0+3959+b8dc5e6a.src.rpm">
          <filename>podman-gvproxy-4.9.4-19.module_el8.10.0+3959+b8dc5e6a.s390x.rpm</filename>
          <sum type="sha256">8c7d32abe7a4adfff6870cbab1b9a4100a87747cfd10031df993a5385a761cda</sum>
        </package>
        <package name="toolbox" version="0.0.99.5" release="2.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>toolbox-0.0.99.5-2.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">8df71d94e465a66228dced33f5189e4789bc2ac13946b5e79a11e8091af4f33e</sum>
        </package>
        <package name="containernetworking-plugins" version="1.4.0" release="5.module_el8.10.0+3926+f12484f5" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-5.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>containernetworking-plugins-1.4.0-5.module_el8.10.0+3926+f12484f5.s390x.rpm</filename>
          <sum type="sha256">96f141033d6130580d82b5d49461f6d8e22652fdd3c2eaa5c87741a6c4bdd7f7</sum>
        </package>
        <package name="containers-common" version="1" release="82.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="s390x" src="containers-common-1-82.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>containers-common-1-82.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">98eb0c5785e1d53743858e76ac35aab0b199a918b88c02e20aa6f64cc6f89618</sum>
        </package>
        <package name="crit" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>crit-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">aeb27c5bcec90a9452f93ad79ef0d4f00ecedf4442f32f9bedb481509db12683</sum>
        </package>
        <package name="criu" version="3.18" release="5.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>criu-3.18-5.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">bdaddee931f3746ac7472d9ccee504acd0be805433b3d160b1e7caf8bf361cb8</sum>
        </package>
        <package name="slirp4netns" version="1.2.3" release="1.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="slirp4netns-1.2.3-1.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>slirp4netns-1.2.3-1.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">d750de35a600a89a6edbd8c2178e292766005ce3339a84c33adecfdef70e7a57</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="19.module_el8.10.0+3959+b8dc5e6a" epoch="4" arch="s390x" src="podman-4.9.4-19.module_el8.10.0+3959+b8dc5e6a.src.rpm">
          <filename>podman-tests-4.9.4-19.module_el8.10.0+3959+b8dc5e6a.s390x.rpm</filename>
          <sum type="sha256">dfc4bf279710214c8c769b454dcd3876086e87a73e41cd63a1514694746eefa9</sum>
        </package>
        <package name="criu-libs" version="3.18" release="5.module_el8.10.0+3909+6e1c1eb7" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>criu-libs-3.18-5.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">e0d274cf0f5db049af121f476769c0d601e70c7566ea3aec4e608aca5317b4eb</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.5" release="2.module_el8.10.0+3909+6e1c1eb7" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>toolbox-tests-0.0.99.5-2.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">e5fff3c3d6b6f6023e100d0922c2e8096f567b7f5cfbb57efe322eadd2f43465</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="2.module_el8.10.0+3901+4b80ecd7" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>libslirp-devel-4.4.0-2.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">ea8f3e70f2a1a7886cb1abcdb80e7b2ea3cf36a174dc5158142c286d69fae136</sum>
        </package>
        <package name="conmon" version="2.1.10" release="1.module_el8.10.0+3845+87b84552" epoch="3" arch="s390x" src="conmon-2.1.10-1.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>conmon-2.1.10-1.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">f8f7e631b6103852487fcb99e1c6baaf8c5e60e3654c2f5a4bddc238ed708563</sum>
        </package>
        <package name="criu-devel" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>criu-devel-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">ffa71276e65ae92bb9c7b93241ba28ad74337aa5770f3cf3390d73b2552e73ae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:13780</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2025-08-13 00:00:00"/>
    <updated date="2025-08-14 14:33:56"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * angle: insufficient input validation can cause undefined behavior (CVE-2025-6558)
  * webkitgtk: A download?s origin may be incorrectly associated (CVE-2025-43240)
  * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-31273)
  * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-31278)
  * webkitgtk: Processing web content may lead to a denial-of-service (CVE-2025-43211)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43212)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43216)
  * webkitgtk: Processing maliciously crafted web content may disclose sensitive user information (CVE-2025-43227)
  * webkitgtk: Processing maliciously crafted web content may disclose internal states of the app (CVE-2025-43265)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:13780" id="RHSA-2025:13780" type="rhsa" title="RHSA-2025:13780"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31273" id="CVE-2025-31273" type="cve" title="CVE-2025-31273"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31278" id="CVE-2025-31278" type="cve" title="CVE-2025-31278"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43211" id="CVE-2025-43211" type="cve" title="CVE-2025-43211"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43212" id="CVE-2025-43212" type="cve" title="CVE-2025-43212"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43216" id="CVE-2025-43216" type="cve" title="CVE-2025-43216"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43227" id="CVE-2025-43227" type="cve" title="CVE-2025-43227"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43240" id="CVE-2025-43240" type="cve" title="CVE-2025-43240"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43265" id="CVE-2025-43265" type="cve" title="CVE-2025-43265"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6558" id="CVE-2025-6558" type="cve" title="CVE-2025-6558"/>
      <reference href="https://bugzilla.redhat.com/2380254" id="2380254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2384385" id="2384385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2386268" id="2386268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2386269" id="2386269" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2386270" id="2386270" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2386271" id="2386271" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2386273" id="2386273" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2386274" id="2386274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2386276" id="2386276" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-13780.html" id="ALSA-2025:13780" type="self" title="ALSA-2025:13780"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="webkit2gtk3-jsc-devel" version="2.48.5" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.48.5-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.48.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">466dd6c46fcb39c78a88d3d68bea54d6cf965fb5db67cc28e5394fbf71df1f99</sum>
        </package>
        <package name="webkit2gtk3" version="2.48.5" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.48.5-1.el8_10.src.rpm">
          <filename>webkit2gtk3-2.48.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">bdc12db2c025e07e3ae5536393a15130ee4ecf70277769878c207c5ea7790a08</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.48.5" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.48.5-1.el8_10.src.rpm">
          <filename>webkit2gtk3-devel-2.48.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">d587a8a9e5a58e5b6de2731bcd9a42de84976192e7323d29f99c9e97171ad4ab</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.48.5" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.48.5-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-2.48.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">eb05c9d5c0d7f3c90cdf41391032455d20f22966fa412ee8a5dde798388b4e2f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:13940</id>
    <title>Important: go-toolset:rhel8 security update</title>
    <issued date="2025-08-18 00:00:00"/>
    <updated date="2025-08-18 11:27:15"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>go-toolset:rhel8 security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.   

Security Fix(es):  

  * cmd/go: Go VCS Command Execution Vulnerability (CVE-2025-4674)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:13940" id="RHSA-2025:13940" type="rhsa" title="RHSA-2025:13940"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4674" id="CVE-2025-4674" type="cve" title="CVE-2025-4674"/>
      <reference href="https://bugzilla.redhat.com/2384329" id="2384329" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-13940.html" id="ALSA-2025:13940" type="self" title="ALSA-2025:13940"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="go-toolset" stream="rhel8" version="8100020250818101535" context="9edba152" arch="s390x"/>
        <package name="golang-tests" version="1.24.6" release="1.module_el8.10.0+4033+4bf8b620" epoch="0" arch="noarch" src="golang-1.24.6-1.module_el8.10.0+4033+4bf8b620.src.rpm">
          <filename>golang-tests-1.24.6-1.module_el8.10.0+4033+4bf8b620.noarch.rpm</filename>
          <sum type="sha256">101f3c090637e530901a4ab3a30e91db474a0f64f762b074c609ff20fd4948cc</sum>
        </package>
        <package name="golang-docs" version="1.24.6" release="1.module_el8.10.0+4033+4bf8b620" epoch="0" arch="noarch" src="golang-1.24.6-1.module_el8.10.0+4033+4bf8b620.src.rpm">
          <filename>golang-docs-1.24.6-1.module_el8.10.0+4033+4bf8b620.noarch.rpm</filename>
          <sum type="sha256">21cffff0329cd9187ea1c0e603ac8fce374c7d9ca99f8adca4567c92abb4dfb8</sum>
        </package>
        <package name="golang" version="1.24.6" release="1.module_el8.10.0+4033+4bf8b620" epoch="0" arch="s390x" src="golang-1.24.6-1.module_el8.10.0+4033+4bf8b620.src.rpm">
          <filename>golang-1.24.6-1.module_el8.10.0+4033+4bf8b620.s390x.rpm</filename>
          <sum type="sha256">31b5d6d259f59dda4fdda124266db2c2165473b79153926bb21d78449a3a27d8</sum>
        </package>
        <package name="golang-bin" version="1.24.6" release="1.module_el8.10.0+4033+4bf8b620" epoch="0" arch="s390x" src="golang-1.24.6-1.module_el8.10.0+4033+4bf8b620.src.rpm">
          <filename>golang-bin-1.24.6-1.module_el8.10.0+4033+4bf8b620.s390x.rpm</filename>
          <sum type="sha256">52269f748d0c11f6c2a7f4097a9007adc1d4c35a0f487ed30d95bee06486e882</sum>
        </package>
        <package name="golang-src" version="1.24.6" release="1.module_el8.10.0+4033+4bf8b620" epoch="0" arch="noarch" src="golang-1.24.6-1.module_el8.10.0+4033+4bf8b620.src.rpm">
          <filename>golang-src-1.24.6-1.module_el8.10.0+4033+4bf8b620.noarch.rpm</filename>
          <sum type="sha256">7f76a69d0ae7cb74f00d7e6453088e71a044c77ef7ebfdd2cfe79e1261c57c5f</sum>
        </package>
        <package name="golang-misc" version="1.24.6" release="1.module_el8.10.0+4033+4bf8b620" epoch="0" arch="noarch" src="golang-1.24.6-1.module_el8.10.0+4033+4bf8b620.src.rpm">
          <filename>golang-misc-1.24.6-1.module_el8.10.0+4033+4bf8b620.noarch.rpm</filename>
          <sum type="sha256">868826933877250fe167d7c183ee385a7423be4d5122d22443bfff53b51c5f98</sum>
        </package>
        <package name="go-toolset" version="1.24.6" release="1.module_el8.10.0+4033+4bf8b620" epoch="0" arch="s390x" src="go-toolset-1.24.6-1.module_el8.10.0+4033+4bf8b620.src.rpm">
          <filename>go-toolset-1.24.6-1.module_el8.10.0+4033+4bf8b620.s390x.rpm</filename>
          <sum type="sha256">fd43b58082933fbbd9c7c9c44d7158c97a9f7bce44af31e32488e4c773f7886d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14126</id>
    <title>Important: pki-deps:10.6 security update</title>
    <issued date="2025-08-20 00:00:00"/>
    <updated date="2025-08-20 12:27:58"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pki-deps:10.6 security update</summary>
    <description>The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.  

Security Fix(es):  

  * com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14126" id="RHSA-2025:14126" type="rhsa" title="RHSA-2025:14126"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-52999" id="CVE-2025-52999" type="cve" title="CVE-2025-52999"/>
      <reference href="https://bugzilla.redhat.com/2374804" id="2374804" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14126.html" id="ALSA-2025:14126" type="self" title="ALSA-2025:14126"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="pki-deps" stream="10.6" version="8100020240410201031" context="9edba152" arch="s390x"/>
        <package name="jackson-annotations" version="2.19.1" release="1.module_el8.10.0+4034+20822525" epoch="0" arch="noarch" src="jackson-annotations-2.19.1-1.module_el8.10.0+4034+20822525.src.rpm">
          <filename>jackson-annotations-2.19.1-1.module_el8.10.0+4034+20822525.noarch.rpm</filename>
          <sum type="sha256">1dfcdfaca4df304e06f8fe2728991a9e2a68c6fa3267d6d9d6462311fdd0d03b</sum>
        </package>
        <package name="jackson-modules-base" version="2.19.1" release="1.module_el8.10.0+4034+20822525" epoch="0" arch="noarch" src="jackson-modules-base-2.19.1-1.module_el8.10.0+4034+20822525.src.rpm">
          <filename>jackson-modules-base-2.19.1-1.module_el8.10.0+4034+20822525.noarch.rpm</filename>
          <sum type="sha256">20d969f3cf014ff4490b05509e3e2c44de663695df7ba98aac0862e2cb229ae8</sum>
        </package>
        <package name="jackson-bom" version="2.19.1" release="1.module_el8.10.0+4034+20822525" epoch="0" arch="noarch" src="jackson-bom-2.19.1-1.module_el8.10.0+4034+20822525.src.rpm">
          <filename>jackson-bom-2.19.1-1.module_el8.10.0+4034+20822525.noarch.rpm</filename>
          <sum type="sha256">36e033d94e3574e7b74b562697302c845073e9f1a791719cd6a103f0fb8c4d92</sum>
        </package>
        <package name="glassfish-jaxb-core" version="2.2.11" release="12.module_el8.10.0+3791+e0637953" epoch="0" arch="noarch" src="glassfish-jaxb-2.2.11-12.module_el8.10.0+3791+e0637953.src.rpm">
          <filename>glassfish-jaxb-core-2.2.11-12.module_el8.10.0+3791+e0637953.noarch.rpm</filename>
          <sum type="sha256">477a47687a21585315f4689a51288631d5fbac847b6673fba9f274890712a70a</sum>
        </package>
        <package name="pki-servlet-engine" version="9.0.62" release="1.module_el8.10.0+3791+e0637953" epoch="1" arch="noarch" src="pki-servlet-engine-9.0.62-1.module_el8.10.0+3791+e0637953.src.rpm">
          <filename>pki-servlet-engine-9.0.62-1.module_el8.10.0+3791+e0637953.noarch.rpm</filename>
          <sum type="sha256">532c855c94c4c589650554fdca9b4a4273dbb7c39b9840babd880c237ced690c</sum>
        </package>
        <package name="glassfish-jaxb-txw2" version="2.2.11" release="12.module_el8.10.0+3791+e0637953" epoch="0" arch="noarch" src="glassfish-jaxb-2.2.11-12.module_el8.10.0+3791+e0637953.src.rpm">
          <filename>glassfish-jaxb-txw2-2.2.11-12.module_el8.10.0+3791+e0637953.noarch.rpm</filename>
          <sum type="sha256">6a6d9268a508987cc0336c3494e5657095dba3e655f1225b7fa7128dc097887f</sum>
        </package>
        <package name="jackson-jaxrs-providers" version="2.19.1" release="1.module_el8.10.0+4034+20822525" epoch="0" arch="noarch" src="jackson-jaxrs-providers-2.19.1-1.module_el8.10.0+4034+20822525.src.rpm">
          <filename>jackson-jaxrs-providers-2.19.1-1.module_el8.10.0+4034+20822525.noarch.rpm</filename>
          <sum type="sha256">7a903563dc40fc710a062b52c63dcd348a4f0ef2796cd05efa7ef0619a4f2882</sum>
        </package>
        <package name="glassfish-jaxb-runtime" version="2.2.11" release="12.module_el8.10.0+3791+e0637953" epoch="0" arch="noarch" src="glassfish-jaxb-2.2.11-12.module_el8.10.0+3791+e0637953.src.rpm">
          <filename>glassfish-jaxb-runtime-2.2.11-12.module_el8.10.0+3791+e0637953.noarch.rpm</filename>
          <sum type="sha256">7eeafc54dba1be4f10984f2ad8dd2430740d7c134a735d41d95eb83becf36033</sum>
        </package>
        <package name="jackson-databind" version="2.19.1" release="1.module_el8.10.0+4034+20822525" epoch="0" arch="noarch" src="jackson-databind-2.19.1-1.module_el8.10.0+4034+20822525.src.rpm">
          <filename>jackson-databind-2.19.1-1.module_el8.10.0+4034+20822525.noarch.rpm</filename>
          <sum type="sha256">a0033fc40033b89c899c0101b44815b1d46d4f21479cc8da2f6bbdb16c5becf7</sum>
        </package>
        <package name="jackson-jaxrs-json-provider" version="2.19.1" release="1.module_el8.10.0+4034+20822525" epoch="0" arch="noarch" src="jackson-jaxrs-providers-2.19.1-1.module_el8.10.0+4034+20822525.src.rpm">
          <filename>jackson-jaxrs-json-provider-2.19.1-1.module_el8.10.0+4034+20822525.noarch.rpm</filename>
          <sum type="sha256">a2c1e33ef26b65a5f49feb19a3883f440c8bfbedcd5b0e6c4fb381511fc28ebf</sum>
        </package>
        <package name="jackson-parent" version="2.19.1" release="1.module_el8.10.0+4034+20822525" epoch="0" arch="noarch" src="jackson-parent-2.19.1-1.module_el8.10.0+4034+20822525.src.rpm">
          <filename>jackson-parent-2.19.1-1.module_el8.10.0+4034+20822525.noarch.rpm</filename>
          <sum type="sha256">a3581d06b4e07096aea431a1ac7e29101577ac65a36a0f3a2d06392b75d86ebb</sum>
        </package>
        <package name="jackson-core" version="2.19.1" release="1.module_el8.10.0+4034+20822525" epoch="0" arch="noarch" src="jackson-core-2.19.1-1.module_el8.10.0+4034+20822525.src.rpm">
          <filename>jackson-core-2.19.1-1.module_el8.10.0+4034+20822525.noarch.rpm</filename>
          <sum type="sha256">af030d87416fb4199a05bfda3758c6894a3d3a572c62f1851ac0ebd56ee20ba6</sum>
        </package>
        <package name="jackson-module-jaxb-annotations" version="2.19.1" release="1.module_el8.10.0+4034+20822525" epoch="0" arch="noarch" src="jackson-modules-base-2.19.1-1.module_el8.10.0+4034+20822525.src.rpm">
          <filename>jackson-module-jaxb-annotations-2.19.1-1.module_el8.10.0+4034+20822525.noarch.rpm</filename>
          <sum type="sha256">e3779c56ac695871c94904b4c93a8d26559e385d0e7ae31ab5c5d013dfffe158</sum>
        </package>
        <package name="fasterxml-oss-parent" version="69" release="1.module_el8.10.0+4034+20822525" epoch="0" arch="noarch" src="fasterxml-oss-parent-69-1.module_el8.10.0+4034+20822525.src.rpm">
          <filename>fasterxml-oss-parent-69-1.module_el8.10.0+4034+20822525.noarch.rpm</filename>
          <sum type="sha256">f499a631acfbbc2fb751e7817fb9eef23243ec63a4d0ba61bf11acf03227ebf7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14135</id>
    <title>Important: libarchive security update</title>
    <issued date="2025-08-20 00:00:00"/>
    <updated date="2025-08-21 05:47:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libarchive security update</summary>
    <description>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.  

Security Fix(es):  

  * libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c (CVE-2025-5914)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14135" id="RHSA-2025:14135" type="rhsa" title="RHSA-2025:14135"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5914" id="CVE-2025-5914" type="cve" title="CVE-2025-5914"/>
      <reference href="https://bugzilla.redhat.com/2370861" id="2370861" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14135.html" id="ALSA-2025:14135" type="self" title="ALSA-2025:14135"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libarchive-devel" version="3.3.3" release="6.el8_10" epoch="0" arch="s390x" src="libarchive-3.3.3-6.el8_10.src.rpm">
          <filename>libarchive-devel-3.3.3-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">e4135c14b76d8fe86889cfe73a9758aa583c90839f77bed96d3836f557ba86a9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14177</id>
    <title>Important: tomcat security update</title>
    <issued date="2025-08-20 00:00:00"/>
    <updated date="2025-08-21 10:09:15"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tomcat security update</summary>
    <description>Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.  

Security Fix(es):  

  * tomcat: Apache Tomcat DoS in multipart upload (CVE-2025-48988)
  * tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125)
  * apache-commons-fileupload: Apache Commons FileUpload DoS via part headers (CVE-2025-48976)
  * tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989)
  * tomcat: Apache Tomcat denial of service (CVE-2025-52520)
  * tomcat: Apache Tomcat denial of service (CVE-2025-52434)
  * tomcat: Apache Tomcat denial of service (CVE-2025-53506)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14177" id="RHSA-2025:14177" type="rhsa" title="RHSA-2025:14177"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48976" id="CVE-2025-48976" type="cve" title="CVE-2025-48976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48988" id="CVE-2025-48988" type="cve" title="CVE-2025-48988"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48989" id="CVE-2025-48989" type="cve" title="CVE-2025-48989"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49125" id="CVE-2025-49125" type="cve" title="CVE-2025-49125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-52434" id="CVE-2025-52434" type="cve" title="CVE-2025-52434"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-52520" id="CVE-2025-52520" type="cve" title="CVE-2025-52520"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53506" id="CVE-2025-53506" type="cve" title="CVE-2025-53506"/>
      <reference href="https://bugzilla.redhat.com/2373015" id="2373015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373018" id="2373018" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373020" id="2373020" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373309" id="2373309" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379374" id="2379374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379382" id="2379382" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379386" id="2379386" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14177.html" id="ALSA-2025:14177" type="self" title="ALSA-2025:14177"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="tomcat-servlet-4.0-api" version="9.0.87" release="1.el8_10.6" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.6.src.rpm">
          <filename>tomcat-servlet-4.0-api-9.0.87-1.el8_10.6.noarch.rpm</filename>
          <sum type="sha256">07892dbc5479ed243d03dae1a2858b2b4368a52f9f2e1ac4617d6fc51a8714d3</sum>
        </package>
        <package name="tomcat" version="9.0.87" release="1.el8_10.6" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.6.src.rpm">
          <filename>tomcat-9.0.87-1.el8_10.6.noarch.rpm</filename>
          <sum type="sha256">1017a453e566533f3140e5676e8813ebcbc6d193040d2f206d03be14678fcf09</sum>
        </package>
        <package name="tomcat-webapps" version="9.0.87" release="1.el8_10.6" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.6.src.rpm">
          <filename>tomcat-webapps-9.0.87-1.el8_10.6.noarch.rpm</filename>
          <sum type="sha256">196a5a44c831e80bec8605d34c2c8726e2ca0cef4cd959e91619ba345e4f66ea</sum>
        </package>
        <package name="tomcat-el-3.0-api" version="9.0.87" release="1.el8_10.6" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.6.src.rpm">
          <filename>tomcat-el-3.0-api-9.0.87-1.el8_10.6.noarch.rpm</filename>
          <sum type="sha256">3b7fe6c85b79458899844aefd2b0e27a0a9cc021442c5b739bb8dcfaa30c8d68</sum>
        </package>
        <package name="tomcat-jsp-2.3-api" version="9.0.87" release="1.el8_10.6" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.6.src.rpm">
          <filename>tomcat-jsp-2.3-api-9.0.87-1.el8_10.6.noarch.rpm</filename>
          <sum type="sha256">610b96a539f76051e9c829d71aeff3f1ca9a3cb7bd1f9488889325f01b65ef27</sum>
        </package>
        <package name="tomcat-docs-webapp" version="9.0.87" release="1.el8_10.6" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.6.src.rpm">
          <filename>tomcat-docs-webapp-9.0.87-1.el8_10.6.noarch.rpm</filename>
          <sum type="sha256">66e7e89c150ef81d94ca70dac6fcdd9445efc45e6ffeb8892c63233e7a01f8e5</sum>
        </package>
        <package name="tomcat-lib" version="9.0.87" release="1.el8_10.6" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.6.src.rpm">
          <filename>tomcat-lib-9.0.87-1.el8_10.6.noarch.rpm</filename>
          <sum type="sha256">c94172c02f2165713ec51362ab75f373c9b5ceea5e31b9771334c240ce188210</sum>
        </package>
        <package name="tomcat-admin-webapps" version="9.0.87" release="1.el8_10.6" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.6.src.rpm">
          <filename>tomcat-admin-webapps-9.0.87-1.el8_10.6.noarch.rpm</filename>
          <sum type="sha256">f4e9ae85e92ee3dca2309f341e712423e9bf3da7aa66a219833683933165cd9d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14442</id>
    <title>Important: firefox security update</title>
    <issued date="2025-08-25 00:00:00"/>
    <updated date="2025-08-27 11:52:34"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component (CVE-2025-9182)
  * thunderbird: firefox: Sandbox escape due to invalid pointer in the Audio/Video: GMP component (CVE-2025-9179)
  * thunderbird: firefox: Same-origin policy bypass in the Graphics: Canvas2D component (CVE-2025-9180)
  * thunderbird: firefox: Uninitialized memory in the JavaScript Engine component (CVE-2025-9181)
  * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 (CVE-2025-9185)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14442" id="RHSA-2025:14442" type="rhsa" title="RHSA-2025:14442"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9179" id="CVE-2025-9179" type="cve" title="CVE-2025-9179"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9180" id="CVE-2025-9180" type="cve" title="CVE-2025-9180"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9181" id="CVE-2025-9181" type="cve" title="CVE-2025-9181"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9182" id="CVE-2025-9182" type="cve" title="CVE-2025-9182"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9185" id="CVE-2025-9185" type="cve" title="CVE-2025-9185"/>
      <reference href="https://bugzilla.redhat.com/2389575" id="2389575" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389580" id="2389580" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389581" id="2389581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389583" id="2389583" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389584" id="2389584" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14442.html" id="ALSA-2025:14442" type="self" title="ALSA-2025:14442"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="128.14.0" release="2.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-128.14.0-2.el8_10.alma.1.src.rpm">
          <filename>firefox-128.14.0-2.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">4a3a48d05977252761741840de721e11ea8f001d66c62c7506f215075c2f7156</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14546</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2025-08-26 00:00:00"/>
    <updated date="2025-09-04 09:38:53"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14546" id="RHSA-2025:14546" type="rhsa" title="RHSA-2025:14546"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8194" id="CVE-2025-8194" type="cve" title="CVE-2025-8194"/>
      <reference href="https://bugzilla.redhat.com/2384043" id="2384043" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14546.html" id="ALSA-2025:14546" type="self" title="ALSA-2025:14546"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.12" version="3.12.11" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.11-2.el8_10.src.rpm">
          <filename>python3.12-3.12.11-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">48bb84e164a95d3fb95d4b00b37a8cf03d7376db173366691858b729c589ba14</sum>
        </package>
        <package name="python3.12-libs" version="3.12.11" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.11-2.el8_10.src.rpm">
          <filename>python3.12-libs-3.12.11-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">85e06133c9a89177541368f846343bec8a6fef2f1bbf216371235e67395e39bf</sum>
        </package>
        <package name="python3.12-devel" version="3.12.11" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.11-2.el8_10.src.rpm">
          <filename>python3.12-devel-3.12.11-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">b48e8c126ded1f1120655b3f392da3c955deedb45d6db84abdb9e5c2722e5412</sum>
        </package>
        <package name="python3.12-tkinter" version="3.12.11" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.11-2.el8_10.src.rpm">
          <filename>python3.12-tkinter-3.12.11-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">e182cab6990dc69dd043fe5139d2d428734c417674bffbaa64bb34b70f64426e</sum>
        </package>
        <package name="python3.12-rpm-macros" version="3.12.11" release="2.el8_10" epoch="0" arch="noarch" src="python3.12-3.12.11-2.el8_10.src.rpm">
          <filename>python3.12-rpm-macros-3.12.11-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">f89ef9339aa6961b0a9bece1912350a7f211b1765626245005aac5a071d0138d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14560</id>
    <title>Moderate: python3 security update</title>
    <issued date="2025-08-26 00:00:00"/>
    <updated date="2025-09-29 09:37:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14560" id="RHSA-2025:14560" type="rhsa" title="RHSA-2025:14560"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8194" id="CVE-2025-8194" type="cve" title="CVE-2025-8194"/>
      <reference href="https://bugzilla.redhat.com/2384043" id="2384043" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14560.html" id="ALSA-2025:14560" type="self" title="ALSA-2025:14560"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3-idle" version="3.6.8" release="71.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-71.el8_10.alma.1.src.rpm">
          <filename>python3-idle-3.6.8-71.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">38d6d8f47fb7446d3befd769c8ee2da7006bf5c2b2df319dc412e93d4a316e12</sum>
        </package>
        <package name="platform-python-debug" version="3.6.8" release="71.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-71.el8_10.alma.1.src.rpm">
          <filename>platform-python-debug-3.6.8-71.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">3b597c047cbef35d308f84f47ef02b6cb1610304f7fbc4755dac3febf78ff90a</sum>
        </package>
        <package name="platform-python-devel" version="3.6.8" release="71.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-71.el8_10.alma.1.src.rpm">
          <filename>platform-python-devel-3.6.8-71.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">911d3031356ed09b1fe442394580b0eef7c04c36fc7c8b7bf2646670b5b21737</sum>
        </package>
        <package name="python3-tkinter" version="3.6.8" release="71.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-71.el8_10.alma.1.src.rpm">
          <filename>python3-tkinter-3.6.8-71.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">cc397cffe962f09fe71818c222b2049f64804d9c4c7c96305b56c0a5adcec709</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14573</id>
    <title>Important: aide security update</title>
    <issued date="2025-08-26 00:00:00"/>
    <updated date="2025-08-27 11:47:08"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>aide security update</summary>
    <description>Advanced Intrusion Detection Environment (AIDE) is a utility that creates a database of files on the system, and then uses that database to ensure file integrity and detect system intrusions.  

Security Fix(es):  

  * aide: improper output neutralization enables bypassing (CVE-2025-54389)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14573" id="RHSA-2025:14573" type="rhsa" title="RHSA-2025:14573"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-54389" id="CVE-2025-54389" type="cve" title="CVE-2025-54389"/>
      <reference href="https://bugzilla.redhat.com/2388019" id="2388019" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14573.html" id="ALSA-2025:14573" type="self" title="ALSA-2025:14573"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="aide" version="0.16" release="15.el8_10.2" epoch="0" arch="s390x" src="aide-0.16-15.el8_10.2.src.rpm">
          <filename>aide-0.16-15.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">be7b1bfc548c1980ecd13a8a85b74975c6f1700c9b02feca229ae150dff51df2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14743</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-08-27 00:00:00"/>
    <updated date="2025-08-28 07:17:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component (CVE-2025-9182)
  * thunderbird: firefox: Sandbox escape due to invalid pointer in the Audio/Video: GMP component (CVE-2025-9179)
  * thunderbird: firefox: Same-origin policy bypass in the Graphics: Canvas2D component (CVE-2025-9180)
  * thunderbird: firefox: Uninitialized memory in the JavaScript Engine component (CVE-2025-9181)
  * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 (CVE-2025-9185)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14743" id="RHSA-2025:14743" type="rhsa" title="RHSA-2025:14743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9179" id="CVE-2025-9179" type="cve" title="CVE-2025-9179"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9180" id="CVE-2025-9180" type="cve" title="CVE-2025-9180"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9181" id="CVE-2025-9181" type="cve" title="CVE-2025-9181"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9182" id="CVE-2025-9182" type="cve" title="CVE-2025-9182"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9185" id="CVE-2025-9185" type="cve" title="CVE-2025-9185"/>
      <reference href="https://bugzilla.redhat.com/2389575" id="2389575" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389580" id="2389580" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389581" id="2389581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389583" id="2389583" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389584" id="2389584" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14743.html" id="ALSA-2025:14743" type="self" title="ALSA-2025:14743"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="128.14.0" release="3.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-128.14.0-3.el8_10.alma.1.src.rpm">
          <filename>thunderbird-128.14.0-3.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">61e34227e540e2eed7e28c734298e783fad01f78a3f47665af6c3dd3c7c2aca5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14750</id>
    <title>Moderate: fence-agents security update</title>
    <issued date="2025-08-27 00:00:00"/>
    <updated date="2025-08-28 07:14:58"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.   

Security Fix(es):  

  * requests: Requests vulnerable to .netrc credentials leak via malicious URLs (CVE-2024-47081)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14750" id="RHSA-2025:14750" type="rhsa" title="RHSA-2025:14750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47081" id="CVE-2024-47081" type="cve" title="CVE-2024-47081"/>
      <reference href="https://bugzilla.redhat.com/2371272" id="2371272" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14750.html" id="ALSA-2025:14750" type="self" title="ALSA-2025:14750"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="fence-agents-ibmblade" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-ibmblade-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">05f248120541614930989a0f072c176bf29c97927e170c29ff04dbfa671a9916</sum>
        </package>
        <package name="fence-agents-cisco-ucs" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-cisco-ucs-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">063f173bd5bc87c56766d9aaea643d92544c4e1bde79b8e2ba6f8b9307bfe749</sum>
        </package>
        <package name="fence-agents-vmware-rest" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-vmware-rest-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">0a1051e388804655c91843bbbb831a45bf305bf7e15909cb419fde429f75130e</sum>
        </package>
        <package name="fence-agents-amt-ws" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-amt-ws-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">0e78a31579579a66fe9f5aa4f52cea70d3fbfd141a19a783608432249385b3b6</sum>
        </package>
        <package name="fence-agents-common" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-common-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">0f19ec4f1633b1f16858890b94cb11d9027c34772dd31740cba0ba736077d5a9</sum>
        </package>
        <package name="fence-agents-drac5" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-drac5-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">1b453f393ec689b49992ffb2727087e7098312ce7d3b27493bfe665e72932875</sum>
        </package>
        <package name="fence-agents-ilo-moonshot" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-ilo-moonshot-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">2524d4e23c5fba849fc92567692934a186559574d52dee2efbb143734e997c2e</sum>
        </package>
        <package name="fence-agents-eaton-snmp" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-eaton-snmp-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">2b630412008d62b0f1481d49384841f5d2cc55e62e20f9cfaa01870bffacc0f4</sum>
        </package>
        <package name="fence-agents-rhevm" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-rhevm-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">338584bcdf113dedb86ec2c8a41e375f3d4f03312949cbd1d9999981abd65166</sum>
        </package>
        <package name="fence-agents-eps" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-eps-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">3a3df7ccacb5da8afe157437cc851eb26ecf6d9df2641cc9502777d7560c8744</sum>
        </package>
        <package name="fence-agents-all" version="4.2.1" release="129.el8_10.14" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-all-4.2.1-129.el8_10.14.s390x.rpm</filename>
          <sum type="sha256">3b65bead8547c2bd6fc637f07ce1861386d4cb276f5e1a191c2d4237aad7314b</sum>
        </package>
        <package name="fence-agents-wti" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-wti-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">47b5e294466269710a24dfbc509a3e9dbbeab1fe274f81f5d477756820aeec35</sum>
        </package>
        <package name="fence-agents-ilo-mp" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-ilo-mp-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">49b30810fdb6c5b6e910a5d9f75afbb8e4bbbfdb1c92e377de6c8a03e49ee91a</sum>
        </package>
        <package name="fence-agents-hpblade" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-hpblade-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">4d602794d808891815b1eb41b0a0e868d2faa377c83e71c6e291071a0086c5b4</sum>
        </package>
        <package name="fence-agents-virsh" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-virsh-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">5363cb38e3dda5f697977f658529c28179cc79062922a0a1f778cd684622f966</sum>
        </package>
        <package name="fence-agents-kdump" version="4.2.1" release="129.el8_10.14" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-kdump-4.2.1-129.el8_10.14.s390x.rpm</filename>
          <sum type="sha256">552888f7c4e563c57fabf3c54de0d7d240aaaf33b600cf9a60df3a81bebadc62</sum>
        </package>
        <package name="fence-agents-compute" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-compute-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">61ac30d20f3a5a95f57e86f0b745193ef834dd51b108c30287a6342f10ba3e1b</sum>
        </package>
        <package name="fence-agents-emerson" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-emerson-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">623c4a0f9fa1be8904b32a987a4dc812985196897e5193d0f0d90ef18dd0dd93</sum>
        </package>
        <package name="fence-agents-bladecenter" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-bladecenter-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">6a33f80b04cec7ac829742a04b76f7045195de5b1dbf2112ce6c9f678d967d8c</sum>
        </package>
        <package name="fence-agents-rsa" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-rsa-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">70ab6f29e621a8b8e95fc05037e1123a9298da4e665258b63b66073d63678253</sum>
        </package>
        <package name="fence-agents-ilo2" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-ilo2-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">784c66e656aacf385522f8e82472af38a5586923b2483f02b03d5f189582f559</sum>
        </package>
        <package name="fence-agents-ibm-powervs" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-ibm-powervs-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">7fc11218dd6225f11d857a863b27a48f93e79c611f945649bd0c1aabdb718a8b</sum>
        </package>
        <package name="fence-agents-heuristics-ping" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-heuristics-ping-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">8219e0f29aca1ead80fd93148488341ca52858d3945b5beec0220f8c36a1262d</sum>
        </package>
        <package name="fence-agents-ipdu" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-ipdu-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">8565d901854d94fc51130d23ed3a9cea20bfb770bc80bb5340da1854e57783e6</sum>
        </package>
        <package name="fence-agents-cisco-mds" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-cisco-mds-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">8ef1bb7ff121049f759cfb4e6608d4ca73b84498cc536a466d3b2713bddb5bdb</sum>
        </package>
        <package name="fence-agents-ilo-ssh" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-ilo-ssh-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">8f8a014461dcc558feecad2fa15cbb80781820eb28688c77ef6504f00759de95</sum>
        </package>
        <package name="fence-agents-rsb" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-rsb-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">93d4e5bc67ed21ddbae8ad50fbf444bd4451ef980d54cebefd739fbddf6a6380</sum>
        </package>
        <package name="fence-agents-zvm" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-zvm-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">9ba2ff782b9909e2497195536939e9c669364b9f0f1cb40d4000d41fdf546c44</sum>
        </package>
        <package name="fence-agents-apc-snmp" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-apc-snmp-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">9dc4396ca7bfea0934a0605463d748d618b4a0803960d81eba18ce12dd4202a5</sum>
        </package>
        <package name="fence-agents-vmware-soap" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-vmware-soap-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">a1400400b969bed55164fec64f93a8295bbcdb88fb68c47dbdc2b9088292f83e</sum>
        </package>
        <package name="fence-agents-ipmilan" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-ipmilan-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">a531a99b3fa8d1fc99732ee69934e6f3178702a808b31e0fa6258236e6515628</sum>
        </package>
        <package name="fence-agents-ifmib" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-ifmib-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">cebe0d7b40442152b5bf6a2cbda5964cc2730c625b781c41cbbc517b2494acca</sum>
        </package>
        <package name="fence-agents-intelmodular" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-intelmodular-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">cf91a649b2557c9010c1e38d1119e3b5715af5a4616f879b00c53cae705d86d5</sum>
        </package>
        <package name="fence-agents-redfish" version="4.2.1" release="129.el8_10.14" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-redfish-4.2.1-129.el8_10.14.s390x.rpm</filename>
          <sum type="sha256">da3845b750d4e921981be2bc2ecc02cc8428539887a3291b7e3a34d0f20c32cd</sum>
        </package>
        <package name="fence-agents-kubevirt" version="4.2.1" release="129.el8_10.14" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-kubevirt-4.2.1-129.el8_10.14.s390x.rpm</filename>
          <sum type="sha256">dc0e44a7744d99598b6bc9e393bca2ad50b384d250f771ba09f1e4968cb0ba82</sum>
        </package>
        <package name="fence-agents-mpath" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-mpath-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">ec585a030d0bec2a922d4c3bca247bdc447801e92f0de2be3f063f0281ceb560</sum>
        </package>
        <package name="fence-agents-brocade" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-brocade-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">f954efc1e9cd891cc9b93c7316cc6e729c4f69d8c4108c0e5c2acf7dd65bc0c6</sum>
        </package>
        <package name="fence-agents-lpar" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-lpar-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">fc56eb26c22649ed78abc0d49041c719fdcfdadc165696bf094d1b100e107123</sum>
        </package>
        <package name="fence-agents-ibm-vpc" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-ibm-vpc-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">fc5e7726c358eeedb0f14e28f40cd1893617f65b07f4122e9d9ec2eb8651f2ef</sum>
        </package>
        <package name="fence-agents-sbd" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-sbd-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">fcfe106a8973eb2f5228793efbd477178995c3aa9b199094126b463346eea091</sum>
        </package>
        <package name="fence-agents-apc" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-apc-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">fdd75c6ffa0ba4c638132a6fa08a3f1471669b5918d5306d713ec57f99e7ed9d</sum>
        </package>
        <package name="fence-agents-scsi" version="4.2.1" release="129.el8_10.14" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.14.src.rpm">
          <filename>fence-agents-scsi-4.2.1-129.el8_10.14.noarch.rpm</filename>
          <sum type="sha256">fea671761ec7afb0066511ec5ae093829c3db25f626018769d75cc29b85321be</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14841</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2025-08-28 00:00:00"/>
    <updated date="2025-08-29 06:51:32"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14841" id="RHSA-2025:14841" type="rhsa" title="RHSA-2025:14841"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8194" id="CVE-2025-8194" type="cve" title="CVE-2025-8194"/>
      <reference href="https://bugzilla.redhat.com/2384043" id="2384043" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14841.html" id="ALSA-2025:14841" type="self" title="ALSA-2025:14841"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.11-rpm-macros" version="3.11.13" release="2.el8_10" epoch="0" arch="noarch" src="python3.11-3.11.13-2.el8_10.src.rpm">
          <filename>python3.11-rpm-macros-3.11.13-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">0c976caa3d6aa52e6b6adddb3a9972f403a0014858321c181122c4d919220209</sum>
        </package>
        <package name="python3.11" version="3.11.13" release="2.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-2.el8_10.src.rpm">
          <filename>python3.11-3.11.13-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">28cb39d2dbc0b9a03073d9d78628d3d6e42ed0093be9fff52bad05adef2cd937</sum>
        </package>
        <package name="python3.11-libs" version="3.11.13" release="2.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-2.el8_10.src.rpm">
          <filename>python3.11-libs-3.11.13-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">3c6fe82569b66b5d4a5fc83d7bc6c2f384c744c26bac7b00885a406a29aa2cbc</sum>
        </package>
        <package name="python3.11-devel" version="3.11.13" release="2.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-2.el8_10.src.rpm">
          <filename>python3.11-devel-3.11.13-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">4fc419e3083edd31793913747f3f7a7a232d3443b70268af4915f33a0846d2de</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.13" release="2.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-2.el8_10.src.rpm">
          <filename>python3.11-tkinter-3.11.13-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">a0b47034f37fdeb7f5b3f2f2a548234a46f9517c33afd0ee54614f5e2963e6f5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14899</id>
    <title>Important: postgresql:16 security update</title>
    <issued date="2025-08-28 00:00:00"/>
    <updated date="2025-08-29 10:40:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:16 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715)
  * postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14899" id="RHSA-2025:14899" type="rhsa" title="RHSA-2025:14899"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8714" id="CVE-2025-8714" type="cve" title="CVE-2025-8714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8715" id="CVE-2025-8715" type="cve" title="CVE-2025-8715"/>
      <reference href="https://bugzilla.redhat.com/2388551" id="2388551" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2388553" id="2388553" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14899.html" id="ALSA-2025:14899" type="self" title="ALSA-2025:14899"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="16" version="8100020250829072151" context="9edba152" arch="s390x"/>
        <package name="postgresql-private-libs" version="16.10" release="1.module_el8.10.0+4038+0fbad93c" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el8.10.0+4038+0fbad93c.src.rpm">
          <filename>postgresql-private-libs-16.10-1.module_el8.10.0+4038+0fbad93c.s390x.rpm</filename>
          <sum type="sha256">07c63d1be8909f264ac18971563e86de0bde53df84f585f443a33e85d1938d16</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="16.10" release="1.module_el8.10.0+4038+0fbad93c" epoch="0" arch="noarch" src="postgresql-16.10-1.module_el8.10.0+4038+0fbad93c.src.rpm">
          <filename>postgresql-test-rpm-macros-16.10-1.module_el8.10.0+4038+0fbad93c.noarch.rpm</filename>
          <sum type="sha256">22f2aa814fc4172b700f3d4fb9a2abf1b0b2592921a8ac5ccbfa976fab3297ed</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="16.10" release="1.module_el8.10.0+4038+0fbad93c" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el8.10.0+4038+0fbad93c.src.rpm">
          <filename>postgresql-upgrade-devel-16.10-1.module_el8.10.0+4038+0fbad93c.s390x.rpm</filename>
          <sum type="sha256">3cec655c61ba208d70ac4659692710fa40ea764dcde00d15004e1647031985c0</sum>
        </package>
        <package name="postgresql-contrib" version="16.10" release="1.module_el8.10.0+4038+0fbad93c" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el8.10.0+4038+0fbad93c.src.rpm">
          <filename>postgresql-contrib-16.10-1.module_el8.10.0+4038+0fbad93c.s390x.rpm</filename>
          <sum type="sha256">570ff015e88ed28d1596988543b546a87bfad6a88fcaf2b5f49fa015c6d2e074</sum>
        </package>
        <package name="postgresql-docs" version="16.10" release="1.module_el8.10.0+4038+0fbad93c" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el8.10.0+4038+0fbad93c.src.rpm">
          <filename>postgresql-docs-16.10-1.module_el8.10.0+4038+0fbad93c.s390x.rpm</filename>
          <sum type="sha256">6abd50f98ab578ffd1fcbf8ec60bff69319e78ab5fa486251e9d7310d6494c18</sum>
        </package>
        <package name="postgresql" version="16.10" release="1.module_el8.10.0+4038+0fbad93c" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el8.10.0+4038+0fbad93c.src.rpm">
          <filename>postgresql-16.10-1.module_el8.10.0+4038+0fbad93c.s390x.rpm</filename>
          <sum type="sha256">78e4ec9d203235ba7936b7a25a54dcca0b7ce768c711773cbcee46a5a4e2197f</sum>
        </package>
        <package name="postgresql-test" version="16.10" release="1.module_el8.10.0+4038+0fbad93c" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el8.10.0+4038+0fbad93c.src.rpm">
          <filename>postgresql-test-16.10-1.module_el8.10.0+4038+0fbad93c.s390x.rpm</filename>
          <sum type="sha256">7c9ed7105c4cc7796a6b7f6d7b1138415c9828fa8c037126113121617a173c1e</sum>
        </package>
        <package name="postgresql-pltcl" version="16.10" release="1.module_el8.10.0+4038+0fbad93c" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el8.10.0+4038+0fbad93c.src.rpm">
          <filename>postgresql-pltcl-16.10-1.module_el8.10.0+4038+0fbad93c.s390x.rpm</filename>
          <sum type="sha256">818bd20653278a6b2fde2aa848e19ac0e0e31c59e048748f7ff98e7360229eda</sum>
        </package>
        <package name="pg_repack" version="1.5.1" release="1.module_el8.10.0+3930+ecf33554" epoch="0" arch="s390x" src="pg_repack-1.5.1-1.module_el8.10.0+3930+ecf33554.src.rpm">
          <filename>pg_repack-1.5.1-1.module_el8.10.0+3930+ecf33554.s390x.rpm</filename>
          <sum type="sha256">9b13f1d5444f6cf8500fa428e1512f73c0cf1f4ddddd6964d429433ae4e5f724</sum>
        </package>
        <package name="postgresql-upgrade" version="16.10" release="1.module_el8.10.0+4038+0fbad93c" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el8.10.0+4038+0fbad93c.src.rpm">
          <filename>postgresql-upgrade-16.10-1.module_el8.10.0+4038+0fbad93c.s390x.rpm</filename>
          <sum type="sha256">a13df86ef98dd603c34a912abba83a334d952cbe999ac92dfbacadef96386b22</sum>
        </package>
        <package name="postgresql-plpython3" version="16.10" release="1.module_el8.10.0+4038+0fbad93c" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el8.10.0+4038+0fbad93c.src.rpm">
          <filename>postgresql-plpython3-16.10-1.module_el8.10.0+4038+0fbad93c.s390x.rpm</filename>
          <sum type="sha256">aae8a2ffdfb615fc4701a12475f2e73403107c06806ab2af3cd29ace13cd2b19</sum>
        </package>
        <package name="postgres-decoderbufs" version="2.4.0" release="1.Final.module_el8.10.0+3798+606ebb9f" epoch="0" arch="s390x" src="postgres-decoderbufs-2.4.0-1.Final.module_el8.10.0+3798+606ebb9f.src.rpm">
          <filename>postgres-decoderbufs-2.4.0-1.Final.module_el8.10.0+3798+606ebb9f.s390x.rpm</filename>
          <sum type="sha256">b4ab4ce80d621ce9e80cef82edec35ef1ab32c9448d690e668db0bb17bd1a90a</sum>
        </package>
        <package name="postgresql-private-devel" version="16.10" release="1.module_el8.10.0+4038+0fbad93c" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el8.10.0+4038+0fbad93c.src.rpm">
          <filename>postgresql-private-devel-16.10-1.module_el8.10.0+4038+0fbad93c.s390x.rpm</filename>
          <sum type="sha256">b91ddfbc266337726dafa2d9e528b8c5f95c543b786c0889ba1444eec518df9a</sum>
        </package>
        <package name="postgresql-server" version="16.10" release="1.module_el8.10.0+4038+0fbad93c" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el8.10.0+4038+0fbad93c.src.rpm">
          <filename>postgresql-server-16.10-1.module_el8.10.0+4038+0fbad93c.s390x.rpm</filename>
          <sum type="sha256">c34068e510e8ccf92a5fbef48016a37626b8cd03b336f72d08e1024670c5f6a6</sum>
        </package>
        <package name="postgresql-plperl" version="16.10" release="1.module_el8.10.0+4038+0fbad93c" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el8.10.0+4038+0fbad93c.src.rpm">
          <filename>postgresql-plperl-16.10-1.module_el8.10.0+4038+0fbad93c.s390x.rpm</filename>
          <sum type="sha256">c5822e1e951e71757718bc1f2e20181bbfbf4a71dfb773bc0357e5361627cb00</sum>
        </package>
        <package name="postgresql-static" version="16.10" release="1.module_el8.10.0+4038+0fbad93c" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el8.10.0+4038+0fbad93c.src.rpm">
          <filename>postgresql-static-16.10-1.module_el8.10.0+4038+0fbad93c.s390x.rpm</filename>
          <sum type="sha256">d2cf4bd8bead80f100ee32d6f986924e379e835a86266a57ee3778648c746509</sum>
        </package>
        <package name="postgresql-server-devel" version="16.10" release="1.module_el8.10.0+4038+0fbad93c" epoch="0" arch="s390x" src="postgresql-16.10-1.module_el8.10.0+4038+0fbad93c.src.rpm">
          <filename>postgresql-server-devel-16.10-1.module_el8.10.0+4038+0fbad93c.s390x.rpm</filename>
          <sum type="sha256">dd302860ba6e38995e6a5c57ca7456f602a38660b15ab0c429a30bfbabb4a2f2</sum>
        </package>
        <package name="pgaudit" version="16.0" release="1.module_el8.10.0+3798+606ebb9f" epoch="0" arch="s390x" src="pgaudit-16.0-1.module_el8.10.0+3798+606ebb9f.src.rpm">
          <filename>pgaudit-16.0-1.module_el8.10.0+3798+606ebb9f.s390x.rpm</filename>
          <sum type="sha256">e1395e420ef0b455c809e9fbbc50b5a27410be72d91603805a4907b86ca95cce</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14900</id>
    <title>Moderate: python39:3.9 security update</title>
    <issued date="2025-08-28 00:00:00"/>
    <updated date="2025-09-01 12:34:25"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python39:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273)
  * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14900" id="RHSA-2025:14900" type="rhsa" title="RHSA-2025:14900"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47273" id="CVE-2025-47273" type="cve" title="CVE-2025-47273"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8194" id="CVE-2025-8194" type="cve" title="CVE-2025-8194"/>
      <reference href="https://bugzilla.redhat.com/2366982" id="2366982" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2384043" id="2384043" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14900.html" id="ALSA-2025:14900" type="self" title="ALSA-2025:14900"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="python39" stream="3.9" version="8100020250829123218" context="0a5380d9" arch="s390x"/>
        <package name="python39-psycopg2-tests" version="2.8.6" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-psycopg2-tests-2.8.6-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">05d2693d2fda223ef60e5133f0ea03da31cbd0047d13a3bd8f677c4042064ec4</sum>
        </package>
        <package name="python39-idle" version="3.9.20" release="2.module_el8.10.0+4040+9207bbc0" epoch="0" arch="s390x" src="python39-3.9.20-2.module_el8.10.0+4040+9207bbc0.src.rpm">
          <filename>python39-idle-3.9.20-2.module_el8.10.0+4040+9207bbc0.s390x.rpm</filename>
          <sum type="sha256">1a237575740dedef25039bc0bf995386d4814b55d438e42f5df4d0d074e660b5</sum>
        </package>
        <package name="python39-pip" version="20.2.4" release="9.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python3x-pip-20.2.4-9.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-pip-20.2.4-9.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">1cddc6a728150b59b88dadd96ccc569c7bb77f8952761eca587d684b1a9d53dc</sum>
        </package>
        <package name="python39-libs" version="3.9.20" release="2.module_el8.10.0+4040+9207bbc0" epoch="0" arch="s390x" src="python39-3.9.20-2.module_el8.10.0+4040+9207bbc0.src.rpm">
          <filename>python39-libs-3.9.20-2.module_el8.10.0+4040+9207bbc0.s390x.rpm</filename>
          <sum type="sha256">1e05d8e3b918493fc9082d65011b3f8d15206f5094704f6609dfb772decf2841</sum>
        </package>
        <package name="python39-urllib3" version="1.25.10" release="5.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python-urllib3-1.25.10-5.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-urllib3-1.25.10-5.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">24df140ee4c409e7c015b7d7584ba8aa8df5b95f9ecea9b457ce9ea0f3c68d98</sum>
        </package>
        <package name="python39-pip-wheel" version="20.2.4" release="9.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python3x-pip-20.2.4-9.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-pip-wheel-20.2.4-9.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">2a77862adcd93af6aa76bbbf2467fbd468eef1d9d6265d21cb2316e69d48cae1</sum>
        </package>
        <package name="python39-devel" version="3.9.20" release="2.module_el8.10.0+4040+9207bbc0" epoch="0" arch="s390x" src="python39-3.9.20-2.module_el8.10.0+4040+9207bbc0.src.rpm">
          <filename>python39-devel-3.9.20-2.module_el8.10.0+4040+9207bbc0.s390x.rpm</filename>
          <sum type="sha256">30a649e685df2477e45608c0b82b6322892aedb555d56069896616b2a92d90bd</sum>
        </package>
        <package name="python39-test" version="3.9.20" release="2.module_el8.10.0+4040+9207bbc0" epoch="0" arch="s390x" src="python39-3.9.20-2.module_el8.10.0+4040+9207bbc0.src.rpm">
          <filename>python39-test-3.9.20-2.module_el8.10.0+4040+9207bbc0.s390x.rpm</filename>
          <sum type="sha256">33e0b59506a9f1d702596aa0f50282f3c165a20f890a797e495b3c68b1002c47</sum>
        </package>
        <package name="python39-tkinter" version="3.9.20" release="2.module_el8.10.0+4040+9207bbc0" epoch="0" arch="s390x" src="python39-3.9.20-2.module_el8.10.0+4040+9207bbc0.src.rpm">
          <filename>python39-tkinter-3.9.20-2.module_el8.10.0+4040+9207bbc0.s390x.rpm</filename>
          <sum type="sha256">3510cf51d59b175c777cb3ab38f5a80b708ba3778cdfed24fca392c0b78f8c1d</sum>
        </package>
        <package name="python39-idna" version="2.10" release="4.module_el8.10.0+3849+a48d89aa" epoch="0" arch="noarch" src="python-idna-2.10-4.module_el8.10.0+3849+a48d89aa.src.rpm">
          <filename>python39-idna-2.10-4.module_el8.10.0+3849+a48d89aa.noarch.rpm</filename>
          <sum type="sha256">381f6f79555962d405b57a48952a958cf6f71a88772061ae3a017ad2a49f40c6</sum>
        </package>
        <package name="python39-psycopg2" version="2.8.6" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">3938e67a4a4560730a8004aa6291d4a5162286bd6f68bc00b16e2ed49d466377</sum>
        </package>
        <package name="python39-rpm-macros" version="3.9.20" release="2.module_el8.10.0+4040+9207bbc0" epoch="0" arch="noarch" src="python39-3.9.20-2.module_el8.10.0+4040+9207bbc0.src.rpm">
          <filename>python39-rpm-macros-3.9.20-2.module_el8.10.0+4040+9207bbc0.noarch.rpm</filename>
          <sum type="sha256">44e0e5c8da65523316ed71404c3a3652012610239d534e4c355d0af40469f053</sum>
        </package>
        <package name="python39-numpy-f2py" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-f2py-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">56f4a39fc3b7cacfec741e84c3c59e67da9e3b2f122f09e59cac8a8020a4ba7c</sum>
        </package>
        <package name="python39-psycopg2-doc" version="2.8.6" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-psycopg2-doc-2.8.6-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">5c33f9b35f95710fe82294dc826e72f8a2af5309c9f694687b92f36df933e837</sum>
        </package>
        <package name="python39-scipy" version="1.5.4" release="5.module_el8.9.0+3634+fb2a896c" epoch="0" arch="s390x" src="scipy-1.5.4-5.module_el8.9.0+3634+fb2a896c.src.rpm">
          <filename>python39-scipy-1.5.4-5.module_el8.9.0+3634+fb2a896c.s390x.rpm</filename>
          <sum type="sha256">68206ec5b6bf886e1266c848bf014248b598bea11cce32708352e16fceaa4475</sum>
        </package>
        <package name="python39-mod_wsgi" version="4.7.1" release="7.module_el8.10.0+3989+a618fe15.1" epoch="0" arch="s390x" src="mod_wsgi-4.7.1-7.module_el8.10.0+3989+a618fe15.1.src.rpm">
          <filename>python39-mod_wsgi-4.7.1-7.module_el8.10.0+3989+a618fe15.1.s390x.rpm</filename>
          <sum type="sha256">699c74d4de476f3622f9b09329e23abb89c3e7e6efc60d4fc43b9e5569c12648</sum>
        </package>
        <package name="python39-setuptools-wheel" version="50.3.2" release="7.module_el8.10.0+4040+9207bbc0" epoch="0" arch="noarch" src="python3x-setuptools-50.3.2-7.module_el8.10.0+4040+9207bbc0.src.rpm">
          <filename>python39-setuptools-wheel-50.3.2-7.module_el8.10.0+4040+9207bbc0.noarch.rpm</filename>
          <sum type="sha256">8553178e2fa952e99e564f963331de087f49c5be8589ac2cb0f4276044bac7ca</sum>
        </package>
        <package name="python39-cryptography" version="3.3.1" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-cryptography-3.3.1-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-cryptography-3.3.1-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">8834a7762b7982546305749c0b8ab5193a8b777110eaddbdbb80e69fdaf6ea8a</sum>
        </package>
        <package name="python39-psutil" version="5.8.0" release="4.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9300840b5b4e742063f5617bc74cc2b05b4f3d5bdcd113ee5b3a9745baf3d0dc</sum>
        </package>
        <package name="python39-numpy" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9ffe33f6e51a25e79b88e45fa5cdca37a3b77d0868fe40e156f615224308810c</sum>
        </package>
        <package name="python39-requests" version="2.25.0" release="3.module_el8.9.0+3634+fb2a896c" epoch="0" arch="noarch" src="python-requests-2.25.0-3.module_el8.9.0+3634+fb2a896c.src.rpm">
          <filename>python39-requests-2.25.0-3.module_el8.9.0+3634+fb2a896c.noarch.rpm</filename>
          <sum type="sha256">d021b1b5bb6a395348b4764885ec17842861193b8e60c25abcf8e1ad7a047641</sum>
        </package>
        <package name="python39-lxml" version="4.6.5" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">dc2ce0990738ea69e2b3641de1886825066554244cf58815971db30e321b56b2</sum>
        </package>
        <package name="python39-cffi" version="1.14.3" release="2.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">ec3acbe8ceecf82559556caacd8c41e2b40e69348f2e6893f0b7598aa36371fd</sum>
        </package>
        <package name="python39" version="3.9.20" release="2.module_el8.10.0+4040+9207bbc0" epoch="0" arch="s390x" src="python39-3.9.20-2.module_el8.10.0+4040+9207bbc0.src.rpm">
          <filename>python39-3.9.20-2.module_el8.10.0+4040+9207bbc0.s390x.rpm</filename>
          <sum type="sha256">f0919c8e05a367a88f4cfd29e256b69e61a56781294e5f512c599730df32ba97</sum>
        </package>
        <package name="python39-setuptools" version="50.3.2" release="7.module_el8.10.0+4040+9207bbc0" epoch="0" arch="noarch" src="python3x-setuptools-50.3.2-7.module_el8.10.0+4040+9207bbc0.src.rpm">
          <filename>python39-setuptools-50.3.2-7.module_el8.10.0+4040+9207bbc0.noarch.rpm</filename>
          <sum type="sha256">f9193387284d3741f71df3c4640fca49907530908ffd77067ad5347b3ed923d7</sum>
        </package>
        <package name="python39-pyyaml" version="5.4.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="PyYAML-5.4.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pyyaml-5.4.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">faa90d54ace8329c64942f01e18434bce14edf19cc3a534ae07de7bc301cd27f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15017</id>
    <title>Important: udisks2 security update</title>
    <issued date="2025-09-02 00:00:00"/>
    <updated date="2025-09-29 09:15:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>udisks2 security update</summary>
    <description>The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.  

Security Fix(es):  

  * udisks: Out-of-bounds read in UDisks Daemon (CVE-2025-8067)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15017" id="RHSA-2025:15017" type="rhsa" title="RHSA-2025:15017"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8067" id="CVE-2025-8067" type="cve" title="CVE-2025-8067"/>
      <reference href="https://bugzilla.redhat.com/2388623" id="2388623" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-15017.html" id="ALSA-2025:15017" type="self" title="ALSA-2025:15017"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="udisks2" version="2.9.0" release="16.el8_10.1" epoch="0" arch="s390x" src="udisks2-2.9.0-16.el8_10.1.src.rpm">
          <filename>udisks2-2.9.0-16.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">5bf4c6644187715f9605f2349fe6fec2a9fa1558bbcc854b865787cbf35a1c3f</sum>
        </package>
        <package name="udisks2-lvm2" version="2.9.0" release="16.el8_10.1" epoch="0" arch="s390x" src="udisks2-2.9.0-16.el8_10.1.src.rpm">
          <filename>udisks2-lvm2-2.9.0-16.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">64acf4e2386c56010cc172f9ea61fb39ebd4f1e75cfd913898dca70b851eb3ab</sum>
        </package>
        <package name="udisks2-iscsi" version="2.9.0" release="16.el8_10.1" epoch="0" arch="s390x" src="udisks2-2.9.0-16.el8_10.1.src.rpm">
          <filename>udisks2-iscsi-2.9.0-16.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">9c4b770cddb75abceb8a1a0c8d54e3938bff11652b10c015591dadef47442001</sum>
        </package>
        <package name="libudisks2" version="2.9.0" release="16.el8_10.1" epoch="0" arch="s390x" src="udisks2-2.9.0-16.el8_10.1.src.rpm">
          <filename>libudisks2-2.9.0-16.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">a3d4174ab4c276d76254e409b8c2b1dbaf80550806113cfc1a0ceec63f6c98b5</sum>
        </package>
        <package name="udisks2-lsm" version="2.9.0" release="16.el8_10.1" epoch="0" arch="s390x" src="udisks2-2.9.0-16.el8_10.1.src.rpm">
          <filename>udisks2-lsm-2.9.0-16.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">a5f2c180d1f29430e5604673ccdcce288bc99ebc812a90948e1e7c888c98ec6c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15021</id>
    <title>Important: postgresql:13 security update</title>
    <issued date="2025-09-02 00:00:00"/>
    <updated date="2025-09-29 09:05:38"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:13 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715)
  * postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15021" id="RHSA-2025:15021" type="rhsa" title="RHSA-2025:15021"/>
      <reference href="https://bugzilla.redhat.com/2388551" id="2388551" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2388553" id="2388553" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-15021.html" id="ALSA-2025:15021" type="self" title="ALSA-2025:15021"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-4207.html" id="CVE-2025-4207" type="cve" title="CVE-2025-4207"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-8714.html" id="CVE-2025-8714" type="cve" title="CVE-2025-8714"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-8715.html" id="CVE-2025-8715" type="cve" title="CVE-2025-8715"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="13" version="8100020250903085246" context="9edba152" arch="s390x"/>
        <package name="postgresql" version="13.22" release="1.module_el8.10.0+4042+cb252986" epoch="0" arch="s390x" src="postgresql-13.22-1.module_el8.10.0+4042+cb252986.src.rpm">
          <filename>postgresql-13.22-1.module_el8.10.0+4042+cb252986.s390x.rpm</filename>
          <sum type="sha256">059f0bf8eb94294ffb7e1db35c504259dc1638a1a4d17145f94e09a2587008a5</sum>
        </package>
        <package name="postgresql-static" version="13.22" release="1.module_el8.10.0+4042+cb252986" epoch="0" arch="s390x" src="postgresql-13.22-1.module_el8.10.0+4042+cb252986.src.rpm">
          <filename>postgresql-static-13.22-1.module_el8.10.0+4042+cb252986.s390x.rpm</filename>
          <sum type="sha256">11bd9856631243fb197421876966d6af1968f089b7aa038b16b0043631b9fba1</sum>
        </package>
        <package name="postgresql-server-devel" version="13.22" release="1.module_el8.10.0+4042+cb252986" epoch="0" arch="s390x" src="postgresql-13.22-1.module_el8.10.0+4042+cb252986.src.rpm">
          <filename>postgresql-server-devel-13.22-1.module_el8.10.0+4042+cb252986.s390x.rpm</filename>
          <sum type="sha256">184cb5f583e1b8bf9c754f917aabe0a0340c00b0e21b26d979f42f84518b1fea</sum>
        </package>
        <package name="postgresql-contrib" version="13.22" release="1.module_el8.10.0+4042+cb252986" epoch="0" arch="s390x" src="postgresql-13.22-1.module_el8.10.0+4042+cb252986.src.rpm">
          <filename>postgresql-contrib-13.22-1.module_el8.10.0+4042+cb252986.s390x.rpm</filename>
          <sum type="sha256">39139307b6e511be10f16b674697db144c49bc39ec2e032f487bb965d3b39864</sum>
        </package>
        <package name="postgresql-upgrade" version="13.22" release="1.module_el8.10.0+4042+cb252986" epoch="0" arch="s390x" src="postgresql-13.22-1.module_el8.10.0+4042+cb252986.src.rpm">
          <filename>postgresql-upgrade-13.22-1.module_el8.10.0+4042+cb252986.s390x.rpm</filename>
          <sum type="sha256">5c8b3f83fb2061d33d2ceb0dc387332773949ac5aa7c037d207fdc257c48601b</sum>
        </package>
        <package name="postgresql-docs" version="13.22" release="1.module_el8.10.0+4042+cb252986" epoch="0" arch="s390x" src="postgresql-13.22-1.module_el8.10.0+4042+cb252986.src.rpm">
          <filename>postgresql-docs-13.22-1.module_el8.10.0+4042+cb252986.s390x.rpm</filename>
          <sum type="sha256">6839740c042b2fa4a05aaba47dee56cfee906c2b610def17ad06d391b3a47000</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="13.22" release="1.module_el8.10.0+4042+cb252986" epoch="0" arch="noarch" src="postgresql-13.22-1.module_el8.10.0+4042+cb252986.src.rpm">
          <filename>postgresql-test-rpm-macros-13.22-1.module_el8.10.0+4042+cb252986.noarch.rpm</filename>
          <sum type="sha256">69819eeeb2f79707f7fa44894b7e1fbb0f3030791d285c2ed873ada99aa0591e</sum>
        </package>
        <package name="postgresql-pltcl" version="13.22" release="1.module_el8.10.0+4042+cb252986" epoch="0" arch="s390x" src="postgresql-13.22-1.module_el8.10.0+4042+cb252986.src.rpm">
          <filename>postgresql-pltcl-13.22-1.module_el8.10.0+4042+cb252986.s390x.rpm</filename>
          <sum type="sha256">6a8eb180d209e13ba018539665a82d7e32b84fc8c39c35c43054e3a779fc1fea</sum>
        </package>
        <package name="postgresql-test" version="13.22" release="1.module_el8.10.0+4042+cb252986" epoch="0" arch="s390x" src="postgresql-13.22-1.module_el8.10.0+4042+cb252986.src.rpm">
          <filename>postgresql-test-13.22-1.module_el8.10.0+4042+cb252986.s390x.rpm</filename>
          <sum type="sha256">88e666990e34d22a9cf0726ca6f66f8da812011337af06dbb271b59b86409adf</sum>
        </package>
        <package name="postgresql-plperl" version="13.22" release="1.module_el8.10.0+4042+cb252986" epoch="0" arch="s390x" src="postgresql-13.22-1.module_el8.10.0+4042+cb252986.src.rpm">
          <filename>postgresql-plperl-13.22-1.module_el8.10.0+4042+cb252986.s390x.rpm</filename>
          <sum type="sha256">8c131128febff897289526d6676b63890d6d870c7f94cdfc331089e18ecc3ca4</sum>
        </package>
        <package name="pgaudit" version="1.5.0" release="1.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="pgaudit-1.5.0-1.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>pgaudit-1.5.0-1.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">a29cba50326b3c78b1cff9ad076eff7837022e71f02d7ec9e918aed69a9c3f35</sum>
        </package>
        <package name="postgresql-server" version="13.22" release="1.module_el8.10.0+4042+cb252986" epoch="0" arch="s390x" src="postgresql-13.22-1.module_el8.10.0+4042+cb252986.src.rpm">
          <filename>postgresql-server-13.22-1.module_el8.10.0+4042+cb252986.s390x.rpm</filename>
          <sum type="sha256">a606cbf3c8d7d27eb105b7f5c102153c25ab083a15cb7e1fe39eab4652a9981c</sum>
        </package>
        <package name="postgres-decoderbufs" version="0.10.0" release="2.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">b11226898b888f8213eefe941cece0f636a08ccce2ceaa8bee2a38e6058ed4f3</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.22" release="1.module_el8.10.0+4042+cb252986" epoch="0" arch="s390x" src="postgresql-13.22-1.module_el8.10.0+4042+cb252986.src.rpm">
          <filename>postgresql-upgrade-devel-13.22-1.module_el8.10.0+4042+cb252986.s390x.rpm</filename>
          <sum type="sha256">b31690d0ad7f42169e7502f4ad6491f75359e09fd5e3a62df53fd781997ad297</sum>
        </package>
        <package name="pg_repack" version="1.4.6" release="3.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="pg_repack-1.4.6-3.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>pg_repack-1.4.6-3.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">c1b386540b304a4de3ff8d840ec35dc9d67ecd1827aa06cd695f06060e8d2ea7</sum>
        </package>
        <package name="postgresql-plpython3" version="13.22" release="1.module_el8.10.0+4042+cb252986" epoch="0" arch="s390x" src="postgresql-13.22-1.module_el8.10.0+4042+cb252986.src.rpm">
          <filename>postgresql-plpython3-13.22-1.module_el8.10.0+4042+cb252986.s390x.rpm</filename>
          <sum type="sha256">fe89752f5518264547b39134ac7ad60ea5aab90f35c1f42b251dd9f66c9703ca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15022</id>
    <title>Important: postgresql:15 security update</title>
    <issued date="2025-09-02 00:00:00"/>
    <updated date="2025-09-29 09:08:26"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:15 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715)
  * postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15022" id="RHSA-2025:15022" type="rhsa" title="RHSA-2025:15022"/>
      <reference href="https://bugzilla.redhat.com/2388551" id="2388551" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2388553" id="2388553" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-15022.html" id="ALSA-2025:15022" type="self" title="ALSA-2025:15022"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-4207.html" id="CVE-2025-4207" type="cve" title="CVE-2025-4207"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-8714.html" id="CVE-2025-8714" type="cve" title="CVE-2025-8714"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-8715.html" id="CVE-2025-8715" type="cve" title="CVE-2025-8715"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="15" version="8100020250902093155" context="9edba152" arch="s390x"/>
        <package name="postgresql-plpython3" version="15.14" release="1.module_el8.10.0+4041+afd30bb4" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el8.10.0+4041+afd30bb4.src.rpm">
          <filename>postgresql-plpython3-15.14-1.module_el8.10.0+4041+afd30bb4.s390x.rpm</filename>
          <sum type="sha256">108bec663e8ff4e36a12583b3a530f18cad11cd7fe7fcc427799185c2426e1f8</sum>
        </package>
        <package name="postgresql-pltcl" version="15.14" release="1.module_el8.10.0+4041+afd30bb4" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el8.10.0+4041+afd30bb4.src.rpm">
          <filename>postgresql-pltcl-15.14-1.module_el8.10.0+4041+afd30bb4.s390x.rpm</filename>
          <sum type="sha256">12a7b995d1c63b1512b04860451beb436a04afefaffb05f07bd4ccb72f1ba7b7</sum>
        </package>
        <package name="postgresql-upgrade" version="15.14" release="1.module_el8.10.0+4041+afd30bb4" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el8.10.0+4041+afd30bb4.src.rpm">
          <filename>postgresql-upgrade-15.14-1.module_el8.10.0+4041+afd30bb4.s390x.rpm</filename>
          <sum type="sha256">1a4760f36a18860be37f4b2438a3d042cce6d21d14ecc387a039472bfc8bf63d</sum>
        </package>
        <package name="postgresql-plperl" version="15.14" release="1.module_el8.10.0+4041+afd30bb4" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el8.10.0+4041+afd30bb4.src.rpm">
          <filename>postgresql-plperl-15.14-1.module_el8.10.0+4041+afd30bb4.s390x.rpm</filename>
          <sum type="sha256">2330d96f5daa7e3ef871de61a65f0031f449372a401a0cef926182a58f72cb71</sum>
        </package>
        <package name="postgresql" version="15.14" release="1.module_el8.10.0+4041+afd30bb4" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el8.10.0+4041+afd30bb4.src.rpm">
          <filename>postgresql-15.14-1.module_el8.10.0+4041+afd30bb4.s390x.rpm</filename>
          <sum type="sha256">29b4c872806477af8e00c9cb988ba921230b4156effe89cbfafce0d74730691b</sum>
        </package>
        <package name="postgresql-contrib" version="15.14" release="1.module_el8.10.0+4041+afd30bb4" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el8.10.0+4041+afd30bb4.src.rpm">
          <filename>postgresql-contrib-15.14-1.module_el8.10.0+4041+afd30bb4.s390x.rpm</filename>
          <sum type="sha256">2c740273a53054232b62b8c88a729cb60725d7e2510935bbe9b5b12184bb291c</sum>
        </package>
        <package name="postgresql-test" version="15.14" release="1.module_el8.10.0+4041+afd30bb4" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el8.10.0+4041+afd30bb4.src.rpm">
          <filename>postgresql-test-15.14-1.module_el8.10.0+4041+afd30bb4.s390x.rpm</filename>
          <sum type="sha256">33d90117fd79a7ad287b491195617e6d324557c65b53b9549612b4182c064584</sum>
        </package>
        <package name="postgresql-private-devel" version="15.14" release="1.module_el8.10.0+4041+afd30bb4" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el8.10.0+4041+afd30bb4.src.rpm">
          <filename>postgresql-private-devel-15.14-1.module_el8.10.0+4041+afd30bb4.s390x.rpm</filename>
          <sum type="sha256">3c517c03bc2715f6e0efc87a303726d2cc40de829df35e0fa35412d863a37ec2</sum>
        </package>
        <package name="postgresql-server" version="15.14" release="1.module_el8.10.0+4041+afd30bb4" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el8.10.0+4041+afd30bb4.src.rpm">
          <filename>postgresql-server-15.14-1.module_el8.10.0+4041+afd30bb4.s390x.rpm</filename>
          <sum type="sha256">3c6d5c1ee2390225d189c4659119a0353b5da9852991d81467a16b12488dd464</sum>
        </package>
        <package name="postgresql-docs" version="15.14" release="1.module_el8.10.0+4041+afd30bb4" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el8.10.0+4041+afd30bb4.src.rpm">
          <filename>postgresql-docs-15.14-1.module_el8.10.0+4041+afd30bb4.s390x.rpm</filename>
          <sum type="sha256">493259008e7e723b5d973508c14f2661b21b7ed2d8bd34c32135feda8611db12</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="15.14" release="1.module_el8.10.0+4041+afd30bb4" epoch="0" arch="noarch" src="postgresql-15.14-1.module_el8.10.0+4041+afd30bb4.src.rpm">
          <filename>postgresql-test-rpm-macros-15.14-1.module_el8.10.0+4041+afd30bb4.noarch.rpm</filename>
          <sum type="sha256">6d72b59c1f662bb680d8873282e9031120a6bc4659dad9df22437426b4651870</sum>
        </package>
        <package name="postgresql-server-devel" version="15.14" release="1.module_el8.10.0+4041+afd30bb4" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el8.10.0+4041+afd30bb4.src.rpm">
          <filename>postgresql-server-devel-15.14-1.module_el8.10.0+4041+afd30bb4.s390x.rpm</filename>
          <sum type="sha256">7ba69d78be0c446ffa30dd3839e36e77267fb5209acd431a0b64b71ad276ac2a</sum>
        </package>
        <package name="pg_repack" version="1.4.8" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="pg_repack-1.4.8-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>pg_repack-1.4.8-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">7fbd57e759f737f8bc3c7bc2715300640b00ae84ed9b74d469be03ee537d20b9</sum>
        </package>
        <package name="postgresql-private-libs" version="15.14" release="1.module_el8.10.0+4041+afd30bb4" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el8.10.0+4041+afd30bb4.src.rpm">
          <filename>postgresql-private-libs-15.14-1.module_el8.10.0+4041+afd30bb4.s390x.rpm</filename>
          <sum type="sha256">af9892969dc24e4a1b1efd86bb1416355f03c4ed40e6b368085964db4265e636</sum>
        </package>
        <package name="pgaudit" version="1.7.0" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="pgaudit-1.7.0-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>pgaudit-1.7.0-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">bebebc0b85b4d88d466cf43a44e5ae321c851b621377e2c96e1564cf00fd07bd</sum>
        </package>
        <package name="postgresql-static" version="15.14" release="1.module_el8.10.0+4041+afd30bb4" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el8.10.0+4041+afd30bb4.src.rpm">
          <filename>postgresql-static-15.14-1.module_el8.10.0+4041+afd30bb4.s390x.rpm</filename>
          <sum type="sha256">c52b178191d05f6840a134acc3ea5923a8cce3c6a78db0369156a4d068c56591</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="15.14" release="1.module_el8.10.0+4041+afd30bb4" epoch="0" arch="s390x" src="postgresql-15.14-1.module_el8.10.0+4041+afd30bb4.src.rpm">
          <filename>postgresql-upgrade-devel-15.14-1.module_el8.10.0+4041+afd30bb4.s390x.rpm</filename>
          <sum type="sha256">cb7113573ea12603fd698438745fa5ade5d5c3f5045137eb72a9fd9452acd441</sum>
        </package>
        <package name="postgres-decoderbufs" version="1.9.7" release="1.Final.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="postgres-decoderbufs-1.9.7-1.Final.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>postgres-decoderbufs-1.9.7-1.Final.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">d93f26982b8a0299bb5535e5aed623996c696a2eb2f9157554b4dae3f5cce2ef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15115</id>
    <title>Important: postgresql:12 security update</title>
    <issued date="2025-09-03 00:00:00"/>
    <updated date="2025-09-03 11:08:48"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:12 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715)
  * postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15115" id="RHSA-2025:15115" type="rhsa" title="RHSA-2025:15115"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8714" id="CVE-2025-8714" type="cve" title="CVE-2025-8714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8715" id="CVE-2025-8715" type="cve" title="CVE-2025-8715"/>
      <reference href="https://bugzilla.redhat.com/2388551" id="2388551" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2388553" id="2388553" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-15115.html" id="ALSA-2025:15115" type="self" title="ALSA-2025:15115"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="12" version="8100020250903101808" context="9edba152" arch="s390x"/>
        <package name="pgaudit" version="1.4.0" release="7.module_el8.9.0+3740+0e74851f.alma.1" epoch="0" arch="s390x" src="pgaudit-1.4.0-7.module_el8.9.0+3740+0e74851f.alma.1.src.rpm">
          <filename>pgaudit-1.4.0-7.module_el8.9.0+3740+0e74851f.alma.1.s390x.rpm</filename>
          <sum type="sha256">05a6d09d675776fb9ab998aa9fb52890d6c4ecc40957331844fd2c42f555ebca</sum>
        </package>
        <package name="pg_repack" version="1.4.6" release="3.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="pg_repack-1.4.6-3.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>pg_repack-1.4.6-3.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">14fdf29fe5dd7075aaf956b75aec2c5028f78ea8c06a19b461fa970284284047</sum>
        </package>
        <package name="postgresql" version="12.22" release="5.module_el8.10.0+4043+6cac3079" epoch="0" arch="s390x" src="postgresql-12.22-5.module_el8.10.0+4043+6cac3079.src.rpm">
          <filename>postgresql-12.22-5.module_el8.10.0+4043+6cac3079.s390x.rpm</filename>
          <sum type="sha256">281b842f7da09313849757936e9cb7f6089efade578c699e030753ba1e054bdc</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="12.22" release="5.module_el8.10.0+4043+6cac3079" epoch="0" arch="s390x" src="postgresql-12.22-5.module_el8.10.0+4043+6cac3079.src.rpm">
          <filename>postgresql-upgrade-devel-12.22-5.module_el8.10.0+4043+6cac3079.s390x.rpm</filename>
          <sum type="sha256">3aebd0cd56a2844aba6f1ea4aa80ff2931d995a0aa68903974f4eb7740a0aec4</sum>
        </package>
        <package name="postgresql-plpython3" version="12.22" release="5.module_el8.10.0+4043+6cac3079" epoch="0" arch="s390x" src="postgresql-12.22-5.module_el8.10.0+4043+6cac3079.src.rpm">
          <filename>postgresql-plpython3-12.22-5.module_el8.10.0+4043+6cac3079.s390x.rpm</filename>
          <sum type="sha256">85f372dcef21b4d72d906e9cc3b9b1f270d02bfd2ba01a9521c35e29ed82c8b6</sum>
        </package>
        <package name="postgres-decoderbufs" version="0.10.0" release="2.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="postgres-decoderbufs-0.10.0-2.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>postgres-decoderbufs-0.10.0-2.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">8cd16a1e3af9b7e12bf6df8db5735aeeb762e32913e95ec5dabcb05c6ac34f39</sum>
        </package>
        <package name="postgresql-server-devel" version="12.22" release="5.module_el8.10.0+4043+6cac3079" epoch="0" arch="s390x" src="postgresql-12.22-5.module_el8.10.0+4043+6cac3079.src.rpm">
          <filename>postgresql-server-devel-12.22-5.module_el8.10.0+4043+6cac3079.s390x.rpm</filename>
          <sum type="sha256">8e3448fe385dbf882d759bb7ffa39b4b86004f4d9acd105007f802ca708c01c1</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="12.22" release="5.module_el8.10.0+4043+6cac3079" epoch="0" arch="noarch" src="postgresql-12.22-5.module_el8.10.0+4043+6cac3079.src.rpm">
          <filename>postgresql-test-rpm-macros-12.22-5.module_el8.10.0+4043+6cac3079.noarch.rpm</filename>
          <sum type="sha256">93907a2bfeb09daf70a16d5887d285eea18cd5ca7abeca7495fb17470283b672</sum>
        </package>
        <package name="postgresql-contrib" version="12.22" release="5.module_el8.10.0+4043+6cac3079" epoch="0" arch="s390x" src="postgresql-12.22-5.module_el8.10.0+4043+6cac3079.src.rpm">
          <filename>postgresql-contrib-12.22-5.module_el8.10.0+4043+6cac3079.s390x.rpm</filename>
          <sum type="sha256">95f6fe3eebf55293aca622635c36c85be11c00fce67c62a48ea287861db7cd3f</sum>
        </package>
        <package name="postgresql-server" version="12.22" release="5.module_el8.10.0+4043+6cac3079" epoch="0" arch="s390x" src="postgresql-12.22-5.module_el8.10.0+4043+6cac3079.src.rpm">
          <filename>postgresql-server-12.22-5.module_el8.10.0+4043+6cac3079.s390x.rpm</filename>
          <sum type="sha256">9d28ab91cbe86d41d32bb1efd301ef3dd153201986c880a8ab1a8da203c97c24</sum>
        </package>
        <package name="postgresql-plperl" version="12.22" release="5.module_el8.10.0+4043+6cac3079" epoch="0" arch="s390x" src="postgresql-12.22-5.module_el8.10.0+4043+6cac3079.src.rpm">
          <filename>postgresql-plperl-12.22-5.module_el8.10.0+4043+6cac3079.s390x.rpm</filename>
          <sum type="sha256">a08c34a47c4ce6deec333cc53d30b9a4e0ca306adee7f412959ac500fc747921</sum>
        </package>
        <package name="postgresql-pltcl" version="12.22" release="5.module_el8.10.0+4043+6cac3079" epoch="0" arch="s390x" src="postgresql-12.22-5.module_el8.10.0+4043+6cac3079.src.rpm">
          <filename>postgresql-pltcl-12.22-5.module_el8.10.0+4043+6cac3079.s390x.rpm</filename>
          <sum type="sha256">afb7a249c5e4ecfd1c4d9e388727b26e7aca6a0fd350cdba24579e57660d823f</sum>
        </package>
        <package name="postgresql-docs" version="12.22" release="5.module_el8.10.0+4043+6cac3079" epoch="0" arch="s390x" src="postgresql-12.22-5.module_el8.10.0+4043+6cac3079.src.rpm">
          <filename>postgresql-docs-12.22-5.module_el8.10.0+4043+6cac3079.s390x.rpm</filename>
          <sum type="sha256">b06e7bfb0ab3027415b2632eba5bd999b341e8ab282778a4eb73ac07def5914b</sum>
        </package>
        <package name="postgresql-upgrade" version="12.22" release="5.module_el8.10.0+4043+6cac3079" epoch="0" arch="s390x" src="postgresql-12.22-5.module_el8.10.0+4043+6cac3079.src.rpm">
          <filename>postgresql-upgrade-12.22-5.module_el8.10.0+4043+6cac3079.s390x.rpm</filename>
          <sum type="sha256">bd22cac95bd9018e0bfab9381981165c6dc77a050c9324922b84175023cced88</sum>
        </package>
        <package name="postgresql-static" version="12.22" release="5.module_el8.10.0+4043+6cac3079" epoch="0" arch="s390x" src="postgresql-12.22-5.module_el8.10.0+4043+6cac3079.src.rpm">
          <filename>postgresql-static-12.22-5.module_el8.10.0+4043+6cac3079.s390x.rpm</filename>
          <sum type="sha256">c09b72469c9fe8eb97cf5eb51235656f87d59f1ad75926c2ae2baf88901b9e8b</sum>
        </package>
        <package name="postgresql-test" version="12.22" release="5.module_el8.10.0+4043+6cac3079" epoch="0" arch="s390x" src="postgresql-12.22-5.module_el8.10.0+4043+6cac3079.src.rpm">
          <filename>postgresql-test-12.22-5.module_el8.10.0+4043+6cac3079.s390x.rpm</filename>
          <sum type="sha256">d087d8a433190247db58cd8dcb4a69d2f186c3d3a1e04844913b6a09b63a2d9f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15123</id>
    <title>Moderate: httpd:2.4 security update</title>
    <issued date="2025-09-03 00:00:00"/>
    <updated date="2025-09-04 10:27:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>httpd:2.4 security update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.  

Security Fix(es):  

  * httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252)
  * httpd: mod_ssl: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048)
  * httpd: mod_proxy_http2: untrusted input from a client causes an assertion to fail in the Apache mod_proxy_http2 module (CVE-2025-49630)
  * httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15123" id="RHSA-2025:15123" type="rhsa" title="RHSA-2025:15123"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47252" id="CVE-2024-47252" type="cve" title="CVE-2024-47252"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23048" id="CVE-2025-23048" type="cve" title="CVE-2025-23048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49630" id="CVE-2025-49630" type="cve" title="CVE-2025-49630"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49812" id="CVE-2025-49812" type="cve" title="CVE-2025-49812"/>
      <reference href="https://bugzilla.redhat.com/2374571" id="2374571" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2374576" id="2374576" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2374578" id="2374578" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2374580" id="2374580" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-15123.html" id="ALSA-2025:15123" type="self" title="ALSA-2025:15123"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="httpd" stream="2.4" version="8100020250904082843" context="9edba152" arch="s390x"/>
        <package name="httpd-tools" version="2.4.37" release="65.module_el8.10.0+4044+ea5f78b1.5" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4044+ea5f78b1.5.src.rpm">
          <filename>httpd-tools-2.4.37-65.module_el8.10.0+4044+ea5f78b1.5.s390x.rpm</filename>
          <sum type="sha256">0c77d1ea24df2c2f6c846cf5005c22da4199076a9215ba44d47f8a8918022733</sum>
        </package>
        <package name="mod_ldap" version="2.4.37" release="65.module_el8.10.0+4044+ea5f78b1.5" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4044+ea5f78b1.5.src.rpm">
          <filename>mod_ldap-2.4.37-65.module_el8.10.0+4044+ea5f78b1.5.s390x.rpm</filename>
          <sum type="sha256">292bca31b23fae2c5c33a09de564b8ebe6cfe0e5beacbd52dfd8a9dbec3a2739</sum>
        </package>
        <package name="mod_proxy_html" version="2.4.37" release="65.module_el8.10.0+4044+ea5f78b1.5" epoch="1" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4044+ea5f78b1.5.src.rpm">
          <filename>mod_proxy_html-2.4.37-65.module_el8.10.0+4044+ea5f78b1.5.s390x.rpm</filename>
          <sum type="sha256">300eadd435fd848ea5945880c9065187a9026f199265dabfcef20147159b26da</sum>
        </package>
        <package name="mod_session" version="2.4.37" release="65.module_el8.10.0+4044+ea5f78b1.5" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4044+ea5f78b1.5.src.rpm">
          <filename>mod_session-2.4.37-65.module_el8.10.0+4044+ea5f78b1.5.s390x.rpm</filename>
          <sum type="sha256">33c41acf02cfb766091a63e45402975384003edb11bd52b50ba92eecccbf9e17</sum>
        </package>
        <package name="httpd-devel" version="2.4.37" release="65.module_el8.10.0+4044+ea5f78b1.5" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4044+ea5f78b1.5.src.rpm">
          <filename>httpd-devel-2.4.37-65.module_el8.10.0+4044+ea5f78b1.5.s390x.rpm</filename>
          <sum type="sha256">37856ed33f6e4d88750e3ecf1dc619545244e273b803eea90232b90f573a31be</sum>
        </package>
        <package name="mod_ssl" version="2.4.37" release="65.module_el8.10.0+4044+ea5f78b1.5" epoch="1" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4044+ea5f78b1.5.src.rpm">
          <filename>mod_ssl-2.4.37-65.module_el8.10.0+4044+ea5f78b1.5.s390x.rpm</filename>
          <sum type="sha256">5e45fc2505b8e21d025f482819fffdcf962b1ebeb808d793b7425d2ea3776e89</sum>
        </package>
        <package name="httpd" version="2.4.37" release="65.module_el8.10.0+4044+ea5f78b1.5" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4044+ea5f78b1.5.src.rpm">
          <filename>httpd-2.4.37-65.module_el8.10.0+4044+ea5f78b1.5.s390x.rpm</filename>
          <sum type="sha256">a2da3065a4271a240bc118d85a8fe76bb9b36a0d4071acd5899708cb1c4e2a5b</sum>
        </package>
        <package name="httpd-filesystem" version="2.4.37" release="65.module_el8.10.0+4044+ea5f78b1.5" epoch="0" arch="noarch" src="httpd-2.4.37-65.module_el8.10.0+4044+ea5f78b1.5.src.rpm">
          <filename>httpd-filesystem-2.4.37-65.module_el8.10.0+4044+ea5f78b1.5.noarch.rpm</filename>
          <sum type="sha256">a59aefc7cff071990b873dd2ab393bc9443855b4f9c37c3a60a59f5435df3543</sum>
        </package>
        <package name="mod_http2" version="1.15.7" release="10.module_el8.10.0+4044+ea5f78b1.4" epoch="0" arch="s390x" src="mod_http2-1.15.7-10.module_el8.10.0+4044+ea5f78b1.4.src.rpm">
          <filename>mod_http2-1.15.7-10.module_el8.10.0+4044+ea5f78b1.4.s390x.rpm</filename>
          <sum type="sha256">c256308658c159f70e495ea8a5dfa7994ef785ec39c4cd04bc1240252e901c16</sum>
        </package>
        <package name="httpd-manual" version="2.4.37" release="65.module_el8.10.0+4044+ea5f78b1.5" epoch="0" arch="noarch" src="httpd-2.4.37-65.module_el8.10.0+4044+ea5f78b1.5.src.rpm">
          <filename>httpd-manual-2.4.37-65.module_el8.10.0+4044+ea5f78b1.5.noarch.rpm</filename>
          <sum type="sha256">e46a48b2afaa010b7e04845a3a55d0059f2f0d1f1c2d09ba5d9e33416b74ed0c</sum>
        </package>
        <package name="mod_md" version="2.0.8" release="8.module_el8.6.0+3031+fb177b09" epoch="1" arch="s390x" src="mod_md-2.0.8-8.module_el8.6.0+3031+fb177b09.src.rpm">
          <filename>mod_md-2.0.8-8.module_el8.6.0+3031+fb177b09.s390x.rpm</filename>
          <sum type="sha256">e47754aea99df8718074dd3d1df288b448b0af9d0ba4f0f8c6a3b5c8a164a1a7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1517</id>
    <title>Moderate: libxml2 security update</title>
    <issued date="2025-02-17 00:00:00"/>
    <updated date="2025-02-17 07:27:22"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxml: use-after-free in xmlXIncludeAddNode (CVE-2022-49043)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1517" id="RHSA-2025:1517" type="rhsa" title="RHSA-2025:1517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-49043" id="CVE-2022-49043" type="cve" title="CVE-2022-49043"/>
      <reference href="https://bugzilla.redhat.com/2342118" id="2342118" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1517.html" id="ALSA-2025:1517" type="self" title="ALSA-2025:1517"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libxml2-devel" version="2.9.7" release="18.el8_10.2" epoch="0" arch="s390x" src="libxml2-2.9.7-18.el8_10.2.src.rpm">
          <filename>libxml2-devel-2.9.7-18.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">e2747afb2db65958c2b34b57c31b77b20796974431592dac3ee918d2f0b99950</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15687</id>
    <title>Moderate: php:8.2 security update</title>
    <issued date="2025-09-11 00:00:00"/>
    <updated date="2025-09-29 08:55:43"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>php:8.2 security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  

Security Fix(es):  

  * php: Leak partial content of the heap through heap buffer over-read in mysqlnd (CVE-2024-8929)
  * php: Single byte overread with convert.quoted-printable-decode filter (CVE-2024-11233)
  * php: Configuring a proxy in a stream context might allow for CRLF injection in URIs (CVE-2024-11234)
  * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217)
  * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736)
  * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734)
  * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219)
  * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15687" id="RHSA-2025:15687" type="rhsa" title="RHSA-2025:15687"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11233" id="CVE-2024-11233" type="cve" title="CVE-2024-11233"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11234" id="CVE-2024-11234" type="cve" title="CVE-2024-11234"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8929" id="CVE-2024-8929" type="cve" title="CVE-2024-8929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1217" id="CVE-2025-1217" type="cve" title="CVE-2025-1217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1219" id="CVE-2025-1219" type="cve" title="CVE-2025-1219"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1734" id="CVE-2025-1734" type="cve" title="CVE-2025-1734"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1736" id="CVE-2025-1736" type="cve" title="CVE-2025-1736"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1861" id="CVE-2025-1861" type="cve" title="CVE-2025-1861"/>
      <reference href="https://bugzilla.redhat.com/2327960" id="2327960" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328521" id="2328521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328523" id="2328523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2355917" id="2355917" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356041" id="2356041" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356042" id="2356042" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356043" id="2356043" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356046" id="2356046" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-15687.html" id="ALSA-2025:15687" type="self" title="ALSA-2025:15687"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="php" stream="8.2" version="8100020240411103139" context="eb0869e2" arch="s390x"/>
        <package name="php-pecl-rrd" version="2.0.3" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="php-pecl-rrd-2.0.3-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pecl-rrd-2.0.3-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">093a9af91b3963aeb6939d457d8552f7939985a934a7d29fc26882787160c0a4</sum>
        </package>
        <package name="php-intl" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-intl-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">10987cd56aaf356f7eecb5a21043d0f36d73debd3b4673d474e666a520d746d5</sum>
        </package>
        <package name="apcu-panel" version="5.1.23" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="noarch" src="php-pecl-apcu-5.1.23-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>apcu-panel-5.1.23-1.module_el8.10.0+3796+30ed3ef7.noarch.rpm</filename>
          <sum type="sha256">1deada493d8257042f0097d5ac685473d9995b4500854e4c6a0e2ac9a175fa04</sum>
        </package>
        <package name="php-pecl-apcu-devel" version="5.1.23" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.23-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pecl-apcu-devel-5.1.23-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">2b18052e97292f4a7381dcbb7589c87b1e6fb49d93c19c334bcf52bb6ed3b955</sum>
        </package>
        <package name="php-xml" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-xml-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">2d0408862bad021cfb1a70de4e6bc3612539a618868eb859d6bcdd64a2824e0f</sum>
        </package>
        <package name="php-dba" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-dba-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">337f7c42a2b96c50a7afc9f22ac75808e21dc3ebf930862bbdbd5da470e39197</sum>
        </package>
        <package name="php-gd" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-gd-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">3a099d32fb9f979d695a7b3346dcc8823311f0e145f093ac0aac92cea0589ede</sum>
        </package>
        <package name="php-fpm" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-fpm-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">3c19b11336fd3b6aad1a3902727727f99859490b5313d3c0643127e09e43f008</sum>
        </package>
        <package name="php-enchant" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-enchant-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">54addcfcd21f880d951d8c5ab786adf653e04d0f8824b7caa0c1d1c529a0e2cf</sum>
        </package>
        <package name="php-mbstring" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-mbstring-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">562b58aac1a29244e9543d79c27eab667649a99e6a3a040fb532aaa84aa350fb</sum>
        </package>
        <package name="libzip-devel" version="1.7.3" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="libzip-1.7.3-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>libzip-devel-1.7.3-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">5ea1e67460a84c07adc7d61cca9fc45bb50b3184cc7d063c4fc9658971b6f8d1</sum>
        </package>
        <package name="php-devel" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-devel-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">63e552ac7efebd9cf6edf4c9e23f6d06d41036ca655b4408701d004a87103fd0</sum>
        </package>
        <package name="php-common" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-common-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">6968aacd4295458120024026ed71c607ba5b2f2c2bc3cf193623f524eddb8e4d</sum>
        </package>
        <package name="php-pdo" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-pdo-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">6e8f188554716c86a3a5819c2c0d40d68533fdf5f25c56a2c91747bdfc27eba2</sum>
        </package>
        <package name="php-odbc" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-odbc-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">6eaa338f7d77294665210a91b19f8e80324976b5a08835ebb1c951a715c892f3</sum>
        </package>
        <package name="libzip-tools" version="1.7.3" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="libzip-1.7.3-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>libzip-tools-1.7.3-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">7374f8cbd2e20ece40e87c7aae7e84b9843a986a938e16d51ec180333d948002</sum>
        </package>
        <package name="php-mysqlnd" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-mysqlnd-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">786e566a593ae7e53cd7f2cf4d65afa1bfa940c560ae02335772b74c23a343a7</sum>
        </package>
        <package name="php-pecl-xdebug3" version="3.2.2" release="2.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="php-pecl-xdebug3-3.2.2-2.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pecl-xdebug3-3.2.2-2.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">80da4e7cbeb2b5e3b6bf6e9dacd2e33e570fecdd8646fcd94fbfb2573e17a172</sum>
        </package>
        <package name="php-bcmath" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-bcmath-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">8c382e5b1da6384e1d411b0ca04f3f2fc128308dd2f619b7638ed8619371f12d</sum>
        </package>
        <package name="php-opcache" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-opcache-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">9a51ac510abb3c90d8f4d771716cd2f9557739f515a44b12d7c33e6032524048</sum>
        </package>
        <package name="php" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">a5ba1d7e0dab511c3dbd228455f9292a3cc3254f7166d4ec186397100f12861b</sum>
        </package>
        <package name="php-gmp" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-gmp-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">a60193238a507a225128aaa4cfc003ac85040dabdd00311b9c5b9ee94e972d21</sum>
        </package>
        <package name="php-soap" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-soap-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">ac7f9a034afd10d3d72a80f9dafade7f3ce235f60b2da34fdf837c53a66794dd</sum>
        </package>
        <package name="php-embedded" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-embedded-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">b1ce66edf85325a4c58a2eba1d028b5c074915e48c9d01567ba7f8ce8f5d48aa</sum>
        </package>
        <package name="php-pear" version="1.10.14" release="1.module_el8.10.0+3796+30ed3ef7" epoch="1" arch="noarch" src="php-pear-1.10.14-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pear-1.10.14-1.module_el8.10.0+3796+30ed3ef7.noarch.rpm</filename>
          <sum type="sha256">b77d08e8c3d38704e98139a7653cc3657d21f49aed4c245f85193ad875e74825</sum>
        </package>
        <package name="php-pecl-apcu" version="5.1.23" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.23-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pecl-apcu-5.1.23-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">c4d4948fd8c0bbfed5894ae768adbe43b853cd5bed8c3abc67142f6731c57e79</sum>
        </package>
        <package name="php-ldap" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-ldap-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">ca7d73e904e04edd56067554c9707b209003b72548e1052d493c66a6e5296631</sum>
        </package>
        <package name="libzip" version="1.7.3" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="libzip-1.7.3-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>libzip-1.7.3-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">cff9d04f58fcb8d7545231b9d9ec3e446a7db9b61ccdb40778c605e752aa4bb2</sum>
        </package>
        <package name="php-ffi" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-ffi-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">d45b40e9c5b4e7e532c9ad21e312e0e0d6e402128dc9d199555e94048a7dadfb</sum>
        </package>
        <package name="php-snmp" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-snmp-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">e0e3fc3c618082672c3cbcafcfc0866bf129f070cb97e394a3f609d7fed8b3ee</sum>
        </package>
        <package name="php-pecl-zip" version="1.22.3" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="php-pecl-zip-1.22.3-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pecl-zip-1.22.3-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">e9fc70bd5243e8627c19553ca909b059905ce54432be8d736d1a7f39e1e0a41b</sum>
        </package>
        <package name="php-pgsql" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-pgsql-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">ebe6732117fe8669cb71a95f571373f1837ed4b7812888992216da215b777b58</sum>
        </package>
        <package name="php-dbg" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-dbg-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">ec7026e3d432db60cf4ad74278d1e858fd0d88e0a272af048e4832fcda4cdb0e</sum>
        </package>
        <package name="php-cli" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-cli-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">f4a60872a6ba7bdeb31a7b455949112406ebc3343a289e6b91a07ad11f433799</sum>
        </package>
        <package name="php-process" version="8.2.28" release="1.module_el8.10.0+4046+958a243a" epoch="0" arch="s390x" src="php-8.2.28-1.module_el8.10.0+4046+958a243a.src.rpm">
          <filename>php-process-8.2.28-1.module_el8.10.0+4046+958a243a.s390x.rpm</filename>
          <sum type="sha256">fcdf18fc089db715b028976e2f7e78cf97f7d3d7952af459ba24a2c8f75d0582</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15702</id>
    <title>Important: cups security update</title>
    <issued date="2025-09-11 00:00:00"/>
    <updated date="2025-09-12 09:35:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>cups security update</summary>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer for  
Linux, UNIX, and similar operating systems.  

Security Fix(es):  

  * cups: Authentication Bypass in CUPS Authorization Handling (CVE-2025-58060)


For more details about the security issue(s), including the impact, a CVSS  
score, acknowledgments, and other related information, refer to the CVE page(s)  
listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15702" id="RHSA-2025:15702" type="rhsa" title="RHSA-2025:15702"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58060" id="CVE-2025-58060" type="cve" title="CVE-2025-58060"/>
      <reference href="https://bugzilla.redhat.com/2392595" id="2392595" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-15702.html" id="ALSA-2025:15702" type="self" title="ALSA-2025:15702"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="cups-client" version="2.2.6" release="63.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-63.el8_10.src.rpm">
          <filename>cups-client-2.2.6-63.el8_10.s390x.rpm</filename>
          <sum type="sha256">46af27f38f90e20c18095923b162b3cfcdd5d3cad0360681cb478959a1b1d3a9</sum>
        </package>
        <package name="cups-lpd" version="2.2.6" release="63.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-63.el8_10.src.rpm">
          <filename>cups-lpd-2.2.6-63.el8_10.s390x.rpm</filename>
          <sum type="sha256">50da0ff563306ea63eeb32b49e35da7ae0b753ef257bf765201c242c6bdc60fc</sum>
        </package>
        <package name="cups-ipptool" version="2.2.6" release="63.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-63.el8_10.src.rpm">
          <filename>cups-ipptool-2.2.6-63.el8_10.s390x.rpm</filename>
          <sum type="sha256">6b98679803c5d57e66e2c841e94f50aa31474d90b26179fbff7356a17be3f25a</sum>
        </package>
        <package name="cups" version="2.2.6" release="63.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-63.el8_10.src.rpm">
          <filename>cups-2.2.6-63.el8_10.s390x.rpm</filename>
          <sum type="sha256">9526a8b52dfb7db7e51ddda4b95d25e3428e82df8fef7284b22e36c28f80ad7e</sum>
        </package>
        <package name="cups-filesystem" version="2.2.6" release="63.el8_10" epoch="1" arch="noarch" src="cups-2.2.6-63.el8_10.src.rpm">
          <filename>cups-filesystem-2.2.6-63.el8_10.noarch.rpm</filename>
          <sum type="sha256">a936973d8cdc714e52d4f841647c408bc74b758cd77ca21e3f4861be1f2ea03e</sum>
        </package>
        <package name="cups-devel" version="2.2.6" release="63.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-63.el8_10.src.rpm">
          <filename>cups-devel-2.2.6-63.el8_10.s390x.rpm</filename>
          <sum type="sha256">dc774bace2f265bc779f5885f423c9baa4f67535bfe7d03dff1e97504ded027b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1582</id>
    <title>Moderate: nodejs:18 security update</title>
    <issued date="2025-02-17 00:00:00"/>
    <updated date="2025-02-18 12:10:34"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs:18 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * undici: Undici Uses Insufficiently Random Values (CVE-2025-22150)
  * nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1582" id="RHSA-2025:1582" type="rhsa" title="RHSA-2025:1582"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22150" id="CVE-2025-22150" type="cve" title="CVE-2025-22150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23085" id="CVE-2025-23085" type="cve" title="CVE-2025-23085"/>
      <reference href="https://bugzilla.redhat.com/2339176" id="2339176" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2342618" id="2342618" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1582.html" id="ALSA-2025:1582" type="self" title="ALSA-2025:1582"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="nodejs" stream="18" version="8100020250217150114" context="9edba152" arch="s390x"/>
        <package name="nodejs-full-i18n" version="18.20.6" release="1.module_el8.10.0+3960+fcfbf683" epoch="1" arch="s390x" src="nodejs-18.20.6-1.module_el8.10.0+3960+fcfbf683.src.rpm">
          <filename>nodejs-full-i18n-18.20.6-1.module_el8.10.0+3960+fcfbf683.s390x.rpm</filename>
          <sum type="sha256">0bc09eacd58b6b82b4241264d8ad062f2f2b39932417dd08300b3f550c0656b5</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.8.0+3613+1ed8c91d" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.8.0+3613+1ed8c91d.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.8.0+3613+1ed8c91d.noarch.rpm</filename>
          <sum type="sha256">1de153a1170baeaa24f02ebd86d32d508ac48ea9ed54e2a70c5250a81952a65b</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el8.10.0+3961+6a788e57" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.10.0+3961+6a788e57.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el8.10.0+3961+6a788e57.noarch.rpm</filename>
          <sum type="sha256">46dc3ddb344e0ffee7331f57a2f7b7fc674e9abd901af46cba10926f0c9b0e9d</sum>
        </package>
        <package name="npm" version="10.8.2" release="1.18.20.6.1.module_el8.10.0+3960+fcfbf683" epoch="1" arch="s390x" src="nodejs-18.20.6-1.module_el8.10.0+3960+fcfbf683.src.rpm">
          <filename>npm-10.8.2-1.18.20.6.1.module_el8.10.0+3960+fcfbf683.s390x.rpm</filename>
          <sum type="sha256">77731edbd4f31484e9ecda0682872cc2652936929153fdc36053204e370f8ef9</sum>
        </package>
        <package name="nodejs" version="18.20.6" release="1.module_el8.10.0+3960+fcfbf683" epoch="1" arch="s390x" src="nodejs-18.20.6-1.module_el8.10.0+3960+fcfbf683.src.rpm">
          <filename>nodejs-18.20.6-1.module_el8.10.0+3960+fcfbf683.s390x.rpm</filename>
          <sum type="sha256">9207a3c4c0e5563b1c47533d70671db18563517b810169a4bbf52718aecd1678</sum>
        </package>
        <package name="nodejs-devel" version="18.20.6" release="1.module_el8.10.0+3960+fcfbf683" epoch="1" arch="s390x" src="nodejs-18.20.6-1.module_el8.10.0+3960+fcfbf683.src.rpm">
          <filename>nodejs-devel-18.20.6-1.module_el8.10.0+3960+fcfbf683.s390x.rpm</filename>
          <sum type="sha256">b488be3562984a019c2b6892149e6e8f4cbd2e2831c304a2c07d059deb6843bd</sum>
        </package>
        <package name="nodejs-docs" version="18.20.6" release="1.module_el8.10.0+3960+fcfbf683" epoch="1" arch="noarch" src="nodejs-18.20.6-1.module_el8.10.0+3960+fcfbf683.src.rpm">
          <filename>nodejs-docs-18.20.6-1.module_el8.10.0+3960+fcfbf683.noarch.rpm</filename>
          <sum type="sha256">e3f97969158c9c89258d3173e2e0026c0776c4e1ea7f13c773abb029434b541a</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el8.10.0+3961+6a788e57" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.10.0+3961+6a788e57.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el8.10.0+3961+6a788e57.noarch.rpm</filename>
          <sum type="sha256">f68cc5d7a383cbee17ad43acc466061915b2b7309b6696369168e2a3c4a7158c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15904</id>
    <title>Important: container-tools:rhel8 security update</title>
    <issued date="2025-09-16 00:00:00"/>
    <updated date="2025-09-17 08:50:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>container-tools:rhel8 security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.  

Security Fix(es):  

  * podman: Podman kube play command may overwrite host files (CVE-2025-9566)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15904" id="RHSA-2025:15904" type="rhsa" title="RHSA-2025:15904"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9566" id="CVE-2025-9566" type="cve" title="CVE-2025-9566"/>
      <reference href="https://bugzilla.redhat.com/2393152" id="2393152" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-15904.html" id="ALSA-2025:15904" type="self" title="ALSA-2025:15904"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="container-tools" stream="rhel8" version="8100020250617080424" context="20125149" arch="s390x"/>
        <package name="containernetworking-plugins" version="1.4.0" release="6.module_el8.10.0+4016+efd18bf8" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-6.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>containernetworking-plugins-1.4.0-6.module_el8.10.0+4016+efd18bf8.s390x.rpm</filename>
          <sum type="sha256">01ce475d6b55bfde8145f5504470f60e087576049049ad624b54efcd0787fe6a</sum>
        </package>
        <package name="python3-podman" version="4.9.0" release="3.module_el8.10.0+4016+efd18bf8" epoch="0" arch="noarch" src="python-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>python3-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.noarch.rpm</filename>
          <sum type="sha256">087549428650af46817206c5d5ddd54bace235c2932b3e2004ac93e3b466cb6d</sum>
        </package>
        <package name="buildah-tests" version="1.33.12" release="2.module_el8.10.0+4047+545787c4" epoch="2" arch="s390x" src="buildah-1.33.12-2.module_el8.10.0+4047+545787c4.src.rpm">
          <filename>buildah-tests-1.33.12-2.module_el8.10.0+4047+545787c4.s390x.rpm</filename>
          <sum type="sha256">09f7f79e84dcd3bbb9984992a62d4af873ab9511e8e887d534ced096281669bd</sum>
        </package>
        <package name="runc" version="1.1.12" release="6.module_el8.10.0+3959+b8dc5e6a" epoch="1" arch="s390x" src="runc-1.1.12-6.module_el8.10.0+3959+b8dc5e6a.src.rpm">
          <filename>runc-1.1.12-6.module_el8.10.0+3959+b8dc5e6a.s390x.rpm</filename>
          <sum type="sha256">0cb9a8dbd3dfd8c842cd2e0ea2e3f51864aba043d336afcab8ee0547d0b3c0d0</sum>
        </package>
        <package name="crun" version="1.14.3" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="crun-1.14.3-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>crun-1.14.3-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">1803f41cb3e0828fe770ce7de14a940b9fad458fd84f420baab724674e2041e7</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="23.module_el8.10.0+4047+545787c4" epoch="4" arch="s390x" src="podman-4.9.4-23.module_el8.10.0+4047+545787c4.src.rpm">
          <filename>podman-remote-4.9.4-23.module_el8.10.0+4047+545787c4.s390x.rpm</filename>
          <sum type="sha256">1ae130b6d7250cdb0e249c28c57f1a4791e4652d5dd743fed4d90a66efba02d9</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="2.module_el8.10.0+4023+db236c53" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>libslirp-4.4.0-2.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">1fb16f13bc4c318fd2714e829a188f97facb4a31222911e078f5604ab7bcd2d9</sum>
        </package>
        <package name="netavark" version="1.10.3" release="1.module_el8.10.0+3926+f12484f5" epoch="2" arch="s390x" src="netavark-1.10.3-1.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>netavark-1.10.3-1.module_el8.10.0+3926+f12484f5.s390x.rpm</filename>
          <sum type="sha256">229bc7970f251b961853b29e4f6c9b17e6fd309418b96ea955e2eaeba74fc773</sum>
        </package>
        <package name="podman-plugins" version="4.9.4" release="23.module_el8.10.0+4047+545787c4" epoch="4" arch="s390x" src="podman-4.9.4-23.module_el8.10.0+4047+545787c4.src.rpm">
          <filename>podman-plugins-4.9.4-23.module_el8.10.0+4047+545787c4.s390x.rpm</filename>
          <sum type="sha256">26fea5779cb48d0c1508e859a621225365f4d20f3472e89a09fae9fa05fe1ed3</sum>
        </package>
        <package name="buildah" version="1.33.12" release="2.module_el8.10.0+4023+db236c53" epoch="2" arch="s390x" src="buildah-1.33.12-2.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>buildah-1.33.12-2.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">30fb3797a34a298dc7f8d5f71599f1e45be546856ef6e3df45e84f107c20a15b</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.10" release="1.module_el8.10.0+3909+6e1c1eb7" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">335953655f25bd1ac71964d14ffc9ab6adaa73033e74e2b3a851b88683283196</sum>
        </package>
        <package name="conmon" version="2.1.10" release="1.module_el8.10.0+3970+8445edf6" epoch="3" arch="s390x" src="conmon-2.1.10-1.module_el8.10.0+3970+8445edf6.src.rpm">
          <filename>conmon-2.1.10-1.module_el8.10.0+3970+8445edf6.s390x.rpm</filename>
          <sum type="sha256">36afcd93148e54bc82b311c3f39d7c1189680ddd0e1865314b0f0346b6ae4650</sum>
        </package>
        <package name="container-selinux" version="2.229.0" release="2.module_el8.10.0+3909+6e1c1eb7" epoch="2" arch="noarch" src="container-selinux-2.229.0-2.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>container-selinux-2.229.0-2.module_el8.10.0+3909+6e1c1eb7.noarch.rpm</filename>
          <sum type="sha256">39df1f8e08cf61f1d3399b9d32cdaa93153cdbd001ff380fa9145a2012d1190c</sum>
        </package>
        <package name="python3-criu" version="3.18" release="5.module_el8.10.0+4023+db236c53" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>python3-criu-3.18-5.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">63a762e1b6963204cd36602216730858805e405178999018be7f659aea67dd29</sum>
        </package>
        <package name="udica" version="0.2.6" release="21.module_el8.10.0+3926+f12484f5" epoch="0" arch="noarch" src="udica-0.2.6-21.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>udica-0.2.6-21.module_el8.10.0+3926+f12484f5.noarch.rpm</filename>
          <sum type="sha256">6926e34b1965f9f26dd6b35b2d9809b5e337f117e6b333fb99c624461afd91d8</sum>
        </package>
        <package name="podman-gvproxy" version="4.9.4" release="23.module_el8.10.0+4047+545787c4" epoch="4" arch="s390x" src="podman-4.9.4-23.module_el8.10.0+4047+545787c4.src.rpm">
          <filename>podman-gvproxy-4.9.4-23.module_el8.10.0+4047+545787c4.s390x.rpm</filename>
          <sum type="sha256">6d3a2b3ae1772f707a10051ea0b8794ddea94e1b86ba00946e9aac350deac29d</sum>
        </package>
        <package name="fuse-overlayfs" version="1.13" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="s390x" src="fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">8118067655696462cee9dfc553f57e4501b089590d837bc88091716914c8d3f5</sum>
        </package>
        <package name="podman-catatonit" version="4.9.4" release="23.module_el8.10.0+4047+545787c4" epoch="4" arch="s390x" src="podman-4.9.4-23.module_el8.10.0+4047+545787c4.src.rpm">
          <filename>podman-catatonit-4.9.4-23.module_el8.10.0+4047+545787c4.s390x.rpm</filename>
          <sum type="sha256">86e01716d3b10df7788242e22a3cb84893a7f324e66a847b4aa9147887338324</sum>
        </package>
        <package name="criu-devel" version="3.18" release="5.module_el8.10.0+4023+db236c53" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>criu-devel-3.18-5.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">8757f0644c7ee9f01b51ce4e2b82136a47b2ed724f05b1c0b140cef98db701ab</sum>
        </package>
        <package name="toolbox" version="0.0.99.5" release="2.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>toolbox-0.0.99.5-2.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">8df71d94e465a66228dced33f5189e4789bc2ac13946b5e79a11e8091af4f33e</sum>
        </package>
        <package name="containers-common" version="1" release="82.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="s390x" src="containers-common-1-82.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>containers-common-1-82.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">98eb0c5785e1d53743858e76ac35aab0b199a918b88c02e20aa6f64cc6f89618</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="23.module_el8.10.0+4047+545787c4" epoch="4" arch="noarch" src="podman-4.9.4-23.module_el8.10.0+4047+545787c4.src.rpm">
          <filename>podman-docker-4.9.4-23.module_el8.10.0+4047+545787c4.noarch.rpm</filename>
          <sum type="sha256">994a939b6aef74741ec5a0d0fd0532496627fee59f519d6257f51e05b178edd3</sum>
        </package>
        <package name="aardvark-dns" version="1.10.1" release="2.module_el8.10.0+4047+545787c4" epoch="2" arch="s390x" src="aardvark-dns-1.10.1-2.module_el8.10.0+4047+545787c4.src.rpm">
          <filename>aardvark-dns-1.10.1-2.module_el8.10.0+4047+545787c4.s390x.rpm</filename>
          <sum type="sha256">9e7e5cc9877a685769ee43c72dc867d179fe027d41775a01f1e73cfe366872ef</sum>
        </package>
        <package name="skopeo-tests" version="1.14.5" release="4.module_el8.10.0+4023+db236c53" epoch="2" arch="s390x" src="skopeo-1.14.5-4.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>skopeo-tests-1.14.5-4.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">ac505fbca1e13a7517938a3896b2a3d7654ec2efb1b3b9fe2b8eaeb9737a1921</sum>
        </package>
        <package name="podman" version="4.9.4" release="23.module_el8.10.0+4047+545787c4" epoch="4" arch="s390x" src="podman-4.9.4-23.module_el8.10.0+4047+545787c4.src.rpm">
          <filename>podman-4.9.4-23.module_el8.10.0+4047+545787c4.s390x.rpm</filename>
          <sum type="sha256">ae9c6c9112bbb06c345a125104910b8581b9a71a4d9f7c1fac79f2dd238d8b6b</sum>
        </package>
        <package name="crit" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>crit-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">aeb27c5bcec90a9452f93ad79ef0d4f00ecedf4442f32f9bedb481509db12683</sum>
        </package>
        <package name="criu" version="3.18" release="5.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>criu-3.18-5.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">bdaddee931f3746ac7472d9ccee504acd0be805433b3d160b1e7caf8bf361cb8</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="23.module_el8.10.0+4047+545787c4" epoch="4" arch="s390x" src="podman-4.9.4-23.module_el8.10.0+4047+545787c4.src.rpm">
          <filename>podman-tests-4.9.4-23.module_el8.10.0+4047+545787c4.s390x.rpm</filename>
          <sum type="sha256">d2d8e3098cc851bd69d0410364159573a533b62a6f9338a7c63e5953c27decc4</sum>
        </package>
        <package name="slirp4netns" version="1.2.3" release="1.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="slirp4netns-1.2.3-1.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>slirp4netns-1.2.3-1.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">d750de35a600a89a6edbd8c2178e292766005ce3339a84c33adecfdef70e7a57</sum>
        </package>
        <package name="criu-libs" version="3.18" release="5.module_el8.10.0+3909+6e1c1eb7" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>criu-libs-3.18-5.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">e0d274cf0f5db049af121f476769c0d601e70c7566ea3aec4e608aca5317b4eb</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.5" release="2.module_el8.10.0+3909+6e1c1eb7" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>toolbox-tests-0.0.99.5-2.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">e5fff3c3d6b6f6023e100d0922c2e8096f567b7f5cfbb57efe322eadd2f43465</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="2.module_el8.10.0+3901+4b80ecd7" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>libslirp-devel-4.4.0-2.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">ea8f3e70f2a1a7886cb1abcdb80e7b2ea3cf36a174dc5158142c286d69fae136</sum>
        </package>
        <package name="cockpit-podman" version="84.1" release="1.module_el8.10.0+4016+efd18bf8" epoch="0" arch="noarch" src="cockpit-podman-84.1-1.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>cockpit-podman-84.1-1.module_el8.10.0+4016+efd18bf8.noarch.rpm</filename>
          <sum type="sha256">f03872dff2aa7d3da8ebcebbb3adc464fd859f8c0fa9c83ece498edb0d3ce572</sum>
        </package>
        <package name="skopeo" version="1.14.5" release="4.module_el8.10.0+4047+545787c4" epoch="2" arch="s390x" src="skopeo-1.14.5-4.module_el8.10.0+4047+545787c4.src.rpm">
          <filename>skopeo-1.14.5-4.module_el8.10.0+4047+545787c4.s390x.rpm</filename>
          <sum type="sha256">fe42f3304ffdf22ba5124ba854e84c62f82a5be95b96d5e317ead1a656e387a5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1611</id>
    <title>Important: nodejs:22 security update</title>
    <issued date="2025-02-17 00:00:00"/>
    <updated date="2025-02-18 12:07:58"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:22 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * undici: Undici Uses Insufficiently Random Values (CVE-2025-22150)
  * nodejs: Node.js Worker Thread Exposure via Diagnostics Channel (CVE-2025-23083)
  * nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1611" id="RHSA-2025:1611" type="rhsa" title="RHSA-2025:1611"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22150" id="CVE-2025-22150" type="cve" title="CVE-2025-22150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23083" id="CVE-2025-23083" type="cve" title="CVE-2025-23083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23085" id="CVE-2025-23085" type="cve" title="CVE-2025-23085"/>
      <reference href="https://bugzilla.redhat.com/2339176" id="2339176" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339392" id="2339392" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2342618" id="2342618" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1611.html" id="ALSA-2025:1611" type="self" title="ALSA-2025:1611"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="nodejs" stream="22" version="8100020250218064500" context="9c84b808" arch="s390x"/>
        <package name="nodejs-libs" version="22.13.1" release="1.module_el8.10.0+3961+6a788e57" epoch="1" arch="s390x" src="nodejs-22.13.1-1.module_el8.10.0+3961+6a788e57.src.rpm">
          <filename>nodejs-libs-22.13.1-1.module_el8.10.0+3961+6a788e57.s390x.rpm</filename>
          <sum type="sha256">03e2ef2c2b37dbdf108f2eba6b2ceee0e531cf16ab5f57037c4d6827f9e1e4a7</sum>
        </package>
        <package name="v8-12.4-devel" version="12.4.254.21" release="1.22.13.1.1.module_el8.10.0+3961+6a788e57" epoch="3" arch="s390x" src="nodejs-22.13.1-1.module_el8.10.0+3961+6a788e57.src.rpm">
          <filename>v8-12.4-devel-12.4.254.21-1.22.13.1.1.module_el8.10.0+3961+6a788e57.s390x.rpm</filename>
          <sum type="sha256">18da70306ebe2d4c3124decb7dec6879b3912d8fbb99f7d6b47c52c263d1f14b</sum>
        </package>
        <package name="nodejs-docs" version="22.13.1" release="1.module_el8.10.0+3961+6a788e57" epoch="1" arch="noarch" src="nodejs-22.13.1-1.module_el8.10.0+3961+6a788e57.src.rpm">
          <filename>nodejs-docs-22.13.1-1.module_el8.10.0+3961+6a788e57.noarch.rpm</filename>
          <sum type="sha256">18f0b1a437341350647ac6f533cfa35dfa53fa152b0aacc27407471651497bcb</sum>
        </package>
        <package name="nodejs" version="22.13.1" release="1.module_el8.10.0+3961+6a788e57" epoch="1" arch="s390x" src="nodejs-22.13.1-1.module_el8.10.0+3961+6a788e57.src.rpm">
          <filename>nodejs-22.13.1-1.module_el8.10.0+3961+6a788e57.s390x.rpm</filename>
          <sum type="sha256">1a1ad544cf6b03a84fa9380da5ef6354324ed1e2f6cdcfe5c577cfba576e5d17</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.8.0+3613+1ed8c91d" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.8.0+3613+1ed8c91d.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.8.0+3613+1ed8c91d.noarch.rpm</filename>
          <sum type="sha256">1de153a1170baeaa24f02ebd86d32d508ac48ea9ed54e2a70c5250a81952a65b</sum>
        </package>
        <package name="nodejs-full-i18n" version="22.13.1" release="1.module_el8.10.0+3961+6a788e57" epoch="1" arch="s390x" src="nodejs-22.13.1-1.module_el8.10.0+3961+6a788e57.src.rpm">
          <filename>nodejs-full-i18n-22.13.1-1.module_el8.10.0+3961+6a788e57.s390x.rpm</filename>
          <sum type="sha256">3f6283f240ff1c6ae9da6488631ebb1046745fa0374ae91dec1be5e11b33e0e4</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el8.10.0+3961+6a788e57" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.10.0+3961+6a788e57.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el8.10.0+3961+6a788e57.noarch.rpm</filename>
          <sum type="sha256">46dc3ddb344e0ffee7331f57a2f7b7fc674e9abd901af46cba10926f0c9b0e9d</sum>
        </package>
        <package name="nodejs-devel" version="22.13.1" release="1.module_el8.10.0+3961+6a788e57" epoch="1" arch="s390x" src="nodejs-22.13.1-1.module_el8.10.0+3961+6a788e57.src.rpm">
          <filename>nodejs-devel-22.13.1-1.module_el8.10.0+3961+6a788e57.s390x.rpm</filename>
          <sum type="sha256">a21ebfae638b63508d0ca47b3d191200b143c90de61432783ba3d0e53344bb5b</sum>
        </package>
        <package name="npm" version="10.9.2" release="1.22.13.1.1.module_el8.10.0+3961+6a788e57" epoch="1" arch="s390x" src="nodejs-22.13.1-1.module_el8.10.0+3961+6a788e57.src.rpm">
          <filename>npm-10.9.2-1.22.13.1.1.module_el8.10.0+3961+6a788e57.s390x.rpm</filename>
          <sum type="sha256">b3ced75dcef759e688e549c781af9f2bd4bd6bbc2c987e194f78cd41030b4201</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el8.10.0+3961+6a788e57" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.10.0+3961+6a788e57.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el8.10.0+3961+6a788e57.noarch.rpm</filename>
          <sum type="sha256">f68cc5d7a383cbee17ad43acc466061915b2b7309b6696369168e2a3c4a7158c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:16260</id>
    <title>Important: firefox security update</title>
    <issued date="2025-09-22 00:00:00"/>
    <updated date="2025-09-25 15:01:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component (CVE-2025-10527)
  * firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component (CVE-2025-10532)
  * firefox: thunderbird: Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component (CVE-2025-10528)
  * firefox: thunderbird: Same-origin policy bypass in the Layout component (CVE-2025-10529)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143 (CVE-2025-10537)
  * firefox: thunderbird: Information disclosure in the Networking: Cache component (CVE-2025-10536)
  * firefox: thunderbird: Integer overflow in the SVG component (CVE-2025-10533)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:16260" id="RHSA-2025:16260" type="rhsa" title="RHSA-2025:16260"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10527" id="CVE-2025-10527" type="cve" title="CVE-2025-10527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10528" id="CVE-2025-10528" type="cve" title="CVE-2025-10528"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10529" id="CVE-2025-10529" type="cve" title="CVE-2025-10529"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10532" id="CVE-2025-10532" type="cve" title="CVE-2025-10532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10533" id="CVE-2025-10533" type="cve" title="CVE-2025-10533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10536" id="CVE-2025-10536" type="cve" title="CVE-2025-10536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10537" id="CVE-2025-10537" type="cve" title="CVE-2025-10537"/>
      <reference href="https://bugzilla.redhat.com/2395745" id="2395745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395754" id="2395754" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395755" id="2395755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395756" id="2395756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395759" id="2395759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395764" id="2395764" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395766" id="2395766" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-16260.html" id="ALSA-2025:16260" type="self" title="ALSA-2025:16260"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="140.3.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-140.3.0-1.el8_10.alma.1.src.rpm">
          <filename>firefox-140.3.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">b0771854e5bca8139ba50fd34a4332b379cc883d5ab6f1a78318cf8ef7d1350d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:16589</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-09-24 00:00:00"/>
    <updated date="2025-09-25 15:05:39"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component (CVE-2025-10527)
  * firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component (CVE-2025-10532)
  * firefox: thunderbird: Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component (CVE-2025-10528)
  * firefox: thunderbird: Same-origin policy bypass in the Layout component (CVE-2025-10529)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143 (CVE-2025-10537)
  * firefox: thunderbird: Information disclosure in the Networking: Cache component (CVE-2025-10536)
  * firefox: thunderbird: Integer overflow in the SVG component (CVE-2025-10533)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:16589" id="RHSA-2025:16589" type="rhsa" title="RHSA-2025:16589"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10527" id="CVE-2025-10527" type="cve" title="CVE-2025-10527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10528" id="CVE-2025-10528" type="cve" title="CVE-2025-10528"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10529" id="CVE-2025-10529" type="cve" title="CVE-2025-10529"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10532" id="CVE-2025-10532" type="cve" title="CVE-2025-10532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10533" id="CVE-2025-10533" type="cve" title="CVE-2025-10533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10536" id="CVE-2025-10536" type="cve" title="CVE-2025-10536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10537" id="CVE-2025-10537" type="cve" title="CVE-2025-10537"/>
      <reference href="https://bugzilla.redhat.com/2395745" id="2395745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395754" id="2395754" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395755" id="2395755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395756" id="2395756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395759" id="2395759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395764" id="2395764" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395766" id="2395766" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-16589.html" id="ALSA-2025:16589" type="self" title="ALSA-2025:16589"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="140.3.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-140.3.0-1.el8_10.alma.1.src.rpm">
          <filename>thunderbird-140.3.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">456516ea196b0177830919e6312689cdecda79d3df21a490a176220317dcb32c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1673</id>
    <title>Important: mysql:8.0 security update</title>
    <issued date="2025-02-19 00:00:00"/>
    <updated date="2025-02-20 11:16:08"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mysql:8.0 security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  

Security Fix(es):  

  * openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)
  * krb5: GSS message token handling (CVE-2024-37371)
  * curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)
  * mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)
  * mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)
  * mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)
  * mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)
  * mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)
  * mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)
  * mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)
  * mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)
  * mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)
  * mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)
  * mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)
  * curl: curl netrc password leak (CVE-2024-11053)
  * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)
  * mysql: MySQL Server Options Vulnerability (CVE-2025-21520)
  * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
  * mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)
  * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)
  * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)
  * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)
  * mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)
  * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)
  * mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)
  * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)
  * mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)
  * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)
  * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)
  * mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)
  * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)
  * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)
  * mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)
  * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)
  * mysql: Components Services unspecified vulnerability (CPU Jan 2025) (CVE-2025-21505)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1673" id="RHSA-2025:1673" type="rhsa" title="RHSA-2025:1673"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11053" id="CVE-2024-11053" type="cve" title="CVE-2024-11053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21193" id="CVE-2024-21193" type="cve" title="CVE-2024-21193"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21194" id="CVE-2024-21194" type="cve" title="CVE-2024-21194"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21196" id="CVE-2024-21196" type="cve" title="CVE-2024-21196"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21197" id="CVE-2024-21197" type="cve" title="CVE-2024-21197"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21198" id="CVE-2024-21198" type="cve" title="CVE-2024-21198"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21199" id="CVE-2024-21199" type="cve" title="CVE-2024-21199"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21201" id="CVE-2024-21201" type="cve" title="CVE-2024-21201"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21203" id="CVE-2024-21203" type="cve" title="CVE-2024-21203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21212" id="CVE-2024-21212" type="cve" title="CVE-2024-21212"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21213" id="CVE-2024-21213" type="cve" title="CVE-2024-21213"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21218" id="CVE-2024-21218" type="cve" title="CVE-2024-21218"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21219" id="CVE-2024-21219" type="cve" title="CVE-2024-21219"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21230" id="CVE-2024-21230" type="cve" title="CVE-2024-21230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21231" id="CVE-2024-21231" type="cve" title="CVE-2024-21231"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21236" id="CVE-2024-21236" type="cve" title="CVE-2024-21236"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21237" id="CVE-2024-21237" type="cve" title="CVE-2024-21237"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21238" id="CVE-2024-21238" type="cve" title="CVE-2024-21238"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21239" id="CVE-2024-21239" type="cve" title="CVE-2024-21239"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21241" id="CVE-2024-21241" type="cve" title="CVE-2024-21241"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21247" id="CVE-2024-21247" type="cve" title="CVE-2024-21247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37371" id="CVE-2024-37371" type="cve" title="CVE-2024-37371"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5535" id="CVE-2024-5535" type="cve" title="CVE-2024-5535"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7264" id="CVE-2024-7264" type="cve" title="CVE-2024-7264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21490" id="CVE-2025-21490" type="cve" title="CVE-2025-21490"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21491" id="CVE-2025-21491" type="cve" title="CVE-2025-21491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21494" id="CVE-2025-21494" type="cve" title="CVE-2025-21494"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21497" id="CVE-2025-21497" type="cve" title="CVE-2025-21497"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21500" id="CVE-2025-21500" type="cve" title="CVE-2025-21500"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21501" id="CVE-2025-21501" type="cve" title="CVE-2025-21501"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21503" id="CVE-2025-21503" type="cve" title="CVE-2025-21503"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21504" id="CVE-2025-21504" type="cve" title="CVE-2025-21504"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21505" id="CVE-2025-21505" type="cve" title="CVE-2025-21505"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21518" id="CVE-2025-21518" type="cve" title="CVE-2025-21518"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21519" id="CVE-2025-21519" type="cve" title="CVE-2025-21519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21520" id="CVE-2025-21520" type="cve" title="CVE-2025-21520"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21521" id="CVE-2025-21521" type="cve" title="CVE-2025-21521"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21522" id="CVE-2025-21522" type="cve" title="CVE-2025-21522"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21523" id="CVE-2025-21523" type="cve" title="CVE-2025-21523"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21525" id="CVE-2025-21525" type="cve" title="CVE-2025-21525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21529" id="CVE-2025-21529" type="cve" title="CVE-2025-21529"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21531" id="CVE-2025-21531" type="cve" title="CVE-2025-21531"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21534" id="CVE-2025-21534" type="cve" title="CVE-2025-21534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21536" id="CVE-2025-21536" type="cve" title="CVE-2025-21536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21540" id="CVE-2025-21540" type="cve" title="CVE-2025-21540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21543" id="CVE-2025-21543" type="cve" title="CVE-2025-21543"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21546" id="CVE-2025-21546" type="cve" title="CVE-2025-21546"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21555" id="CVE-2025-21555" type="cve" title="CVE-2025-21555"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21559" id="CVE-2025-21559" type="cve" title="CVE-2025-21559"/>
      <reference href="https://bugzilla.redhat.com/2294581" id="2294581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2294676" id="2294676" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301888" id="2301888" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318857" id="2318857" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318858" id="2318858" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318870" id="2318870" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318873" id="2318873" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318874" id="2318874" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318876" id="2318876" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318882" id="2318882" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318883" id="2318883" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318884" id="2318884" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318885" id="2318885" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318886" id="2318886" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318897" id="2318897" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318900" id="2318900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318905" id="2318905" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318914" id="2318914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318922" id="2318922" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318923" id="2318923" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318925" id="2318925" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318926" id="2318926" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318927" id="2318927" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331191" id="2331191" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339218" id="2339218" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339220" id="2339220" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339221" id="2339221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339226" id="2339226" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339231" id="2339231" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339236" id="2339236" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339238" id="2339238" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339243" id="2339243" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339247" id="2339247" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339252" id="2339252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339259" id="2339259" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339266" id="2339266" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339270" id="2339270" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339271" id="2339271" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339275" id="2339275" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339277" id="2339277" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339281" id="2339281" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339284" id="2339284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339291" id="2339291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339293" id="2339293" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339295" id="2339295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339299" id="2339299" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339300" id="2339300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339304" id="2339304" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339305" id="2339305" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1673.html" id="ALSA-2025:1673" type="self" title="ALSA-2025:1673"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="mysql" stream="8.0" version="8100020250220075646" context="9edba152" arch="s390x"/>
        <package name="mysql-libs" version="8.0.41" release="1.module_el8.10.0+3965+b415b607" epoch="0" arch="s390x" src="mysql-8.0.41-1.module_el8.10.0+3965+b415b607.src.rpm">
          <filename>mysql-libs-8.0.41-1.module_el8.10.0+3965+b415b607.s390x.rpm</filename>
          <sum type="sha256">2a80a82a141c7b34b8c477f86186f88e6a2102fbacf77d2b2f8dd28873707454</sum>
        </package>
        <package name="mecab-ipadic-EUCJP" version="2.7.0.20070801" release="17.module_el8.10.0+3965+b415b607" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+3965+b415b607.src.rpm">
          <filename>mecab-ipadic-EUCJP-2.7.0.20070801-17.module_el8.10.0+3965+b415b607.s390x.rpm</filename>
          <sum type="sha256">2b2400a7cf814f42d9725bb33f0614cd034a53f2d70efe17314f1155c8165718</sum>
        </package>
        <package name="mecab" version="0.996" release="2.module_el8.10.0+3965+b415b607" epoch="0" arch="s390x" src="mecab-0.996-2.module_el8.10.0+3965+b415b607.src.rpm">
          <filename>mecab-0.996-2.module_el8.10.0+3965+b415b607.s390x.rpm</filename>
          <sum type="sha256">33b6163fbf1b6b08111e95f3543dbb14bf19fc0ff5086e737fe6343a4443df82</sum>
        </package>
        <package name="mysql-devel" version="8.0.41" release="1.module_el8.10.0+3965+b415b607" epoch="0" arch="s390x" src="mysql-8.0.41-1.module_el8.10.0+3965+b415b607.src.rpm">
          <filename>mysql-devel-8.0.41-1.module_el8.10.0+3965+b415b607.s390x.rpm</filename>
          <sum type="sha256">84101f33396667135ec18e5a6dd91cb2a0e0c7f75bba7424ca5892d575857e5c</sum>
        </package>
        <package name="mysql-errmsg" version="8.0.41" release="1.module_el8.10.0+3965+b415b607" epoch="0" arch="s390x" src="mysql-8.0.41-1.module_el8.10.0+3965+b415b607.src.rpm">
          <filename>mysql-errmsg-8.0.41-1.module_el8.10.0+3965+b415b607.s390x.rpm</filename>
          <sum type="sha256">94a4a23631985bb03a9a2f201128db03d1eb6b5f6dbe1010c59d81f5d7a25ccd</sum>
        </package>
        <package name="mecab-devel" version="0.996" release="2.module_el8.6.0+3340+d764b636" epoch="0" arch="s390x" src="mecab-0.996-2.module_el8.6.0+3340+d764b636.src.rpm">
          <filename>mecab-devel-0.996-2.module_el8.6.0+3340+d764b636.s390x.rpm</filename>
          <sum type="sha256">95fbafd6a495d411511dcfabd6b0f0746e44e7a7bcc70330024e0022229ee5d3</sum>
        </package>
        <package name="mysql" version="8.0.41" release="1.module_el8.10.0+3965+b415b607" epoch="0" arch="s390x" src="mysql-8.0.41-1.module_el8.10.0+3965+b415b607.src.rpm">
          <filename>mysql-8.0.41-1.module_el8.10.0+3965+b415b607.s390x.rpm</filename>
          <sum type="sha256">af235c45a58d6748bae5dfa806fa3192a616063161e45d1e972f5a58b927a2e7</sum>
        </package>
        <package name="mysql-test" version="8.0.41" release="1.module_el8.10.0+3965+b415b607" epoch="0" arch="s390x" src="mysql-8.0.41-1.module_el8.10.0+3965+b415b607.src.rpm">
          <filename>mysql-test-8.0.41-1.module_el8.10.0+3965+b415b607.s390x.rpm</filename>
          <sum type="sha256">be0ffbaf2e230ca16e85b3402aab1b45315ec05eeedd5a86f7e8bbb87a5b4396</sum>
        </package>
        <package name="mysql-common" version="8.0.41" release="1.module_el8.10.0+3965+b415b607" epoch="0" arch="s390x" src="mysql-8.0.41-1.module_el8.10.0+3965+b415b607.src.rpm">
          <filename>mysql-common-8.0.41-1.module_el8.10.0+3965+b415b607.s390x.rpm</filename>
          <sum type="sha256">c8672abde90ab67a7a779706c5c042767715b601f0ef22ecd70f24b1e7a6ba4a</sum>
        </package>
        <package name="mecab-ipadic" version="2.7.0.20070801" release="17.module_el8.10.0+3965+b415b607" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+3965+b415b607.src.rpm">
          <filename>mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+3965+b415b607.s390x.rpm</filename>
          <sum type="sha256">d836c246ea2cfe40117264855bf7d6f3fed850ab95c2ea36490dec679af45dee</sum>
        </package>
        <package name="mysql-server" version="8.0.41" release="1.module_el8.10.0+3965+b415b607" epoch="0" arch="s390x" src="mysql-8.0.41-1.module_el8.10.0+3965+b415b607.src.rpm">
          <filename>mysql-server-8.0.41-1.module_el8.10.0+3965+b415b607.s390x.rpm</filename>
          <sum type="sha256">e073fa339fd2efe273620b29b886022f1366651fc7cb9aab587d750a6928eb5a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1675</id>
    <title>Important: bind security update</title>
    <issued date="2025-02-19 00:00:00"/>
    <updated date="2025-02-20 14:49:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1675" id="RHSA-2025:1675" type="rhsa" title="RHSA-2025:1675"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11187" id="CVE-2024-11187" type="cve" title="CVE-2024-11187"/>
      <reference href="https://bugzilla.redhat.com/2342879" id="2342879" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1675.html" id="ALSA-2025:1675" type="self" title="ALSA-2025:1675"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="bind" version="9.11.36" release="16.el8_10.4" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.4.src.rpm">
          <filename>bind-9.11.36-16.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">319c37170fc97db9dad658caf6a7bd8888f2978d495081e17134a466392e57ba</sum>
        </package>
        <package name="bind-utils" version="9.11.36" release="16.el8_10.4" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.4.src.rpm">
          <filename>bind-utils-9.11.36-16.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">4659a1147614c7dded3f1f6272c586c41e686f269835d486a13992c7bc899651</sum>
        </package>
        <package name="bind-libs-lite" version="9.11.36" release="16.el8_10.4" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.4.src.rpm">
          <filename>bind-libs-lite-9.11.36-16.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">48b7828c5211a424e28c94ca67ac1c928dff5f46339351474a867ec8c5b8c9a1</sum>
        </package>
        <package name="bind-pkcs11-libs" version="9.11.36" release="16.el8_10.4" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.4.src.rpm">
          <filename>bind-pkcs11-libs-9.11.36-16.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">4e031d376f09b50fce34e980dd8d41b4fdd878dd97256ba95480984ace5e28fd</sum>
        </package>
        <package name="python3-bind" version="9.11.36" release="16.el8_10.4" epoch="32" arch="noarch" src="bind-9.11.36-16.el8_10.4.src.rpm">
          <filename>python3-bind-9.11.36-16.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">5ed2f043ed654c79bfa89f0d410cf2f965ad4d548ef7949ef8bc174e44e1c231</sum>
        </package>
        <package name="bind-sdb" version="9.11.36" release="16.el8_10.4" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.4.src.rpm">
          <filename>bind-sdb-9.11.36-16.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">934eace8d404c9e32811abf67e25a2d8efeb109efcba10a341b478252298d9f4</sum>
        </package>
        <package name="bind-license" version="9.11.36" release="16.el8_10.4" epoch="32" arch="noarch" src="bind-9.11.36-16.el8_10.4.src.rpm">
          <filename>bind-license-9.11.36-16.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">9720f8cfd74411e648dedd8c3fd5856f3ec5a8c462f0178f113c9b00d89f38b5</sum>
        </package>
        <package name="bind-lite-devel" version="9.11.36" release="16.el8_10.4" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.4.src.rpm">
          <filename>bind-lite-devel-9.11.36-16.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">99bb7c48280cade34cfb63b01247de6925022a8eec63d073f1fe83dfc5cb088a</sum>
        </package>
        <package name="bind-devel" version="9.11.36" release="16.el8_10.4" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.4.src.rpm">
          <filename>bind-devel-9.11.36-16.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">9c82e05150de9ef950faa4010e5b0ecd93ca4d7f2f828755d57761892e4afdff</sum>
        </package>
        <package name="bind-pkcs11-devel" version="9.11.36" release="16.el8_10.4" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.4.src.rpm">
          <filename>bind-pkcs11-devel-9.11.36-16.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">b8a06c2f940992b8578e1051fdf6eb2c4ed1be05825035a123a45792f3ec3326</sum>
        </package>
        <package name="bind-chroot" version="9.11.36" release="16.el8_10.4" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.4.src.rpm">
          <filename>bind-chroot-9.11.36-16.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">bac5cabb143c16a5b845331ff35bf93e78cd47e3324cc4da86ffb29eea9095fe</sum>
        </package>
        <package name="bind-sdb-chroot" version="9.11.36" release="16.el8_10.4" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.4.src.rpm">
          <filename>bind-sdb-chroot-9.11.36-16.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">c7a0543a66e76d6f03dfc9d51eacfd3d6aad162b5ff9d8c8aed56efc0d68529e</sum>
        </package>
        <package name="bind-libs" version="9.11.36" release="16.el8_10.4" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.4.src.rpm">
          <filename>bind-libs-9.11.36-16.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">cc837f56408f7f32fd03f016ffc7f06e1b763ab2355cad8ce7844bdd39109d61</sum>
        </package>
        <package name="bind-pkcs11-utils" version="9.11.36" release="16.el8_10.4" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.4.src.rpm">
          <filename>bind-pkcs11-utils-9.11.36-16.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">cfe1a9b93b838b54878e08e1875b271c9a570b173cd19953028d71b392063a10</sum>
        </package>
        <package name="bind-pkcs11" version="9.11.36" release="16.el8_10.4" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.4.src.rpm">
          <filename>bind-pkcs11-9.11.36-16.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">e311ef033ab919dbcdcba199f326aea84beeccb7ffaacf3358179cb6ef0f1f25</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1676</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2025-02-19 00:00:00"/>
    <updated date="2025-02-20 11:19:01"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1676" id="RHSA-2025:1676" type="rhsa" title="RHSA-2025:1676"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11187" id="CVE-2024-11187" type="cve" title="CVE-2024-11187"/>
      <reference href="https://bugzilla.redhat.com/2342879" id="2342879" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1676.html" id="ALSA-2025:1676" type="self" title="ALSA-2025:1676"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="bind9.16-utils" version="9.16.23" release="0.22.el8_10.2" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.2.src.rpm">
          <filename>bind9.16-utils-9.16.23-0.22.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">2766b886457bb3c33655a756df721b035aadbb59d03f34a837316dac38bebabf</sum>
        </package>
        <package name="bind9.16" version="9.16.23" release="0.22.el8_10.2" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.2.src.rpm">
          <filename>bind9.16-9.16.23-0.22.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">686365a64efe71e8514a27e195ba4cc8abe02de71fef972db136e4c78678e644</sum>
        </package>
        <package name="python3-bind9.16" version="9.16.23" release="0.22.el8_10.2" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.22.el8_10.2.src.rpm">
          <filename>python3-bind9.16-9.16.23-0.22.el8_10.2.noarch.rpm</filename>
          <sum type="sha256">b113ac4c17e10d2beef12bcc5d6c4715b1e62d9b3f855ef44e58d08c08c87b37</sum>
        </package>
        <package name="bind9.16-chroot" version="9.16.23" release="0.22.el8_10.2" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.2.src.rpm">
          <filename>bind9.16-chroot-9.16.23-0.22.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">ba8f893afa9e2d06fa5a8b01f0e246ad71fee0b835b2af98c442955612b09586</sum>
        </package>
        <package name="bind9.16-license" version="9.16.23" release="0.22.el8_10.2" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.22.el8_10.2.src.rpm">
          <filename>bind9.16-license-9.16.23-0.22.el8_10.2.noarch.rpm</filename>
          <sum type="sha256">c04c222d9e8e9a6a351018a339e71e01ded972db7caeebd42a136fa182765511</sum>
        </package>
        <package name="bind9.16-libs" version="9.16.23" release="0.22.el8_10.2" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.2.src.rpm">
          <filename>bind9.16-libs-9.16.23-0.22.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">ce6909fe65a3fe4f47ab1d8c2ddd27b3df8b158b221ffac7f378a19684bdc9af</sum>
        </package>
        <package name="bind9.16-dnssec-utils" version="9.16.23" release="0.22.el8_10.2" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.2.src.rpm">
          <filename>bind9.16-dnssec-utils-9.16.23-0.22.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">fc0e31dbb13c2dc27daa29e651e504fd911ae36741384d3277bf8807d519d959</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:16823</id>
    <title>Moderate: openssh security update</title>
    <issued date="2025-09-25 00:00:00"/>
    <updated date="2025-10-01 08:38:14"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssh security update</summary>
    <description>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.  

Security Fix(es):  

  * openssh: Machine-in-the-middle attack if VerifyHostKeyDNS is enabled (CVE-2025-26465)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:16823" id="RHSA-2025:16823" type="rhsa" title="RHSA-2025:16823"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26465" id="CVE-2025-26465" type="cve" title="CVE-2025-26465"/>
      <reference href="https://bugzilla.redhat.com/2344780" id="2344780" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-16823.html" id="ALSA-2025:16823" type="self" title="ALSA-2025:16823"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="openssh-askpass" version="8.0p1" release="26.el8_10" epoch="0" arch="s390x" src="openssh-8.0p1-26.el8_10.src.rpm">
          <filename>openssh-askpass-8.0p1-26.el8_10.s390x.rpm</filename>
          <sum type="sha256">cdce5604b6ef7eb3d74799af4c953a31dbce79e3ac1d1461aeeb7658b0f3e2e8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:16861</id>
    <title>Moderate: mysql:8.0 security update</title>
    <issued date="2025-09-29 00:00:00"/>
    <updated date="2025-10-01 08:52:50"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql:8.0 security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  

Security Fix(es):  

  * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30688)
  * mysql: Stored Procedure unspecified vulnerability (CPU Apr 2025) (CVE-2025-30699)
  * mysql: UDF unspecified vulnerability (CPU Apr 2025) (CVE-2025-30721)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30682)
  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30683)
  * mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30715)
  * mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21574)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21585)
  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30681)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-21577)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30687)
  * mysql: DML unspecified vulnerability (CPU Apr 2025) (CVE-2025-21580)
  * mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30696)
  * mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30705)
  * mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21575)
  * mysql: Options unspecified vulnerability (CPU Apr 2025) (CVE-2025-21579)
  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30685)
  * mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30704)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21581)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30689)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30695)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30703)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)
  * mysql: DDL unspecified vulnerability (CPU Apr 2025) (CVE-2025-21584)
  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30684)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50092)
  * mysql: mysqldump unspecified vulnerability (CPU Jul 2025) (CVE-2025-50081)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50079)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50077)
  * mysql: DML unspecified vulnerability (CPU Jul 2025) (CVE-2025-50078)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50091)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50101)
  * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50093)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50099)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50085)
  * mysql: Components Services unspecified vulnerability (CPU Jul 2025) (CVE-2025-50086)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50082)
  * mysql: Encryption unspecified vulnerability (CPU Jul 2025) (CVE-2025-50097)
  * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50104)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50087)
  * mysql: Replication unspecified vulnerability (CPU Jul 2025) (CVE-2025-53023)
  * mysql: Stored Procedure unspecified vulnerability (CPU Jul 2025) (CVE-2025-50080)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50088)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50083)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50084)
  * mysql: Thread Pooling unspecified vulnerability (CPU Jul 2025) (CVE-2025-50100)
  * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50094)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50098)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50096)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50102)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:16861" id="RHSA-2025:16861" type="rhsa" title="RHSA-2025:16861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21574" id="CVE-2025-21574" type="cve" title="CVE-2025-21574"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21575" id="CVE-2025-21575" type="cve" title="CVE-2025-21575"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21577" id="CVE-2025-21577" type="cve" title="CVE-2025-21577"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21579" id="CVE-2025-21579" type="cve" title="CVE-2025-21579"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21580" id="CVE-2025-21580" type="cve" title="CVE-2025-21580"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21581" id="CVE-2025-21581" type="cve" title="CVE-2025-21581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21584" id="CVE-2025-21584" type="cve" title="CVE-2025-21584"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21585" id="CVE-2025-21585" type="cve" title="CVE-2025-21585"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30681" id="CVE-2025-30681" type="cve" title="CVE-2025-30681"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30682" id="CVE-2025-30682" type="cve" title="CVE-2025-30682"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30683" id="CVE-2025-30683" type="cve" title="CVE-2025-30683"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30684" id="CVE-2025-30684" type="cve" title="CVE-2025-30684"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30685" id="CVE-2025-30685" type="cve" title="CVE-2025-30685"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30687" id="CVE-2025-30687" type="cve" title="CVE-2025-30687"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30688" id="CVE-2025-30688" type="cve" title="CVE-2025-30688"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30689" id="CVE-2025-30689" type="cve" title="CVE-2025-30689"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30693" id="CVE-2025-30693" type="cve" title="CVE-2025-30693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30695" id="CVE-2025-30695" type="cve" title="CVE-2025-30695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30696" id="CVE-2025-30696" type="cve" title="CVE-2025-30696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30699" id="CVE-2025-30699" type="cve" title="CVE-2025-30699"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30703" id="CVE-2025-30703" type="cve" title="CVE-2025-30703"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30704" id="CVE-2025-30704" type="cve" title="CVE-2025-30704"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30705" id="CVE-2025-30705" type="cve" title="CVE-2025-30705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30715" id="CVE-2025-30715" type="cve" title="CVE-2025-30715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30721" id="CVE-2025-30721" type="cve" title="CVE-2025-30721"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30722" id="CVE-2025-30722" type="cve" title="CVE-2025-30722"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50077" id="CVE-2025-50077" type="cve" title="CVE-2025-50077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50078" id="CVE-2025-50078" type="cve" title="CVE-2025-50078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50079" id="CVE-2025-50079" type="cve" title="CVE-2025-50079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50080" id="CVE-2025-50080" type="cve" title="CVE-2025-50080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50081" id="CVE-2025-50081" type="cve" title="CVE-2025-50081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50082" id="CVE-2025-50082" type="cve" title="CVE-2025-50082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50083" id="CVE-2025-50083" type="cve" title="CVE-2025-50083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50084" id="CVE-2025-50084" type="cve" title="CVE-2025-50084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50085" id="CVE-2025-50085" type="cve" title="CVE-2025-50085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50086" id="CVE-2025-50086" type="cve" title="CVE-2025-50086"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50087" id="CVE-2025-50087" type="cve" title="CVE-2025-50087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50088" id="CVE-2025-50088" type="cve" title="CVE-2025-50088"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50091" id="CVE-2025-50091" type="cve" title="CVE-2025-50091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50092" id="CVE-2025-50092" type="cve" title="CVE-2025-50092"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50093" id="CVE-2025-50093" type="cve" title="CVE-2025-50093"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50094" id="CVE-2025-50094" type="cve" title="CVE-2025-50094"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50096" id="CVE-2025-50096" type="cve" title="CVE-2025-50096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50097" id="CVE-2025-50097" type="cve" title="CVE-2025-50097"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50098" id="CVE-2025-50098" type="cve" title="CVE-2025-50098"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50099" id="CVE-2025-50099" type="cve" title="CVE-2025-50099"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50100" id="CVE-2025-50100" type="cve" title="CVE-2025-50100"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50101" id="CVE-2025-50101" type="cve" title="CVE-2025-50101"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50102" id="CVE-2025-50102" type="cve" title="CVE-2025-50102"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50104" id="CVE-2025-50104" type="cve" title="CVE-2025-50104"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53023" id="CVE-2025-53023" type="cve" title="CVE-2025-53023"/>
      <reference href="https://bugzilla.redhat.com/2359885" id="2359885" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359888" id="2359888" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359892" id="2359892" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359894" id="2359894" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359895" id="2359895" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359899" id="2359899" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359900" id="2359900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359902" id="2359902" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359903" id="2359903" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359918" id="2359918" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359920" id="2359920" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359924" id="2359924" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359928" id="2359928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359930" id="2359930" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359932" id="2359932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359934" id="2359934" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359938" id="2359938" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359940" id="2359940" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359943" id="2359943" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359944" id="2359944" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359945" id="2359945" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359947" id="2359947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359950" id="2359950" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359963" id="2359963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359964" id="2359964" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359972" id="2359972" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380264" id="2380264" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380273" id="2380273" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380274" id="2380274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380278" id="2380278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380280" id="2380280" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380283" id="2380283" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380284" id="2380284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380290" id="2380290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380291" id="2380291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380295" id="2380295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380298" id="2380298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380306" id="2380306" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380308" id="2380308" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380309" id="2380309" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380310" id="2380310" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380311" id="2380311" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380312" id="2380312" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380313" id="2380313" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380320" id="2380320" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380321" id="2380321" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380322" id="2380322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380326" id="2380326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380327" id="2380327" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380334" id="2380334" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380335" id="2380335" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-16861.html" id="ALSA-2025:16861" type="self" title="ALSA-2025:16861"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="mysql" stream="8.0" version="8100020250930134610" context="9edba152" arch="s390x"/>
        <package name="mysql-test" version="8.0.43" release="1.module_el8.10.0+4049+06e4dcce" epoch="0" arch="s390x" src="mysql-8.0.43-1.module_el8.10.0+4049+06e4dcce.src.rpm">
          <filename>mysql-test-8.0.43-1.module_el8.10.0+4049+06e4dcce.s390x.rpm</filename>
          <sum type="sha256">0c6ac4dc5952716163fa856f9034f2e14607bfc82d49e8f0fe5a71701c3641dd</sum>
        </package>
        <package name="mecab-ipadic-EUCJP" version="2.7.0.20070801" release="17.module_el8.10.0+3965+b415b607" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+3965+b415b607.src.rpm">
          <filename>mecab-ipadic-EUCJP-2.7.0.20070801-17.module_el8.10.0+3965+b415b607.s390x.rpm</filename>
          <sum type="sha256">2b2400a7cf814f42d9725bb33f0614cd034a53f2d70efe17314f1155c8165718</sum>
        </package>
        <package name="mysql-libs" version="8.0.43" release="1.module_el8.10.0+4049+06e4dcce" epoch="0" arch="s390x" src="mysql-8.0.43-1.module_el8.10.0+4049+06e4dcce.src.rpm">
          <filename>mysql-libs-8.0.43-1.module_el8.10.0+4049+06e4dcce.s390x.rpm</filename>
          <sum type="sha256">2cf4db17f29f66a4544ea8bf1c07c948539098692116f2b1185d6b69deb94029</sum>
        </package>
        <package name="mecab" version="0.996" release="2.module_el8.10.0+3965+b415b607" epoch="0" arch="s390x" src="mecab-0.996-2.module_el8.10.0+3965+b415b607.src.rpm">
          <filename>mecab-0.996-2.module_el8.10.0+3965+b415b607.s390x.rpm</filename>
          <sum type="sha256">33b6163fbf1b6b08111e95f3543dbb14bf19fc0ff5086e737fe6343a4443df82</sum>
        </package>
        <package name="mysql-devel" version="8.0.43" release="1.module_el8.10.0+4049+06e4dcce" epoch="0" arch="s390x" src="mysql-8.0.43-1.module_el8.10.0+4049+06e4dcce.src.rpm">
          <filename>mysql-devel-8.0.43-1.module_el8.10.0+4049+06e4dcce.s390x.rpm</filename>
          <sum type="sha256">4603e1d590f90ec702af14e4474db61de9ed66cb151f275e61ed868d1b7243ff</sum>
        </package>
        <package name="mysql-errmsg" version="8.0.43" release="1.module_el8.10.0+4049+06e4dcce" epoch="0" arch="s390x" src="mysql-8.0.43-1.module_el8.10.0+4049+06e4dcce.src.rpm">
          <filename>mysql-errmsg-8.0.43-1.module_el8.10.0+4049+06e4dcce.s390x.rpm</filename>
          <sum type="sha256">802a88472f4660b4158c43dc95933028b77af5b700257bb2ff746aa28e5a5f62</sum>
        </package>
        <package name="mecab-devel" version="0.996" release="2.module_el8.6.0+3340+d764b636" epoch="0" arch="s390x" src="mecab-0.996-2.module_el8.6.0+3340+d764b636.src.rpm">
          <filename>mecab-devel-0.996-2.module_el8.6.0+3340+d764b636.s390x.rpm</filename>
          <sum type="sha256">95fbafd6a495d411511dcfabd6b0f0746e44e7a7bcc70330024e0022229ee5d3</sum>
        </package>
        <package name="mysql-server" version="8.0.43" release="1.module_el8.10.0+4049+06e4dcce" epoch="0" arch="s390x" src="mysql-8.0.43-1.module_el8.10.0+4049+06e4dcce.src.rpm">
          <filename>mysql-server-8.0.43-1.module_el8.10.0+4049+06e4dcce.s390x.rpm</filename>
          <sum type="sha256">cb961cbfa62308791281f9099a4ebead1f95fc8ee31e3e3211db26cfe5cf09bc</sum>
        </package>
        <package name="mecab-ipadic" version="2.7.0.20070801" release="17.module_el8.10.0+3965+b415b607" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+3965+b415b607.src.rpm">
          <filename>mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+3965+b415b607.s390x.rpm</filename>
          <sum type="sha256">d836c246ea2cfe40117264855bf7d6f3fed850ab95c2ea36490dec679af45dee</sum>
        </package>
        <package name="mysql" version="8.0.43" release="1.module_el8.10.0+4049+06e4dcce" epoch="0" arch="s390x" src="mysql-8.0.43-1.module_el8.10.0+4049+06e4dcce.src.rpm">
          <filename>mysql-8.0.43-1.module_el8.10.0+4049+06e4dcce.s390x.rpm</filename>
          <sum type="sha256">dfdd204836d573f08ca23061db26075caf9487ef5a872e2e513827398ef1fa6f</sum>
        </package>
        <package name="mysql-common" version="8.0.43" release="1.module_el8.10.0+4049+06e4dcce" epoch="0" arch="s390x" src="mysql-8.0.43-1.module_el8.10.0+4049+06e4dcce.src.rpm">
          <filename>mysql-common-8.0.43-1.module_el8.10.0+4049+06e4dcce.s390x.rpm</filename>
          <sum type="sha256">fcc2813c62dcda5b9bcdf5c126a8cd607b874377e60a864815c5bff753f40422</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:17129</id>
    <title>Important: idm:DL1 security update</title>
    <issued date="2025-10-01 00:00:00"/>
    <updated date="2025-10-03 08:44:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>idm:DL1 security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.   

Security Fix(es):  

  * FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-7493)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:17129" id="RHSA-2025:17129" type="rhsa" title="RHSA-2025:17129"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-7493" id="CVE-2025-7493" type="cve" title="CVE-2025-7493"/>
      <reference href="https://bugzilla.redhat.com/2389448" id="2389448" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-17129.html" id="ALSA-2025:17129" type="self" title="ALSA-2025:17129"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="idm" stream="DL1" version="8100020251002114105" context="93c20af6" arch="s390x"/>
        <package name="ipa-server-dns" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-server-dns-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">0f57023cd77d9cd95f79e3121536dc6a64df775ade5ca0ed77f9c43b599c416e</sum>
        </package>
        <package name="python3-qrcode" version="5.3" release="1.module_el8.10.0+3942+63b39a46" epoch="0" arch="noarch" src="python-qrcode-5.3-1.module_el8.10.0+3942+63b39a46.src.rpm">
          <filename>python3-qrcode-5.3-1.module_el8.10.0+3942+63b39a46.noarch.rpm</filename>
          <sum type="sha256">109f98be9cf4358f1892e43363dc3d1163173bd6f1f58365f9fc153b2fbad8d7</sum>
        </package>
        <package name="ipa-python-compat" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-python-compat-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">1560171f4be1a4a88f540860e513204c892df41daba550cc687572a98b48bc1d</sum>
        </package>
        <package name="python3-ipalib" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>python3-ipalib-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">20b1a909b2c25ccf3a91fd26fbf64c0241f34799bdd6ada8110858f0f83020da</sum>
        </package>
        <package name="ipa-server-common" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-server-common-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">210fef6fec21a273b8d6a11892f44fbeced6920170464f2cb9d0bec91af4f941</sum>
        </package>
        <package name="bind-dyndb-ldap" version="11.6" release="6.module_el8.10.0+3980+d78e8e90" epoch="0" arch="s390x" src="bind-dyndb-ldap-11.6-6.module_el8.10.0+3980+d78e8e90.src.rpm">
          <filename>bind-dyndb-ldap-11.6-6.module_el8.10.0+3980+d78e8e90.s390x.rpm</filename>
          <sum type="sha256">2c700ccfc92d7dea4c2bd2b386a200dbe70a6d9e88144470c331345f4694c1b3</sum>
        </package>
        <package name="python3-jwcrypto" version="0.5.0" release="2.module_el8.10.0+3844+20e075e5" epoch="0" arch="noarch" src="python-jwcrypto-0.5.0-2.module_el8.10.0+3844+20e075e5.src.rpm">
          <filename>python3-jwcrypto-0.5.0-2.module_el8.10.0+3844+20e075e5.noarch.rpm</filename>
          <sum type="sha256">3827ec1b1ddb7641307d2aae1a6e9d8a9634a2f4e2f2ee7e8ba866903524734b</sum>
        </package>
        <package name="ipa-common" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-common-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">4758beb4d7ac5935423840b0f8f637161ff204436a991d934c7bae259b6f787d</sum>
        </package>
        <package name="python3-ipaclient" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>python3-ipaclient-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">4948031536afa02af390efb0da3b1af671e8486439d4d93d8cc184f89aed89d6</sum>
        </package>
        <package name="ipa-healthcheck-core" version="0.12" release="6.module_el8.10.0+4036+84b152d9" epoch="0" arch="noarch" src="ipa-healthcheck-0.12-6.module_el8.10.0+4036+84b152d9.src.rpm">
          <filename>ipa-healthcheck-core-0.12-6.module_el8.10.0+4036+84b152d9.noarch.rpm</filename>
          <sum type="sha256">4df8324e9302806cbeb5acc90e44e2874471344385d45f9d684dcc297dd5e3ef</sum>
        </package>
        <package name="python3-kdcproxy" version="0.4" release="5.module_el8.10.0+3942+63b39a46.1" epoch="0" arch="noarch" src="python-kdcproxy-0.4-5.module_el8.10.0+3942+63b39a46.1.src.rpm">
          <filename>python3-kdcproxy-0.4-5.module_el8.10.0+3942+63b39a46.1.noarch.rpm</filename>
          <sum type="sha256">4ea4f303ee75781e5ebb0d16728e9fbd5f1fc4cdc4e34dca4ac19c4a3b350925</sum>
        </package>
        <package name="ipa-healthcheck" version="0.12" release="6.module_el8.10.0+4036+84b152d9" epoch="0" arch="noarch" src="ipa-healthcheck-0.12-6.module_el8.10.0+4036+84b152d9.src.rpm">
          <filename>ipa-healthcheck-0.12-6.module_el8.10.0+4036+84b152d9.noarch.rpm</filename>
          <sum type="sha256">59f7474a67cbc965bd0c360b4385395b89d1a12cf7015fcd6b16abe44ce85b0b</sum>
        </package>
        <package name="ipa-client-samba" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="s390x" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-client-samba-4.9.13-20.module_el8.10.0+4050+3b475c71.s390x.rpm</filename>
          <sum type="sha256">5efa5489eb32129508c212292dfc27f8d15eab4431008db07225214e207d0117</sum>
        </package>
        <package name="python3-pyusb" version="1.0.0" release="9.1.module_el8.7.0+3349+cfeff52e" epoch="0" arch="noarch" src="pyusb-1.0.0-9.1.module_el8.7.0+3349+cfeff52e.src.rpm">
          <filename>python3-pyusb-1.0.0-9.1.module_el8.7.0+3349+cfeff52e.noarch.rpm</filename>
          <sum type="sha256">5f45866e2459f1c9a0b969263baab4ffed264d2998456658cafd554de6300cfa</sum>
        </package>
        <package name="ipa-server" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="s390x" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-server-4.9.13-20.module_el8.10.0+4050+3b475c71.s390x.rpm</filename>
          <sum type="sha256">648eef591b00d1647d4f545dbbe87e800bae3760f8d27f09f7e015e33f6a86b3</sum>
        </package>
        <package name="python3-yubico" version="1.3.2" release="9.1.module_el8.7.0+3349+cfeff52e" epoch="0" arch="noarch" src="python-yubico-1.3.2-9.1.module_el8.7.0+3349+cfeff52e.src.rpm">
          <filename>python3-yubico-1.3.2-9.1.module_el8.7.0+3349+cfeff52e.noarch.rpm</filename>
          <sum type="sha256">68b28b3fb94f5026730feca1a1c3feb64c06ad5601a7cf8befb4e704510edd73</sum>
        </package>
        <package name="ipa-client-epn" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="s390x" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-client-epn-4.9.13-20.module_el8.10.0+4050+3b475c71.s390x.rpm</filename>
          <sum type="sha256">6f2be0d9cdbf43bad863da2bf95338ddea95a522f5173318d0929af5af780c1e</sum>
        </package>
        <package name="python3-qrcode-core" version="5.3" release="1.module_el8.10.0+3942+63b39a46" epoch="0" arch="noarch" src="python-qrcode-5.3-1.module_el8.10.0+3942+63b39a46.src.rpm">
          <filename>python3-qrcode-core-5.3-1.module_el8.10.0+3942+63b39a46.noarch.rpm</filename>
          <sum type="sha256">7a7706a06f589393224f10f99b9aef62d5559f02e1c97754b86d2763dfefa70d</sum>
        </package>
        <package name="ipa-selinux" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-selinux-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">84e51e670d24a1f41f56cd709bbd0d28c69e6625b26f2fb3cb63695aadee87c0</sum>
        </package>
        <package name="ipa-server-trust-ad" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="s390x" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-server-trust-ad-4.9.13-20.module_el8.10.0+4050+3b475c71.s390x.rpm</filename>
          <sum type="sha256">84ea2eeb388adea2deeec54b26882362c2e1714842a48888faeb571ab8bf4591</sum>
        </package>
        <package name="softhsm-devel" version="2.6.0" release="5.module_el8.6.0+3031+2f24dc92" epoch="0" arch="s390x" src="softhsm-2.6.0-5.module_el8.6.0+3031+2f24dc92.src.rpm">
          <filename>softhsm-devel-2.6.0-5.module_el8.6.0+3031+2f24dc92.s390x.rpm</filename>
          <sum type="sha256">99b0ac3696d5de6fbbd0e2bb5882b9a36feef44b0fcb4f42dd82963f3077f8ab</sum>
        </package>
        <package name="python3-ipaserver" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>python3-ipaserver-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">9ab0a89ea1497eb8d96dc65bee67dab6c3998e1cd5ab6f639fc3a30b12952f51</sum>
        </package>
        <package name="softhsm" version="2.6.0" release="5.module_el8.6.0+3031+2f24dc92" epoch="0" arch="s390x" src="softhsm-2.6.0-5.module_el8.6.0+3031+2f24dc92.src.rpm">
          <filename>softhsm-2.6.0-5.module_el8.6.0+3031+2f24dc92.s390x.rpm</filename>
          <sum type="sha256">ad706f5e338373e1c6880dce46ce69f7e82ebf416e464ec0abc5c316b27306a1</sum>
        </package>
        <package name="ipa-client-common" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-client-common-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">add082ff8e19a59fca8b86274b87c88e90a51be9156ea0d019bafcfd0b8ba636</sum>
        </package>
        <package name="ipa-client" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="s390x" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-client-4.9.13-20.module_el8.10.0+4050+3b475c71.s390x.rpm</filename>
          <sum type="sha256">b9dd887fada6b167abe68fcd06ac75c74d12e91b862aa31d5182c353cc0d79b2</sum>
        </package>
        <package name="slapi-nis" version="0.60.0" release="4.module_el8.10.0+3844+20e075e5.alma.1" epoch="0" arch="s390x" src="slapi-nis-0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1.src.rpm">
          <filename>slapi-nis-0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1.s390x.rpm</filename>
          <sum type="sha256">bfc1ed725a4b9c6d74b4b99b8b4dd82647f4f1a4e958e8e455cb5762aae70113</sum>
        </package>
        <package name="opendnssec" version="2.1.7" release="2.module_el8.10.0+3980+d78e8e90" epoch="0" arch="s390x" src="opendnssec-2.1.7-2.module_el8.10.0+3980+d78e8e90.src.rpm">
          <filename>opendnssec-2.1.7-2.module_el8.10.0+3980+d78e8e90.s390x.rpm</filename>
          <sum type="sha256">d54df6918ca5a7264f2793ef6d6b2a42884458f030404ce47a19cb6abbfdb9cf</sum>
        </package>
        <package name="python3-ipatests" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>python3-ipatests-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">e2f5abd08f35fc62e83bab9d1b3eac088705001c32a0106e31ab98a09c12205b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1736</id>
    <title>Important: postgresql:13 security update</title>
    <issued date="2025-02-20 00:00:00"/>
    <updated date="2025-02-21 13:09:04"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:13 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (CVE-2025-1094)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1736" id="RHSA-2025:1736" type="rhsa" title="RHSA-2025:1736"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1094" id="CVE-2025-1094" type="cve" title="CVE-2025-1094"/>
      <reference href="https://bugzilla.redhat.com/2345548" id="2345548" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1736.html" id="ALSA-2025:1736" type="self" title="ALSA-2025:1736"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="13" version="8100020250221080247" context="9edba152" arch="s390x"/>
        <package name="postgresql-upgrade-devel" version="13.20" release="1.module_el8.10.0+3967+334cd65a" epoch="0" arch="s390x" src="postgresql-13.20-1.module_el8.10.0+3967+334cd65a.src.rpm">
          <filename>postgresql-upgrade-devel-13.20-1.module_el8.10.0+3967+334cd65a.s390x.rpm</filename>
          <sum type="sha256">0251f2bebd6bc94c9d5ff611f989211f01aa3add65ebf6107579602fa9deae1b</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="13.20" release="1.module_el8.10.0+3967+334cd65a" epoch="0" arch="noarch" src="postgresql-13.20-1.module_el8.10.0+3967+334cd65a.src.rpm">
          <filename>postgresql-test-rpm-macros-13.20-1.module_el8.10.0+3967+334cd65a.noarch.rpm</filename>
          <sum type="sha256">10cb1600f2bba1ead9842c7f203f04353802ba0bb47003243b6d2bcdb68ab6dd</sum>
        </package>
        <package name="pg_repack" version="1.4.6" release="3.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="pg_repack-1.4.6-3.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>pg_repack-1.4.6-3.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">14fdf29fe5dd7075aaf956b75aec2c5028f78ea8c06a19b461fa970284284047</sum>
        </package>
        <package name="postgresql-static" version="13.20" release="1.module_el8.10.0+3967+334cd65a" epoch="0" arch="s390x" src="postgresql-13.20-1.module_el8.10.0+3967+334cd65a.src.rpm">
          <filename>postgresql-static-13.20-1.module_el8.10.0+3967+334cd65a.s390x.rpm</filename>
          <sum type="sha256">3c8cb9659255a85291b05f3af759455471f507cffcdfff46980ef52474ab938a</sum>
        </package>
        <package name="postgresql-upgrade" version="13.20" release="1.module_el8.10.0+3967+334cd65a" epoch="0" arch="s390x" src="postgresql-13.20-1.module_el8.10.0+3967+334cd65a.src.rpm">
          <filename>postgresql-upgrade-13.20-1.module_el8.10.0+3967+334cd65a.s390x.rpm</filename>
          <sum type="sha256">4c0ae42efd01b66fd97acf537d596b48bd0ea84c87e558578289f86c8dc78f9c</sum>
        </package>
        <package name="postgresql" version="13.20" release="1.module_el8.10.0+3967+334cd65a" epoch="0" arch="s390x" src="postgresql-13.20-1.module_el8.10.0+3967+334cd65a.src.rpm">
          <filename>postgresql-13.20-1.module_el8.10.0+3967+334cd65a.s390x.rpm</filename>
          <sum type="sha256">4ede903c1ea33117e7fb3bc2c91ad90d5fb520b8d76b68c6760c7db1a4df7a24</sum>
        </package>
        <package name="postgresql-contrib" version="13.20" release="1.module_el8.10.0+3967+334cd65a" epoch="0" arch="s390x" src="postgresql-13.20-1.module_el8.10.0+3967+334cd65a.src.rpm">
          <filename>postgresql-contrib-13.20-1.module_el8.10.0+3967+334cd65a.s390x.rpm</filename>
          <sum type="sha256">5119d0c85e068e693387401b498cf7881e35a47b2d43e35b29c3dfea602fccfb</sum>
        </package>
        <package name="postgresql-server" version="13.20" release="1.module_el8.10.0+3967+334cd65a" epoch="0" arch="s390x" src="postgresql-13.20-1.module_el8.10.0+3967+334cd65a.src.rpm">
          <filename>postgresql-server-13.20-1.module_el8.10.0+3967+334cd65a.s390x.rpm</filename>
          <sum type="sha256">5d88cf77415ef6bf8c5beff9e37d20761093058befcfcba655ea58d57a4baccc</sum>
        </package>
        <package name="postgresql-docs" version="13.20" release="1.module_el8.10.0+3967+334cd65a" epoch="0" arch="s390x" src="postgresql-13.20-1.module_el8.10.0+3967+334cd65a.src.rpm">
          <filename>postgresql-docs-13.20-1.module_el8.10.0+3967+334cd65a.s390x.rpm</filename>
          <sum type="sha256">5e781907b0903fc667b3bb5462c4215e36d59f467ad0113f32cb7ac89f3d5774</sum>
        </package>
        <package name="pgaudit" version="1.5.0" release="1.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="pgaudit-1.5.0-1.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>pgaudit-1.5.0-1.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">a29cba50326b3c78b1cff9ad076eff7837022e71f02d7ec9e918aed69a9c3f35</sum>
        </package>
        <package name="postgres-decoderbufs" version="0.10.0" release="2.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">b11226898b888f8213eefe941cece0f636a08ccce2ceaa8bee2a38e6058ed4f3</sum>
        </package>
        <package name="postgresql-server-devel" version="13.20" release="1.module_el8.10.0+3967+334cd65a" epoch="0" arch="s390x" src="postgresql-13.20-1.module_el8.10.0+3967+334cd65a.src.rpm">
          <filename>postgresql-server-devel-13.20-1.module_el8.10.0+3967+334cd65a.s390x.rpm</filename>
          <sum type="sha256">c2ccd81103b0fadee05a19c1d6dad9851601c9985a715acc7adeb282a26ac434</sum>
        </package>
        <package name="postgresql-pltcl" version="13.20" release="1.module_el8.10.0+3967+334cd65a" epoch="0" arch="s390x" src="postgresql-13.20-1.module_el8.10.0+3967+334cd65a.src.rpm">
          <filename>postgresql-pltcl-13.20-1.module_el8.10.0+3967+334cd65a.s390x.rpm</filename>
          <sum type="sha256">ca71147a0ffa0f4752848dd3a2c9a4283924c9325418c006e37fa5eb6834e6ed</sum>
        </package>
        <package name="postgresql-plpython3" version="13.20" release="1.module_el8.10.0+3967+334cd65a" epoch="0" arch="s390x" src="postgresql-13.20-1.module_el8.10.0+3967+334cd65a.src.rpm">
          <filename>postgresql-plpython3-13.20-1.module_el8.10.0+3967+334cd65a.s390x.rpm</filename>
          <sum type="sha256">d630b50d178669530db0659eaee093d666e31f49a277815faec1281b743c941a</sum>
        </package>
        <package name="postgresql-plperl" version="13.20" release="1.module_el8.10.0+3967+334cd65a" epoch="0" arch="s390x" src="postgresql-13.20-1.module_el8.10.0+3967+334cd65a.src.rpm">
          <filename>postgresql-plperl-13.20-1.module_el8.10.0+3967+334cd65a.s390x.rpm</filename>
          <sum type="sha256">e119bf62e2744f5bf91dc1d41b0f8b0799bd67adc7790b7c72b83e94b5e22c67</sum>
        </package>
        <package name="postgresql-test" version="13.20" release="1.module_el8.10.0+3967+334cd65a" epoch="0" arch="s390x" src="postgresql-13.20-1.module_el8.10.0+3967+334cd65a.src.rpm">
          <filename>postgresql-test-13.20-1.module_el8.10.0+3967+334cd65a.s390x.rpm</filename>
          <sum type="sha256">ff746f3d78c9a3f313969e0e2821f3e377baf6e3e4376a64aeea997aa1159ff6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1737</id>
    <title>Important: libpq security update</title>
    <issued date="2025-02-20 00:00:00"/>
    <updated date="2025-02-21 13:07:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libpq security update</summary>
    <description>The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers.   

Security Fix(es):  

  * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (CVE-2025-1094)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1737" id="RHSA-2025:1737" type="rhsa" title="RHSA-2025:1737"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1094" id="CVE-2025-1094" type="cve" title="CVE-2025-1094"/>
      <reference href="https://bugzilla.redhat.com/2345548" id="2345548" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1737.html" id="ALSA-2025:1737" type="self" title="ALSA-2025:1737"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libpq-devel" version="13.20" release="1.el8_10" epoch="0" arch="s390x" src="libpq-13.20-1.el8_10.src.rpm">
          <filename>libpq-devel-13.20-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a251f6bd288538d5e079a317bb37a219ab345d0b545f9c03185aeb081808757c</sum>
        </package>
        <package name="libpq" version="13.20" release="1.el8_10" epoch="0" arch="s390x" src="libpq-13.20-1.el8_10.src.rpm">
          <filename>libpq-13.20-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">df46700a1a97b93f35db7c18752b5a77724782dbc364174b63ff49cb68c6ca24</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1739</id>
    <title>Important: postgresql:15 security update</title>
    <issued date="2025-02-20 00:00:00"/>
    <updated date="2025-02-21 13:05:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:15 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (CVE-2025-1094)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1739" id="RHSA-2025:1739" type="rhsa" title="RHSA-2025:1739"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1094" id="CVE-2025-1094" type="cve" title="CVE-2025-1094"/>
      <reference href="https://bugzilla.redhat.com/2345548" id="2345548" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1739.html" id="ALSA-2025:1739" type="self" title="ALSA-2025:1739"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="15" version="8100020250221080628" context="9edba152" arch="s390x"/>
        <package name="postgresql-plpython3" version="15.12" release="1.module_el8.10.0+3968+5ca3d05a" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el8.10.0+3968+5ca3d05a.src.rpm">
          <filename>postgresql-plpython3-15.12-1.module_el8.10.0+3968+5ca3d05a.s390x.rpm</filename>
          <sum type="sha256">34d2907c65728bc74cde104963fcdbb4e40745cdfc74afe4d27bd4060a14c926</sum>
        </package>
        <package name="postgresql-server-devel" version="15.12" release="1.module_el8.10.0+3968+5ca3d05a" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el8.10.0+3968+5ca3d05a.src.rpm">
          <filename>postgresql-server-devel-15.12-1.module_el8.10.0+3968+5ca3d05a.s390x.rpm</filename>
          <sum type="sha256">43ac6ecfa75e083263ac2c409a629ad6f7f86cac0f74bab76f3b771268c151cd</sum>
        </package>
        <package name="postgresql-docs" version="15.12" release="1.module_el8.10.0+3968+5ca3d05a" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el8.10.0+3968+5ca3d05a.src.rpm">
          <filename>postgresql-docs-15.12-1.module_el8.10.0+3968+5ca3d05a.s390x.rpm</filename>
          <sum type="sha256">4828e824045962539ab6488c45b073aac42c88787711ee70e9c9ac1e7c5016c2</sum>
        </package>
        <package name="postgresql-pltcl" version="15.12" release="1.module_el8.10.0+3968+5ca3d05a" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el8.10.0+3968+5ca3d05a.src.rpm">
          <filename>postgresql-pltcl-15.12-1.module_el8.10.0+3968+5ca3d05a.s390x.rpm</filename>
          <sum type="sha256">5245f502207c40176f81ef7d541a061cb93d64711af61523fd37fb0a32aab0b4</sum>
        </package>
        <package name="postgresql-static" version="15.12" release="1.module_el8.10.0+3968+5ca3d05a" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el8.10.0+3968+5ca3d05a.src.rpm">
          <filename>postgresql-static-15.12-1.module_el8.10.0+3968+5ca3d05a.s390x.rpm</filename>
          <sum type="sha256">563efb035a89c0ee6562ed161ccf5a48f50ac48495d0d9180f8ecb7d6abd1405</sum>
        </package>
        <package name="postgresql-server" version="15.12" release="1.module_el8.10.0+3968+5ca3d05a" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el8.10.0+3968+5ca3d05a.src.rpm">
          <filename>postgresql-server-15.12-1.module_el8.10.0+3968+5ca3d05a.s390x.rpm</filename>
          <sum type="sha256">6016e1fdce08b67deea3717fd4a615c6fd0e909fc2ad44f8d9f71e03c1df32f8</sum>
        </package>
        <package name="postgresql" version="15.12" release="1.module_el8.10.0+3968+5ca3d05a" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el8.10.0+3968+5ca3d05a.src.rpm">
          <filename>postgresql-15.12-1.module_el8.10.0+3968+5ca3d05a.s390x.rpm</filename>
          <sum type="sha256">6e285e5c6ece989af21141f2118910113ab0a53128de8e0294363b8c5ebec1ee</sum>
        </package>
        <package name="postgresql-private-devel" version="15.12" release="1.module_el8.10.0+3968+5ca3d05a" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el8.10.0+3968+5ca3d05a.src.rpm">
          <filename>postgresql-private-devel-15.12-1.module_el8.10.0+3968+5ca3d05a.s390x.rpm</filename>
          <sum type="sha256">73e62f16d77edd2f2c4fd97d36d1f5240405ea9165be46715171b60b3077fe1b</sum>
        </package>
        <package name="pg_repack" version="1.4.8" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="pg_repack-1.4.8-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>pg_repack-1.4.8-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">7fbd57e759f737f8bc3c7bc2715300640b00ae84ed9b74d469be03ee537d20b9</sum>
        </package>
        <package name="postgresql-upgrade" version="15.12" release="1.module_el8.10.0+3968+5ca3d05a" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el8.10.0+3968+5ca3d05a.src.rpm">
          <filename>postgresql-upgrade-15.12-1.module_el8.10.0+3968+5ca3d05a.s390x.rpm</filename>
          <sum type="sha256">815ea82cd06938be29e518966d2579276f0a0e88120cb87688d96de4b55bb4df</sum>
        </package>
        <package name="postgresql-test" version="15.12" release="1.module_el8.10.0+3968+5ca3d05a" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el8.10.0+3968+5ca3d05a.src.rpm">
          <filename>postgresql-test-15.12-1.module_el8.10.0+3968+5ca3d05a.s390x.rpm</filename>
          <sum type="sha256">9a961bc293432e86b44623e62a99494be8c6e42caae29b16330bc4f89e239c40</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="15.12" release="1.module_el8.10.0+3968+5ca3d05a" epoch="0" arch="noarch" src="postgresql-15.12-1.module_el8.10.0+3968+5ca3d05a.src.rpm">
          <filename>postgresql-test-rpm-macros-15.12-1.module_el8.10.0+3968+5ca3d05a.noarch.rpm</filename>
          <sum type="sha256">9e30a58f8d1126f05e4cce2d5c4c812ef19257283f0605c8833a45cef5107a8a</sum>
        </package>
        <package name="postgresql-contrib" version="15.12" release="1.module_el8.10.0+3968+5ca3d05a" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el8.10.0+3968+5ca3d05a.src.rpm">
          <filename>postgresql-contrib-15.12-1.module_el8.10.0+3968+5ca3d05a.s390x.rpm</filename>
          <sum type="sha256">a9ebcbbeca5e8127a00811c75dba87d68cf26f3415fa6588a8a770371f90d10d</sum>
        </package>
        <package name="pgaudit" version="1.7.0" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="pgaudit-1.7.0-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>pgaudit-1.7.0-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">bebebc0b85b4d88d466cf43a44e5ae321c851b621377e2c96e1564cf00fd07bd</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="15.12" release="1.module_el8.10.0+3968+5ca3d05a" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el8.10.0+3968+5ca3d05a.src.rpm">
          <filename>postgresql-upgrade-devel-15.12-1.module_el8.10.0+3968+5ca3d05a.s390x.rpm</filename>
          <sum type="sha256">c288fa933407339a0e5dfc45555d700f9895285e3f626634f406adbfe31f296f</sum>
        </package>
        <package name="postgresql-plperl" version="15.12" release="1.module_el8.10.0+3968+5ca3d05a" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el8.10.0+3968+5ca3d05a.src.rpm">
          <filename>postgresql-plperl-15.12-1.module_el8.10.0+3968+5ca3d05a.s390x.rpm</filename>
          <sum type="sha256">d84522cf092d968c8878ed2af3cd657d1cffc5eb24c1e86df1eaea71309b067e</sum>
        </package>
        <package name="postgres-decoderbufs" version="1.9.7" release="1.Final.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="postgres-decoderbufs-1.9.7-1.Final.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>postgres-decoderbufs-1.9.7-1.Final.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">d93f26982b8a0299bb5535e5aed623996c696a2eb2f9157554b4dae3f5cce2ef</sum>
        </package>
        <package name="postgresql-private-libs" version="15.12" release="1.module_el8.10.0+3968+5ca3d05a" epoch="0" arch="s390x" src="postgresql-15.12-1.module_el8.10.0+3968+5ca3d05a.src.rpm">
          <filename>postgresql-private-libs-15.12-1.module_el8.10.0+3968+5ca3d05a.s390x.rpm</filename>
          <sum type="sha256">fca15a8f0dbf8063f1e8f227b8c252468e763feecbeed80b59f5e51a750dfeb1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1740</id>
    <title>Important: postgresql:16 security update</title>
    <issued date="2025-02-20 00:00:00"/>
    <updated date="2025-02-21 13:00:40"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:16 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (CVE-2025-1094)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1740" id="RHSA-2025:1740" type="rhsa" title="RHSA-2025:1740"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1094" id="CVE-2025-1094" type="cve" title="CVE-2025-1094"/>
      <reference href="https://bugzilla.redhat.com/2345548" id="2345548" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1740.html" id="ALSA-2025:1740" type="self" title="ALSA-2025:1740"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="16" version="8100020250221081016" context="9edba152" arch="s390x"/>
        <package name="postgresql-plperl" version="16.8" release="1.module_el8.10.0+3969+2c3c9353" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el8.10.0+3969+2c3c9353.src.rpm">
          <filename>postgresql-plperl-16.8-1.module_el8.10.0+3969+2c3c9353.s390x.rpm</filename>
          <sum type="sha256">4abb06d6e9038bdd093834809c3014a9096dab17653503bfd1ac207573ea8c6e</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="16.8" release="1.module_el8.10.0+3969+2c3c9353" epoch="0" arch="noarch" src="postgresql-16.8-1.module_el8.10.0+3969+2c3c9353.src.rpm">
          <filename>postgresql-test-rpm-macros-16.8-1.module_el8.10.0+3969+2c3c9353.noarch.rpm</filename>
          <sum type="sha256">4ef2e9f1f13e5e30bb0aa21e8866c51f0ec0ba8f7132ced484bd9318297ae46c</sum>
        </package>
        <package name="postgresql-server" version="16.8" release="1.module_el8.10.0+3969+2c3c9353" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el8.10.0+3969+2c3c9353.src.rpm">
          <filename>postgresql-server-16.8-1.module_el8.10.0+3969+2c3c9353.s390x.rpm</filename>
          <sum type="sha256">5ff6a0a2fc9a0c4840215cb48eb5aaa3e980ff2f7168e74f5ce241ece59a1d26</sum>
        </package>
        <package name="postgresql-server-devel" version="16.8" release="1.module_el8.10.0+3969+2c3c9353" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el8.10.0+3969+2c3c9353.src.rpm">
          <filename>postgresql-server-devel-16.8-1.module_el8.10.0+3969+2c3c9353.s390x.rpm</filename>
          <sum type="sha256">689f050308f12fecbbaabf6b3a42cfebc0f34fdce4a50d83eb431e52939bbcef</sum>
        </package>
        <package name="postgresql-upgrade" version="16.8" release="1.module_el8.10.0+3969+2c3c9353" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el8.10.0+3969+2c3c9353.src.rpm">
          <filename>postgresql-upgrade-16.8-1.module_el8.10.0+3969+2c3c9353.s390x.rpm</filename>
          <sum type="sha256">76e581b89e4cc711e013d4ea487e89355360a85fad5415307a452b89acdfde42</sum>
        </package>
        <package name="pg_repack" version="1.5.1" release="1.module_el8.10.0+3930+ecf33554" epoch="0" arch="s390x" src="pg_repack-1.5.1-1.module_el8.10.0+3930+ecf33554.src.rpm">
          <filename>pg_repack-1.5.1-1.module_el8.10.0+3930+ecf33554.s390x.rpm</filename>
          <sum type="sha256">9b13f1d5444f6cf8500fa428e1512f73c0cf1f4ddddd6964d429433ae4e5f724</sum>
        </package>
        <package name="postgresql-private-devel" version="16.8" release="1.module_el8.10.0+3969+2c3c9353" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el8.10.0+3969+2c3c9353.src.rpm">
          <filename>postgresql-private-devel-16.8-1.module_el8.10.0+3969+2c3c9353.s390x.rpm</filename>
          <sum type="sha256">abbfa82ff9a3c3301ab3831f0cb44dcf968387e2d056042839dfdf4604a7b57c</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="16.8" release="1.module_el8.10.0+3969+2c3c9353" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el8.10.0+3969+2c3c9353.src.rpm">
          <filename>postgresql-upgrade-devel-16.8-1.module_el8.10.0+3969+2c3c9353.s390x.rpm</filename>
          <sum type="sha256">acb88319d1243be4b250b14a5eb45022253b2612e2bb20b9149611a247e4233e</sum>
        </package>
        <package name="postgresql-static" version="16.8" release="1.module_el8.10.0+3969+2c3c9353" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el8.10.0+3969+2c3c9353.src.rpm">
          <filename>postgresql-static-16.8-1.module_el8.10.0+3969+2c3c9353.s390x.rpm</filename>
          <sum type="sha256">ad7e40a001e3a22f621e602272213cb27284756cc639b0af4ae597aa4a194e31</sum>
        </package>
        <package name="postgres-decoderbufs" version="2.4.0" release="1.Final.module_el8.10.0+3798+606ebb9f" epoch="0" arch="s390x" src="postgres-decoderbufs-2.4.0-1.Final.module_el8.10.0+3798+606ebb9f.src.rpm">
          <filename>postgres-decoderbufs-2.4.0-1.Final.module_el8.10.0+3798+606ebb9f.s390x.rpm</filename>
          <sum type="sha256">b4ab4ce80d621ce9e80cef82edec35ef1ab32c9448d690e668db0bb17bd1a90a</sum>
        </package>
        <package name="postgresql-docs" version="16.8" release="1.module_el8.10.0+3969+2c3c9353" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el8.10.0+3969+2c3c9353.src.rpm">
          <filename>postgresql-docs-16.8-1.module_el8.10.0+3969+2c3c9353.s390x.rpm</filename>
          <sum type="sha256">b7776661aa13204433137f4b1713f4f1c4aee213d019dbdd7164093de0208401</sum>
        </package>
        <package name="postgresql-contrib" version="16.8" release="1.module_el8.10.0+3969+2c3c9353" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el8.10.0+3969+2c3c9353.src.rpm">
          <filename>postgresql-contrib-16.8-1.module_el8.10.0+3969+2c3c9353.s390x.rpm</filename>
          <sum type="sha256">beedd70e425d1ee1968b0eb59bd2a1993ec55f6410aa51a224ef53992a34725c</sum>
        </package>
        <package name="postgresql-plpython3" version="16.8" release="1.module_el8.10.0+3969+2c3c9353" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el8.10.0+3969+2c3c9353.src.rpm">
          <filename>postgresql-plpython3-16.8-1.module_el8.10.0+3969+2c3c9353.s390x.rpm</filename>
          <sum type="sha256">c369ac041ef7f4e2108ba8a2590e161229783a466a122baa6de48619fff49993</sum>
        </package>
        <package name="postgresql-pltcl" version="16.8" release="1.module_el8.10.0+3969+2c3c9353" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el8.10.0+3969+2c3c9353.src.rpm">
          <filename>postgresql-pltcl-16.8-1.module_el8.10.0+3969+2c3c9353.s390x.rpm</filename>
          <sum type="sha256">c49ac1b7c414488303d61f2b6bf790b7563df32c80389c101f98a73f206c8822</sum>
        </package>
        <package name="pgaudit" version="16.0" release="1.module_el8.10.0+3798+606ebb9f" epoch="0" arch="s390x" src="pgaudit-16.0-1.module_el8.10.0+3798+606ebb9f.src.rpm">
          <filename>pgaudit-16.0-1.module_el8.10.0+3798+606ebb9f.s390x.rpm</filename>
          <sum type="sha256">e1395e420ef0b455c809e9fbbc50b5a27410be72d91603805a4907b86ca95cce</sum>
        </package>
        <package name="postgresql" version="16.8" release="1.module_el8.10.0+3969+2c3c9353" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el8.10.0+3969+2c3c9353.src.rpm">
          <filename>postgresql-16.8-1.module_el8.10.0+3969+2c3c9353.s390x.rpm</filename>
          <sum type="sha256">f1e5ec9a083a4486f8269080d7ccf2a2716e49e978b8981229771141eda205a7</sum>
        </package>
        <package name="postgresql-private-libs" version="16.8" release="1.module_el8.10.0+3969+2c3c9353" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el8.10.0+3969+2c3c9353.src.rpm">
          <filename>postgresql-private-libs-16.8-1.module_el8.10.0+3969+2c3c9353.s390x.rpm</filename>
          <sum type="sha256">f3559e1a3c7c78271b96c5edb27077c8b946aab34ea1df74bfd0239c41160ea1</sum>
        </package>
        <package name="postgresql-test" version="16.8" release="1.module_el8.10.0+3969+2c3c9353" epoch="0" arch="s390x" src="postgresql-16.8-1.module_el8.10.0+3969+2c3c9353.src.rpm">
          <filename>postgresql-test-16.8-1.module_el8.10.0+3969+2c3c9353.s390x.rpm</filename>
          <sum type="sha256">f49d7817e73c2b5eb9f5009027fc30f7d943a6c7177332c54362548db84a8785</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:17675</id>
    <title>Important: compat-libtiff3 security update</title>
    <issued date="2025-10-09 00:00:00"/>
    <updated date="2025-10-13 10:06:15"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>compat-libtiff3 security update</summary>
    <description>The libtiff3 package provides libtiff 3, an older version of libtiff library for manipulating TIFF (Tagged Image File Format) image format files. This version should be used only if you are unable to use the current version of libtiff.  

Security Fix(es):  

  * libtiff: Libtiff Write-What-Where (CVE-2025-9900)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:17675" id="RHSA-2025:17675" type="rhsa" title="RHSA-2025:17675"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9900" id="CVE-2025-9900" type="cve" title="CVE-2025-9900"/>
      <reference href="https://bugzilla.redhat.com/2392784" id="2392784" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-17675.html" id="ALSA-2025:17675" type="self" title="ALSA-2025:17675"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="compat-libtiff3" version="3.9.4" release="14.el8_10" epoch="0" arch="s390x" src="compat-libtiff3-3.9.4-14.el8_10.src.rpm">
          <filename>compat-libtiff3-3.9.4-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">06659586a8c8798106886a7df33018e6ecb31597b941de3d1a81a110a4310dc8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:17715</id>
    <title>Moderate: vim security update</title>
    <issued date="2025-10-09 00:00:00"/>
    <updated date="2025-10-13 08:30:41"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: Vim path traversal (CVE-2025-53906)
  * vim: Vim path traversial (CVE-2025-53905)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:17715" id="RHSA-2025:17715" type="rhsa" title="RHSA-2025:17715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53905" id="CVE-2025-53905" type="cve" title="CVE-2025-53905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53906" id="CVE-2025-53906" type="cve" title="CVE-2025-53906"/>
      <reference href="https://bugzilla.redhat.com/2380360" id="2380360" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380362" id="2380362" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-17715.html" id="ALSA-2025:17715" type="self" title="ALSA-2025:17715"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="vim-common" version="8.0.1763" release="21.el8_10" epoch="2" arch="s390x" src="vim-8.0.1763-21.el8_10.src.rpm">
          <filename>vim-common-8.0.1763-21.el8_10.s390x.rpm</filename>
          <sum type="sha256">2b6b547f1bb2a50c0c69b74e09906f441030e22db329d03d77f65056f98ec30e</sum>
        </package>
        <package name="vim-X11" version="8.0.1763" release="21.el8_10" epoch="2" arch="s390x" src="vim-8.0.1763-21.el8_10.src.rpm">
          <filename>vim-X11-8.0.1763-21.el8_10.s390x.rpm</filename>
          <sum type="sha256">70084aaf212f6d8505df7b00d72c2043f4073be4875cd627dc8e1307899423ea</sum>
        </package>
        <package name="vim-enhanced" version="8.0.1763" release="21.el8_10" epoch="2" arch="s390x" src="vim-8.0.1763-21.el8_10.src.rpm">
          <filename>vim-enhanced-8.0.1763-21.el8_10.s390x.rpm</filename>
          <sum type="sha256">9bcf832592ee46d920754d5d518e39f10d3d3642773e9de4d2c8f6b8dacb457a</sum>
        </package>
        <package name="vim-filesystem" version="8.0.1763" release="21.el8_10" epoch="2" arch="noarch" src="vim-8.0.1763-21.el8_10.src.rpm">
          <filename>vim-filesystem-8.0.1763-21.el8_10.noarch.rpm</filename>
          <sum type="sha256">d3365881532726472e23872dc0cf7b19f35f854ad04f5741196b7cd443073a44</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:17802</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2025-10-13 00:00:00"/>
    <updated date="2025-10-14 10:09:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43272)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43342)
  * webkitgtk: A website may be able to access sensor information without user consent (CVE-2025-43356)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43368)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:17802" id="RHSA-2025:17802" type="rhsa" title="RHSA-2025:17802"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43272" id="CVE-2025-43272" type="cve" title="CVE-2025-43272"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43342" id="CVE-2025-43342" type="cve" title="CVE-2025-43342"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43356" id="CVE-2025-43356" type="cve" title="CVE-2025-43356"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43368" id="CVE-2025-43368" type="cve" title="CVE-2025-43368"/>
      <reference href="https://bugzilla.redhat.com/2397626" id="2397626" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2397627" id="2397627" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2397628" id="2397628" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2397630" id="2397630" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-17802.html" id="ALSA-2025:17802" type="self" title="ALSA-2025:17802"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="webkit2gtk3-devel" version="2.50.0" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.50.0-1.el8_10.src.rpm">
          <filename>webkit2gtk3-devel-2.50.0-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0a1e7efc851cca9d98fef1fe70c121a71669e7ac61729e9e61cb31402615fafd</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.50.0" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.50.0-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-2.50.0-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">148eaef22854cf4c7a786c2073581cb4726c8705457770a040c016782cdc5618</sum>
        </package>
        <package name="webkit2gtk3" version="2.50.0" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.50.0-1.el8_10.src.rpm">
          <filename>webkit2gtk3-2.50.0-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a3bbaa191a30e231d5c5045c33784acbe5a06e5bedeb1fd75ec454acb34a2e77</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.50.0" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.50.0-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.50.0-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a7641eae10cb3cff6be2e0d9fc5a6ab8f51a691df10ecacb5135d4381d3d2dc4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18070</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2025-10-15 00:00:00"/>
    <updated date="2025-11-03 08:51:56"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43343)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18070" id="RHSA-2025:18070" type="rhsa" title="RHSA-2025:18070"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43343" id="CVE-2025-43343" type="cve" title="CVE-2025-43343"/>
      <reference href="https://bugzilla.redhat.com/2403598" id="2403598" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-18070.html" id="ALSA-2025:18070" type="self" title="ALSA-2025:18070"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="webkit2gtk3" version="2.50.1" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.50.1-1.el8_10.src.rpm">
          <filename>webkit2gtk3-2.50.1-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5ffad45b639db17e72a2a3664c9b55b8528bb18b1f6f488a7ad43b25f43d68bb</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.50.1" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.50.1-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.50.1-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">72242d2f222379a3e5ef119cdd1442ff71b9d99d3491b8359e90f8505af6c8ed</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.50.1" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.50.1-1.el8_10.src.rpm">
          <filename>webkit2gtk3-devel-2.50.1-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">8d33a58016f3ff44a00c0070f5a1fba580d2e317aef0f3431dab8bd098810276</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.50.1" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.50.1-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-2.50.1-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">e157f384f30c2641d6566a5a2ca0cf99234f3219660e555c8fa6597e4b225f6f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18148</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2025-10-15 00:00:00"/>
    <updated date="2025-10-20 12:11:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.121 and .NET Runtime 8.0.21.Security Fix(es):  

  * dotnet: .NET Information Disclosure Vulnerability (CVE-2025-55248)
  * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2025-55315)
  * dotnet: .NET Denial of Service Vulnerability (CVE-2025-55247)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18148" id="RHSA-2025:18148" type="rhsa" title="RHSA-2025:18148"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55247" id="CVE-2025-55247" type="cve" title="CVE-2025-55247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55248" id="CVE-2025-55248" type="cve" title="CVE-2025-55248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55315" id="CVE-2025-55315" type="cve" title="CVE-2025-55315"/>
      <reference href="https://bugzilla.redhat.com/2403083" id="2403083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403085" id="2403085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403086" id="2403086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-18148.html" id="ALSA-2025:18148" type="self" title="ALSA-2025:18148"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="dotnet-targeting-pack-8.0" version="8.0.21" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.21-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">1c9a0dedeb183caacfe76a66c1515329389b90be847cc6904093964b858c9843</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.21" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.21-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">30c2d8dff6860a04a91798bd19c394b61d5cbf862dc754058e09550c7b61fddb</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.21" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.21-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">458533d19680f6ba0bf2028f5419b2efb708a6c33150ffacb46f32e6cf1879e2</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.21" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.21-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">74cda8a5cb00ee0630f85f319d897351651c837399dd0c1c567258124c9bd488</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.21" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.21-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">ac683fb8680e188a58f4f7b32d9c82fcd272238e5a6756cb1125fba87a396f5f</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.121" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.121-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">aeb9c530e315329adb453eabd3ed821dd4a8ed520d26b32c1676cc8ddf3a1acf</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.121" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.121-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">af906ccf2c5cc98d1c05d9d5537fe7ed3f49f06e4ea4286142e236f178e04de4</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.21" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el8_10.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.21-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c49474a585f1ead796d923abbdcdcc54313db0e7ee1dc8734170dbebcf2c73ba</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.21" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.21-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">d40aa440d2d69c5bea68384c1f89cd885e4d8ed3310da5403009fcd2ff7b5702</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.21" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.21-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">f13285e078757138c09ca124dd33940b54b2a8e1810f2b9dccb2681c5877100b</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.121" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el8_10.src.rpm">
          <filename>dotnet-templates-8.0-8.0.121-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">f9e5aeb20c2eb598e6600893eed5f3c5971c9bd0935a0f6b58cd0ff3080bd93e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18150</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2025-10-15 00:00:00"/>
    <updated date="2025-11-03 08:55:12"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.111 and .NET Runtime 9.0.10.Security Fix(es):  

  * dotnet: .NET Information Disclosure Vulnerability (CVE-2025-55248)
  * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2025-55315)
  * dotnet: .NET Denial of Service Vulnerability (CVE-2025-55247)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18150" id="RHSA-2025:18150" type="rhsa" title="RHSA-2025:18150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55247" id="CVE-2025-55247" type="cve" title="CVE-2025-55247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55248" id="CVE-2025-55248" type="cve" title="CVE-2025-55248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55315" id="CVE-2025-55315" type="cve" title="CVE-2025-55315"/>
      <reference href="https://bugzilla.redhat.com/2403083" id="2403083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403085" id="2403085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403086" id="2403086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-18150.html" id="ALSA-2025:18150" type="self" title="ALSA-2025:18150"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="dotnet-runtime-dbg-9.0" version="9.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-9.0-9.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">089f99f3a5e36bec87cbc53f98bcc4cb358ce54c7321361c002b2741dd1a5677</sum>
        </package>
        <package name="aspnetcore-targeting-pack-9.0" version="9.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-9.0-9.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">129216d82ee841465896fbb0f79361474b29f4ce35f5df8542c5ffc1c49801e7</sum>
        </package>
        <package name="dotnet-sdk-dbg-9.0" version="9.0.111" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-9.0-9.0.111-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">3da82a8a64df5ec4e33d062f959a8c32a239db1c6618d3a129c1008d5fb0daaa</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-9.0" version="9.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-9.0-9.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">4b8910d2d296e219acfe71d9d791c59466269c6d4167930e33924ad30bd35f2b</sum>
        </package>
        <package name="dotnet-apphost-pack-9.0" version="9.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-9.0-9.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5fdcf5f0492b4723ec123dac1495420519b0f03c5d0d4ae06e0da29e7242f5b0</sum>
        </package>
        <package name="dotnet" version="9.0.111" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el8_10.src.rpm">
          <filename>dotnet-9.0.111-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">6593a564730cd3e0a259937774f0c78b7aee5f31f2dbdfd2e5a121ca19a0e912</sum>
        </package>
        <package name="aspnetcore-runtime-9.0" version="9.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-9.0-9.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">84657f410a35f7167c4288baf065a6ca2f78b3a75678aef73385fba42dfff991</sum>
        </package>
        <package name="dotnet-sdk-9.0" version="9.0.111" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-9.0.111-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">8bb7934c5b3859ed285203828b36e969d2daf44fa8bbcdf73b4dac7e6bf95823</sum>
        </package>
        <package name="dotnet-hostfxr-9.0" version="9.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-9.0-9.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">92591891cab21b880b54a8bfb12a02e807cfc05a5c4c4ac870121eea0d125746</sum>
        </package>
        <package name="dotnet-templates-9.0" version="9.0.111" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el8_10.src.rpm">
          <filename>dotnet-templates-9.0-9.0.111-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">98d1d107267c53d2cde794c20be941c78e6fe6acef78c296c5dd0ef41dbcbec0</sum>
        </package>
        <package name="dotnet-runtime-9.0" version="9.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el8_10.src.rpm">
          <filename>dotnet-runtime-9.0-9.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">d2da454ad250549e9f6be3cfebfa881851438ad7de88b6560282213e07649f5f</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="9.0.111" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el8_10.src.rpm">
          <filename>netstandard-targeting-pack-2.1-9.0.111-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">f2e43624e350d294480ae5c3e93e706d5896224bfc9eef631443469d9c381a50</sum>
        </package>
        <package name="dotnet-host" version="9.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el8_10.src.rpm">
          <filename>dotnet-host-9.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">f4dee092ddb6379581ff8d7ef1f273fa10856576b86b4bb1eefcef63687cf294</sum>
        </package>
        <package name="dotnet-targeting-pack-9.0" version="9.0.10" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-9.0-9.0.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">f609d495ff10755d2543230987d02baf2e309762b8d70af4241fbbb3b628b9a0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18285</id>
    <title>Important: firefox security update</title>
    <issued date="2025-10-20 00:00:00"/>
    <updated date="2025-10-20 11:50:28"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * thunderbird: firefox: Memory safety bugs (CVE-2025-11714)
  * thunderbird: firefox: Out of bounds read/write in a privileged process triggered by WebGL textures (CVE-2025-11709)
  * thunderbird: firefox: Cross-process information leaked due to malicious IPC messages (CVE-2025-11710)
  * thunderbird: firefox: Use-after-free in MediaTrackGraphImpl::GetInstance() (CVE-2025-11708)
  * thunderbird: firefox: An OBJECT tag type attribute overrode browser behavior on web resources without a content-type (CVE-2025-11712)
  * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144 (CVE-2025-11715)
  * thunderbird: firefox: Some non-writable Object properties could be modified (CVE-2025-11711)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18285" id="RHSA-2025:18285" type="rhsa" title="RHSA-2025:18285"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11708" id="CVE-2025-11708" type="cve" title="CVE-2025-11708"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11709" id="CVE-2025-11709" type="cve" title="CVE-2025-11709"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11710" id="CVE-2025-11710" type="cve" title="CVE-2025-11710"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11711" id="CVE-2025-11711" type="cve" title="CVE-2025-11711"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11712" id="CVE-2025-11712" type="cve" title="CVE-2025-11712"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11714" id="CVE-2025-11714" type="cve" title="CVE-2025-11714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11715" id="CVE-2025-11715" type="cve" title="CVE-2025-11715"/>
      <reference href="https://bugzilla.redhat.com/2403763" id="2403763" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403765" id="2403765" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403768" id="2403768" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403769" id="2403769" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403770" id="2403770" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403774" id="2403774" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403776" id="2403776" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-18285.html" id="ALSA-2025:18285" type="self" title="ALSA-2025:18285"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="140.4.0" release="3.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-140.4.0-3.el8_10.alma.1.src.rpm">
          <filename>firefox-140.4.0-3.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">5161d96dc75152327589abf29ddc6429ffcc5c7e07355309ac8f3d6e3d09c642</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18286</id>
    <title>Moderate: libssh security update</title>
    <issued date="2025-10-20 00:00:00"/>
    <updated date="2025-10-20 11:55:43"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libssh security update</summary>
    <description>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.  

Security Fix(es):  

  * libssh: out-of-bounds read in sftp_handle() (CVE-2025-5318)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18286" id="RHSA-2025:18286" type="rhsa" title="RHSA-2025:18286"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5318" id="CVE-2025-5318" type="cve" title="CVE-2025-5318"/>
      <reference href="https://bugzilla.redhat.com/2369131" id="2369131" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-18286.html" id="ALSA-2025:18286" type="self" title="ALSA-2025:18286"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libssh-devel" version="0.9.6" release="15.el8_10" epoch="0" arch="s390x" src="libssh-0.9.6-15.el8_10.src.rpm">
          <filename>libssh-devel-0.9.6-15.el8_10.s390x.rpm</filename>
          <sum type="sha256">b325e90ebd8ead58c5d8f7ae1f93b547e963e4785b058c0e9e43d3e838bbaaf4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18815</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2025-10-22 00:00:00"/>
    <updated date="2025-10-30 12:06:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance Path Factories (CVE-2025-53066)
  * JDK: Enhance Certificate Handling (CVE-2025-53057)


Bug Fix(es):  

  * Since the 8.8 release of AlmaLinuxand the 9.2 release of AlmaLinux OpenJDK 8 has used a single build repackaged for each major AlmaLinux release. With this release, this same build is now also used by the following older releases: 8.2, 8.4, 8.6, and 9.0. On AlmaLinux systems, this means that OpenJDK's FIPS mode will now be enabled by default when the system is in FIPS mode. To revert to the previous behaviour, use -Dcom.AlmaLinux.fips=false (AlmaLinux-118777, AlmaLinux-118778, AlmaLinux-118779, AlmaLinux-118782)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18815" id="RHSA-2025:18815" type="rhsa" title="RHSA-2025:18815"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53057" id="CVE-2025-53057" type="cve" title="CVE-2025-53057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53066" id="CVE-2025-53066" type="cve" title="CVE-2025-53066"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-18815.html" id="ALSA-2025:18815" type="self" title="ALSA-2025:18815"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.472.b08" release="1.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.472.b08-1.el8.s390x.rpm</filename>
          <sum type="sha256">3ab2e84ad6c277e0f8f87786a16b94ae1171f0ecfe01385f1726c55acaacd59c</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.472.b08" release="1.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.472.b08-1.el8.s390x.rpm</filename>
          <sum type="sha256">4e3e3d08d81f1b4a4b042b8965258c85193666848a65a5571137ca589cafe0bf</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.472.b08" release="1.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.472.b08-1.el8.s390x.rpm</filename>
          <sum type="sha256">648d63e90bb1e4c00f898201dbb2caa96bdef4f19924bc56c7f0e22da55fcf63</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.472.b08" release="1.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.472.b08-1.el8.noarch.rpm</filename>
          <sum type="sha256">701f0e92157e107ae9f339a2dcc010623029377414916105727b428a90627df1</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.472.b08" release="1.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.472.b08-1.el8.noarch.rpm</filename>
          <sum type="sha256">baa1dc04bded87de526572ab44219f8a9d694a211450e3a11357c545729097fa</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility" version="1.8.0.472.b08" release="1.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-1.8.0.472.b08-1.el8.s390x.rpm</filename>
          <sum type="sha256">c3391269919b71cc84820cd27182cde670735d89bef3c549ce21757bdb313734</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.472.b08" release="1.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.472.b08-1.el8.s390x.rpm</filename>
          <sum type="sha256">f6444aeb1dc1037fdc9602b7ae24fab5df69ef087f4077df37bf01761475c893</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18821</id>
    <title>Moderate: java-17-openjdk security update</title>
    <issued date="2025-10-22 00:00:00"/>
    <updated date="2025-10-30 07:28:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance Path Factories (CVE-2025-53066)
  * JDK: Enhance Certificate Handling (CVE-2025-53057)


Bug Fix(es):  

  * Since the 8.8 release of AlmaLinuxand the 9.2 release of AlmaLinux OpenJDK 17 has used a single build repackaged for each major AlmaLinux release. With this release, this same build is now also used by the following older releases: 8.4, 8.6 and 9.0 (AlmaLinux-118788, AlmaLinux-118789, AlmaLinux-118792)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18821" id="RHSA-2025:18821" type="rhsa" title="RHSA-2025:18821"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53057" id="CVE-2025-53057" type="cve" title="CVE-2025-53057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53066" id="CVE-2025-53066" type="cve" title="CVE-2025-53066"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-18821.html" id="ALSA-2025:18821" type="self" title="ALSA-2025:18821"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-17-openjdk-jmods" version="17.0.17.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.17.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">0f69751a25bedcd22540cc7bc242cb3fdd34fa27a6b7015beaebc16e43096371</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.17.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.17.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">280c45a1dd56c713b9d3b879925d4b52c3ba3d16b1a13dd609e0e5b52c35e7da</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.17.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.17.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">553cd2e56cfe513311b74580d480228768422f4eff105a6a510332ad540f10dd</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.17.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-devel-17.0.17.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">5af9c5c275d121b06c46c11fb6c6e56e3ba818532185384e296f474489b749ba</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.17.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-src-17.0.17.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">7f427ab416bf4bf0180658c039ce9bb2710ce626b9a49830d8c55ab81fe7925a</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.17.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-demo-17.0.17.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">82aacf9c0fbcae352551d00f3b6a8a55000808953a60c81b86e5a0a1be38b845</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.17.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.17.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">83bf7072b91a11b38313f469575b81abb139bc252c8da02139b8b8ce69a21246</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.17.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-headless-17.0.17.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">d7188c3b8e0346fd99ed214b9faf2fac25aa83d19573a57d55856530fe7ab4df</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.17.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-17.0.17.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">fb06e966323c2bf8910e498f93bb6a6ee75ceef3dc0fb56e8e2819392111ef7e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18824</id>
    <title>Moderate: java-21-openjdk security update</title>
    <issued date="2025-10-22 00:00:00"/>
    <updated date="2025-10-30 07:18:56"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance Path Factories (CVE-2025-53066)
  * JDK: Enhance Certificate Handling (CVE-2025-53057)
  * JDK: Enhance String Handling (CVE-2025-61748)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18824" id="RHSA-2025:18824" type="rhsa" title="RHSA-2025:18824"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53057" id="CVE-2025-53057" type="cve" title="CVE-2025-53057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53066" id="CVE-2025-53066" type="cve" title="CVE-2025-53066"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61748" id="CVE-2025-61748" type="cve" title="CVE-2025-61748"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-18824.html" id="ALSA-2025:18824" type="self" title="ALSA-2025:18824"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-21-openjdk-devel" version="21.0.9.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-21.0.9.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">0970be3630d444a4afaa682e82d1214ac4abd81627f7cb8d9c38deb4b4c38463</sum>
        </package>
        <package name="java-21-openjdk-javadoc" version="21.0.9.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-javadoc-21.0.9.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">15229a4862e8ab93fca36403523367fa18f8c384a0c24625fb9240a555fca0bf</sum>
        </package>
        <package name="java-21-openjdk" version="21.0.9.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-21.0.9.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">16023bcc4bf243e63f81eb843c1256c4521edaf2dd085e914870e6bc81253805</sum>
        </package>
        <package name="java-21-openjdk-headless" version="21.0.9.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-21.0.9.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">1fcce3fd87602282e655a4b9672025619631761cea04b1994922f802e9a0acf8</sum>
        </package>
        <package name="java-21-openjdk-javadoc-zip" version="21.0.9.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-javadoc-zip-21.0.9.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">4ab83f618602b7e94842f3b7549d3a5e760e40ca4e7384fa6704881d1b67d017</sum>
        </package>
        <package name="java-21-openjdk-src" version="21.0.9.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-src-21.0.9.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">5720a3eea082c336997720d69195ba70ba75f4f54f7258ca2e724ba8d67c508b</sum>
        </package>
        <package name="java-21-openjdk-demo" version="21.0.9.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-21.0.9.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">7df579c529dd651227d81affa8643dc225445bd7cc821c7ccb916933e0083bcf</sum>
        </package>
        <package name="java-21-openjdk-static-libs" version="21.0.9.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-21.0.9.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">a91fcc4ead1b1e15af848b01f27ef3431e860757e9009a3bc1715c9c72a047d9</sum>
        </package>
        <package name="java-21-openjdk-jmods" version="21.0.9.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-21.0.9.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">ecdceb2570086ac607b91672b37efec4c66584fb630f30114cdee7dad1423590</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18983</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-10-22 00:00:00"/>
    <updated date="2025-10-27 08:16:53"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * thunderbird: firefox: Memory safety bugs (CVE-2025-11714)
  * thunderbird: firefox: Out of bounds read/write in a privileged process triggered by WebGL textures (CVE-2025-11709)
  * thunderbird: firefox: Cross-process information leaked due to malicious IPC messages (CVE-2025-11710)
  * thunderbird: firefox: Use-after-free in MediaTrackGraphImpl::GetInstance() (CVE-2025-11708)
  * thunderbird: firefox: An OBJECT tag type attribute overrode browser behavior on web resources without a content-type (CVE-2025-11712)
  * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144 (CVE-2025-11715)
  * thunderbird: firefox: Some non-writable Object properties could be modified (CVE-2025-11711)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18983" id="RHSA-2025:18983" type="rhsa" title="RHSA-2025:18983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11708" id="CVE-2025-11708" type="cve" title="CVE-2025-11708"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11709" id="CVE-2025-11709" type="cve" title="CVE-2025-11709"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11710" id="CVE-2025-11710" type="cve" title="CVE-2025-11710"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11711" id="CVE-2025-11711" type="cve" title="CVE-2025-11711"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11712" id="CVE-2025-11712" type="cve" title="CVE-2025-11712"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11714" id="CVE-2025-11714" type="cve" title="CVE-2025-11714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11715" id="CVE-2025-11715" type="cve" title="CVE-2025-11715"/>
      <reference href="https://bugzilla.redhat.com/2403763" id="2403763" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403765" id="2403765" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403768" id="2403768" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403769" id="2403769" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403770" id="2403770" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403774" id="2403774" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403776" id="2403776" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-18983.html" id="ALSA-2025:18983" type="self" title="ALSA-2025:18983"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="140.4.0" release="2.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-140.4.0-2.el8_10.alma.1.src.rpm">
          <filename>thunderbird-140.4.0-2.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">21fd1b9f52ae92881d2c827e5b197df9603dbc5fb52e913ae0bd5940c304a8f6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19107</id>
    <title>Important: squid:4 security update</title>
    <issued date="2025-10-27 00:00:00"/>
    <updated date="2025-10-28 09:25:35"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>squid:4 security update</summary>
    <description>Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.  

Security Fix(es):  

  * squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19107" id="RHSA-2025:19107" type="rhsa" title="RHSA-2025:19107"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62168" id="CVE-2025-62168" type="cve" title="CVE-2025-62168"/>
      <reference href="https://bugzilla.redhat.com/2404736" id="2404736" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19107.html" id="ALSA-2025:19107" type="self" title="ALSA-2025:19107"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="squid" stream="4" version="8100020251028074855" context="9edba152" arch="s390x"/>
        <package name="squid" version="4.15" release="10.module_el8.10.0+4055+645078d8.9" epoch="7" arch="s390x" src="squid-4.15-10.module_el8.10.0+4055+645078d8.9.src.rpm">
          <filename>squid-4.15-10.module_el8.10.0+4055+645078d8.9.s390x.rpm</filename>
          <sum type="sha256">4e4bc5a30b1e26cbd18c22eaa9144d8898213bb02992ebf96ce2797fad58d4ab</sum>
        </package>
        <package name="libecap" version="1.0.1" release="2.module_el8.6.0+3048+383bc947" epoch="0" arch="s390x" src="libecap-1.0.1-2.module_el8.6.0+3048+383bc947.src.rpm">
          <filename>libecap-1.0.1-2.module_el8.6.0+3048+383bc947.s390x.rpm</filename>
          <sum type="sha256">6f8eb1f500a9dca1949f5f05aedf6b97764817d9f17284be3612eec04618f4e1</sum>
        </package>
        <package name="libecap-devel" version="1.0.1" release="2.module_el8.6.0+3048+383bc947" epoch="0" arch="s390x" src="libecap-1.0.1-2.module_el8.6.0+3048+383bc947.src.rpm">
          <filename>libecap-devel-1.0.1-2.module_el8.6.0+3048+383bc947.s390x.rpm</filename>
          <sum type="sha256">96f15e87a90682f6ec87bc4ed7c8edae439f414cd0382f1865dcf76ac3a7807d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1917</id>
    <title>Important: emacs security update</title>
    <issued date="2025-02-27 00:00:00"/>
    <updated date="2025-03-18 07:08:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>emacs security update</summary>
    <description>GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.  

Security Fix(es):  

  * emacs: Shell Injection Vulnerability in GNU Emacs via Custom "man" URI Scheme (CVE-2025-1244)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1917" id="RHSA-2025:1917" type="rhsa" title="RHSA-2025:1917"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1244" id="CVE-2025-1244" type="cve" title="CVE-2025-1244"/>
      <reference href="https://bugzilla.redhat.com/2345150" id="2345150" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1917.html" id="ALSA-2025:1917" type="self" title="ALSA-2025:1917"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="emacs-nox" version="26.1" release="13.el8_10" epoch="1" arch="s390x" src="emacs-26.1-13.el8_10.src.rpm">
          <filename>emacs-nox-26.1-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">200c3451e7a439c5a68f40117a61d68107e36bca8b9607d987952010afe481a3</sum>
        </package>
        <package name="emacs-common" version="26.1" release="13.el8_10" epoch="1" arch="s390x" src="emacs-26.1-13.el8_10.src.rpm">
          <filename>emacs-common-26.1-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">6988c67854d389b4b27cb454167f20795a15e4cf7d03317125c6b2eefaf9adff</sum>
        </package>
        <package name="emacs" version="26.1" release="13.el8_10" epoch="1" arch="s390x" src="emacs-26.1-13.el8_10.src.rpm">
          <filename>emacs-26.1-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">e1e752aef1e87c13faeab172a0ee26f36deba74fca5123e31611827b0e47a864</sum>
        </package>
        <package name="emacs-terminal" version="26.1" release="13.el8_10" epoch="1" arch="noarch" src="emacs-26.1-13.el8_10.src.rpm">
          <filename>emacs-terminal-26.1-13.el8_10.noarch.rpm</filename>
          <sum type="sha256">e31d0487c9270fcf6813835227750d66f7438913d8f511b5c8b0da75f9a7d364</sum>
        </package>
        <package name="emacs-lucid" version="26.1" release="13.el8_10" epoch="1" arch="s390x" src="emacs-26.1-13.el8_10.src.rpm">
          <filename>emacs-lucid-26.1-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">f48d8aaf3ee5222d28e503af26a4c272995b2ebdf2a04e7171689f3b018ca2a5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19238</id>
    <title>Important: redis:6 security update</title>
    <issued date="2025-10-29 00:00:00"/>
    <updated date="2025-10-30 07:01:24"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>redis:6 security update</summary>
    <description>Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.  

Security Fix(es):  

  * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817)
  * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818)
  * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819)
  * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19238" id="RHSA-2025:19238" type="rhsa" title="RHSA-2025:19238"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46817" id="CVE-2025-46817" type="cve" title="CVE-2025-46817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46818" id="CVE-2025-46818" type="cve" title="CVE-2025-46818"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46819" id="CVE-2025-46819" type="cve" title="CVE-2025-46819"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49844" id="CVE-2025-49844" type="cve" title="CVE-2025-49844"/>
      <reference href="https://bugzilla.redhat.com/2401258" id="2401258" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401292" id="2401292" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401322" id="2401322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401324" id="2401324" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19238.html" id="ALSA-2025:19238" type="self" title="ALSA-2025:19238"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="redis" stream="6" version="8100020251029105918" context="9edba152" arch="s390x"/>
        <package name="redis" version="6.2.20" release="1.module_el8.10.0+4056+739731b0" epoch="0" arch="s390x" src="redis-6.2.20-1.module_el8.10.0+4056+739731b0.src.rpm">
          <filename>redis-6.2.20-1.module_el8.10.0+4056+739731b0.s390x.rpm</filename>
          <sum type="sha256">266c19054dfab110926f0f8e9c6c6947192b9a0e5084a3d13f412ff9415290e1</sum>
        </package>
        <package name="redis-doc" version="6.2.20" release="1.module_el8.10.0+4056+739731b0" epoch="0" arch="noarch" src="redis-6.2.20-1.module_el8.10.0+4056+739731b0.src.rpm">
          <filename>redis-doc-6.2.20-1.module_el8.10.0+4056+739731b0.noarch.rpm</filename>
          <sum type="sha256">5a965954de717567dae9e8ca714759d08be771d6b2e21f7a38c1b5958208a5d0</sum>
        </package>
        <package name="redis-devel" version="6.2.20" release="1.module_el8.10.0+4056+739731b0" epoch="0" arch="s390x" src="redis-6.2.20-1.module_el8.10.0+4056+739731b0.src.rpm">
          <filename>redis-devel-6.2.20-1.module_el8.10.0+4056+739731b0.s390x.rpm</filename>
          <sum type="sha256">e7773998499a0f948fb30b41c3615fab1dc045e934cb4bad9064c90bcd98eda5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19276</id>
    <title>Important: libtiff security update</title>
    <issued date="2025-10-29 00:00:00"/>
    <updated date="2025-10-31 08:23:08"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: Libtiff Write-What-Where (CVE-2025-9900)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19276" id="RHSA-2025:19276" type="rhsa" title="RHSA-2025:19276"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9900" id="CVE-2025-9900" type="cve" title="CVE-2025-9900"/>
      <reference href="https://bugzilla.redhat.com/2392784" id="2392784" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19276.html" id="ALSA-2025:19276" type="self" title="ALSA-2025:19276"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libtiff-devel" version="4.0.9" release="35.el8_10" epoch="0" arch="s390x" src="libtiff-4.0.9-35.el8_10.src.rpm">
          <filename>libtiff-devel-4.0.9-35.el8_10.s390x.rpm</filename>
          <sum type="sha256">04ad6a78d1c56748ec6d71b0e686a1ac394e4c6c4e16582f7dffb174ce2e3518</sum>
        </package>
        <package name="libtiff" version="4.0.9" release="35.el8_10" epoch="0" arch="s390x" src="libtiff-4.0.9-35.el8_10.src.rpm">
          <filename>libtiff-4.0.9-35.el8_10.s390x.rpm</filename>
          <sum type="sha256">3a235e258f887329ef1b640a8757bb768b641d1fa9fc9d2db40d4fb4b58b30fd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19432</id>
    <title>Moderate: xorg-x11-server-Xwayland security update</title>
    <issued date="2025-11-03 00:00:00"/>
    <updated date="2025-11-07 11:17:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.  

Security Fix(es):  

  * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)
  * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)
  * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19432" id="RHSA-2025:19432" type="rhsa" title="RHSA-2025:19432"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62229" id="CVE-2025-62229" type="cve" title="CVE-2025-62229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62230" id="CVE-2025-62230" type="cve" title="CVE-2025-62230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62231" id="CVE-2025-62231" type="cve" title="CVE-2025-62231"/>
      <reference href="https://bugzilla.redhat.com/2402649" id="2402649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402653" id="2402653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402660" id="2402660" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19432.html" id="ALSA-2025:19432" type="self" title="ALSA-2025:19432"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="xorg-x11-server-Xwayland" version="21.1.3" release="19.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-21.1.3-19.el8_10.src.rpm">
          <filename>xorg-x11-server-Xwayland-21.1.3-19.el8_10.s390x.rpm</filename>
          <sum type="sha256">79902f532a7cd89394117ff9bdd33ed342664a14d6b6de38be28680ed0614ed0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19434</id>
    <title>Moderate: xorg-x11-server security update</title>
    <issued date="2025-11-03 00:00:00"/>
    <updated date="2026-01-05 21:05:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)
  * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)
  * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19434" id="RHSA-2025:19434" type="rhsa" title="RHSA-2025:19434"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62229" id="CVE-2025-62229" type="cve" title="CVE-2025-62229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62230" id="CVE-2025-62230" type="cve" title="CVE-2025-62230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62231" id="CVE-2025-62231" type="cve" title="CVE-2025-62231"/>
      <reference href="https://bugzilla.redhat.com/2402649" id="2402649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402653" id="2402653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402660" id="2402660" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19434.html" id="ALSA-2025:19434" type="self" title="ALSA-2025:19434"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="xorg-x11-server-Xvfb" version="1.20.11" release="27.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-27.el8_10.src.rpm">
          <filename>xorg-x11-server-Xvfb-1.20.11-27.el8_10.s390x.rpm</filename>
          <sum type="sha256">04c775ebb32bf2ba270720bbf3d682c4b3165cf0897ed18760ea5f99896dd269</sum>
        </package>
        <package name="xorg-x11-server-Xnest" version="1.20.11" release="27.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-27.el8_10.src.rpm">
          <filename>xorg-x11-server-Xnest-1.20.11-27.el8_10.s390x.rpm</filename>
          <sum type="sha256">1b34e08ee4d76adffe5d9c518cb1964d8a09a72ae4d835e9e05f4a801c1b4b7e</sum>
        </package>
        <package name="xorg-x11-server-common" version="1.20.11" release="27.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-27.el8_10.src.rpm">
          <filename>xorg-x11-server-common-1.20.11-27.el8_10.s390x.rpm</filename>
          <sum type="sha256">8a5bdba1c5a69261c99032075c118cf9d494761df6604111debd03180c24fb03</sum>
        </package>
        <package name="xorg-x11-server-Xephyr" version="1.20.11" release="27.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-27.el8_10.src.rpm">
          <filename>xorg-x11-server-Xephyr-1.20.11-27.el8_10.s390x.rpm</filename>
          <sum type="sha256">9d605000c18a10202f3f0816cff72a472be84fde42b106f407098cea0e04b0d9</sum>
        </package>
        <package name="xorg-x11-server-Xorg" version="1.20.11" release="27.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-27.el8_10.src.rpm">
          <filename>xorg-x11-server-Xorg-1.20.11-27.el8_10.s390x.rpm</filename>
          <sum type="sha256">a20aad52df73990728c8638db20911316317fe0700d813d5691b8628586817b0</sum>
        </package>
        <package name="xorg-x11-server-Xdmx" version="1.20.11" release="27.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-27.el8_10.src.rpm">
          <filename>xorg-x11-server-Xdmx-1.20.11-27.el8_10.s390x.rpm</filename>
          <sum type="sha256">e4f239724611b4cfb623df447cde39615eb7b7ba1b59e8449b68be268493cc00</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19572</id>
    <title>Moderate: mariadb:10.5 security update</title>
    <issued date="2025-11-04 00:00:00"/>
    <updated date="2025-11-07 09:54:08"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mariadb:10.5 security update</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.   

Security Fix(es):  

  * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
  * mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)
  * mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)
  * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19572" id="RHSA-2025:19572" type="rhsa" title="RHSA-2025:19572"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52969" id="CVE-2023-52969" type="cve" title="CVE-2023-52969"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52970" id="CVE-2023-52970" type="cve" title="CVE-2023-52970"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21490" id="CVE-2025-21490" type="cve" title="CVE-2025-21490"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30693" id="CVE-2025-30693" type="cve" title="CVE-2025-30693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30722" id="CVE-2025-30722" type="cve" title="CVE-2025-30722"/>
      <reference href="https://bugzilla.redhat.com/2339221" id="2339221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350916" id="2350916" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350918" id="2350918" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359885" id="2359885" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359963" id="2359963" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19572.html" id="ALSA-2025:19572" type="self" title="ALSA-2025:19572"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="mariadb" stream="10.5" version="8100020250128084844" context="9edba152" arch="s390x"/>
        <package name="mariadb" version="10.5.29" release="2.module_el8.10.0+4059+10818090" epoch="3" arch="s390x" src="mariadb-10.5.29-2.module_el8.10.0+4059+10818090.src.rpm">
          <filename>mariadb-10.5.29-2.module_el8.10.0+4059+10818090.s390x.rpm</filename>
          <sum type="sha256">0ca7ca380e50112e5fa2bfa79554d2406939af5e4973a1d543b08c4f06059ec4</sum>
        </package>
        <package name="mariadb-test" version="10.5.29" release="2.module_el8.10.0+4059+10818090" epoch="3" arch="s390x" src="mariadb-10.5.29-2.module_el8.10.0+4059+10818090.src.rpm">
          <filename>mariadb-test-10.5.29-2.module_el8.10.0+4059+10818090.s390x.rpm</filename>
          <sum type="sha256">15cf795ddfdad16542b9cdfea978d0d8a6bd26939884f95e9bcebff99213d944</sum>
        </package>
        <package name="mariadb-devel" version="10.5.29" release="2.module_el8.10.0+4059+10818090" epoch="3" arch="s390x" src="mariadb-10.5.29-2.module_el8.10.0+4059+10818090.src.rpm">
          <filename>mariadb-devel-10.5.29-2.module_el8.10.0+4059+10818090.s390x.rpm</filename>
          <sum type="sha256">3c3d7d9db0c90145951645a7bc628bd417e3a2ab0c4108dae9b93f708bf6246e</sum>
        </package>
        <package name="mariadb-errmsg" version="10.5.29" release="2.module_el8.10.0+4059+10818090" epoch="3" arch="s390x" src="mariadb-10.5.29-2.module_el8.10.0+4059+10818090.src.rpm">
          <filename>mariadb-errmsg-10.5.29-2.module_el8.10.0+4059+10818090.s390x.rpm</filename>
          <sum type="sha256">4cc7a5449009c541a6eb4eb72ecafb9ef645aa8792b406b0b29474284e0728fb</sum>
        </package>
        <package name="mariadb-server-galera" version="10.5.29" release="2.module_el8.10.0+4059+10818090" epoch="3" arch="s390x" src="mariadb-10.5.29-2.module_el8.10.0+4059+10818090.src.rpm">
          <filename>mariadb-server-galera-10.5.29-2.module_el8.10.0+4059+10818090.s390x.rpm</filename>
          <sum type="sha256">4f172050b55aa8fbf13dff12915791dc3add56989a3a9f9225ba9fcd9464a186</sum>
        </package>
        <package name="mariadb-embedded" version="10.5.29" release="2.module_el8.10.0+4059+10818090" epoch="3" arch="s390x" src="mariadb-10.5.29-2.module_el8.10.0+4059+10818090.src.rpm">
          <filename>mariadb-embedded-10.5.29-2.module_el8.10.0+4059+10818090.s390x.rpm</filename>
          <sum type="sha256">52b20cbfd75f7d3967cd9f88001055e512b39cc2f154851bae93a0413dfa3842</sum>
        </package>
        <package name="mariadb-server" version="10.5.29" release="2.module_el8.10.0+4059+10818090" epoch="3" arch="s390x" src="mariadb-10.5.29-2.module_el8.10.0+4059+10818090.src.rpm">
          <filename>mariadb-server-10.5.29-2.module_el8.10.0+4059+10818090.s390x.rpm</filename>
          <sum type="sha256">60e3eb59574f4e24e53af5de092d94516f2170429b0b9c3b5e478531e1cacaf6</sum>
        </package>
        <package name="mariadb-common" version="10.5.29" release="2.module_el8.10.0+4059+10818090" epoch="3" arch="s390x" src="mariadb-10.5.29-2.module_el8.10.0+4059+10818090.src.rpm">
          <filename>mariadb-common-10.5.29-2.module_el8.10.0+4059+10818090.s390x.rpm</filename>
          <sum type="sha256">6fdf285834656b2badba2be53b38f5e6606470b80b1682919152445feab6a41c</sum>
        </package>
        <package name="mariadb-oqgraph-engine" version="10.5.29" release="2.module_el8.10.0+4059+10818090" epoch="3" arch="s390x" src="mariadb-10.5.29-2.module_el8.10.0+4059+10818090.src.rpm">
          <filename>mariadb-oqgraph-engine-10.5.29-2.module_el8.10.0+4059+10818090.s390x.rpm</filename>
          <sum type="sha256">844f638ac38d68d31c8c1804849901ab08048d3d82e761ce91d374d54472d390</sum>
        </package>
        <package name="mariadb-pam" version="10.5.29" release="2.module_el8.10.0+4059+10818090" epoch="3" arch="s390x" src="mariadb-10.5.29-2.module_el8.10.0+4059+10818090.src.rpm">
          <filename>mariadb-pam-10.5.29-2.module_el8.10.0+4059+10818090.s390x.rpm</filename>
          <sum type="sha256">923117892dd15c02cc5fa6f407b03b386adba82a2b85be7e586fe2d0fba6540a</sum>
        </package>
        <package name="galera" version="26.4.22" release="1.module_el8.10.0+4059+10818090" epoch="0" arch="s390x" src="galera-26.4.22-1.module_el8.10.0+4059+10818090.src.rpm">
          <filename>galera-26.4.22-1.module_el8.10.0+4059+10818090.s390x.rpm</filename>
          <sum type="sha256">df9de5c25e180506072194e1c5173b581629c175acb87d53912c8f7b780bb4f5</sum>
        </package>
        <package name="Judy" version="1.0.5" release="18.module_el8.10.0+3947+ac422511" epoch="0" arch="s390x" src="Judy-1.0.5-18.module_el8.10.0+3947+ac422511.src.rpm">
          <filename>Judy-1.0.5-18.module_el8.10.0+3947+ac422511.s390x.rpm</filename>
          <sum type="sha256">e004c007bad35247f91e70787432966941e40d2b399880da0818c23178f1d260</sum>
        </package>
        <package name="mariadb-embedded-devel" version="10.5.29" release="2.module_el8.10.0+4059+10818090" epoch="3" arch="s390x" src="mariadb-10.5.29-2.module_el8.10.0+4059+10818090.src.rpm">
          <filename>mariadb-embedded-devel-10.5.29-2.module_el8.10.0+4059+10818090.s390x.rpm</filename>
          <sum type="sha256">e9c6e60c3e054d92c615a37f6b100b8a89e1bf82473456b0896d54f1c0a2b7db</sum>
        </package>
        <package name="mariadb-backup" version="10.5.29" release="2.module_el8.10.0+4059+10818090" epoch="3" arch="s390x" src="mariadb-10.5.29-2.module_el8.10.0+4059+10818090.src.rpm">
          <filename>mariadb-backup-10.5.29-2.module_el8.10.0+4059+10818090.s390x.rpm</filename>
          <sum type="sha256">ea9c2619a9892b787958802a5679f16cff198f68fceb7e7c4cc75c883aa09171</sum>
        </package>
        <package name="mariadb-server-utils" version="10.5.29" release="2.module_el8.10.0+4059+10818090" epoch="3" arch="s390x" src="mariadb-10.5.29-2.module_el8.10.0+4059+10818090.src.rpm">
          <filename>mariadb-server-utils-10.5.29-2.module_el8.10.0+4059+10818090.s390x.rpm</filename>
          <sum type="sha256">f1d1fe193ae351e0747107c446ce1ff987a75ff4efe8ca527bc9f8858d46b285</sum>
        </package>
        <package name="mariadb-gssapi-server" version="10.5.29" release="2.module_el8.10.0+4059+10818090" epoch="3" arch="s390x" src="mariadb-10.5.29-2.module_el8.10.0+4059+10818090.src.rpm">
          <filename>mariadb-gssapi-server-10.5.29-2.module_el8.10.0+4059+10818090.s390x.rpm</filename>
          <sum type="sha256">f35797ceeafb351f2103c03998e17b7a4733a2dafd53154dc7b056e6de0a88e5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19610</id>
    <title>Important: sssd security update</title>
    <issued date="2025-11-04 00:00:00"/>
    <updated date="2025-11-07 09:12:18"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>sssd security update</summary>
    <description>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.  

Security Fix(es):  

  * sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems (CVE-2025-11561)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19610" id="RHSA-2025:19610" type="rhsa" title="RHSA-2025:19610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11561" id="CVE-2025-11561" type="cve" title="CVE-2025-11561"/>
      <reference href="https://bugzilla.redhat.com/2402727" id="2402727" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19610.html" id="ALSA-2025:19610" type="self" title="ALSA-2025:19610"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="sssd-idp" version="2.9.4" release="5.el8_10.3" epoch="0" arch="s390x" src="sssd-2.9.4-5.el8_10.3.src.rpm">
          <filename>sssd-idp-2.9.4-5.el8_10.3.s390x.rpm</filename>
          <sum type="sha256">46adc25de0e6e34aafea8609ebf6a5d47ee60c3e66f5a84d27bc9b4fc93dd8bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19714</id>
    <title>Important: libsoup security update</title>
    <issued date="2025-11-04 00:00:00"/>
    <updated date="2025-11-07 08:29:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsoup security update</summary>
    <description>The libsoup packages provide an HTTP client and server library for GNOME.  

Security Fix(es):  

  * libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup (CVE-2025-4945)
  * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19714" id="RHSA-2025:19714" type="rhsa" title="RHSA-2025:19714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11021" id="CVE-2025-11021" type="cve" title="CVE-2025-11021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4945" id="CVE-2025-4945" type="cve" title="CVE-2025-4945"/>
      <reference href="https://bugzilla.redhat.com/2367175" id="2367175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2399627" id="2399627" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19714.html" id="ALSA-2025:19714" type="self" title="ALSA-2025:19714"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libsoup-devel" version="2.62.3" release="10.el8_10" epoch="0" arch="s390x" src="libsoup-2.62.3-10.el8_10.src.rpm">
          <filename>libsoup-devel-2.62.3-10.el8_10.s390x.rpm</filename>
          <sum type="sha256">44d99e0bfc4dd33038cbd895d1c66ed8c31f7735adf21d404a365cbfbb2778d1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19793</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2025-11-05 00:00:00"/>
    <updated date="2025-11-07 08:08:22"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19793" id="RHSA-2025:19793" type="rhsa" title="RHSA-2025:19793"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40778" id="CVE-2025-40778" type="cve" title="CVE-2025-40778"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40780" id="CVE-2025-40780" type="cve" title="CVE-2025-40780"/>
      <reference href="https://bugzilla.redhat.com/2405827" id="2405827" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405829" id="2405829" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19793.html" id="ALSA-2025:19793" type="self" title="ALSA-2025:19793"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="bind9.16-dnssec-utils" version="9.16.23" release="0.22.el8_10.4" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.4.src.rpm">
          <filename>bind9.16-dnssec-utils-9.16.23-0.22.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">3276d4128b6bf0ed8442f7633abf55a7b916b7d6a048c8df96fc58aded7ba829</sum>
        </package>
        <package name="bind9.16" version="9.16.23" release="0.22.el8_10.4" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.4.src.rpm">
          <filename>bind9.16-9.16.23-0.22.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">5928eca386af1648a87860f92834ddb6a55cdf8cb34dd5eaf41ad9e0f1a456e4</sum>
        </package>
        <package name="bind9.16-libs" version="9.16.23" release="0.22.el8_10.4" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.4.src.rpm">
          <filename>bind9.16-libs-9.16.23-0.22.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">6e5c0e1c4fe0aafc124e605ff6de08b4ff997ea1c12a0ed1b19fb8445f334ff2</sum>
        </package>
        <package name="bind9.16-license" version="9.16.23" release="0.22.el8_10.4" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.22.el8_10.4.src.rpm">
          <filename>bind9.16-license-9.16.23-0.22.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">a4e24123d1b0f035f197a4ddf52cfbb5f4526c7c414b2ab667e80f56034155ff</sum>
        </package>
        <package name="bind9.16-utils" version="9.16.23" release="0.22.el8_10.4" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.4.src.rpm">
          <filename>bind9.16-utils-9.16.23-0.22.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">ab4e688f666df5dc15a01b613a9c048d4f8683453b131203d9e8f3c39c427d21</sum>
        </package>
        <package name="python3-bind9.16" version="9.16.23" release="0.22.el8_10.4" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.22.el8_10.4.src.rpm">
          <filename>python3-bind9.16-9.16.23-0.22.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">f86bbe0aae248629974b7d5fe1252ad6440bb2b19196cdb941c82a847c062a5d</sum>
        </package>
        <package name="bind9.16-chroot" version="9.16.23" release="0.22.el8_10.4" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.4.src.rpm">
          <filename>bind9.16-chroot-9.16.23-0.22.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">fdd260cb128d0238b1e422839b67530d1d7af5623261a917ea0faf73cd803a71</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19835</id>
    <title>Important: bind security update</title>
    <issued date="2025-11-05 00:00:00"/>
    <updated date="2025-11-07 07:49:13"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19835" id="RHSA-2025:19835" type="rhsa" title="RHSA-2025:19835"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40778" id="CVE-2025-40778" type="cve" title="CVE-2025-40778"/>
      <reference href="https://bugzilla.redhat.com/2405827" id="2405827" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19835.html" id="ALSA-2025:19835" type="self" title="ALSA-2025:19835"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="bind-pkcs11-libs" version="9.11.36" release="16.el8_10.6" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.6.src.rpm">
          <filename>bind-pkcs11-libs-9.11.36-16.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">005f7561b2fcdfa80fe5a366e378db8e7eb4d8c0dd4eec87a3c23f32b5c4202c</sum>
        </package>
        <package name="bind-devel" version="9.11.36" release="16.el8_10.6" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.6.src.rpm">
          <filename>bind-devel-9.11.36-16.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">08ca18b75d2f27175cc181ab082eb0396be4093b2ea67494dbd1496820c6c005</sum>
        </package>
        <package name="bind-sdb" version="9.11.36" release="16.el8_10.6" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.6.src.rpm">
          <filename>bind-sdb-9.11.36-16.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">371ca2b2b7705addff1a9bc6fbe274f4472d1fdcb90ec4ca03abef9b5d81d0b3</sum>
        </package>
        <package name="bind-pkcs11-devel" version="9.11.36" release="16.el8_10.6" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.6.src.rpm">
          <filename>bind-pkcs11-devel-9.11.36-16.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">3be510f1f1563bedb880b5df65880d0332bc5f9f4ebcb98336dedc2c82533254</sum>
        </package>
        <package name="bind" version="9.11.36" release="16.el8_10.6" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.6.src.rpm">
          <filename>bind-9.11.36-16.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">3ddb1a1abae227b9cc9e5c4a21728b92890c54a46690a708113a3813a0be5824</sum>
        </package>
        <package name="bind-pkcs11-utils" version="9.11.36" release="16.el8_10.6" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.6.src.rpm">
          <filename>bind-pkcs11-utils-9.11.36-16.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">4e579a9904d889c99cd745ff0592fccae7096d1458aa5e47302ade95b10e3a86</sum>
        </package>
        <package name="bind-lite-devel" version="9.11.36" release="16.el8_10.6" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.6.src.rpm">
          <filename>bind-lite-devel-9.11.36-16.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">5ee12090b94c168f871050fd7f487293e7d07c53e77f1ed49a456919eb5dcb25</sum>
        </package>
        <package name="bind-pkcs11" version="9.11.36" release="16.el8_10.6" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.6.src.rpm">
          <filename>bind-pkcs11-9.11.36-16.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">611c003e9674241f6ff439c2c2b63241e786c053d32f17d301ff23adb500595f</sum>
        </package>
        <package name="bind-sdb-chroot" version="9.11.36" release="16.el8_10.6" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.6.src.rpm">
          <filename>bind-sdb-chroot-9.11.36-16.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">8a0cfc2eb1658eeaaab9b4d6cfb67143102cfc8782b472ea5db13ef5c90af4c6</sum>
        </package>
        <package name="bind-chroot" version="9.11.36" release="16.el8_10.6" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.6.src.rpm">
          <filename>bind-chroot-9.11.36-16.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">9c000f9b542a8e6ea371a4f2d6d1857845cbdba258c70a4af5c1eab8056950ff</sum>
        </package>
        <package name="bind-utils" version="9.11.36" release="16.el8_10.6" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.6.src.rpm">
          <filename>bind-utils-9.11.36-16.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">b2b07cc8f64c9a5bdeb1055f9dc93a3af7ae24932592eb2490bf2b7a71597b5e</sum>
        </package>
        <package name="bind-license" version="9.11.36" release="16.el8_10.6" epoch="32" arch="noarch" src="bind-9.11.36-16.el8_10.6.src.rpm">
          <filename>bind-license-9.11.36-16.el8_10.6.noarch.rpm</filename>
          <sum type="sha256">c4547bdb72095c212ad6e2b053360cc6558034bc668edb1a55396aa1181f4a8d</sum>
        </package>
        <package name="bind-libs" version="9.11.36" release="16.el8_10.6" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.6.src.rpm">
          <filename>bind-libs-9.11.36-16.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">d21099d13093877b7f38c32d6578bd4bf65d8c9bbf720b65da6b54aab0d27813</sum>
        </package>
        <package name="bind-libs-lite" version="9.11.36" release="16.el8_10.6" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.6.src.rpm">
          <filename>bind-libs-lite-9.11.36-16.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">e4974a1edecca077d4f6cf976401f13a44bc647a1a45a5a39dfa9d27867847ec</sum>
        </package>
        <package name="python3-bind" version="9.11.36" release="16.el8_10.6" epoch="32" arch="noarch" src="bind-9.11.36-16.el8_10.6.src.rpm">
          <filename>python3-bind-9.11.36-16.el8_10.6.noarch.rpm</filename>
          <sum type="sha256">e629fb922164addd856eb12c3da3e2b34e4d4f5f9f37530a71b203e708d92a9f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19909</id>
    <title>Important: tigervnc security update</title>
    <issued date="2025-11-06 00:00:00"/>
    <updated date="2025-11-07 13:19:39"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.  

Security Fix(es):  

  * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)
  * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)
  * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19909" id="RHSA-2025:19909" type="rhsa" title="RHSA-2025:19909"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62229" id="CVE-2025-62229" type="cve" title="CVE-2025-62229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62230" id="CVE-2025-62230" type="cve" title="CVE-2025-62230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62231" id="CVE-2025-62231" type="cve" title="CVE-2025-62231"/>
      <reference href="https://bugzilla.redhat.com/2402649" id="2402649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402653" id="2402653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402660" id="2402660" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19909.html" id="ALSA-2025:19909" type="self" title="ALSA-2025:19909"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="tigervnc-server" version="1.15.0" release="8.el8_10" epoch="0" arch="s390x" src="tigervnc-1.15.0-8.el8_10.src.rpm">
          <filename>tigervnc-server-1.15.0-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">063f304f8583c7f2f6769f3a5922a1f4cbeff4be35363e06632ce3d3a12e415e</sum>
        </package>
        <package name="tigervnc-server-minimal" version="1.15.0" release="8.el8_10" epoch="0" arch="s390x" src="tigervnc-1.15.0-8.el8_10.src.rpm">
          <filename>tigervnc-server-minimal-1.15.0-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">55a4a743352aa86f0aef1ddbf2e80ccb6e6bb337a9c20b4ff11993aa9c574dd1</sum>
        </package>
        <package name="tigervnc-icons" version="1.15.0" release="8.el8_10" epoch="0" arch="noarch" src="tigervnc-1.15.0-8.el8_10.src.rpm">
          <filename>tigervnc-icons-1.15.0-8.el8_10.noarch.rpm</filename>
          <sum type="sha256">6365df2d3030f33bbeb3edb38de2a46c009646e6b3e9c2361f24ce8e19476cca</sum>
        </package>
        <package name="tigervnc-license" version="1.15.0" release="8.el8_10" epoch="0" arch="noarch" src="tigervnc-1.15.0-8.el8_10.src.rpm">
          <filename>tigervnc-license-1.15.0-8.el8_10.noarch.rpm</filename>
          <sum type="sha256">63f976f51acf87d2f2cb4106b462077349965da7a7f5c5362cf5d94173bb6569</sum>
        </package>
        <package name="tigervnc-selinux" version="1.15.0" release="8.el8_10" epoch="0" arch="noarch" src="tigervnc-1.15.0-8.el8_10.src.rpm">
          <filename>tigervnc-selinux-1.15.0-8.el8_10.noarch.rpm</filename>
          <sum type="sha256">99f98b2268baa552cf015f6d1f98797715a793e35865322596b47d2d71605380</sum>
        </package>
        <package name="tigervnc-server-module" version="1.15.0" release="8.el8_10" epoch="0" arch="s390x" src="tigervnc-1.15.0-8.el8_10.src.rpm">
          <filename>tigervnc-server-module-1.15.0-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">a6bb8e2f4083c45ad78b4b662e42bcef461c8d4e298a8ed2d28c4815535357a8</sum>
        </package>
        <package name="tigervnc" version="1.15.0" release="8.el8_10" epoch="0" arch="s390x" src="tigervnc-1.15.0-8.el8_10.src.rpm">
          <filename>tigervnc-1.15.0-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">ed390c083ea5b08b1511132bc83a348f5944e15da71aa3139d4e74043b47f184</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20034</id>
    <title>Important: libtiff security update</title>
    <issued date="2025-11-10 00:00:00"/>
    <updated date="2025-11-11 12:31:43"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: LibTIFF Use-After-Free Vulnerability (CVE-2025-8176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20034" id="RHSA-2025:20034" type="rhsa" title="RHSA-2025:20034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8176" id="CVE-2025-8176" type="cve" title="CVE-2025-8176"/>
      <reference href="https://bugzilla.redhat.com/2383598" id="2383598" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-20034.html" id="ALSA-2025:20034" type="self" title="ALSA-2025:20034"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libtiff" version="4.0.9" release="36.el8_10" epoch="0" arch="s390x" src="libtiff-4.0.9-36.el8_10.src.rpm">
          <filename>libtiff-4.0.9-36.el8_10.s390x.rpm</filename>
          <sum type="sha256">6809e9fba99a505924230529ff534a1a5565954ac2f3c01dbddc0d7859c1adbd</sum>
        </package>
        <package name="libtiff-devel" version="4.0.9" release="36.el8_10" epoch="0" arch="s390x" src="libtiff-4.0.9-36.el8_10.src.rpm">
          <filename>libtiff-devel-4.0.9-36.el8_10.s390x.rpm</filename>
          <sum type="sha256">9c0e11ae0292a934000b704d689ac68cfccafabcef0a17e66af2e69c535f749a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2034</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2025-03-03 00:00:00"/>
    <updated date="2025-03-11 12:02:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2024-54543)
  * webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2025-24143)
  * webkitgtk: Copying a URL from Web Inspector may lead to command injection (CVE-2025-24150)
  * webkitgtk: Processing web content may lead to a denial-of-service (CVE-2025-24158)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-24162)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2034" id="RHSA-2025:2034" type="rhsa" title="RHSA-2025:2034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-54543" id="CVE-2024-54543" type="cve" title="CVE-2024-54543"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24143" id="CVE-2025-24143" type="cve" title="CVE-2025-24143"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24150" id="CVE-2025-24150" type="cve" title="CVE-2025-24150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24158" id="CVE-2025-24158" type="cve" title="CVE-2025-24158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24162" id="CVE-2025-24162" type="cve" title="CVE-2025-24162"/>
      <reference href="https://bugzilla.redhat.com/2344619" id="2344619" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344621" id="2344621" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344622" id="2344622" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344623" id="2344623" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344624" id="2344624" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-2034.html" id="ALSA-2025:2034" type="self" title="ALSA-2025:2034"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="webkit2gtk3" version="2.46.6" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.46.6-1.el8_10.src.rpm">
          <filename>webkit2gtk3-2.46.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">2aff84cf72cc0a213c236e0fe7d287e2e0dc19660c53957b4d255c2b0a334c7a</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.46.6" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.46.6-1.el8_10.src.rpm">
          <filename>webkit2gtk3-devel-2.46.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">481a340ee5996c3a1ae24ce9710d4d37914c1cb1e500ecd194b4839aae34230b</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.46.6" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.46.6-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.46.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">9fa0858a0c22bff6928612766320db4502e74f1c747b33acd06c600fdf7bc7a9</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.46.6" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.46.6-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-2.46.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a9c50bc19058ed09b71b0ebe0b114ed61aa0407357c3393814350fb44aee9b06</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21140</id>
    <title>Important: idm:DL1 security update</title>
    <issued date="2025-11-12 00:00:00"/>
    <updated date="2025-11-20 09:13:17"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>idm:DL1 security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.   

Security Fix(es):  

  * python-kdcproxy: Unauthenticated SSRF via Realm?Controlled DNS SRV (CVE-2025-59088)
  * python-kdcproxy: Remote DoS via unbounded TCP upstream buffering (CVE-2025-59089)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21140" id="RHSA-2025:21140" type="rhsa" title="RHSA-2025:21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59088" id="CVE-2025-59088" type="cve" title="CVE-2025-59088"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59089" id="CVE-2025-59089" type="cve" title="CVE-2025-59089"/>
      <reference href="https://bugzilla.redhat.com/2393955" id="2393955" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393958" id="2393958" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-21140.html" id="ALSA-2025:21140" type="self" title="ALSA-2025:21140"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="idm" stream="DL1" version="8100020251119145306" context="93c20af6" arch="s390x"/>
        <package name="ipa-server-dns" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-server-dns-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">0f57023cd77d9cd95f79e3121536dc6a64df775ade5ca0ed77f9c43b599c416e</sum>
        </package>
        <package name="python3-qrcode" version="5.3" release="1.module_el8.10.0+3942+63b39a46" epoch="0" arch="noarch" src="python-qrcode-5.3-1.module_el8.10.0+3942+63b39a46.src.rpm">
          <filename>python3-qrcode-5.3-1.module_el8.10.0+3942+63b39a46.noarch.rpm</filename>
          <sum type="sha256">109f98be9cf4358f1892e43363dc3d1163173bd6f1f58365f9fc153b2fbad8d7</sum>
        </package>
        <package name="ipa-python-compat" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-python-compat-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">1560171f4be1a4a88f540860e513204c892df41daba550cc687572a98b48bc1d</sum>
        </package>
        <package name="python3-ipalib" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>python3-ipalib-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">20b1a909b2c25ccf3a91fd26fbf64c0241f34799bdd6ada8110858f0f83020da</sum>
        </package>
        <package name="ipa-server-common" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-server-common-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">210fef6fec21a273b8d6a11892f44fbeced6920170464f2cb9d0bec91af4f941</sum>
        </package>
        <package name="bind-dyndb-ldap" version="11.6" release="6.module_el8.10.0+3980+d78e8e90" epoch="0" arch="s390x" src="bind-dyndb-ldap-11.6-6.module_el8.10.0+3980+d78e8e90.src.rpm">
          <filename>bind-dyndb-ldap-11.6-6.module_el8.10.0+3980+d78e8e90.s390x.rpm</filename>
          <sum type="sha256">2c700ccfc92d7dea4c2bd2b386a200dbe70a6d9e88144470c331345f4694c1b3</sum>
        </package>
        <package name="python3-jwcrypto" version="0.5.0" release="2.module_el8.10.0+3844+20e075e5" epoch="0" arch="noarch" src="python-jwcrypto-0.5.0-2.module_el8.10.0+3844+20e075e5.src.rpm">
          <filename>python3-jwcrypto-0.5.0-2.module_el8.10.0+3844+20e075e5.noarch.rpm</filename>
          <sum type="sha256">3827ec1b1ddb7641307d2aae1a6e9d8a9634a2f4e2f2ee7e8ba866903524734b</sum>
        </package>
        <package name="ipa-common" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-common-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">4758beb4d7ac5935423840b0f8f637161ff204436a991d934c7bae259b6f787d</sum>
        </package>
        <package name="python3-ipaclient" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>python3-ipaclient-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">4948031536afa02af390efb0da3b1af671e8486439d4d93d8cc184f89aed89d6</sum>
        </package>
        <package name="ipa-healthcheck-core" version="0.12" release="6.module_el8.10.0+4036+84b152d9" epoch="0" arch="noarch" src="ipa-healthcheck-0.12-6.module_el8.10.0+4036+84b152d9.src.rpm">
          <filename>ipa-healthcheck-core-0.12-6.module_el8.10.0+4036+84b152d9.noarch.rpm</filename>
          <sum type="sha256">4df8324e9302806cbeb5acc90e44e2874471344385d45f9d684dcc297dd5e3ef</sum>
        </package>
        <package name="ipa-healthcheck" version="0.12" release="6.module_el8.10.0+4036+84b152d9" epoch="0" arch="noarch" src="ipa-healthcheck-0.12-6.module_el8.10.0+4036+84b152d9.src.rpm">
          <filename>ipa-healthcheck-0.12-6.module_el8.10.0+4036+84b152d9.noarch.rpm</filename>
          <sum type="sha256">59f7474a67cbc965bd0c360b4385395b89d1a12cf7015fcd6b16abe44ce85b0b</sum>
        </package>
        <package name="ipa-client-samba" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="s390x" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-client-samba-4.9.13-20.module_el8.10.0+4050+3b475c71.s390x.rpm</filename>
          <sum type="sha256">5efa5489eb32129508c212292dfc27f8d15eab4431008db07225214e207d0117</sum>
        </package>
        <package name="python3-pyusb" version="1.0.0" release="9.1.module_el8.7.0+3349+cfeff52e" epoch="0" arch="noarch" src="pyusb-1.0.0-9.1.module_el8.7.0+3349+cfeff52e.src.rpm">
          <filename>python3-pyusb-1.0.0-9.1.module_el8.7.0+3349+cfeff52e.noarch.rpm</filename>
          <sum type="sha256">5f45866e2459f1c9a0b969263baab4ffed264d2998456658cafd554de6300cfa</sum>
        </package>
        <package name="ipa-server" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="s390x" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-server-4.9.13-20.module_el8.10.0+4050+3b475c71.s390x.rpm</filename>
          <sum type="sha256">648eef591b00d1647d4f545dbbe87e800bae3760f8d27f09f7e015e33f6a86b3</sum>
        </package>
        <package name="python3-yubico" version="1.3.2" release="9.1.module_el8.7.0+3349+cfeff52e" epoch="0" arch="noarch" src="python-yubico-1.3.2-9.1.module_el8.7.0+3349+cfeff52e.src.rpm">
          <filename>python3-yubico-1.3.2-9.1.module_el8.7.0+3349+cfeff52e.noarch.rpm</filename>
          <sum type="sha256">68b28b3fb94f5026730feca1a1c3feb64c06ad5601a7cf8befb4e704510edd73</sum>
        </package>
        <package name="python3-kdcproxy" version="0.4" release="5.module_el8.10.0+4069+1d9eaa78.2" epoch="0" arch="noarch" src="python-kdcproxy-0.4-5.module_el8.10.0+4069+1d9eaa78.2.src.rpm">
          <filename>python3-kdcproxy-0.4-5.module_el8.10.0+4069+1d9eaa78.2.noarch.rpm</filename>
          <sum type="sha256">69ec0752aefcdcdb6ea120d9ff9f0c876188057697d885b1509069dd6ceff7a4</sum>
        </package>
        <package name="ipa-client-epn" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="s390x" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-client-epn-4.9.13-20.module_el8.10.0+4050+3b475c71.s390x.rpm</filename>
          <sum type="sha256">6f2be0d9cdbf43bad863da2bf95338ddea95a522f5173318d0929af5af780c1e</sum>
        </package>
        <package name="python3-qrcode-core" version="5.3" release="1.module_el8.10.0+3942+63b39a46" epoch="0" arch="noarch" src="python-qrcode-5.3-1.module_el8.10.0+3942+63b39a46.src.rpm">
          <filename>python3-qrcode-core-5.3-1.module_el8.10.0+3942+63b39a46.noarch.rpm</filename>
          <sum type="sha256">7a7706a06f589393224f10f99b9aef62d5559f02e1c97754b86d2763dfefa70d</sum>
        </package>
        <package name="ipa-selinux" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-selinux-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">84e51e670d24a1f41f56cd709bbd0d28c69e6625b26f2fb3cb63695aadee87c0</sum>
        </package>
        <package name="ipa-server-trust-ad" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="s390x" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-server-trust-ad-4.9.13-20.module_el8.10.0+4050+3b475c71.s390x.rpm</filename>
          <sum type="sha256">84ea2eeb388adea2deeec54b26882362c2e1714842a48888faeb571ab8bf4591</sum>
        </package>
        <package name="softhsm-devel" version="2.6.0" release="5.module_el8.6.0+3031+2f24dc92" epoch="0" arch="s390x" src="softhsm-2.6.0-5.module_el8.6.0+3031+2f24dc92.src.rpm">
          <filename>softhsm-devel-2.6.0-5.module_el8.6.0+3031+2f24dc92.s390x.rpm</filename>
          <sum type="sha256">99b0ac3696d5de6fbbd0e2bb5882b9a36feef44b0fcb4f42dd82963f3077f8ab</sum>
        </package>
        <package name="python3-ipaserver" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>python3-ipaserver-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">9ab0a89ea1497eb8d96dc65bee67dab6c3998e1cd5ab6f639fc3a30b12952f51</sum>
        </package>
        <package name="softhsm" version="2.6.0" release="5.module_el8.6.0+3031+2f24dc92" epoch="0" arch="s390x" src="softhsm-2.6.0-5.module_el8.6.0+3031+2f24dc92.src.rpm">
          <filename>softhsm-2.6.0-5.module_el8.6.0+3031+2f24dc92.s390x.rpm</filename>
          <sum type="sha256">ad706f5e338373e1c6880dce46ce69f7e82ebf416e464ec0abc5c316b27306a1</sum>
        </package>
        <package name="ipa-client-common" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-client-common-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">add082ff8e19a59fca8b86274b87c88e90a51be9156ea0d019bafcfd0b8ba636</sum>
        </package>
        <package name="ipa-client" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="s390x" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>ipa-client-4.9.13-20.module_el8.10.0+4050+3b475c71.s390x.rpm</filename>
          <sum type="sha256">b9dd887fada6b167abe68fcd06ac75c74d12e91b862aa31d5182c353cc0d79b2</sum>
        </package>
        <package name="slapi-nis" version="0.60.0" release="4.module_el8.10.0+3844+20e075e5.alma.1" epoch="0" arch="s390x" src="slapi-nis-0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1.src.rpm">
          <filename>slapi-nis-0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1.s390x.rpm</filename>
          <sum type="sha256">bfc1ed725a4b9c6d74b4b99b8b4dd82647f4f1a4e958e8e455cb5762aae70113</sum>
        </package>
        <package name="opendnssec" version="2.1.7" release="2.module_el8.10.0+3980+d78e8e90" epoch="0" arch="s390x" src="opendnssec-2.1.7-2.module_el8.10.0+3980+d78e8e90.src.rpm">
          <filename>opendnssec-2.1.7-2.module_el8.10.0+3980+d78e8e90.s390x.rpm</filename>
          <sum type="sha256">d54df6918ca5a7264f2793ef6d6b2a42884458f030404ce47a19cb6abbfdb9cf</sum>
        </package>
        <package name="python3-ipatests" version="4.9.13" release="20.module_el8.10.0+4050+3b475c71" epoch="0" arch="noarch" src="ipa-4.9.13-20.module_el8.10.0+4050+3b475c71.src.rpm">
          <filename>python3-ipatests-4.9.13-20.module_el8.10.0+4050+3b475c71.noarch.rpm</filename>
          <sum type="sha256">e2f5abd08f35fc62e83bab9d1b3eac088705001c32a0106e31ab98a09c12205b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21232</id>
    <title>Important: container-tools:rhel8 security update</title>
    <issued date="2025-11-13 00:00:00"/>
    <updated date="2025-11-20 10:07:52"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>container-tools:rhel8 security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.  

Security Fix(es):  

  * runc: container escape via 'masked path' abuse due to mount race conditions (CVE-2025-31133)
  * runc: container escape with malicious config due to /dev/console mount and related races (CVE-2025-52565)
  * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21232" id="RHSA-2025:21232" type="rhsa" title="RHSA-2025:21232"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31133" id="CVE-2025-31133" type="cve" title="CVE-2025-31133"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-52565" id="CVE-2025-52565" type="cve" title="CVE-2025-52565"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-52881" id="CVE-2025-52881" type="cve" title="CVE-2025-52881"/>
      <reference href="https://bugzilla.redhat.com/2404705" id="2404705" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404708" id="2404708" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404715" id="2404715" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-21232.html" id="ALSA-2025:21232" type="self" title="ALSA-2025:21232"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="container-tools" stream="rhel8" version="8100020250617080424" context="20125149" arch="s390x"/>
        <package name="containernetworking-plugins" version="1.4.0" release="6.module_el8.10.0+4016+efd18bf8" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-6.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>containernetworking-plugins-1.4.0-6.module_el8.10.0+4016+efd18bf8.s390x.rpm</filename>
          <sum type="sha256">01ce475d6b55bfde8145f5504470f60e087576049049ad624b54efcd0787fe6a</sum>
        </package>
        <package name="python3-podman" version="4.9.0" release="3.module_el8.10.0+4016+efd18bf8" epoch="0" arch="noarch" src="python-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>python3-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.noarch.rpm</filename>
          <sum type="sha256">087549428650af46817206c5d5ddd54bace235c2932b3e2004ac93e3b466cb6d</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.10" release="1.module_el8.10.0+4068+0e21408f" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">10f8030860f742280a164946b182addd39796c2b86786ec977e37ae026354799</sum>
        </package>
        <package name="crun" version="1.14.3" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="crun-1.14.3-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>crun-1.14.3-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">1803f41cb3e0828fe770ce7de14a940b9fad458fd84f420baab724674e2041e7</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="23.module_el8.10.0+4068+0e21408f" epoch="4" arch="s390x" src="podman-4.9.4-23.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>podman-tests-4.9.4-23.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">1a5f131fa4bb69027ba9ba9e9cc73ecaaa7345c1619042837af4197839b3b532</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="2.module_el8.10.0+4023+db236c53" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>libslirp-4.4.0-2.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">1fb16f13bc4c318fd2714e829a188f97facb4a31222911e078f5604ab7bcd2d9</sum>
        </package>
        <package name="netavark" version="1.10.3" release="1.module_el8.10.0+3926+f12484f5" epoch="2" arch="s390x" src="netavark-1.10.3-1.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>netavark-1.10.3-1.module_el8.10.0+3926+f12484f5.s390x.rpm</filename>
          <sum type="sha256">229bc7970f251b961853b29e4f6c9b17e6fd309418b96ea955e2eaeba74fc773</sum>
        </package>
        <package name="podman-gvproxy" version="4.9.4" release="23.module_el8.10.0+4068+0e21408f" epoch="4" arch="s390x" src="podman-4.9.4-23.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>podman-gvproxy-4.9.4-23.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">2511a560514d0fa404e9f56a619f077e090b3cd2cbb6130dc7c51505a00cf926</sum>
        </package>
        <package name="buildah" version="1.33.12" release="2.module_el8.10.0+4023+db236c53" epoch="2" arch="s390x" src="buildah-1.33.12-2.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>buildah-1.33.12-2.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">30fb3797a34a298dc7f8d5f71599f1e45be546856ef6e3df45e84f107c20a15b</sum>
        </package>
        <package name="container-selinux" version="2.229.0" release="2.module_el8.10.0+3909+6e1c1eb7" epoch="2" arch="noarch" src="container-selinux-2.229.0-2.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>container-selinux-2.229.0-2.module_el8.10.0+3909+6e1c1eb7.noarch.rpm</filename>
          <sum type="sha256">39df1f8e08cf61f1d3399b9d32cdaa93153cdbd001ff380fa9145a2012d1190c</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="23.module_el8.10.0+4068+0e21408f" epoch="4" arch="s390x" src="podman-4.9.4-23.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>podman-remote-4.9.4-23.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">3c8844f78cee2189842209cc12d21e5b73953c0428cdeb139a4ebff9afed1fa1</sum>
        </package>
        <package name="podman-plugins" version="4.9.4" release="23.module_el8.10.0+4068+0e21408f" epoch="4" arch="s390x" src="podman-4.9.4-23.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>podman-plugins-4.9.4-23.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">46ef79195b68573674da78a1ea3e34cc33896142dc8a8125fbc10c7254292927</sum>
        </package>
        <package name="python3-criu" version="3.18" release="5.module_el8.10.0+4023+db236c53" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>python3-criu-3.18-5.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">63a762e1b6963204cd36602216730858805e405178999018be7f659aea67dd29</sum>
        </package>
        <package name="buildah-tests" version="1.33.12" release="2.module_el8.10.0+4068+0e21408f" epoch="2" arch="s390x" src="buildah-1.33.12-2.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>buildah-tests-1.33.12-2.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">65f19dfb704228fc37360b486d645007fed08e7a8c6f33dc9e96b48560e6e5f5</sum>
        </package>
        <package name="udica" version="0.2.6" release="21.module_el8.10.0+4068+0e21408f" epoch="0" arch="noarch" src="udica-0.2.6-21.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>udica-0.2.6-21.module_el8.10.0+4068+0e21408f.noarch.rpm</filename>
          <sum type="sha256">79a48c91cfda7b53eceaf7fc427f6b428b66680f0441fed06fc3bb55a0327feb</sum>
        </package>
        <package name="skopeo-tests" version="1.14.5" release="4.module_el8.10.0+4068+0e21408f" epoch="2" arch="s390x" src="skopeo-1.14.5-4.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>skopeo-tests-1.14.5-4.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">7b6a9942e6b16df36aca5a1fce8044fe11061096b31d68a73bb755bef9f89f97</sum>
        </package>
        <package name="fuse-overlayfs" version="1.13" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="s390x" src="fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">8118067655696462cee9dfc553f57e4501b089590d837bc88091716914c8d3f5</sum>
        </package>
        <package name="podman-catatonit" version="4.9.4" release="23.module_el8.10.0+4068+0e21408f" epoch="4" arch="s390x" src="podman-4.9.4-23.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>podman-catatonit-4.9.4-23.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">85404b917a9a4b6f6a90bf2fe0470c1f0c6255852bfd088121ee83942e2a9dfc</sum>
        </package>
        <package name="criu-devel" version="3.18" release="5.module_el8.10.0+4068+0e21408f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>criu-devel-3.18-5.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">8d858b9b5053b95ab7cb5eba9ab5bbd3cf5a1d07b77394b4d0f0d9d6c0769768</sum>
        </package>
        <package name="toolbox" version="0.0.99.5" release="2.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>toolbox-0.0.99.5-2.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">8df71d94e465a66228dced33f5189e4789bc2ac13946b5e79a11e8091af4f33e</sum>
        </package>
        <package name="containers-common" version="1" release="82.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="s390x" src="containers-common-1-82.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>containers-common-1-82.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">98eb0c5785e1d53743858e76ac35aab0b199a918b88c02e20aa6f64cc6f89618</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="23.module_el8.10.0+4047+545787c4" epoch="4" arch="noarch" src="podman-4.9.4-23.module_el8.10.0+4047+545787c4.src.rpm">
          <filename>podman-docker-4.9.4-23.module_el8.10.0+4047+545787c4.noarch.rpm</filename>
          <sum type="sha256">994a939b6aef74741ec5a0d0fd0532496627fee59f519d6257f51e05b178edd3</sum>
        </package>
        <package name="aardvark-dns" version="1.10.1" release="2.module_el8.10.0+4047+545787c4" epoch="2" arch="s390x" src="aardvark-dns-1.10.1-2.module_el8.10.0+4047+545787c4.src.rpm">
          <filename>aardvark-dns-1.10.1-2.module_el8.10.0+4047+545787c4.s390x.rpm</filename>
          <sum type="sha256">9e7e5cc9877a685769ee43c72dc867d179fe027d41775a01f1e73cfe366872ef</sum>
        </package>
        <package name="runc" version="1.2.5" release="2.module_el8.10.0+4068+0e21408f" epoch="4" arch="s390x" src="runc-1.2.5-2.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>runc-1.2.5-2.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">a9c23eab50864a64f8a1cd05a178658c0aa3711d04d123e60ea482431e234900</sum>
        </package>
        <package name="podman" version="4.9.4" release="23.module_el8.10.0+4047+545787c4" epoch="4" arch="s390x" src="podman-4.9.4-23.module_el8.10.0+4047+545787c4.src.rpm">
          <filename>podman-4.9.4-23.module_el8.10.0+4047+545787c4.s390x.rpm</filename>
          <sum type="sha256">ae9c6c9112bbb06c345a125104910b8581b9a71a4d9f7c1fac79f2dd238d8b6b</sum>
        </package>
        <package name="crit" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>crit-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">aeb27c5bcec90a9452f93ad79ef0d4f00ecedf4442f32f9bedb481509db12683</sum>
        </package>
        <package name="criu" version="3.18" release="5.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>criu-3.18-5.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">bdaddee931f3746ac7472d9ccee504acd0be805433b3d160b1e7caf8bf361cb8</sum>
        </package>
        <package name="conmon" version="2.1.10" release="1.module_el8.10.0+4068+0e21408f" epoch="3" arch="s390x" src="conmon-2.1.10-1.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>conmon-2.1.10-1.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">c845407c7f2bb04735705b66ad0ca47b44437e8d6988148eeee4986701a2ab8d</sum>
        </package>
        <package name="slirp4netns" version="1.2.3" release="1.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="slirp4netns-1.2.3-1.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>slirp4netns-1.2.3-1.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">d750de35a600a89a6edbd8c2178e292766005ce3339a84c33adecfdef70e7a57</sum>
        </package>
        <package name="criu-libs" version="3.18" release="5.module_el8.10.0+3909+6e1c1eb7" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>criu-libs-3.18-5.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">e0d274cf0f5db049af121f476769c0d601e70c7566ea3aec4e608aca5317b4eb</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.5" release="2.module_el8.10.0+3909+6e1c1eb7" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>toolbox-tests-0.0.99.5-2.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">e5fff3c3d6b6f6023e100d0922c2e8096f567b7f5cfbb57efe322eadd2f43465</sum>
        </package>
        <package name="cockpit-podman" version="84.1" release="1.module_el8.10.0+4016+efd18bf8" epoch="0" arch="noarch" src="cockpit-podman-84.1-1.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>cockpit-podman-84.1-1.module_el8.10.0+4016+efd18bf8.noarch.rpm</filename>
          <sum type="sha256">f03872dff2aa7d3da8ebcebbb3adc464fd859f8c0fa9c83ece498edb0d3ce572</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="2.module_el8.10.0+4068+0e21408f" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>libslirp-devel-4.4.0-2.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">fde131378e974ec40e5590a549e6e8fa0b55de1673222229f69a1255f79d697c</sum>
        </package>
        <package name="skopeo" version="1.14.5" release="4.module_el8.10.0+4047+545787c4" epoch="2" arch="s390x" src="skopeo-1.14.5-4.module_el8.10.0+4047+545787c4.src.rpm">
          <filename>skopeo-1.14.5-4.module_el8.10.0+4047+545787c4.s390x.rpm</filename>
          <sum type="sha256">fe42f3304ffdf22ba5124ba854e84c62f82a5be95b96d5e317ead1a656e387a5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21628</id>
    <title>Critical: lasso security update</title>
    <issued date="2025-11-17 00:00:00"/>
    <updated date="2025-11-19 10:11:06"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>lasso security update</summary>
    <description>The lasso packages provide the Lasso library that implements the Liberty Alliance Single Sign-On standards, including the SAML and SAML2 specifications. It allows handling of the whole life-cycle of SAML-based federations and provides bindings for multiple languages.  

Security Fix(es):  

  * lasso: Type confusion in Entr'ouvert Lasso (CVE-2025-47151)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21628" id="RHSA-2025:21628" type="rhsa" title="RHSA-2025:21628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47151" id="CVE-2025-47151" type="cve" title="CVE-2025-47151"/>
      <reference href="https://bugzilla.redhat.com/2412739" id="2412739" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-21628.html" id="ALSA-2025:21628" type="self" title="ALSA-2025:21628"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="lasso" version="2.6.0" release="14.el8_10" epoch="0" arch="s390x" src="lasso-2.6.0-14.el8_10.src.rpm">
          <filename>lasso-2.6.0-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">1cfb374f3269067850661a3c73942f9cf831252123ec598f1a915d17f9952f08</sum>
        </package>
        <package name="python3-lasso" version="2.6.0" release="14.el8_10" epoch="0" arch="s390x" src="lasso-2.6.0-14.el8_10.src.rpm">
          <filename>python3-lasso-2.6.0-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">1d51b18fecb5d0cd9f1753f3612503f3e415465a0055851062dcbe32a41655cd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21881</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-11-20 00:00:00"/>
    <updated date="2025-11-25 09:29:54"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: Mitigation bypass in the DOM: Security component (CVE-2025-13018)
  * firefox: Use-after-free in the Audio/Video component (CVE-2025-13014)
  * firefox: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2025-13016)
  * firefox: Same-origin policy bypass in the DOM: Workers component (CVE-2025-13019)
  * firefox: Use-after-free in the WebRTC: Audio/Video component (CVE-2025-13020)
  * firefox: Race condition in the Graphics component (CVE-2025-13012)
  * firefox: Spoofing issue in Firefox (CVE-2025-13015)
  * firefox: Mitigation bypass in the DOM: Core &amp; HTML component (CVE-2025-13013)
  * firefox: Same-origin policy bypass in the DOM: Notifications component (CVE-2025-13017)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21881" id="RHSA-2025:21881" type="rhsa" title="RHSA-2025:21881"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13012" id="CVE-2025-13012" type="cve" title="CVE-2025-13012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13013" id="CVE-2025-13013" type="cve" title="CVE-2025-13013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13014" id="CVE-2025-13014" type="cve" title="CVE-2025-13014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13015" id="CVE-2025-13015" type="cve" title="CVE-2025-13015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13016" id="CVE-2025-13016" type="cve" title="CVE-2025-13016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13017" id="CVE-2025-13017" type="cve" title="CVE-2025-13017"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13018" id="CVE-2025-13018" type="cve" title="CVE-2025-13018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13019" id="CVE-2025-13019" type="cve" title="CVE-2025-13019"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13020" id="CVE-2025-13020" type="cve" title="CVE-2025-13020"/>
      <reference href="https://bugzilla.redhat.com/2414079" id="2414079" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414080" id="2414080" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414083" id="2414083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414084" id="2414084" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414085" id="2414085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414086" id="2414086" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414090" id="2414090" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414091" id="2414091" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414092" id="2414092" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-21881.html" id="ALSA-2025:21881" type="self" title="ALSA-2025:21881"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="140.5.0" release="2.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-140.5.0-2.el8_10.alma.1.src.rpm">
          <filename>thunderbird-140.5.0-2.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">998109c9f3ae90dbc042e91d4f81bf2a8bef5e597f5793f5a17d45d8589f04ea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21977</id>
    <title>Moderate: libssh security update</title>
    <issued date="2025-11-24 00:00:00"/>
    <updated date="2025-11-25 12:04:12"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libssh security update</summary>
    <description>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.  

Security Fix(es):  

  * libssh: Incorrect Return Code Handling in ssh_kdf() in libssh (CVE-2025-5372)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21977" id="RHSA-2025:21977" type="rhsa" title="RHSA-2025:21977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5372" id="CVE-2025-5372" type="cve" title="CVE-2025-5372"/>
      <reference href="https://bugzilla.redhat.com/2369388" id="2369388" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-21977.html" id="ALSA-2025:21977" type="self" title="ALSA-2025:21977"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libssh-devel" version="0.9.6" release="16.el8_10" epoch="0" arch="s390x" src="libssh-0.9.6-16.el8_10.src.rpm">
          <filename>libssh-devel-0.9.6-16.el8_10.s390x.rpm</filename>
          <sum type="sha256">7f7a6291b7503180c2d2953becd411a2fb97288f9f0fdc2783e9d04c516f7644</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22063</id>
    <title>Moderate: cups security update</title>
    <issued date="2025-11-25 00:00:00"/>
    <updated date="2025-11-28 13:48:34"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>cups security update</summary>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.  

Security Fix(es):  

  * cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS (CVE-2025-58364)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22063" id="RHSA-2025:22063" type="rhsa" title="RHSA-2025:22063"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58364" id="CVE-2025-58364" type="cve" title="CVE-2025-58364"/>
      <reference href="https://bugzilla.redhat.com/2393078" id="2393078" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-22063.html" id="ALSA-2025:22063" type="self" title="ALSA-2025:22063"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="cups-ipptool" version="2.2.6" release="64.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-64.el8_10.src.rpm">
          <filename>cups-ipptool-2.2.6-64.el8_10.s390x.rpm</filename>
          <sum type="sha256">00d9472f581f307ec778a5163f846a6b48fd90b3a0d34933558bada87c353f95</sum>
        </package>
        <package name="cups-lpd" version="2.2.6" release="64.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-64.el8_10.src.rpm">
          <filename>cups-lpd-2.2.6-64.el8_10.s390x.rpm</filename>
          <sum type="sha256">2baa7edba9fdd9013732d4850ff3e7c736d9b06f1ec2b8857ccb30774a2de297</sum>
        </package>
        <package name="cups-client" version="2.2.6" release="64.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-64.el8_10.src.rpm">
          <filename>cups-client-2.2.6-64.el8_10.s390x.rpm</filename>
          <sum type="sha256">69a87cfdb979cda0e6f886164555a1954020159af6cc72237b932c3618a37fc8</sum>
        </package>
        <package name="cups" version="2.2.6" release="64.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-64.el8_10.src.rpm">
          <filename>cups-2.2.6-64.el8_10.s390x.rpm</filename>
          <sum type="sha256">b576f8931b2bbcca8820d4b7537b07f99f9a593ce3a5bb510f68482363105882</sum>
        </package>
        <package name="cups-filesystem" version="2.2.6" release="64.el8_10" epoch="1" arch="noarch" src="cups-2.2.6-64.el8_10.src.rpm">
          <filename>cups-filesystem-2.2.6-64.el8_10.noarch.rpm</filename>
          <sum type="sha256">bab849188f7868a16c1c1470b633839f4f43485012726cd3bbd5878e1c9ece70</sum>
        </package>
        <package name="cups-devel" version="2.2.6" release="64.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-64.el8_10.src.rpm">
          <filename>cups-devel-2.2.6-64.el8_10.s390x.rpm</filename>
          <sum type="sha256">c1868e972a9e28aad2a32d74a7e150194f48335f3cf9d34ecaca2d013fa1d532</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22363</id>
    <title>Important: firefox security update</title>
    <issued date="2025-12-01 00:00:00"/>
    <updated date="2025-12-03 12:05:25"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: Mitigation bypass in the DOM: Security component (CVE-2025-13018)
  * firefox: Use-after-free in the Audio/Video component (CVE-2025-13014)
  * firefox: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2025-13016)
  * firefox: Same-origin policy bypass in the DOM: Workers component (CVE-2025-13019)
  * firefox: Use-after-free in the WebRTC: Audio/Video component (CVE-2025-13020)
  * firefox: Race condition in the Graphics component (CVE-2025-13012)
  * firefox: Spoofing issue in Firefox (CVE-2025-13015)
  * firefox: Mitigation bypass in the DOM: Core &amp; HTML component (CVE-2025-13013)
  * firefox: Same-origin policy bypass in the DOM: Notifications component (CVE-2025-13017)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22363" id="RHSA-2025:22363" type="rhsa" title="RHSA-2025:22363"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13012" id="CVE-2025-13012" type="cve" title="CVE-2025-13012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13013" id="CVE-2025-13013" type="cve" title="CVE-2025-13013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13014" id="CVE-2025-13014" type="cve" title="CVE-2025-13014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13015" id="CVE-2025-13015" type="cve" title="CVE-2025-13015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13016" id="CVE-2025-13016" type="cve" title="CVE-2025-13016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13017" id="CVE-2025-13017" type="cve" title="CVE-2025-13017"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13018" id="CVE-2025-13018" type="cve" title="CVE-2025-13018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13019" id="CVE-2025-13019" type="cve" title="CVE-2025-13019"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13020" id="CVE-2025-13020" type="cve" title="CVE-2025-13020"/>
      <reference href="https://bugzilla.redhat.com/2414079" id="2414079" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414080" id="2414080" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414083" id="2414083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414084" id="2414084" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414085" id="2414085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414086" id="2414086" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414090" id="2414090" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414091" id="2414091" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414092" id="2414092" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-22363.html" id="ALSA-2025:22363" type="self" title="ALSA-2025:22363"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="140.5.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-140.5.0-1.el8_10.alma.1.src.rpm">
          <filename>firefox-140.5.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">9290054e5f74f4cfe149764fd0124661cb849cf0403becad31cb622ddfd6420b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22417</id>
    <title>Important: gimp:2.8 security update</title>
    <issued date="2025-12-01 00:00:00"/>
    <updated date="2025-12-04 13:28:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gimp:2.8 security update</summary>
    <description>The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.  

Security Fix(es):  

  * gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10922)
  * gimp: GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVE-2025-10920)
  * gimp: GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10923)
  * gimp: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10921)
  * gimp: GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10925)
  * gimp: GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10924)
  * gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10934)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22417" id="RHSA-2025:22417" type="rhsa" title="RHSA-2025:22417"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10920" id="CVE-2025-10920" type="cve" title="CVE-2025-10920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10921" id="CVE-2025-10921" type="cve" title="CVE-2025-10921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10922" id="CVE-2025-10922" type="cve" title="CVE-2025-10922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10923" id="CVE-2025-10923" type="cve" title="CVE-2025-10923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10924" id="CVE-2025-10924" type="cve" title="CVE-2025-10924"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10925" id="CVE-2025-10925" type="cve" title="CVE-2025-10925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10934" id="CVE-2025-10934" type="cve" title="CVE-2025-10934"/>
      <reference href="https://bugzilla.redhat.com/2407188" id="2407188" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2407191" id="2407191" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2407192" id="2407192" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2407194" id="2407194" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2407199" id="2407199" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2407200" id="2407200" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2407233" id="2407233" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-22417.html" id="ALSA-2025:22417" type="self" title="ALSA-2025:22417"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="gimp" stream="2.8" version="8100020250128092246" context="77fc8825" arch="s390x"/>
        <package name="pygobject2-codegen" version="2.28.7" release="5.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>pygobject2-codegen-2.28.7-5.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">1a42f4acacfe6991c3ea72ee10bdbe8bb963fe6e94e725c0c6cc5162d35f2e55</sum>
        </package>
        <package name="pygtk2-devel" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="s390x" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-devel-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">42ea8b58abfff83cebc7a09a7f6f264b168a95782decbb03b4fcfef37fd7c062</sum>
        </package>
        <package name="pygtk2" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="s390x" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">43c790ef899908821a64cfad4af33097d1a9d9351a75d63d45e4363e0d91eec8</sum>
        </package>
        <package name="pygobject2-doc" version="2.28.7" release="5.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>pygobject2-doc-2.28.7-5.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">5104a2191c14aaf70d6f3d9ebf6374c054a182a2a7b0f63f32c1adc918ad4111</sum>
        </package>
        <package name="pygobject2-devel" version="2.28.7" release="5.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>pygobject2-devel-2.28.7-5.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">753e845a487e2072a62bfa272332266761c207df3360102c42900695a0fe3d32</sum>
        </package>
        <package name="pygtk2-codegen" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="s390x" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-codegen-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">91402fea22feef9d15400358a93ae5d2ff0b95b332edfbae2245ac5846848476</sum>
        </package>
        <package name="gimp" version="2.8.22" release="26.module_el8.10.0+4070+64105a56.3" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+4070+64105a56.3.src.rpm">
          <filename>gimp-2.8.22-26.module_el8.10.0+4070+64105a56.3.s390x.rpm</filename>
          <sum type="sha256">a06228cfcb5a9bb63ec5b625abf4439132781df0502c46e070ae17c15f2ca71f</sum>
        </package>
        <package name="gimp-devel" version="2.8.22" release="26.module_el8.10.0+4070+64105a56.3" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+4070+64105a56.3.src.rpm">
          <filename>gimp-devel-2.8.22-26.module_el8.10.0+4070+64105a56.3.s390x.rpm</filename>
          <sum type="sha256">a6b07fd1d0a0f7f15e4e8072f53329a5a77982110856f877f91745ab1b68225f</sum>
        </package>
        <package name="gimp-libs" version="2.8.22" release="26.module_el8.10.0+4070+64105a56.3" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+4070+64105a56.3.src.rpm">
          <filename>gimp-libs-2.8.22-26.module_el8.10.0+4070+64105a56.3.s390x.rpm</filename>
          <sum type="sha256">a8a17478ff1420b3bd11f987c4d7d49231ecbcece08d3e94f25be4dc7cabfbad</sum>
        </package>
        <package name="pygtk2-doc" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="noarch" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-doc-2.24.0-25.module_el8.9.0+3725+d1441900.noarch.rpm</filename>
          <sum type="sha256">bec32577bca5233d67a34af1ef0ae0d1ca15f8896607b22d94cc18d8d4c93d70</sum>
        </package>
        <package name="pygobject2" version="2.28.7" release="5.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">d9c541afe98fa2f9c4fb770991f7c15dae66b0b36616ff2b94ae7c824b1b0e84</sum>
        </package>
        <package name="python2-cairo" version="1.16.3" release="7.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="python2-pycairo-1.16.3-7.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>python2-cairo-1.16.3-7.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">e015ce54a4c31a35c21aa3d77fd6d10674ff10a9058f1dd194a9167328d8a0d9</sum>
        </package>
        <package name="python2-cairo-devel" version="1.16.3" release="7.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="python2-pycairo-1.16.3-7.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>python2-cairo-devel-1.16.3-7.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">ecc0dda98450cefa8281d354f444d8e91876cc91f2cf6c8fd8ecf460a4dbdc8b</sum>
        </package>
        <package name="gimp-devel-tools" version="2.8.22" release="26.module_el8.10.0+4070+64105a56.3" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+4070+64105a56.3.src.rpm">
          <filename>gimp-devel-tools-2.8.22-26.module_el8.10.0+4070+64105a56.3.s390x.rpm</filename>
          <sum type="sha256">eeeca4a78f81dbe1bdb8c4831436e7b17f4f9ecd9f8a33741f5743a947f528a7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22668</id>
    <title>Moderate: go-toolset:rhel8 security update</title>
    <issued date="2025-12-03 00:00:00"/>
    <updated date="2025-12-05 08:01:54"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>go-toolset:rhel8 security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.   

Security Fix(es):  

  * os/exec: Unexpected paths returned from LookPath in os/exec (CVE-2025-47906)
  * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22668" id="RHSA-2025:22668" type="rhsa" title="RHSA-2025:22668"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47906" id="CVE-2025-47906" type="cve" title="CVE-2025-47906"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58183" id="CVE-2025-58183" type="cve" title="CVE-2025-58183"/>
      <reference href="https://bugzilla.redhat.com/2396546" id="2396546" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2407258" id="2407258" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-22668.html" id="ALSA-2025:22668" type="self" title="ALSA-2025:22668"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="go-toolset" stream="rhel8" version="8100020251204103636" context="9edba152" arch="s390x"/>
        <package name="golang-docs" version="1.25.3" release="2.module_el8.10.0+4074+24330916" epoch="0" arch="noarch" src="golang-1.25.3-2.module_el8.10.0+4074+24330916.src.rpm">
          <filename>golang-docs-1.25.3-2.module_el8.10.0+4074+24330916.noarch.rpm</filename>
          <sum type="sha256">3b33f78901d2b8918618ec42b759be0b174b88d7dc438540611eefbb4d12928f</sum>
        </package>
        <package name="go-toolset" version="1.25.3" release="2.module_el8.10.0+4074+24330916" epoch="0" arch="s390x" src="golang-1.25.3-2.module_el8.10.0+4074+24330916.src.rpm">
          <filename>go-toolset-1.25.3-2.module_el8.10.0+4074+24330916.s390x.rpm</filename>
          <sum type="sha256">50689e5769a42ad77d0aab8d14890cf23eceafaf0d9c750cfce1a79d93562a1b</sum>
        </package>
        <package name="golang-bin" version="1.25.3" release="2.module_el8.10.0+4074+24330916" epoch="0" arch="s390x" src="golang-1.25.3-2.module_el8.10.0+4074+24330916.src.rpm">
          <filename>golang-bin-1.25.3-2.module_el8.10.0+4074+24330916.s390x.rpm</filename>
          <sum type="sha256">50d4db0e99484420a779f86635c32e753e87ee4cfd5eee47921307257de8459c</sum>
        </package>
        <package name="golang-tests" version="1.25.3" release="2.module_el8.10.0+4074+24330916" epoch="0" arch="noarch" src="golang-1.25.3-2.module_el8.10.0+4074+24330916.src.rpm">
          <filename>golang-tests-1.25.3-2.module_el8.10.0+4074+24330916.noarch.rpm</filename>
          <sum type="sha256">5c58a68a17ced497741e6c355415900cfbb6382201ab0703320f7d03772972b7</sum>
        </package>
        <package name="golang-src" version="1.25.3" release="2.module_el8.10.0+4074+24330916" epoch="0" arch="noarch" src="golang-1.25.3-2.module_el8.10.0+4074+24330916.src.rpm">
          <filename>golang-src-1.25.3-2.module_el8.10.0+4074+24330916.noarch.rpm</filename>
          <sum type="sha256">68a3f4c1ba2fd328ca788c7c6c878c141d67c44102c45a88d3e35777d6e48ae5</sum>
        </package>
        <package name="golang-misc" version="1.25.3" release="2.module_el8.10.0+4074+24330916" epoch="0" arch="noarch" src="golang-1.25.3-2.module_el8.10.0+4074+24330916.src.rpm">
          <filename>golang-misc-1.25.3-2.module_el8.10.0+4074+24330916.noarch.rpm</filename>
          <sum type="sha256">9af91e8ef0ed3b8b394d9ad080b718345c71e9e968ab39ba0030a7c7d22de1d5</sum>
        </package>
        <package name="golang" version="1.25.3" release="2.module_el8.10.0+4074+24330916" epoch="0" arch="s390x" src="golang-1.25.3-2.module_el8.10.0+4074+24330916.src.rpm">
          <filename>golang-1.25.3-2.module_el8.10.0+4074+24330916.s390x.rpm</filename>
          <sum type="sha256">d7cce006439f90bd18d5f0481f5286edef8a57dffac0cccbaf80f68241cd87b2</sum>
        </package>
        <package name="golang-race" version="1.25.3" release="2.module_el8.10.0+4074+24330916" epoch="0" arch="s390x" src="golang-1.25.3-2.module_el8.10.0+4074+24330916.src.rpm">
          <filename>golang-race-1.25.3-2.module_el8.10.0+4074+24330916.s390x.rpm</filename>
          <sum type="sha256">df0416011ac19669fb64b2f994416fffe7aaf827f05181924955febf0f1d44f8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22760</id>
    <title>Important: abrt security update</title>
    <issued date="2025-12-04 00:00:00"/>
    <updated date="2025-12-10 10:40:28"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>abrt security update</summary>
    <description>The Automatic Bug Reporting Tool (ABRT) recognizes defects in applications and creates bug reports that help maintainers fix the defects. ABRT uses a plug-in system to extend its functionality.   

Security Fix(es):  

  * abrt: Command-injection in ABRT leading to local privilege escalation (CVE-2025-12744)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22760" id="RHSA-2025:22760" type="rhsa" title="RHSA-2025:22760"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12744" id="CVE-2025-12744" type="cve" title="CVE-2025-12744"/>
      <reference href="https://bugzilla.redhat.com/2412467" id="2412467" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-22760.html" id="ALSA-2025:22760" type="self" title="ALSA-2025:22760"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="abrt-desktop" version="2.10.9" release="25.el8_10.alma.1" epoch="0" arch="s390x" src="abrt-2.10.9-25.el8_10.alma.1.src.rpm">
          <filename>abrt-desktop-2.10.9-25.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">138d58939506567df32586cb1423c27b33b429fe4c132ec26cac88e9db1fea72</sum>
        </package>
        <package name="abrt-addon-kerneloops" version="2.10.9" release="25.el8_10.alma.1" epoch="0" arch="s390x" src="abrt-2.10.9-25.el8_10.alma.1.src.rpm">
          <filename>abrt-addon-kerneloops-2.10.9-25.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">1e49389b72ee8a15acbacbcf2661e9f8efe46cc6c06aca081627a0b9ebd7de52</sum>
        </package>
        <package name="abrt-cli" version="2.10.9" release="25.el8_10.alma.1" epoch="0" arch="s390x" src="abrt-2.10.9-25.el8_10.alma.1.src.rpm">
          <filename>abrt-cli-2.10.9-25.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">32bdac5641ac4aea7274e45bc7676a6b5b2c6e1b98775a568491256112e75d8c</sum>
        </package>
        <package name="abrt-plugin-sosreport" version="2.10.9" release="25.el8_10.alma.1" epoch="0" arch="s390x" src="abrt-2.10.9-25.el8_10.alma.1.src.rpm">
          <filename>abrt-plugin-sosreport-2.10.9-25.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">32f563eceb3b0d9ad1a1bd4718b0ee84605cfdac5883be6e25555a6dd5b75f49</sum>
        </package>
        <package name="abrt-addon-pstoreoops" version="2.10.9" release="25.el8_10.alma.1" epoch="0" arch="s390x" src="abrt-2.10.9-25.el8_10.alma.1.src.rpm">
          <filename>abrt-addon-pstoreoops-2.10.9-25.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">3a57831cc717832617846ed4cd4bc03ff02c1f2f2e8a3fe95903e82923ac9837</sum>
        </package>
        <package name="abrt-addon-xorg" version="2.10.9" release="25.el8_10.alma.1" epoch="0" arch="s390x" src="abrt-2.10.9-25.el8_10.alma.1.src.rpm">
          <filename>abrt-addon-xorg-2.10.9-25.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">3e7bb681baef71c3e853e6cfeeb4f26e6ac44d81d41c23d835bed18dd2b789f3</sum>
        </package>
        <package name="abrt-addon-vmcore" version="2.10.9" release="25.el8_10.alma.1" epoch="0" arch="s390x" src="abrt-2.10.9-25.el8_10.alma.1.src.rpm">
          <filename>abrt-addon-vmcore-2.10.9-25.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">51b04c27f18c5b5aa06973bcec0c6ffdd6ba77a51123bf7d6fc8f473c60dbd8f</sum>
        </package>
        <package name="abrt-plugin-machine-id" version="2.10.9" release="25.el8_10.alma.1" epoch="0" arch="s390x" src="abrt-2.10.9-25.el8_10.alma.1.src.rpm">
          <filename>abrt-plugin-machine-id-2.10.9-25.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">55d3e778d1b796cb182a1757c4a04f633cdc0b1c87a2788bbdad719c537de67a</sum>
        </package>
        <package name="abrt-dbus" version="2.10.9" release="25.el8_10.alma.1" epoch="0" arch="s390x" src="abrt-2.10.9-25.el8_10.alma.1.src.rpm">
          <filename>abrt-dbus-2.10.9-25.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">57eb1ae8d9888846e46180335793b0a388a4116d0c8d39b30ee98984c22e6b01</sum>
        </package>
        <package name="abrt-gui-libs" version="2.10.9" release="25.el8_10.alma.1" epoch="0" arch="s390x" src="abrt-2.10.9-25.el8_10.alma.1.src.rpm">
          <filename>abrt-gui-libs-2.10.9-25.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">6582dfd809a875e712b855be02c1df11867dae103ec5355963cd56563733fafd</sum>
        </package>
        <package name="abrt-addon-coredump-helper" version="2.10.9" release="25.el8_10.alma.1" epoch="0" arch="s390x" src="abrt-2.10.9-25.el8_10.alma.1.src.rpm">
          <filename>abrt-addon-coredump-helper-2.10.9-25.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">66c55b636b89d378538e0d741173c228977814ffe27dcbfc85ddf1b1b0cfce9b</sum>
        </package>
        <package name="abrt-gui" version="2.10.9" release="25.el8_10.alma.1" epoch="0" arch="s390x" src="abrt-2.10.9-25.el8_10.alma.1.src.rpm">
          <filename>abrt-gui-2.10.9-25.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">7d8befc0d445f6d1243160d8d0100fc24b438063cfa03d5d4c1694d37ce58d50</sum>
        </package>
        <package name="python3-abrt-doc" version="2.10.9" release="25.el8_10.alma.1" epoch="0" arch="noarch" src="abrt-2.10.9-25.el8_10.alma.1.src.rpm">
          <filename>python3-abrt-doc-2.10.9-25.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">90c046ef32c2603b58a39831c4379ec37cac71f2e4a63e9362d1b9a96cf15605</sum>
        </package>
        <package name="abrt-cli-ng" version="2.10.9" release="25.el8_10.alma.1" epoch="0" arch="s390x" src="abrt-2.10.9-25.el8_10.alma.1.src.rpm">
          <filename>abrt-cli-ng-2.10.9-25.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">98465c785bb505f42972098fdfee19878b732563e1851e4f11b42a138b1fa4d9</sum>
        </package>
        <package name="abrt" version="2.10.9" release="25.el8_10.alma.1" epoch="0" arch="s390x" src="abrt-2.10.9-25.el8_10.alma.1.src.rpm">
          <filename>abrt-2.10.9-25.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">b4c64d6d5e2e3000eee70b51588e4be4f670a7da9454a9a226a1102cb7c56002</sum>
        </package>
        <package name="python3-abrt-container-addon" version="2.10.9" release="25.el8_10.alma.1" epoch="0" arch="s390x" src="abrt-2.10.9-25.el8_10.alma.1.src.rpm">
          <filename>python3-abrt-container-addon-2.10.9-25.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">b79fd4a402250851633df2501b4956eca64e444108ef49f59329cbecc44d6142</sum>
        </package>
        <package name="abrt-tui" version="2.10.9" release="25.el8_10.alma.1" epoch="0" arch="s390x" src="abrt-2.10.9-25.el8_10.alma.1.src.rpm">
          <filename>abrt-tui-2.10.9-25.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">cb22f6eb82a45506130a6b31525df3c15eb2e5df857c7d20660fba0ab5cca968</sum>
        </package>
        <package name="python3-abrt" version="2.10.9" release="25.el8_10.alma.1" epoch="0" arch="s390x" src="abrt-2.10.9-25.el8_10.alma.1.src.rpm">
          <filename>python3-abrt-2.10.9-25.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">d16b6e1946e29e938a865d6b8a77e31eafdbd9233dc075066fac29fa8935feb7</sum>
        </package>
        <package name="abrt-console-notification" version="2.10.9" release="25.el8_10.alma.1" epoch="0" arch="s390x" src="abrt-2.10.9-25.el8_10.alma.1.src.rpm">
          <filename>abrt-console-notification-2.10.9-25.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">d48e0cfd0e5c7c221f19992548854860a9196736fc076cebcba564374f7b54ab</sum>
        </package>
        <package name="python3-abrt-addon" version="2.10.9" release="25.el8_10.alma.1" epoch="0" arch="s390x" src="abrt-2.10.9-25.el8_10.alma.1.src.rpm">
          <filename>python3-abrt-addon-2.10.9-25.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">d4f4504ab4111e9860c965c3fef3c93a378ae66bc750b66c40c1f98038ca5e14</sum>
        </package>
        <package name="abrt-addon-ccpp" version="2.10.9" release="25.el8_10.alma.1" epoch="0" arch="s390x" src="abrt-2.10.9-25.el8_10.alma.1.src.rpm">
          <filename>abrt-addon-ccpp-2.10.9-25.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">dc061fbf24822564aeaedd340348a3b6cafb8b1b4d4af22e00828175a0e7423a</sum>
        </package>
        <package name="abrt-libs" version="2.10.9" release="25.el8_10.alma.1" epoch="0" arch="s390x" src="abrt-2.10.9-25.el8_10.alma.1.src.rpm">
          <filename>abrt-libs-2.10.9-25.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">ea1f743daf00e0211f41a45ffd0d494b89a05f0f84c3b54d49408d789f7eb62f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22789</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2025-12-08 00:00:00"/>
    <updated date="2025-12-08 13:59:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502)
  * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2023-43000)
  * webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392)
  * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43419)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430)
  * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443)
  * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2025-43480)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421)
  * webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22789" id="RHSA-2025:22789" type="rhsa" title="RHSA-2025:22789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43000" id="CVE-2023-43000" type="cve" title="CVE-2023-43000"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13502" id="CVE-2025-13502" type="cve" title="CVE-2025-13502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13947" id="CVE-2025-13947" type="cve" title="CVE-2025-13947"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43392" id="CVE-2025-43392" type="cve" title="CVE-2025-43392"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43419" id="CVE-2025-43419" type="cve" title="CVE-2025-43419"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43421" id="CVE-2025-43421" type="cve" title="CVE-2025-43421"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43425" id="CVE-2025-43425" type="cve" title="CVE-2025-43425"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43427" id="CVE-2025-43427" type="cve" title="CVE-2025-43427"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43429" id="CVE-2025-43429" type="cve" title="CVE-2025-43429"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43430" id="CVE-2025-43430" type="cve" title="CVE-2025-43430"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43431" id="CVE-2025-43431" type="cve" title="CVE-2025-43431"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43432" id="CVE-2025-43432" type="cve" title="CVE-2025-43432"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43434" id="CVE-2025-43434" type="cve" title="CVE-2025-43434"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43440" id="CVE-2025-43440" type="cve" title="CVE-2025-43440"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43443" id="CVE-2025-43443" type="cve" title="CVE-2025-43443"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43458" id="CVE-2025-43458" type="cve" title="CVE-2025-43458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43480" id="CVE-2025-43480" type="cve" title="CVE-2025-43480"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66287" id="CVE-2025-66287" type="cve" title="CVE-2025-66287"/>
      <reference href="https://bugzilla.redhat.com/2416300" id="2416300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416324" id="2416324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416325" id="2416325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416326" id="2416326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416327" id="2416327" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416329" id="2416329" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416330" id="2416330" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416331" id="2416331" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416332" id="2416332" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416334" id="2416334" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416335" id="2416335" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416336" id="2416336" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416337" id="2416337" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416338" id="2416338" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416355" id="2416355" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418576" id="2418576" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418855" id="2418855" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418857" id="2418857" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-22789.html" id="ALSA-2025:22789" type="self" title="ALSA-2025:22789"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="webkit2gtk3-devel" version="2.50.3" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.50.3-1.el8_10.src.rpm">
          <filename>webkit2gtk3-devel-2.50.3-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">2233ad6f094ea7bf96ffcbf5d837fa93a69b252e355488fe472662651ac4a9fd</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.50.3" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.50.3-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.50.3-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">6def26d6724a451fc6c16db9a2f59c03e5f425d164c8462fe26e920ee7aa150a</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.50.3" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.50.3-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-2.50.3-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">79a9ebb977191a48b36b2e2be2714a674a05b41a99ee774ab6918bbe4d358516</sum>
        </package>
        <package name="webkit2gtk3" version="2.50.3" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.50.3-1.el8_10.src.rpm">
          <filename>webkit2gtk3-2.50.3-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">8b778ad0591ac239ebe4afbdae275d379ed76d22dd92691028f3b5037c73f622</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23048</id>
    <title>Important: tomcat security update</title>
    <issued date="2025-12-10 00:00:00"/>
    <updated date="2025-12-11 14:01:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tomcat security update</summary>
    <description>Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.  

Security Fix(es):  

  * tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)
  * tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23048" id="RHSA-2025:23048" type="rhsa" title="RHSA-2025:23048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31651" id="CVE-2025-31651" type="cve" title="CVE-2025-31651"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55752" id="CVE-2025-55752" type="cve" title="CVE-2025-55752"/>
      <reference href="https://bugzilla.redhat.com/2362782" id="2362782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406591" id="2406591" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-23048.html" id="ALSA-2025:23048" type="self" title="ALSA-2025:23048"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="tomcat-docs-webapp" version="9.0.87" release="1.el8_10.7" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.7.src.rpm">
          <filename>tomcat-docs-webapp-9.0.87-1.el8_10.7.noarch.rpm</filename>
          <sum type="sha256">210f3e89deb15ab6eb383cde8c42a20134b92bd8797a9073804d44ac19ef759f</sum>
        </package>
        <package name="tomcat-lib" version="9.0.87" release="1.el8_10.7" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.7.src.rpm">
          <filename>tomcat-lib-9.0.87-1.el8_10.7.noarch.rpm</filename>
          <sum type="sha256">38b98a3f1e3bbf95d77f766442b3e5802eac66a89c6e11d0abccf1ff5f4bbed4</sum>
        </package>
        <package name="tomcat-el-3.0-api" version="9.0.87" release="1.el8_10.7" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.7.src.rpm">
          <filename>tomcat-el-3.0-api-9.0.87-1.el8_10.7.noarch.rpm</filename>
          <sum type="sha256">55c6e9ca55b3ceffe02bbc13b5769359c737fc62a0d0ab422d4e060df2d442b3</sum>
        </package>
        <package name="tomcat-servlet-4.0-api" version="9.0.87" release="1.el8_10.7" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.7.src.rpm">
          <filename>tomcat-servlet-4.0-api-9.0.87-1.el8_10.7.noarch.rpm</filename>
          <sum type="sha256">58d74ffd1d8b384a07ee6d681db79c4bc1f63f3cbf3e9833ebda05a22b24a127</sum>
        </package>
        <package name="tomcat-jsp-2.3-api" version="9.0.87" release="1.el8_10.7" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.7.src.rpm">
          <filename>tomcat-jsp-2.3-api-9.0.87-1.el8_10.7.noarch.rpm</filename>
          <sum type="sha256">78e877fb894340c7243a12b5f6c27663933c36ef6d8b21f4164579cb030443ae</sum>
        </package>
        <package name="tomcat" version="9.0.87" release="1.el8_10.7" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.7.src.rpm">
          <filename>tomcat-9.0.87-1.el8_10.7.noarch.rpm</filename>
          <sum type="sha256">a8497857fa2af3716142a83dba11e2862dd550c76430fa4384a0afcb53557bff</sum>
        </package>
        <package name="tomcat-admin-webapps" version="9.0.87" release="1.el8_10.7" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.7.src.rpm">
          <filename>tomcat-admin-webapps-9.0.87-1.el8_10.7.noarch.rpm</filename>
          <sum type="sha256">c10358e6587ddb87ef7f214d87adb4548a5997e45971cfbb6ef63967b231d31b</sum>
        </package>
        <package name="tomcat-webapps" version="9.0.87" release="1.el8_10.7" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.7.src.rpm">
          <filename>tomcat-webapps-9.0.87-1.el8_10.7.noarch.rpm</filename>
          <sum type="sha256">fb5087d0d235df266c90565f5bbe140fdacc3b9741230fe7a57d68f0f4a4064a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23062</id>
    <title>Moderate: ruby:3.3 security update</title>
    <issued date="2025-12-10 00:00:00"/>
    <updated date="2026-01-05 20:45:38"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby:3.3 security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  

Security Fix(es):  

  * resolv: Denial of Service in resolv gem (CVE-2025-24294)
  * rexml: REXML denial of service (CVE-2025-58767)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23062" id="RHSA-2025:23062" type="rhsa" title="RHSA-2025:23062"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24294" id="CVE-2025-24294" type="cve" title="CVE-2025-24294"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58767" id="CVE-2025-58767" type="cve" title="CVE-2025-58767"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61594" id="CVE-2025-61594" type="cve" title="CVE-2025-61594"/>
      <reference href="https://bugzilla.redhat.com/2379684" id="2379684" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396186" id="2396186" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-23062.html" id="ALSA-2025:23062" type="self" title="ALSA-2025:23062"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="ruby" stream="3.3" version="8100020251211083716" context="9edba152" arch="s390x"/>
        <package name="rubygem-mysql2" version="0.5.5" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="s390x" src="rubygem-mysql2-0.5.5-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-mysql2-0.5.5-1.module_el8.10.0+3799+191214cc.s390x.rpm</filename>
          <sum type="sha256">0212e4bd0a248fdb4c10424d90e73d4c0400b209c24f90e3a5fac26348adcdc3</sum>
        </package>
        <package name="rubygem-psych" version="5.1.2" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="s390x" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>rubygem-psych-5.1.2-5.module_el8.10.0+4075+e5f6dad1.s390x.rpm</filename>
          <sum type="sha256">0df9e21eed23fb8cb0f9bfd56f7aabd2c48ae087d8d05c2170027e419d3f10a5</sum>
        </package>
        <package name="rubygem-bundler" version="2.5.22" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>rubygem-bundler-2.5.22-5.module_el8.10.0+4075+e5f6dad1.noarch.rpm</filename>
          <sum type="sha256">1357be48e1bfa3f984fa5f2bcead5a0e87c1e06353533310e50a952f9c16a01a</sum>
        </package>
        <package name="rubygem-racc" version="1.7.3" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="s390x" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>rubygem-racc-1.7.3-5.module_el8.10.0+4075+e5f6dad1.s390x.rpm</filename>
          <sum type="sha256">165c1c4a305ea3f48b3aad8a25467f7de8946bc81017e5ab54cd65514d8c2585</sum>
        </package>
        <package name="rubygem-test-unit" version="3.6.1" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>rubygem-test-unit-3.6.1-5.module_el8.10.0+4075+e5f6dad1.noarch.rpm</filename>
          <sum type="sha256">20e0516822ba68b9aa90b9221d6e4aa699c03e7f936684ffa17cdbc402634de0</sum>
        </package>
        <package name="rubygem-power_assert" version="2.0.3" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>rubygem-power_assert-2.0.3-5.module_el8.10.0+4075+e5f6dad1.noarch.rpm</filename>
          <sum type="sha256">539be6c4ade58bb67eaebd3c49d66b99d52e6201624f2cf48d59b8c88ef41718</sum>
        </package>
        <package name="rubygem-json" version="2.7.2" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="s390x" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>rubygem-json-2.7.2-5.module_el8.10.0+4075+e5f6dad1.s390x.rpm</filename>
          <sum type="sha256">657f3e11e6441499311fd0423eb76ece6a9b8550f3d6dca379d62aa1b8fac86f</sum>
        </package>
        <package name="rubygems-devel" version="3.5.22" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>rubygems-devel-3.5.22-5.module_el8.10.0+4075+e5f6dad1.noarch.rpm</filename>
          <sum type="sha256">6f50c21b20ed7d396959bd93eaed890cdf3307693e3ed2c542a8dcf69bb9fd6d</sum>
        </package>
        <package name="rubygem-rake" version="13.1.0" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>rubygem-rake-13.1.0-5.module_el8.10.0+4075+e5f6dad1.noarch.rpm</filename>
          <sum type="sha256">83b8ec6227e0ecb210435dee563a0617ebaf601fb5a529c697c8440ba9011d8a</sum>
        </package>
        <package name="ruby-devel" version="3.3.10" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="s390x" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>ruby-devel-3.3.10-5.module_el8.10.0+4075+e5f6dad1.s390x.rpm</filename>
          <sum type="sha256">9abd19893547f3c118d804d0c0fe3132e3898cb3ba18d61b7bdb247cc5d041f7</sum>
        </package>
        <package name="rubygem-mysql2-doc" version="0.5.5" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-mysql2-0.5.5-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-mysql2-doc-0.5.5-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">a1e84a63a7afd9043eb9ee27d2b4a2784de6e4790859efeb6e29353b8922b91f</sum>
        </package>
        <package name="rubygem-pg" version="1.5.4" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="s390x" src="rubygem-pg-1.5.4-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-pg-1.5.4-1.module_el8.10.0+3799+191214cc.s390x.rpm</filename>
          <sum type="sha256">b17f6e9ce3697902b5d1a0a00f804510913440b751583002e5226f0f1bafcfad</sum>
        </package>
        <package name="rubygem-irb" version="1.13.1" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>rubygem-irb-1.13.1-5.module_el8.10.0+4075+e5f6dad1.noarch.rpm</filename>
          <sum type="sha256">b1aa0751632254894cd3dbe2e1149966705294e81c560c2897b51ef364327dc3</sum>
        </package>
        <package name="rubygem-typeprof" version="0.21.9" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>rubygem-typeprof-0.21.9-5.module_el8.10.0+4075+e5f6dad1.noarch.rpm</filename>
          <sum type="sha256">b24377e3d73e7e75dba75cf43bbba1829ca1c6d98edf82281d1a0dcc46b261ce</sum>
        </package>
        <package name="rubygem-pg-doc" version="1.5.4" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-pg-1.5.4-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-pg-doc-1.5.4-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">b8da427ba088e5a263b5c71d592a6515861cf12932be7ac5577f51afc1c68900</sum>
        </package>
        <package name="ruby-libs" version="3.3.10" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="s390x" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>ruby-libs-3.3.10-5.module_el8.10.0+4075+e5f6dad1.s390x.rpm</filename>
          <sum type="sha256">b96bc2bd102231ae8cca8061c9ba5fbec2c4204fe3e7f7db70fd0ecd625d3395</sum>
        </package>
        <package name="rubygems" version="3.5.22" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>rubygems-3.5.22-5.module_el8.10.0+4075+e5f6dad1.noarch.rpm</filename>
          <sum type="sha256">c0761238dff087163511a9461474a8faaa4d880352812224eda32d04b8127edc</sum>
        </package>
        <package name="ruby" version="3.3.10" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="s390x" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.s390x.rpm</filename>
          <sum type="sha256">c11d8dc250e20e486629b0771c7623419e85651b4307b144bb9ef80b097c49ac</sum>
        </package>
        <package name="rubygem-abrt-doc" version="0.4.0" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-abrt-0.4.0-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-abrt-doc-0.4.0-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">c7018cb7e3cfdd28f00117935672e78df8eddf81f308a36b9be1dd8a3fec2afe</sum>
        </package>
        <package name="rubygem-bigdecimal" version="3.1.5" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="s390x" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>rubygem-bigdecimal-3.1.5-5.module_el8.10.0+4075+e5f6dad1.s390x.rpm</filename>
          <sum type="sha256">c7b00b2c2a80543c7d045e5189f0282dea1e15c12ec601914fc495e31c241d70</sum>
        </package>
        <package name="ruby-bundled-gems" version="3.3.10" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="s390x" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>ruby-bundled-gems-3.3.10-5.module_el8.10.0+4075+e5f6dad1.s390x.rpm</filename>
          <sum type="sha256">c7e29a346616cc7ba77cfb25078ea860cfa976f21384443519d5c797da9e4fe7</sum>
        </package>
        <package name="rubygem-io-console" version="0.7.1" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="s390x" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>rubygem-io-console-0.7.1-5.module_el8.10.0+4075+e5f6dad1.s390x.rpm</filename>
          <sum type="sha256">d0df974594bbb3757e44a98307bab04100ad77417fe9fb22eecb4022c182befa</sum>
        </package>
        <package name="rubygem-rss" version="0.3.1" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>rubygem-rss-0.3.1-5.module_el8.10.0+4075+e5f6dad1.noarch.rpm</filename>
          <sum type="sha256">eb0e26f401d5350cc059b7671e74913038e62a64560f022907de55a0daef5480</sum>
        </package>
        <package name="rubygem-abrt" version="0.4.0" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-abrt-0.4.0-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-abrt-0.4.0-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">eb0f7cad4d0f103b5e53f11647208a780406db8c8cd8c9556e219bec8e1d9893</sum>
        </package>
        <package name="rubygem-rbs" version="3.4.0" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="s390x" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>rubygem-rbs-3.4.0-5.module_el8.10.0+4075+e5f6dad1.s390x.rpm</filename>
          <sum type="sha256">eb718ea11837db703f712239e9b7b7c8868350f014a01f8c8906fd0c33ad1c39</sum>
        </package>
        <package name="ruby-doc" version="3.3.10" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>ruby-doc-3.3.10-5.module_el8.10.0+4075+e5f6dad1.noarch.rpm</filename>
          <sum type="sha256">f418122ad59e5199d6f6ba8cf014e62907f84ea8035afaffd8d14362ab0ccd16</sum>
        </package>
        <package name="rubygem-rexml" version="3.4.4" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>rubygem-rexml-3.4.4-5.module_el8.10.0+4075+e5f6dad1.noarch.rpm</filename>
          <sum type="sha256">f6038eb5fabbc809a56e84a65b7956417512cecb9977617fed7bcd89079f36c7</sum>
        </package>
        <package name="rubygem-rdoc" version="6.6.3.1" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>rubygem-rdoc-6.6.3.1-5.module_el8.10.0+4075+e5f6dad1.noarch.rpm</filename>
          <sum type="sha256">f8c2f0bec2f4f158cf378bb3fb4216cb10117e4d73f1fc1bee3ecc2576f537a3</sum>
        </package>
        <package name="ruby-default-gems" version="3.3.10" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>ruby-default-gems-3.3.10-5.module_el8.10.0+4075+e5f6dad1.noarch.rpm</filename>
          <sum type="sha256">fc15c34c422bafd803900e9742044379be86365fb7b3e99381a2ebe2929e0f24</sum>
        </package>
        <package name="rubygem-minitest" version="5.20.0" release="5.module_el8.10.0+4075+e5f6dad1" epoch="0" arch="noarch" src="ruby-3.3.10-5.module_el8.10.0+4075+e5f6dad1.src.rpm">
          <filename>rubygem-minitest-5.20.0-5.module_el8.10.0+4075+e5f6dad1.noarch.rpm</filename>
          <sum type="sha256">fd39366106cc839aaebab835ede413f550c4791453150db767b8a8cc4efbde1e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23086</id>
    <title>Moderate: luksmeta security update</title>
    <issued date="2025-12-11 00:00:00"/>
    <updated date="2025-12-11 13:43:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>luksmeta security update</summary>
    <description>LUKSMeta is a simple library for storing metadata in the LUKSv1 header. The luksmeta package is a dependency of the clevis and tang packages, together providing the Network Bound Disk Encryption (NBDE) in AlmaLinux.  

Security Fix(es):  

  * luksmeta: Data corruption when handling LUKS1 partitions with luksmeta (CVE-2025-11568)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23086" id="RHSA-2025:23086" type="rhsa" title="RHSA-2025:23086"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11568" id="CVE-2025-11568" type="cve" title="CVE-2025-11568"/>
      <reference href="https://bugzilla.redhat.com/2404244" id="2404244" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-23086.html" id="ALSA-2025:23086" type="self" title="ALSA-2025:23086"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="luksmeta" version="9" release="4.el8_10.1" epoch="0" arch="s390x" src="luksmeta-9-4.el8_10.1.src.rpm">
          <filename>luksmeta-9-4.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">13646f5130aa2ff93d203d52668043c5d062f6c6bba326be30f9031fd93d88a4</sum>
        </package>
        <package name="libluksmeta" version="9" release="4.el8_10.1" epoch="0" arch="s390x" src="luksmeta-9-4.el8_10.1.src.rpm">
          <filename>libluksmeta-9-4.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">a8087c60378f43254ed54959fb7315f55ed1c04239e903e8ce71da40a683ae01</sum>
        </package>
        <package name="libluksmeta-devel" version="9" release="4.el8_10.1" epoch="0" arch="s390x" src="luksmeta-9-4.el8_10.1.src.rpm">
          <filename>libluksmeta-devel-9-4.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">b78ff4478add84422ae7a88f7c6539d6ec5aa4695874021c004a893f321c074d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23128</id>
    <title>Important: firefox security update</title>
    <issued date="2025-12-11 00:00:00"/>
    <updated date="2025-12-12 10:19:27"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146 (CVE-2025-14333)
  * firefox: Use-after-free in the WebRTC: Signaling component (CVE-2025-14321)
  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14325)
  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2025-14322)
  * firefox: Privilege escalation in the Netmonitor component (CVE-2025-14328)
  * firefox: Privilege escalation in the Netmonitor component (CVE-2025-14329)
  * firefox: Same-origin policy bypass in the Request Handling component (CVE-2025-14331)
  * firefox: Privilege escalation in the DOM: Notifications component (CVE-2025-14323)
  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14330)
  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14324)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23128" id="RHSA-2025:23128" type="rhsa" title="RHSA-2025:23128"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14321" id="CVE-2025-14321" type="cve" title="CVE-2025-14321"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14322" id="CVE-2025-14322" type="cve" title="CVE-2025-14322"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14323" id="CVE-2025-14323" type="cve" title="CVE-2025-14323"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14324" id="CVE-2025-14324" type="cve" title="CVE-2025-14324"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14325" id="CVE-2025-14325" type="cve" title="CVE-2025-14325"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14328" id="CVE-2025-14328" type="cve" title="CVE-2025-14328"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14329" id="CVE-2025-14329" type="cve" title="CVE-2025-14329"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14330" id="CVE-2025-14330" type="cve" title="CVE-2025-14330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14331" id="CVE-2025-14331" type="cve" title="CVE-2025-14331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14333" id="CVE-2025-14333" type="cve" title="CVE-2025-14333"/>
      <reference href="https://bugzilla.redhat.com/2420502" id="2420502" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420503" id="2420503" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420504" id="2420504" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420506" id="2420506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420508" id="2420508" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420509" id="2420509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420512" id="2420512" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420513" id="2420513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420516" id="2420516" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420517" id="2420517" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-23128.html" id="ALSA-2025:23128" type="self" title="ALSA-2025:23128"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="140.6.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-140.6.0-1.el8_10.alma.1.src.rpm">
          <filename>firefox-140.6.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">4620fcadbdcd86f9eac2a0c06d39732c8bf77c4a9a09a22495d65d2e4129aa04</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23134</id>
    <title>Moderate: mysql:8.0 security update</title>
    <issued date="2025-12-11 00:00:00"/>
    <updated date="2025-12-12 10:33:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql:8.0 security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  

Security Fix(es):  

  * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)
  * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23134" id="RHSA-2025:23134" type="rhsa" title="RHSA-2025:23134"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53040" id="CVE-2025-53040" type="cve" title="CVE-2025-53040"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53042" id="CVE-2025-53042" type="cve" title="CVE-2025-53042"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53044" id="CVE-2025-53044" type="cve" title="CVE-2025-53044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53045" id="CVE-2025-53045" type="cve" title="CVE-2025-53045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53053" id="CVE-2025-53053" type="cve" title="CVE-2025-53053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53054" id="CVE-2025-53054" type="cve" title="CVE-2025-53054"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53062" id="CVE-2025-53062" type="cve" title="CVE-2025-53062"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53069" id="CVE-2025-53069" type="cve" title="CVE-2025-53069"/>
      <reference href="https://bugzilla.redhat.com/2405486" id="2405486" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405491" id="2405491" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405511" id="2405511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405514" id="2405514" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405523" id="2405523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405534" id="2405534" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405541" id="2405541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405544" id="2405544" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-23134.html" id="ALSA-2025:23134" type="self" title="ALSA-2025:23134"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="mysql" stream="8.0" version="8100020251212080552" context="9edba152" arch="s390x"/>
        <package name="mysql-test" version="8.0.44" release="1.module_el8.10.0+4079+cc1921b9" epoch="0" arch="s390x" src="mysql-8.0.44-1.module_el8.10.0+4079+cc1921b9.src.rpm">
          <filename>mysql-test-8.0.44-1.module_el8.10.0+4079+cc1921b9.s390x.rpm</filename>
          <sum type="sha256">020e20fe173aac7275bea8379c53756540f1e156eea886ecd041240c8e897f0c</sum>
        </package>
        <package name="mysql-server" version="8.0.44" release="1.module_el8.10.0+4079+cc1921b9" epoch="0" arch="s390x" src="mysql-8.0.44-1.module_el8.10.0+4079+cc1921b9.src.rpm">
          <filename>mysql-server-8.0.44-1.module_el8.10.0+4079+cc1921b9.s390x.rpm</filename>
          <sum type="sha256">17c1e0ffdfe0dd2c3a402d08b86405c6a753856b783dba3c033aebabf80bf9da</sum>
        </package>
        <package name="mecab-ipadic-EUCJP" version="2.7.0.20070801" release="17.module_el8.10.0+3965+b415b607" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+3965+b415b607.src.rpm">
          <filename>mecab-ipadic-EUCJP-2.7.0.20070801-17.module_el8.10.0+3965+b415b607.s390x.rpm</filename>
          <sum type="sha256">2b2400a7cf814f42d9725bb33f0614cd034a53f2d70efe17314f1155c8165718</sum>
        </package>
        <package name="mysql-errmsg" version="8.0.44" release="1.module_el8.10.0+4079+cc1921b9" epoch="0" arch="s390x" src="mysql-8.0.44-1.module_el8.10.0+4079+cc1921b9.src.rpm">
          <filename>mysql-errmsg-8.0.44-1.module_el8.10.0+4079+cc1921b9.s390x.rpm</filename>
          <sum type="sha256">30a4341760326dcbf75e824ae9ff2ac01f03d9558b9691f57a0544b4a1eb427d</sum>
        </package>
        <package name="mecab" version="0.996" release="2.module_el8.10.0+3965+b415b607" epoch="0" arch="s390x" src="mecab-0.996-2.module_el8.10.0+3965+b415b607.src.rpm">
          <filename>mecab-0.996-2.module_el8.10.0+3965+b415b607.s390x.rpm</filename>
          <sum type="sha256">33b6163fbf1b6b08111e95f3543dbb14bf19fc0ff5086e737fe6343a4443df82</sum>
        </package>
        <package name="mysql-devel" version="8.0.44" release="1.module_el8.10.0+4079+cc1921b9" epoch="0" arch="s390x" src="mysql-8.0.44-1.module_el8.10.0+4079+cc1921b9.src.rpm">
          <filename>mysql-devel-8.0.44-1.module_el8.10.0+4079+cc1921b9.s390x.rpm</filename>
          <sum type="sha256">5894064d9aed2ffa228d70c619277679e89d308c9b3552f0982613255532b60f</sum>
        </package>
        <package name="mysql-libs" version="8.0.44" release="1.module_el8.10.0+4079+cc1921b9" epoch="0" arch="s390x" src="mysql-8.0.44-1.module_el8.10.0+4079+cc1921b9.src.rpm">
          <filename>mysql-libs-8.0.44-1.module_el8.10.0+4079+cc1921b9.s390x.rpm</filename>
          <sum type="sha256">6e0cc846bfa700d02575590df408688535474bf49b21a1349166939948943806</sum>
        </package>
        <package name="mysql-common" version="8.0.44" release="1.module_el8.10.0+4079+cc1921b9" epoch="0" arch="s390x" src="mysql-8.0.44-1.module_el8.10.0+4079+cc1921b9.src.rpm">
          <filename>mysql-common-8.0.44-1.module_el8.10.0+4079+cc1921b9.s390x.rpm</filename>
          <sum type="sha256">8a97532f0fde962941abb18fcc3ddd84ca9e7b0e388e8e8a1c5b90b58ae6d965</sum>
        </package>
        <package name="mecab-devel" version="0.996" release="2.module_el8.6.0+3340+d764b636" epoch="0" arch="s390x" src="mecab-0.996-2.module_el8.6.0+3340+d764b636.src.rpm">
          <filename>mecab-devel-0.996-2.module_el8.6.0+3340+d764b636.s390x.rpm</filename>
          <sum type="sha256">95fbafd6a495d411511dcfabd6b0f0746e44e7a7bcc70330024e0022229ee5d3</sum>
        </package>
        <package name="mysql" version="8.0.44" release="1.module_el8.10.0+4079+cc1921b9" epoch="0" arch="s390x" src="mysql-8.0.44-1.module_el8.10.0+4079+cc1921b9.src.rpm">
          <filename>mysql-8.0.44-1.module_el8.10.0+4079+cc1921b9.s390x.rpm</filename>
          <sum type="sha256">b4ee680f4ce4b1d359703abe6e0983c390e7126eaf47720af72ab3ca7e4ee5b7</sum>
        </package>
        <package name="mecab-ipadic" version="2.7.0.20070801" release="17.module_el8.10.0+3965+b415b607" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+3965+b415b607.src.rpm">
          <filename>mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+3965+b415b607.s390x.rpm</filename>
          <sum type="sha256">d836c246ea2cfe40117264855bf7d6f3fed850ab95c2ea36490dec679af45dee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23137</id>
    <title>Moderate: mysql:8.4 security update</title>
    <issued date="2025-12-11 00:00:00"/>
    <updated date="2025-12-12 10:24:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql:8.4 security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  

Security Fix(es):  

  * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)
  * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23137" id="RHSA-2025:23137" type="rhsa" title="RHSA-2025:23137"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53040" id="CVE-2025-53040" type="cve" title="CVE-2025-53040"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53042" id="CVE-2025-53042" type="cve" title="CVE-2025-53042"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53044" id="CVE-2025-53044" type="cve" title="CVE-2025-53044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53045" id="CVE-2025-53045" type="cve" title="CVE-2025-53045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53053" id="CVE-2025-53053" type="cve" title="CVE-2025-53053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53054" id="CVE-2025-53054" type="cve" title="CVE-2025-53054"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53062" id="CVE-2025-53062" type="cve" title="CVE-2025-53062"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53069" id="CVE-2025-53069" type="cve" title="CVE-2025-53069"/>
      <reference href="https://bugzilla.redhat.com/2405486" id="2405486" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405491" id="2405491" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405511" id="2405511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405514" id="2405514" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405523" id="2405523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405534" id="2405534" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405541" id="2405541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405544" id="2405544" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-23137.html" id="ALSA-2025:23137" type="self" title="ALSA-2025:23137"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="mysql" stream="8.4" version="8100020251106054439" context="9edba152" arch="s390x"/>
        <package name="mecab" version="0.996" release="2.module_el8.10.0+4060+d4256e26" epoch="0" arch="s390x" src="mecab-0.996-2.module_el8.10.0+4060+d4256e26.src.rpm">
          <filename>mecab-0.996-2.module_el8.10.0+4060+d4256e26.s390x.rpm</filename>
          <sum type="sha256">18cfaf8b55a7cec65d1d202594207c808c7bc9ecefd417e953be47e61549f4a6</sum>
        </package>
        <package name="mecab-devel" version="0.996" release="2.module_el8.10.0+4060+d4256e26" epoch="0" arch="s390x" src="mecab-0.996-2.module_el8.10.0+4060+d4256e26.src.rpm">
          <filename>mecab-devel-0.996-2.module_el8.10.0+4060+d4256e26.s390x.rpm</filename>
          <sum type="sha256">1ceaffe3718cc738100e80d34513effcff5daf7341a6b23c27f685a533755c35</sum>
        </package>
        <package name="mysql-devel" version="8.4.7" release="1.module_el8.10.0+4077+98379720" epoch="0" arch="s390x" src="mysql-8.4.7-1.module_el8.10.0+4077+98379720.src.rpm">
          <filename>mysql-devel-8.4.7-1.module_el8.10.0+4077+98379720.s390x.rpm</filename>
          <sum type="sha256">2b59e29db1b0ea17723c100f6290c7b581f82e100930faefbfc7489b0b816074</sum>
        </package>
        <package name="mysql-test-data" version="8.4.7" release="1.module_el8.10.0+4077+98379720" epoch="0" arch="noarch" src="mysql-8.4.7-1.module_el8.10.0+4077+98379720.src.rpm">
          <filename>mysql-test-data-8.4.7-1.module_el8.10.0+4077+98379720.noarch.rpm</filename>
          <sum type="sha256">32c0e3b4c114fae4abfa71886d6b9d4728a673d813b70886a9595c7538ccfad4</sum>
        </package>
        <package name="mysql-test" version="8.4.7" release="1.module_el8.10.0+4077+98379720" epoch="0" arch="s390x" src="mysql-8.4.7-1.module_el8.10.0+4077+98379720.src.rpm">
          <filename>mysql-test-8.4.7-1.module_el8.10.0+4077+98379720.s390x.rpm</filename>
          <sum type="sha256">4cf8d7536c83c167df17a894faa95d44388a19aefa9837520c16ecb68d436221</sum>
        </package>
        <package name="mysql-libs" version="8.4.7" release="1.module_el8.10.0+4077+98379720" epoch="0" arch="s390x" src="mysql-8.4.7-1.module_el8.10.0+4077+98379720.src.rpm">
          <filename>mysql-libs-8.4.7-1.module_el8.10.0+4077+98379720.s390x.rpm</filename>
          <sum type="sha256">5bb7627e9d49ab837f2f447ab5d2b93fbd65fc59a8434a5b6383efb98a93384b</sum>
        </package>
        <package name="mecab-ipadic" version="2.7.0.20070801" release="17.module_el8.10.0+4060+d4256e26" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+4060+d4256e26.src.rpm">
          <filename>mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+4060+d4256e26.s390x.rpm</filename>
          <sum type="sha256">699791fde21af136b5be1e5f47f07915fe3dbc68f07cec6e808ef0a6fd38ee92</sum>
        </package>
        <package name="mysql-server" version="8.4.7" release="1.module_el8.10.0+4077+98379720" epoch="0" arch="s390x" src="mysql-8.4.7-1.module_el8.10.0+4077+98379720.src.rpm">
          <filename>mysql-server-8.4.7-1.module_el8.10.0+4077+98379720.s390x.rpm</filename>
          <sum type="sha256">6c5c2a5ebcd689455674025947d622ff82963937a638137fd1ac658cb7dc2b6b</sum>
        </package>
        <package name="mysql-errmsg" version="8.4.7" release="1.module_el8.10.0+4077+98379720" epoch="0" arch="noarch" src="mysql-8.4.7-1.module_el8.10.0+4077+98379720.src.rpm">
          <filename>mysql-errmsg-8.4.7-1.module_el8.10.0+4077+98379720.noarch.rpm</filename>
          <sum type="sha256">70d2ed08985d4667389fdab4c8cf39416aa2d5bc47900fdc45073cfc1b647df3</sum>
        </package>
        <package name="mysql-common" version="8.4.7" release="1.module_el8.10.0+4077+98379720" epoch="0" arch="noarch" src="mysql-8.4.7-1.module_el8.10.0+4077+98379720.src.rpm">
          <filename>mysql-common-8.4.7-1.module_el8.10.0+4077+98379720.noarch.rpm</filename>
          <sum type="sha256">7bac4aecb12b46f80ea60f49a07d9a45780295c28c05d53339e66db22296a4fc</sum>
        </package>
        <package name="mysql" version="8.4.7" release="1.module_el8.10.0+4077+98379720" epoch="0" arch="s390x" src="mysql-8.4.7-1.module_el8.10.0+4077+98379720.src.rpm">
          <filename>mysql-8.4.7-1.module_el8.10.0+4077+98379720.s390x.rpm</filename>
          <sum type="sha256">813187634499529a3b71488f032cb3b72380816d8afe7ce33c3bc2908addba45</sum>
        </package>
        <package name="mecab-ipadic-EUCJP" version="2.7.0.20070801" release="17.module_el8.10.0+4060+d4256e26" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+4060+d4256e26.src.rpm">
          <filename>mecab-ipadic-EUCJP-2.7.0.20070801-17.module_el8.10.0+4060+d4256e26.s390x.rpm</filename>
          <sum type="sha256">91cc31158f621f11a815a2c67b6847f8c2bc8b82934e70d16fb3179633f1b54d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23382</id>
    <title>Moderate: binutils security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2025-12-22 14:14:13"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>binutils security update</summary>
    <description>The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities.  

Security Fix(es):  

  * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11083)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23382" id="RHSA-2025:23382" type="rhsa" title="RHSA-2025:23382"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11083" id="CVE-2025-11083" type="cve" title="CVE-2025-11083"/>
      <reference href="https://bugzilla.redhat.com/2399948" id="2399948" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-23382.html" id="ALSA-2025:23382" type="self" title="ALSA-2025:23382"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="binutils-devel" version="2.30" release="128.el8_10" epoch="0" arch="s390x" src="binutils-2.30-128.el8_10.src.rpm">
          <filename>binutils-devel-2.30-128.el8_10.s390x.rpm</filename>
          <sum type="sha256">d57cf640bc50c7a62568b23f84cb4f948bbb3385e77cb94607ef3537d3c33e54</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23481</id>
    <title>Moderate: openssh security update</title>
    <issued date="2025-12-17 00:00:00"/>
    <updated date="2025-12-21 20:00:07"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssh security update</summary>
    <description>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.  

Security Fix(es):  

  * openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand (CVE-2025-61984)
  * openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommand (CVE-2025-61985)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23481" id="RHSA-2025:23481" type="rhsa" title="RHSA-2025:23481"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61984" id="CVE-2025-61984" type="cve" title="CVE-2025-61984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61985" id="CVE-2025-61985" type="cve" title="CVE-2025-61985"/>
      <reference href="https://bugzilla.redhat.com/2401960" id="2401960" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401962" id="2401962" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-23481.html" id="ALSA-2025:23481" type="self" title="ALSA-2025:23481"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="openssh-askpass" version="8.0p1" release="27.el8_10" epoch="0" arch="s390x" src="openssh-8.0p1-27.el8_10.src.rpm">
          <filename>openssh-askpass-8.0p1-27.el8_10.s390x.rpm</filename>
          <sum type="sha256">562859fe2e21691b2818498c7a638a142e5bf5c28006d2bb3d753d55c1474ed9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23530</id>
    <title>Important: python39:3.9 security update</title>
    <issued date="2025-12-17 00:00:00"/>
    <updated date="2025-12-22 14:09:44"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python39:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used (CVE-2024-5642)
  * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)
  * python: Improper validation of IPv6 and IPvFuture addresses (CVE-2024-11168)
  * python: cpython: URL parser allowed square brackets in domain names (CVE-2025-0938)
  * cpython: python: CPython DecodeError Handling Vulnerability (CVE-2025-4516)
  * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)
  * cpython: python: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)
  * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)
  * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138)
  * cpython: Python HTMLParser quadratic complexity (CVE-2025-6069)
  * cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)
  * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23530" id="RHSA-2025:23530" type="rhsa" title="RHSA-2025:23530"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11168" id="CVE-2024-11168" type="cve" title="CVE-2024-11168"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5642" id="CVE-2024-5642" type="cve" title="CVE-2024-5642"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9287" id="CVE-2024-9287" type="cve" title="CVE-2024-9287"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0938" id="CVE-2025-0938" type="cve" title="CVE-2025-0938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4138" id="CVE-2025-4138" type="cve" title="CVE-2025-4138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4330" id="CVE-2025-4330" type="cve" title="CVE-2025-4330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4435" id="CVE-2025-4435" type="cve" title="CVE-2025-4435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4516" id="CVE-2025-4516" type="cve" title="CVE-2025-4516"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4517" id="CVE-2025-4517" type="cve" title="CVE-2025-4517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6069" id="CVE-2025-6069" type="cve" title="CVE-2025-6069"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6075" id="CVE-2025-6075" type="cve" title="CVE-2025-6075"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8291" id="CVE-2025-8291" type="cve" title="CVE-2025-8291"/>
      <reference href="https://bugzilla.redhat.com/2294682" id="2294682" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2321440" id="2321440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325776" id="2325776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343237" id="2343237" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2366509" id="2366509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370010" id="2370010" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370014" id="2370014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370016" id="2370016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2372426" id="2372426" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373234" id="2373234" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402342" id="2402342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2408891" id="2408891" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-23530.html" id="ALSA-2025:23530" type="self" title="ALSA-2025:23530"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="python39" stream="3.9" version="8100020240530164632" context="0a5380d9" arch="s390x"/>
        <package name="python39-psycopg2-tests" version="2.8.6" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-psycopg2-tests-2.8.6-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">05d2693d2fda223ef60e5133f0ea03da31cbd0047d13a3bd8f677c4042064ec4</sum>
        </package>
        <package name="python39-idle" version="3.9.25" release="2.module_el8.10.0+4083+53cad1fb" epoch="0" arch="s390x" src="python39-3.9.25-2.module_el8.10.0+4083+53cad1fb.src.rpm">
          <filename>python39-idle-3.9.25-2.module_el8.10.0+4083+53cad1fb.s390x.rpm</filename>
          <sum type="sha256">18f4fa35a2b66071d2699d1fac43938c52e40f53c2b21c1003801dce6da1016d</sum>
        </package>
        <package name="python39-pip" version="20.2.4" release="9.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python3x-pip-20.2.4-9.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-pip-20.2.4-9.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">1cddc6a728150b59b88dadd96ccc569c7bb77f8952761eca587d684b1a9d53dc</sum>
        </package>
        <package name="python39-urllib3" version="1.25.10" release="5.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python-urllib3-1.25.10-5.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-urllib3-1.25.10-5.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">24df140ee4c409e7c015b7d7584ba8aa8df5b95f9ecea9b457ce9ea0f3c68d98</sum>
        </package>
        <package name="python39-pip-wheel" version="20.2.4" release="9.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python3x-pip-20.2.4-9.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-pip-wheel-20.2.4-9.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">2a77862adcd93af6aa76bbbf2467fbd468eef1d9d6265d21cb2316e69d48cae1</sum>
        </package>
        <package name="python39-idna" version="2.10" release="4.module_el8.10.0+3849+a48d89aa" epoch="0" arch="noarch" src="python-idna-2.10-4.module_el8.10.0+3849+a48d89aa.src.rpm">
          <filename>python39-idna-2.10-4.module_el8.10.0+3849+a48d89aa.noarch.rpm</filename>
          <sum type="sha256">381f6f79555962d405b57a48952a958cf6f71a88772061ae3a017ad2a49f40c6</sum>
        </package>
        <package name="python39-psycopg2" version="2.8.6" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">3938e67a4a4560730a8004aa6291d4a5162286bd6f68bc00b16e2ed49d466377</sum>
        </package>
        <package name="python39" version="3.9.25" release="2.module_el8.10.0+4083+53cad1fb" epoch="0" arch="s390x" src="python39-3.9.25-2.module_el8.10.0+4083+53cad1fb.src.rpm">
          <filename>python39-3.9.25-2.module_el8.10.0+4083+53cad1fb.s390x.rpm</filename>
          <sum type="sha256">453870de38b4e857ca6e565bcec4d585d872edaab665ac35ca990c21580004d0</sum>
        </package>
        <package name="python39-test" version="3.9.25" release="2.module_el8.10.0+4083+53cad1fb" epoch="0" arch="s390x" src="python39-3.9.25-2.module_el8.10.0+4083+53cad1fb.src.rpm">
          <filename>python39-test-3.9.25-2.module_el8.10.0+4083+53cad1fb.s390x.rpm</filename>
          <sum type="sha256">543778ac6689fe08b4a7d8e35336204b88a77aba971b7e564e18af269766863a</sum>
        </package>
        <package name="python39-numpy-f2py" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-f2py-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">56f4a39fc3b7cacfec741e84c3c59e67da9e3b2f122f09e59cac8a8020a4ba7c</sum>
        </package>
        <package name="python39-psycopg2-doc" version="2.8.6" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-psycopg2-doc-2.8.6-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">5c33f9b35f95710fe82294dc826e72f8a2af5309c9f694687b92f36df933e837</sum>
        </package>
        <package name="python39-scipy" version="1.5.4" release="5.module_el8.9.0+3634+fb2a896c" epoch="0" arch="s390x" src="scipy-1.5.4-5.module_el8.9.0+3634+fb2a896c.src.rpm">
          <filename>python39-scipy-1.5.4-5.module_el8.9.0+3634+fb2a896c.s390x.rpm</filename>
          <sum type="sha256">68206ec5b6bf886e1266c848bf014248b598bea11cce32708352e16fceaa4475</sum>
        </package>
        <package name="python39-rpm-macros" version="3.9.25" release="2.module_el8.10.0+4083+53cad1fb" epoch="0" arch="noarch" src="python39-3.9.25-2.module_el8.10.0+4083+53cad1fb.src.rpm">
          <filename>python39-rpm-macros-3.9.25-2.module_el8.10.0+4083+53cad1fb.noarch.rpm</filename>
          <sum type="sha256">68b83f8cd0a0e2a8934dc51b0e08f47e70da5940454cb6f6d8dbf52e299dfcb1</sum>
        </package>
        <package name="python39-mod_wsgi" version="4.7.1" release="7.module_el8.10.0+3989+a618fe15.1" epoch="0" arch="s390x" src="mod_wsgi-4.7.1-7.module_el8.10.0+3989+a618fe15.1.src.rpm">
          <filename>python39-mod_wsgi-4.7.1-7.module_el8.10.0+3989+a618fe15.1.s390x.rpm</filename>
          <sum type="sha256">699c74d4de476f3622f9b09329e23abb89c3e7e6efc60d4fc43b9e5569c12648</sum>
        </package>
        <package name="python39-devel" version="3.9.25" release="2.module_el8.10.0+4083+53cad1fb" epoch="0" arch="s390x" src="python39-3.9.25-2.module_el8.10.0+4083+53cad1fb.src.rpm">
          <filename>python39-devel-3.9.25-2.module_el8.10.0+4083+53cad1fb.s390x.rpm</filename>
          <sum type="sha256">7d46dafac1d7c6aa8ede84dbfd5934bf615fd7d597511d349b7081749fa58b70</sum>
        </package>
        <package name="python39-setuptools-wheel" version="50.3.2" release="7.module_el8.10.0+4040+9207bbc0" epoch="0" arch="noarch" src="python3x-setuptools-50.3.2-7.module_el8.10.0+4040+9207bbc0.src.rpm">
          <filename>python39-setuptools-wheel-50.3.2-7.module_el8.10.0+4040+9207bbc0.noarch.rpm</filename>
          <sum type="sha256">8553178e2fa952e99e564f963331de087f49c5be8589ac2cb0f4276044bac7ca</sum>
        </package>
        <package name="python39-cryptography" version="3.3.1" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-cryptography-3.3.1-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-cryptography-3.3.1-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">8834a7762b7982546305749c0b8ab5193a8b777110eaddbdbb80e69fdaf6ea8a</sum>
        </package>
        <package name="python39-psutil" version="5.8.0" release="4.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9300840b5b4e742063f5617bc74cc2b05b4f3d5bdcd113ee5b3a9745baf3d0dc</sum>
        </package>
        <package name="python39-numpy" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9ffe33f6e51a25e79b88e45fa5cdca37a3b77d0868fe40e156f615224308810c</sum>
        </package>
        <package name="python39-libs" version="3.9.25" release="2.module_el8.10.0+4083+53cad1fb" epoch="0" arch="s390x" src="python39-3.9.25-2.module_el8.10.0+4083+53cad1fb.src.rpm">
          <filename>python39-libs-3.9.25-2.module_el8.10.0+4083+53cad1fb.s390x.rpm</filename>
          <sum type="sha256">bb3813c0ee1c2090b03c253d9d92d0f3bc79796c0445473d39cd65b8c0feb179</sum>
        </package>
        <package name="python39-requests" version="2.25.0" release="3.module_el8.9.0+3634+fb2a896c" epoch="0" arch="noarch" src="python-requests-2.25.0-3.module_el8.9.0+3634+fb2a896c.src.rpm">
          <filename>python39-requests-2.25.0-3.module_el8.9.0+3634+fb2a896c.noarch.rpm</filename>
          <sum type="sha256">d021b1b5bb6a395348b4764885ec17842861193b8e60c25abcf8e1ad7a047641</sum>
        </package>
        <package name="python39-lxml" version="4.6.5" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">dc2ce0990738ea69e2b3641de1886825066554244cf58815971db30e321b56b2</sum>
        </package>
        <package name="python39-tkinter" version="3.9.25" release="2.module_el8.10.0+4083+53cad1fb" epoch="0" arch="s390x" src="python39-3.9.25-2.module_el8.10.0+4083+53cad1fb.src.rpm">
          <filename>python39-tkinter-3.9.25-2.module_el8.10.0+4083+53cad1fb.s390x.rpm</filename>
          <sum type="sha256">eba328c6989194dec2233149f9d0dcef846e5d487476c2ae2b06c2fbb3552df7</sum>
        </package>
        <package name="python39-cffi" version="1.14.3" release="2.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">ec3acbe8ceecf82559556caacd8c41e2b40e69348f2e6893f0b7598aa36371fd</sum>
        </package>
        <package name="python39-setuptools" version="50.3.2" release="7.module_el8.10.0+4040+9207bbc0" epoch="0" arch="noarch" src="python3x-setuptools-50.3.2-7.module_el8.10.0+4040+9207bbc0.src.rpm">
          <filename>python39-setuptools-50.3.2-7.module_el8.10.0+4040+9207bbc0.noarch.rpm</filename>
          <sum type="sha256">f9193387284d3741f71df3c4640fca49907530908ffd77067ad5347b3ed923d7</sum>
        </package>
        <package name="python39-pyyaml" version="5.4.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="PyYAML-5.4.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pyyaml-5.4.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">faa90d54ace8329c64942f01e18434bce14edf19cc3a534ae07de7bc301cd27f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23543</id>
    <title>Important: container-tools:rhel8 security update</title>
    <issued date="2025-12-17 00:00:00"/>
    <updated date="2025-12-24 09:25:48"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>container-tools:rhel8 security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.  

Security Fix(es):  

  * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23543" id="RHSA-2025:23543" type="rhsa" title="RHSA-2025:23543"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-52881" id="CVE-2025-52881" type="cve" title="CVE-2025-52881"/>
      <reference href="https://bugzilla.redhat.com/2404715" id="2404715" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-23543.html" id="ALSA-2025:23543" type="self" title="ALSA-2025:23543"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="container-tools" stream="rhel8" version="8100020250617080424" context="20125149" arch="s390x"/>
        <package name="containernetworking-plugins" version="1.4.0" release="6.module_el8.10.0+4016+efd18bf8" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-6.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>containernetworking-plugins-1.4.0-6.module_el8.10.0+4016+efd18bf8.s390x.rpm</filename>
          <sum type="sha256">01ce475d6b55bfde8145f5504470f60e087576049049ad624b54efcd0787fe6a</sum>
        </package>
        <package name="python3-podman" version="4.9.0" release="3.module_el8.10.0+4016+efd18bf8" epoch="0" arch="noarch" src="python-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>python3-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.noarch.rpm</filename>
          <sum type="sha256">087549428650af46817206c5d5ddd54bace235c2932b3e2004ac93e3b466cb6d</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.10" release="1.module_el8.10.0+4068+0e21408f" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">10f8030860f742280a164946b182addd39796c2b86786ec977e37ae026354799</sum>
        </package>
        <package name="podman-gvproxy" version="4.9.4" release="25.module_el8.10.0+4089+ce72bbbe" epoch="4" arch="s390x" src="podman-4.9.4-25.module_el8.10.0+4089+ce72bbbe.src.rpm">
          <filename>podman-gvproxy-4.9.4-25.module_el8.10.0+4089+ce72bbbe.s390x.rpm</filename>
          <sum type="sha256">10fa1b2c64f83717a83692b246981b2ce8909b96895744fd7570271db1c5c6ac</sum>
        </package>
        <package name="crun" version="1.14.3" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="crun-1.14.3-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>crun-1.14.3-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">1803f41cb3e0828fe770ce7de14a940b9fad458fd84f420baab724674e2041e7</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="2.module_el8.10.0+4023+db236c53" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>libslirp-4.4.0-2.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">1fb16f13bc4c318fd2714e829a188f97facb4a31222911e078f5604ab7bcd2d9</sum>
        </package>
        <package name="runc" version="1.2.9" release="2.module_el8.10.0+4089+ce72bbbe" epoch="4" arch="s390x" src="runc-1.2.9-2.module_el8.10.0+4089+ce72bbbe.src.rpm">
          <filename>runc-1.2.9-2.module_el8.10.0+4089+ce72bbbe.s390x.rpm</filename>
          <sum type="sha256">383c519d0ae43cf1b012cc8ba7e4b5eb63a9d823b73cb152697e4183ff6a7e8e</sum>
        </package>
        <package name="container-selinux" version="2.229.0" release="2.module_el8.10.0+3909+6e1c1eb7" epoch="2" arch="noarch" src="container-selinux-2.229.0-2.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>container-selinux-2.229.0-2.module_el8.10.0+3909+6e1c1eb7.noarch.rpm</filename>
          <sum type="sha256">39df1f8e08cf61f1d3399b9d32cdaa93153cdbd001ff380fa9145a2012d1190c</sum>
        </package>
        <package name="skopeo-tests" version="1.14.5" release="5.module_el8.10.0+4082+f7f0c95e" epoch="2" arch="s390x" src="skopeo-1.14.5-5.module_el8.10.0+4082+f7f0c95e.src.rpm">
          <filename>skopeo-tests-1.14.5-5.module_el8.10.0+4082+f7f0c95e.s390x.rpm</filename>
          <sum type="sha256">3cfbd88f69a932fb98457e7e2e04901d89b08372ff34b6aa9b5d52096b7d9bd1</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.5" release="2.module_el8.10.0+4089+ce72bbbe" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+4089+ce72bbbe.src.rpm">
          <filename>toolbox-tests-0.0.99.5-2.module_el8.10.0+4089+ce72bbbe.s390x.rpm</filename>
          <sum type="sha256">3d197497f7616c6135bbb5e979f80ccb3bc6d11a63b4fa53181412054fac8c84</sum>
        </package>
        <package name="buildah-tests" version="1.33.13" release="1.module_el8.10.0+4089+ce72bbbe" epoch="2" arch="s390x" src="buildah-1.33.13-1.module_el8.10.0+4089+ce72bbbe.src.rpm">
          <filename>buildah-tests-1.33.13-1.module_el8.10.0+4089+ce72bbbe.s390x.rpm</filename>
          <sum type="sha256">5659982afbfa47ba0e5e152f0f2f62ce234f9407b1053e31b001fccc3cf3996b</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="25.module_el8.10.0+4089+ce72bbbe" epoch="4" arch="noarch" src="podman-4.9.4-25.module_el8.10.0+4089+ce72bbbe.src.rpm">
          <filename>podman-docker-4.9.4-25.module_el8.10.0+4089+ce72bbbe.noarch.rpm</filename>
          <sum type="sha256">5a0a1b13893b3961cee2a55f8bb40f780aa263450a44f828897eeaa9fae08421</sum>
        </package>
        <package name="podman-catatonit" version="4.9.4" release="25.module_el8.10.0+4089+ce72bbbe" epoch="4" arch="s390x" src="podman-4.9.4-25.module_el8.10.0+4089+ce72bbbe.src.rpm">
          <filename>podman-catatonit-4.9.4-25.module_el8.10.0+4089+ce72bbbe.s390x.rpm</filename>
          <sum type="sha256">5ad0f5ed734e611abc551106fbe58d6108178caeaa2cb781dcecd50d95e0dca1</sum>
        </package>
        <package name="python3-criu" version="3.18" release="5.module_el8.10.0+4023+db236c53" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>python3-criu-3.18-5.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">63a762e1b6963204cd36602216730858805e405178999018be7f659aea67dd29</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="25.module_el8.10.0+4089+ce72bbbe" epoch="4" arch="s390x" src="podman-4.9.4-25.module_el8.10.0+4089+ce72bbbe.src.rpm">
          <filename>podman-remote-4.9.4-25.module_el8.10.0+4089+ce72bbbe.s390x.rpm</filename>
          <sum type="sha256">711d7eae964b54c6ead13d5cb282b8aa33052e1eeea84cac73cb7e3fac0cc876</sum>
        </package>
        <package name="udica" version="0.2.6" release="21.module_el8.10.0+4068+0e21408f" epoch="0" arch="noarch" src="udica-0.2.6-21.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>udica-0.2.6-21.module_el8.10.0+4068+0e21408f.noarch.rpm</filename>
          <sum type="sha256">79a48c91cfda7b53eceaf7fc427f6b428b66680f0441fed06fc3bb55a0327feb</sum>
        </package>
        <package name="fuse-overlayfs" version="1.13" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="s390x" src="fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">8118067655696462cee9dfc553f57e4501b089590d837bc88091716914c8d3f5</sum>
        </package>
        <package name="criu-devel" version="3.18" release="5.module_el8.10.0+4068+0e21408f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>criu-devel-3.18-5.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">8d858b9b5053b95ab7cb5eba9ab5bbd3cf5a1d07b77394b4d0f0d9d6c0769768</sum>
        </package>
        <package name="skopeo" version="1.14.5" release="5.module_el8.10.0+4082+f7f0c95e" epoch="2" arch="s390x" src="skopeo-1.14.5-5.module_el8.10.0+4082+f7f0c95e.src.rpm">
          <filename>skopeo-1.14.5-5.module_el8.10.0+4082+f7f0c95e.s390x.rpm</filename>
          <sum type="sha256">96f988330ddc6f424b3fb758f3aad179bc53de51ed5d01168ae65dfd8deb1467</sum>
        </package>
        <package name="toolbox" version="0.0.99.5" release="2.module_el8.10.0+4089+ce72bbbe" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+4089+ce72bbbe.src.rpm">
          <filename>toolbox-0.0.99.5-2.module_el8.10.0+4089+ce72bbbe.s390x.rpm</filename>
          <sum type="sha256">9846e814c5a7917bf0df97abc37adc391365fda5b64ea89dc21db05b0acff6f3</sum>
        </package>
        <package name="containers-common" version="1" release="82.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="s390x" src="containers-common-1-82.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>containers-common-1-82.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">98eb0c5785e1d53743858e76ac35aab0b199a918b88c02e20aa6f64cc6f89618</sum>
        </package>
        <package name="aardvark-dns" version="1.10.1" release="2.module_el8.10.0+4047+545787c4" epoch="2" arch="s390x" src="aardvark-dns-1.10.1-2.module_el8.10.0+4047+545787c4.src.rpm">
          <filename>aardvark-dns-1.10.1-2.module_el8.10.0+4047+545787c4.s390x.rpm</filename>
          <sum type="sha256">9e7e5cc9877a685769ee43c72dc867d179fe027d41775a01f1e73cfe366872ef</sum>
        </package>
        <package name="podman-plugins" version="4.9.4" release="25.module_el8.10.0+4089+ce72bbbe" epoch="4" arch="s390x" src="podman-4.9.4-25.module_el8.10.0+4089+ce72bbbe.src.rpm">
          <filename>podman-plugins-4.9.4-25.module_el8.10.0+4089+ce72bbbe.s390x.rpm</filename>
          <sum type="sha256">a28e1e4d87090b5148d1d25c3703e24d384f0824a5a0276cc9e7543bcbc9559f</sum>
        </package>
        <package name="crit" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>crit-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">aeb27c5bcec90a9452f93ad79ef0d4f00ecedf4442f32f9bedb481509db12683</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="25.module_el8.10.0+4089+ce72bbbe" epoch="4" arch="s390x" src="podman-4.9.4-25.module_el8.10.0+4089+ce72bbbe.src.rpm">
          <filename>podman-tests-4.9.4-25.module_el8.10.0+4089+ce72bbbe.s390x.rpm</filename>
          <sum type="sha256">b23f1504bfd778c9afb6f7a948ddd89be854cbdeec0ba0cb64d3fb7bd46e8344</sum>
        </package>
        <package name="criu" version="3.18" release="5.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>criu-3.18-5.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">bdaddee931f3746ac7472d9ccee504acd0be805433b3d160b1e7caf8bf361cb8</sum>
        </package>
        <package name="buildah" version="1.33.13" release="1.module_el8.10.0+4089+ce72bbbe" epoch="2" arch="s390x" src="buildah-1.33.13-1.module_el8.10.0+4089+ce72bbbe.src.rpm">
          <filename>buildah-1.33.13-1.module_el8.10.0+4089+ce72bbbe.s390x.rpm</filename>
          <sum type="sha256">c4cb8e333b79951a602698b63d15a9e733f4f29e1ed5e7f40511dcc41101a51a</sum>
        </package>
        <package name="conmon" version="2.1.10" release="1.module_el8.10.0+4068+0e21408f" epoch="3" arch="s390x" src="conmon-2.1.10-1.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>conmon-2.1.10-1.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">c845407c7f2bb04735705b66ad0ca47b44437e8d6988148eeee4986701a2ab8d</sum>
        </package>
        <package name="podman" version="4.9.4" release="25.module_el8.10.0+4089+ce72bbbe" epoch="4" arch="s390x" src="podman-4.9.4-25.module_el8.10.0+4089+ce72bbbe.src.rpm">
          <filename>podman-4.9.4-25.module_el8.10.0+4089+ce72bbbe.s390x.rpm</filename>
          <sum type="sha256">d30069d5b82478f10c9c51ab008d150a68915751ef0c5e5e8a27c5fbc057fef5</sum>
        </package>
        <package name="netavark" version="1.10.3" release="1.module_el8.10.0+4082+f7f0c95e" epoch="2" arch="s390x" src="netavark-1.10.3-1.module_el8.10.0+4082+f7f0c95e.src.rpm">
          <filename>netavark-1.10.3-1.module_el8.10.0+4082+f7f0c95e.s390x.rpm</filename>
          <sum type="sha256">d9544359d8c73170c2d8cd880c18de92e0aa9f33f4cd3fb28d7c692a3f65ff41</sum>
        </package>
        <package name="criu-libs" version="3.18" release="5.module_el8.10.0+4082+f7f0c95e" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4082+f7f0c95e.src.rpm">
          <filename>criu-libs-3.18-5.module_el8.10.0+4082+f7f0c95e.s390x.rpm</filename>
          <sum type="sha256">ef19ef2ed0463ac1a663bbbfaa1ebc2c430ca0f751305b9d5d0b4e41046bb967</sum>
        </package>
        <package name="cockpit-podman" version="84.1" release="1.module_el8.10.0+4016+efd18bf8" epoch="0" arch="noarch" src="cockpit-podman-84.1-1.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>cockpit-podman-84.1-1.module_el8.10.0+4016+efd18bf8.noarch.rpm</filename>
          <sum type="sha256">f03872dff2aa7d3da8ebcebbb3adc464fd859f8c0fa9c83ece498edb0d3ce572</sum>
        </package>
        <package name="slirp4netns" version="1.2.3" release="1.module_el8.10.0+4082+f7f0c95e" epoch="0" arch="s390x" src="slirp4netns-1.2.3-1.module_el8.10.0+4082+f7f0c95e.src.rpm">
          <filename>slirp4netns-1.2.3-1.module_el8.10.0+4082+f7f0c95e.s390x.rpm</filename>
          <sum type="sha256">fd08808c8bda8cc9c5ecad38af925ba82a8d2124ba69ca9153b315c7e4879fd2</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="2.module_el8.10.0+4068+0e21408f" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>libslirp-devel-4.4.0-2.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">fde131378e974ec40e5590a549e6e8fa0b55de1673222229f69a1255f79d697c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23663</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2025-12-18 00:00:00"/>
    <updated date="2025-12-22 14:04:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkitgtk: webkitgtk: Use-after-free due to improper memory management (CVE-2025-43529)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43501)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43531)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43535)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43536)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43541)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23663" id="RHSA-2025:23663" type="rhsa" title="RHSA-2025:23663"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43501" id="CVE-2025-43501" type="cve" title="CVE-2025-43501"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43529" id="CVE-2025-43529" type="cve" title="CVE-2025-43529"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43531" id="CVE-2025-43531" type="cve" title="CVE-2025-43531"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43535" id="CVE-2025-43535" type="cve" title="CVE-2025-43535"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43536" id="CVE-2025-43536" type="cve" title="CVE-2025-43536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43541" id="CVE-2025-43541" type="cve" title="CVE-2025-43541"/>
      <reference href="https://bugzilla.redhat.com/2423166" id="2423166" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2423185" id="2423185" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2423187" id="2423187" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2423188" id="2423188" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2423190" id="2423190" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2423191" id="2423191" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-23663.html" id="ALSA-2025:23663" type="self" title="ALSA-2025:23663"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="webkit2gtk3-devel" version="2.50.4" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.50.4-1.el8_10.src.rpm">
          <filename>webkit2gtk3-devel-2.50.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">3712364b04d0eaae8b58814be4b303315ec5fdf0b073e08b19a039a3991bd377</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.50.4" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.50.4-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-2.50.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">4d139723e92269629067ddbedf3925a2f9f99e6d5898b44663e872893dcbf5de</sum>
        </package>
        <package name="webkit2gtk3" version="2.50.4" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.50.4-1.el8_10.src.rpm">
          <filename>webkit2gtk3-2.50.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">bb78d34855c8249a2385de2b194e2c5c7cae747fd85975959e7422ee1bdb9055</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.50.4" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.50.4-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.50.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">d85e94a0f5164cead37ef0bfb9a3d9b8c86ee36f763aef414324c58cbae30f5e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23732</id>
    <title>Important: httpd:2.4 security update</title>
    <issued date="2025-12-22 00:00:00"/>
    <updated date="2025-12-22 14:02:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>httpd:2.4 security update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.  

Security Fix(es):  

  * httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
  * mod_md: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
  * httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)
  * httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23732" id="RHSA-2025:23732" type="rhsa" title="RHSA-2025:23732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55753" id="CVE-2025-55753" type="cve" title="CVE-2025-55753"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58098" id="CVE-2025-58098" type="cve" title="CVE-2025-58098"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65082" id="CVE-2025-65082" type="cve" title="CVE-2025-65082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66200" id="CVE-2025-66200" type="cve" title="CVE-2025-66200"/>
      <reference href="https://bugzilla.redhat.com/2419139" id="2419139" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419140" id="2419140" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419262" id="2419262" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419365" id="2419365" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-23732.html" id="ALSA-2025:23732" type="self" title="ALSA-2025:23732"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="httpd" stream="2.4" version="8100020250904082843" context="9edba152" arch="s390x"/>
        <package name="httpd" version="2.4.37" release="65.module_el8.10.0+4088+57f011c1.7" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4088+57f011c1.7.src.rpm">
          <filename>httpd-2.4.37-65.module_el8.10.0+4088+57f011c1.7.s390x.rpm</filename>
          <sum type="sha256">1e16a73454f742c7b6c3541127a26602c93e3ca406eff9a064949a2e41eb99e8</sum>
        </package>
        <package name="mod_session" version="2.4.37" release="65.module_el8.10.0+4088+57f011c1.7" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4088+57f011c1.7.src.rpm">
          <filename>mod_session-2.4.37-65.module_el8.10.0+4088+57f011c1.7.s390x.rpm</filename>
          <sum type="sha256">2710f5aaf78994bbb556fd1e7d80b06d7effddd993c0bb68d5c5c363ed0c3019</sum>
        </package>
        <package name="httpd-devel" version="2.4.37" release="65.module_el8.10.0+4088+57f011c1.7" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4088+57f011c1.7.src.rpm">
          <filename>httpd-devel-2.4.37-65.module_el8.10.0+4088+57f011c1.7.s390x.rpm</filename>
          <sum type="sha256">3ed139a66773bc19fe3d19574d19d31bee0ce92d8fb854f51df5a82700332776</sum>
        </package>
        <package name="mod_md" version="2.0.8" release="8.module_el8.10.0+4088+57f011c1.2" epoch="1" arch="s390x" src="mod_md-2.0.8-8.module_el8.10.0+4088+57f011c1.2.src.rpm">
          <filename>mod_md-2.0.8-8.module_el8.10.0+4088+57f011c1.2.s390x.rpm</filename>
          <sum type="sha256">51f08f5a2c2c9925c2d8acf5069e109f519302af55ab044dba7de03782591748</sum>
        </package>
        <package name="httpd-tools" version="2.4.37" release="65.module_el8.10.0+4088+57f011c1.7" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4088+57f011c1.7.src.rpm">
          <filename>httpd-tools-2.4.37-65.module_el8.10.0+4088+57f011c1.7.s390x.rpm</filename>
          <sum type="sha256">5cd805f2f1c9a26cdc743afb0f0918a2b41d6304873cb84259ac976330bf1f2e</sum>
        </package>
        <package name="mod_ssl" version="2.4.37" release="65.module_el8.10.0+4088+57f011c1.7" epoch="1" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4088+57f011c1.7.src.rpm">
          <filename>mod_ssl-2.4.37-65.module_el8.10.0+4088+57f011c1.7.s390x.rpm</filename>
          <sum type="sha256">608ed24ac3c8ceec4269a99317e790ce44876fcaa46b03870265857682e66ecd</sum>
        </package>
        <package name="httpd-manual" version="2.4.37" release="65.module_el8.10.0+4088+57f011c1.7" epoch="0" arch="noarch" src="httpd-2.4.37-65.module_el8.10.0+4088+57f011c1.7.src.rpm">
          <filename>httpd-manual-2.4.37-65.module_el8.10.0+4088+57f011c1.7.noarch.rpm</filename>
          <sum type="sha256">66aad599ee6b2b82d20c0af2151df33ae8201461913c2658de082e0e2d85e3fa</sum>
        </package>
        <package name="mod_ldap" version="2.4.37" release="65.module_el8.10.0+4088+57f011c1.7" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4088+57f011c1.7.src.rpm">
          <filename>mod_ldap-2.4.37-65.module_el8.10.0+4088+57f011c1.7.s390x.rpm</filename>
          <sum type="sha256">7937040e464919b165d49ea393e28ec3a1462b5f849708172d5a57f7565fb8c5</sum>
        </package>
        <package name="httpd-filesystem" version="2.4.37" release="65.module_el8.10.0+4088+57f011c1.7" epoch="0" arch="noarch" src="httpd-2.4.37-65.module_el8.10.0+4088+57f011c1.7.src.rpm">
          <filename>httpd-filesystem-2.4.37-65.module_el8.10.0+4088+57f011c1.7.noarch.rpm</filename>
          <sum type="sha256">c2356486b1c0563766b508a9cb299929756c245b99c6ca4b72d37b99513ea809</sum>
        </package>
        <package name="mod_http2" version="1.15.7" release="10.module_el8.10.0+4044+ea5f78b1.4" epoch="0" arch="s390x" src="mod_http2-1.15.7-10.module_el8.10.0+4044+ea5f78b1.4.src.rpm">
          <filename>mod_http2-1.15.7-10.module_el8.10.0+4044+ea5f78b1.4.s390x.rpm</filename>
          <sum type="sha256">c256308658c159f70e495ea8a5dfa7994ef785ec39c4cd04bc1240252e901c16</sum>
        </package>
        <package name="mod_proxy_html" version="2.4.37" release="65.module_el8.10.0+4088+57f011c1.7" epoch="1" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4088+57f011c1.7.src.rpm">
          <filename>mod_proxy_html-2.4.37-65.module_el8.10.0+4088+57f011c1.7.s390x.rpm</filename>
          <sum type="sha256">f66777dc1d939f9fadd2bdfbc39ea543715e40e38aa7297d3114adbd351cfcfb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23745</id>
    <title>Important: git-lfs security update</title>
    <issued date="2025-12-22 00:00:00"/>
    <updated date="2025-12-22 12:34:52"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git-lfs security update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.  

Security Fix(es):  

  * git-lfs: Git LFS may write to arbitrary files via crafted symlinks (CVE-2025-26625)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23745" id="RHSA-2025:23745" type="rhsa" title="RHSA-2025:23745"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26625" id="CVE-2025-26625" type="cve" title="CVE-2025-26625"/>
      <reference href="https://bugzilla.redhat.com/2404720" id="2404720" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-23745.html" id="ALSA-2025:23745" type="self" title="ALSA-2025:23745"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="git-lfs" version="3.4.1" release="6.el8_10" epoch="0" arch="s390x" src="git-lfs-3.4.1-6.el8_10.src.rpm">
          <filename>git-lfs-3.4.1-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">378705bb1440d70cee61d3fb9b1ea8dc8fd150337804d1c1b22b757de047d3ab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23948</id>
    <title>Moderate: grafana security update</title>
    <issued date="2025-12-22 00:00:00"/>
    <updated date="2025-12-23 13:42:03"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.   

Security Fix(es):  

  * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23948" id="RHSA-2025:23948" type="rhsa" title="RHSA-2025:23948"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58183" id="CVE-2025-58183" type="cve" title="CVE-2025-58183"/>
      <reference href="https://bugzilla.redhat.com/2407258" id="2407258" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-23948.html" id="ALSA-2025:23948" type="self" title="ALSA-2025:23948"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="grafana-selinux" version="9.2.10" release="26.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-26.el8_10.src.rpm">
          <filename>grafana-selinux-9.2.10-26.el8_10.s390x.rpm</filename>
          <sum type="sha256">198cb911f2170ee18bd53b52c1fdb30198adca742089c7cbfc7b19a0cf647837</sum>
        </package>
        <package name="grafana" version="9.2.10" release="26.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-26.el8_10.src.rpm">
          <filename>grafana-9.2.10-26.el8_10.s390x.rpm</filename>
          <sum type="sha256">651540b2ea8d71faebb6fb4aed06c03555badf646cf86cadc37f3eae302a4421</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2452</id>
    <title>Important: firefox security update</title>
    <issued date="2025-03-06 00:00:00"/>
    <updated date="2025-03-11 12:07:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: Use-after-free in WebTransportChild (CVE-2025-1931)
  * firefox: AudioIPC StreamData could trigger a use-after-free in the Browser process (CVE-2025-1930)
  * firefox: Unexpected GC during RegExp bailout processing (CVE-2025-1934)
  * firefox: Clickjacking the registerProtocolHandler info-bar Reporter (CVE-2025-1935)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8 (CVE-2025-1938)
  * firefox: JIT corruption of WASM i32 return values on 64-bit CPUs (CVE-2025-1933)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8 (CVE-2025-1937)
  * firefox: Inconsistent comparator in XSLT sorting led to out-of-bounds access (CVE-2025-1932)
  * firefox: Adding %00 and a fake extension to a jar: URL changed the interpretation of the contents (CVE-2025-1936)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2452" id="RHSA-2025:2452" type="rhsa" title="RHSA-2025:2452"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1930" id="CVE-2025-1930" type="cve" title="CVE-2025-1930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1931" id="CVE-2025-1931" type="cve" title="CVE-2025-1931"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1932" id="CVE-2025-1932" type="cve" title="CVE-2025-1932"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1933" id="CVE-2025-1933" type="cve" title="CVE-2025-1933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1934" id="CVE-2025-1934" type="cve" title="CVE-2025-1934"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1935" id="CVE-2025-1935" type="cve" title="CVE-2025-1935"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1936" id="CVE-2025-1936" type="cve" title="CVE-2025-1936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1937" id="CVE-2025-1937" type="cve" title="CVE-2025-1937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1938" id="CVE-2025-1938" type="cve" title="CVE-2025-1938"/>
      <reference href="https://bugzilla.redhat.com/2349786" id="2349786" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349787" id="2349787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349790" id="2349790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349792" id="2349792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349793" id="2349793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349794" id="2349794" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349795" id="2349795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349796" id="2349796" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349797" id="2349797" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-2452.html" id="ALSA-2025:2452" type="self" title="ALSA-2025:2452"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="128.8.0" release="1.el8_10" epoch="0" arch="s390x" src="firefox-128.8.0-1.el8_10.src.rpm">
          <filename>firefox-128.8.0-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c18c54ad65f0af1d139da8c9b10414bd511ba190354531e8ea1a2c9b24342393</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2502</id>
    <title>Important: tigervnc security update</title>
    <issued date="2025-03-10 00:00:00"/>
    <updated date="2025-03-17 22:17:32"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.  

Security Fix(es):  

  * X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594)
  * xorg: xwayland: Use-after-free in SyncInitTrigger() (CVE-2025-26601)
  * xorg: xwayland: Use-after-free in PlayReleasedEvents() (CVE-2025-26600)
  * xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599)
  * xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598)
  * xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597)
  * xorg: xwayland: Heap overflow in XkbWriteKeySyms() (CVE-2025-26596)
  * Xorg: xwayland: Buffer overflow in XkbVModMaskText() (CVE-2025-26595)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2502" id="RHSA-2025:2502" type="rhsa" title="RHSA-2025:2502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26594" id="CVE-2025-26594" type="cve" title="CVE-2025-26594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26595" id="CVE-2025-26595" type="cve" title="CVE-2025-26595"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26596" id="CVE-2025-26596" type="cve" title="CVE-2025-26596"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26597" id="CVE-2025-26597" type="cve" title="CVE-2025-26597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26598" id="CVE-2025-26598" type="cve" title="CVE-2025-26598"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26599" id="CVE-2025-26599" type="cve" title="CVE-2025-26599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26600" id="CVE-2025-26600" type="cve" title="CVE-2025-26600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26601" id="CVE-2025-26601" type="cve" title="CVE-2025-26601"/>
      <reference href="https://bugzilla.redhat.com/2345248" id="2345248" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345251" id="2345251" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345252" id="2345252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345253" id="2345253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345254" id="2345254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345255" id="2345255" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345256" id="2345256" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345257" id="2345257" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-2502.html" id="ALSA-2025:2502" type="self" title="ALSA-2025:2502"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="tigervnc-server-minimal" version="1.13.1" release="15.el8_10" epoch="0" arch="s390x" src="tigervnc-1.13.1-15.el8_10.src.rpm">
          <filename>tigervnc-server-minimal-1.13.1-15.el8_10.s390x.rpm</filename>
          <sum type="sha256">177445f6364cca88b863a6029dbb1d3f76551dc2a5947865a7f5ea90e3389aa4</sum>
        </package>
        <package name="tigervnc-selinux" version="1.13.1" release="15.el8_10" epoch="0" arch="noarch" src="tigervnc-1.13.1-15.el8_10.src.rpm">
          <filename>tigervnc-selinux-1.13.1-15.el8_10.noarch.rpm</filename>
          <sum type="sha256">2d7ef296d4209f739467417245f262f33a12c0df69815423fef0a6dc6d9281ac</sum>
        </package>
        <package name="tigervnc-license" version="1.13.1" release="15.el8_10" epoch="0" arch="noarch" src="tigervnc-1.13.1-15.el8_10.src.rpm">
          <filename>tigervnc-license-1.13.1-15.el8_10.noarch.rpm</filename>
          <sum type="sha256">40fb0ca04d4794e98a1d91898dd28e274b692fb891a92575d063cab22df09917</sum>
        </package>
        <package name="tigervnc-icons" version="1.13.1" release="15.el8_10" epoch="0" arch="noarch" src="tigervnc-1.13.1-15.el8_10.src.rpm">
          <filename>tigervnc-icons-1.13.1-15.el8_10.noarch.rpm</filename>
          <sum type="sha256">5c9f546061600ae769f7e77463fa403f23caeecf38333b4c30f4b21d587a0401</sum>
        </package>
        <package name="tigervnc-server" version="1.13.1" release="15.el8_10" epoch="0" arch="s390x" src="tigervnc-1.13.1-15.el8_10.src.rpm">
          <filename>tigervnc-server-1.13.1-15.el8_10.s390x.rpm</filename>
          <sum type="sha256">9f28957705035d28b963787b030d5cb59765a195cf2a63523636e49a46331432</sum>
        </package>
        <package name="tigervnc" version="1.13.1" release="15.el8_10" epoch="0" arch="s390x" src="tigervnc-1.13.1-15.el8_10.src.rpm">
          <filename>tigervnc-1.13.1-15.el8_10.s390x.rpm</filename>
          <sum type="sha256">b581e9c12b28e2314a0258d14b41d77c92f1f41fea1a9bfad2654038ef4cc438</sum>
        </package>
        <package name="tigervnc-server-module" version="1.13.1" release="15.el8_10" epoch="0" arch="s390x" src="tigervnc-1.13.1-15.el8_10.src.rpm">
          <filename>tigervnc-server-module-1.13.1-15.el8_10.s390x.rpm</filename>
          <sum type="sha256">f7b11a8254b82340d44e98cad7012fddf6307dd46d46c0367d72471271d113d7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2667</id>
    <title>Important: .NET 9.0 security, bug fix, and enhancement update</title>
    <issued date="2025-03-11 00:00:00"/>
    <updated date="2025-03-17 22:23:12"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.104 and .NET Runtime 9.0.3.Security Fix(es):  

  * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (CVE-2025-24070)


Bug Fix(es) and Enhancement(s):  

  * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2667" id="RHSA-2025:2667" type="rhsa" title="RHSA-2025:2667"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24070" id="CVE-2025-24070" type="cve" title="CVE-2025-24070"/>
      <reference href="https://bugzilla.redhat.com/2349733" id="2349733" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-2667.html" id="ALSA-2025:2667" type="self" title="ALSA-2025:2667"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="dotnet-host" version="9.0.3" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el8_10.src.rpm">
          <filename>dotnet-host-9.0.3-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0c708ca66e4004fd8d8e7130b93db9106e66cebd0a4068765878afbc63372891</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-9.0" version="9.0.3" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-9.0-9.0.3-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">2ff9c557c56348990febbd6d35660d3905d2c869397e3f02c01b2cc026ba9b35</sum>
        </package>
        <package name="aspnetcore-targeting-pack-9.0" version="9.0.3" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-9.0-9.0.3-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">41ccbf997808fb70bcea68ba22deb4e6f343590be6837e57c8ff147b9fbb6088</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="9.0.104" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el8_10.src.rpm">
          <filename>netstandard-targeting-pack-2.1-9.0.104-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">4acc843625bbcb8b3f818179c10ca952c6459b7e74d654817ccd7845a53efdd5</sum>
        </package>
        <package name="dotnet-templates-9.0" version="9.0.104" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el8_10.src.rpm">
          <filename>dotnet-templates-9.0-9.0.104-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">638496805d17abcb275a2fce292d26c00a92803951a43ee34dfb005d4a0e811b</sum>
        </package>
        <package name="dotnet-hostfxr-9.0" version="9.0.3" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-9.0-9.0.3-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">6472fa8b7181ec40ff414f4f453c384f5bd58979502d204639c8e6550e286bb3</sum>
        </package>
        <package name="dotnet" version="9.0.104" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el8_10.src.rpm">
          <filename>dotnet-9.0.104-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">7f54d7aa50162cb783b2f717f5b1e8e7b7c0c7ab38e1134409178dd21fa5dab9</sum>
        </package>
        <package name="dotnet-sdk-dbg-9.0" version="9.0.104" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-9.0-9.0.104-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">868ee0d411afe20101aec430945ce6a9dfadfd9172d81b94a926ee9f624ada3d</sum>
        </package>
        <package name="dotnet-apphost-pack-9.0" version="9.0.3" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-9.0-9.0.3-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">8a34abc0dadd672f8129b4528367ce71bd9fecd5f122d7fbcaf174bbf262522e</sum>
        </package>
        <package name="dotnet-targeting-pack-9.0" version="9.0.3" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-9.0-9.0.3-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a8330b8b062bc641acad310e53b0d923b899bac9e387b540ab20ece430e2a457</sum>
        </package>
        <package name="aspnetcore-runtime-9.0" version="9.0.3" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-9.0-9.0.3-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b157c56d8db18514d1e9d9f890a76ef12caa100d2589690b4f8a631bc5aced62</sum>
        </package>
        <package name="dotnet-sdk-9.0" version="9.0.104" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-9.0.104-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b3703c59ddd7634ad7b5103518f8df1d3b3e21a08111e5fa87efd638d67fa109</sum>
        </package>
        <package name="dotnet-runtime-dbg-9.0" version="9.0.3" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-9.0-9.0.3-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">cc558deef223d1a11d7318fa0d893602ca9c5adf9895259cff1b37cd1d2eb05a</sum>
        </package>
        <package name="dotnet-runtime-9.0" version="9.0.3" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el8_10.src.rpm">
          <filename>dotnet-runtime-9.0-9.0.3-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">dd6a1d59c25d04aaf503e4667db46fb3fd5843619688dd578c79bbb9f058cc67</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2670</id>
    <title>Important: .NET 8.0 security, bug fix, and enhancement update</title>
    <issued date="2025-03-11 00:00:00"/>
    <updated date="2025-03-17 22:29:31"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.114 and .NET Runtime 8.0.14.Security Fix(es):  

  * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (CVE-2025-24070)


Bug Fix(es) and Enhancement(s):  

  * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2670" id="RHSA-2025:2670" type="rhsa" title="RHSA-2025:2670"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24070" id="CVE-2025-24070" type="cve" title="CVE-2025-24070"/>
      <reference href="https://bugzilla.redhat.com/2349733" id="2349733" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-2670.html" id="ALSA-2025:2670" type="self" title="ALSA-2025:2670"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.14" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.14-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">08e3e0cc33d04fa742cd7f86d95c5f5cd0c173b4289251a56d8428653f425bde</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.14" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.14-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">3c15bdebf835a3b478a10377a4100efd5b4b84c3c628b6d32ffc116d9aea50e2</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.14" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.14-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">3f980b033e53f42ba353761ccca67998a619b2c8ef24f244e7fdcfb6797d1956</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.14" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el8_10.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.14-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">6ed7b3d9b5b97f49228a00450b3a6def76806a3c21aed39a8a4160e9f4bf96b3</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.114" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.114-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">78845ef2ff7ec040d60f3f527aae2809e3027bbc1aa9d809ea989e3878dcfd35</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.114" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.114-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">83b7fbf2a5edf15fb886a5c3e2b1f171311a5ec0eaa2fa7c00338bb082a3e16c</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.14" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.14-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">9ea184224811338ea7a52e097c30c94ae48679f3a716c319421f08dc924e4b35</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.114" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el8_10.src.rpm">
          <filename>dotnet-templates-8.0-8.0.114-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b1a84530a13ea65a87aabd7779bb83388d96f37865cd69fc61d96c5d00f4fcab</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.14" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.14-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b81111ed1d23fe09193321df901c1f2682d4a4bf6c0904fac75d5d1e8b75971d</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.14" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.14-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">f9bec2d54ee0a1e526fed3caaf036710b647def7e66b7d23b01be7acb877b63b</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.14" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.14-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">fc815bb8c68fd0eead53556bfc18732e7cd71d56b9b0082b4833082e5b995fc5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2686</id>
    <title>Important: libxml2 security update</title>
    <issued date="2025-03-12 00:00:00"/>
    <updated date="2025-03-17 22:31:09"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxml2: Use-After-Free in libxml2 (CVE-2024-56171)
  * libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2 (CVE-2025-24928)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2686" id="RHSA-2025:2686" type="rhsa" title="RHSA-2025:2686"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56171" id="CVE-2024-56171" type="cve" title="CVE-2024-56171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24928" id="CVE-2025-24928" type="cve" title="CVE-2025-24928"/>
      <reference href="https://bugzilla.redhat.com/2346416" id="2346416" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2346421" id="2346421" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-2686.html" id="ALSA-2025:2686" type="self" title="ALSA-2025:2686"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libxml2-devel" version="2.9.7" release="19.el8_10" epoch="0" arch="s390x" src="libxml2-2.9.7-19.el8_10.src.rpm">
          <filename>libxml2-devel-2.9.7-19.el8_10.s390x.rpm</filename>
          <sum type="sha256">77a40dd8995dc923682a1fbaf5087b785cba83d9eabf946515a2fa4a4314bfa3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2863</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2025-03-17 00:00:00"/>
    <updated date="2025-03-17 22:35:22"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkitgtk: out-of-bounds write vulnerability (CVE-2025-24201)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2863" id="RHSA-2025:2863" type="rhsa" title="RHSA-2025:2863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24201" id="CVE-2025-24201" type="cve" title="CVE-2025-24201"/>
      <reference href="https://bugzilla.redhat.com/2351802" id="2351802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-2863.html" id="ALSA-2025:2863" type="self" title="ALSA-2025:2863"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="webkit2gtk3-devel" version="2.46.6" release="2.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.46.6-2.el8_10.src.rpm">
          <filename>webkit2gtk3-devel-2.46.6-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">1982c15d7bab72887f71bd8fdbfd9ef42907b35167ed6ce021860d5224d12c82</sum>
        </package>
        <package name="webkit2gtk3" version="2.46.6" release="2.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.46.6-2.el8_10.src.rpm">
          <filename>webkit2gtk3-2.46.6-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">44c5786d7cde5cab605e104479194aac7f3a58496116ef4344d2aef0e3bb3ee3</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.46.6" release="2.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.46.6-2.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-2.46.6-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">c1da3a874e41ca54db38fe53434a1c621ecd8fc3f91c7305f3d55e3f94d33496</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.46.6" release="2.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.46.6-2.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.46.6-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">e3b4b56db5ec9ea4bc752c5e7804ee673b6bbbfedadd7576b5042fd0cb95f6c9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2868</id>
    <title>Important: libreoffice security update</title>
    <issued date="2025-03-17 00:00:00"/>
    <updated date="2025-03-17 22:45:49"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libreoffice security update</summary>
    <description>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.  

Security Fix(es):  

  * libreoffice: Macro URL arbitrary script execution (CVE-2025-1080)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2868" id="RHSA-2025:2868" type="rhsa" title="RHSA-2025:2868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1080" id="CVE-2025-1080" type="cve" title="CVE-2025-1080"/>
      <reference href="https://bugzilla.redhat.com/2349906" id="2349906" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-2868.html" id="ALSA-2025:2868" type="self" title="ALSA-2025:2868"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libreoffice-writer" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>libreoffice-writer-6.4.7.2-19.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">07c43490fcb1859a62f571869c7beaa8d3ae9569a900535b4d647585b3477f97</sum>
        </package>
        <package name="autocorr-bg" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-bg-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">15ad0380988621591d0aa18cc193a5037d83dd2f144644b1054a09b87ae64c56</sum>
        </package>
        <package name="libreoffice-ure" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>libreoffice-ure-6.4.7.2-19.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">16834a2890c6975bf68899d1fa81dd381610fb512603513413d260b8f9836836</sum>
        </package>
        <package name="autocorr-vi" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-vi-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">1af5af79ec6375bf49e39912b583c371ea7902cefa7fe9116cd2f8c6707939a9</sum>
        </package>
        <package name="autocorr-fr" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-fr-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">300370ec46346786335800a02aadba592196cb18a7defb624bef4908fb0e8681</sum>
        </package>
        <package name="libreoffice-calc" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>libreoffice-calc-6.4.7.2-19.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">34e87a91fca8c9aa294024741e82acadc0d0059cd74aae6e883c3026e0fd1454</sum>
        </package>
        <package name="autocorr-sr" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-sr-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">39b8937e12008123340ea8ddccf0f56012007191ee13f65990838a0afc28c3fa</sum>
        </package>
        <package name="autocorr-ja" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-ja-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">3c8e5f09b93dae9ec40131bdd6ec2165af6a309bc1183536699afc42f45496a7</sum>
        </package>
        <package name="autocorr-en" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-en-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">3f44c14cd6b01cac41e39548325b8f8a20c63d8496b3f4b4b96bf30fe66ab19d</sum>
        </package>
        <package name="libreoffice-opensymbol-fonts" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>libreoffice-opensymbol-fonts-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">4621ba1c189e5a30decc3ac1c4f882402530d2da53dbbb923c1c0d89e131ab8c</sum>
        </package>
        <package name="libreoffice-pdfimport" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>libreoffice-pdfimport-6.4.7.2-19.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">47b70e95dd26f2c8df2562b133e6099b18ba6865a5c6c309356305048525b656</sum>
        </package>
        <package name="autocorr-cs" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-cs-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">4b6fc04939ff8d72f3c09dca48e4730d58cabfb29aa249e016519bad2ed03ef1</sum>
        </package>
        <package name="libreoffice-langpack-en" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>libreoffice-langpack-en-6.4.7.2-19.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">52af4eb6de3b0c1ea6fd0c9ff466569dde27583d697e47ea26e3818dd8b49a21</sum>
        </package>
        <package name="libreoffice-core" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>libreoffice-core-6.4.7.2-19.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">789deb3ddbbc4ef04b38c7e99d78fc6783fe590cfed8ef711392121db9193f36</sum>
        </package>
        <package name="autocorr-fi" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-fi-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">7b3f618f7021ec09218153aa9cb1a09046900f40f2e0184820a4d831203659a2</sum>
        </package>
        <package name="autocorr-pl" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-pl-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">874649cd7ea36965adf26b7fc0d98356e3441bd63bbdd6d0c9ff61bfd94262cc</sum>
        </package>
        <package name="autocorr-fa" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-fa-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">8796c9b745662263922cb79289e4fb94383a4d6bb6ea7c0d6e192f92fbd9c64f</sum>
        </package>
        <package name="autocorr-da" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-da-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">891a5235cd8677445dc64238f8fe4c1b05f69934c88a3e039414aa1d53555af4</sum>
        </package>
        <package name="autocorr-lt" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-lt-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">8dc75380fb50bcd827d73e79960ecfc3630965ae64c442c6e3a40012c3762142</sum>
        </package>
        <package name="libreoffice-ogltrans" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>libreoffice-ogltrans-6.4.7.2-19.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">8f0399c8d454d86a5ff130a7bb14bd0cbc7a76826ba09c43cbdf4bf1d8990354</sum>
        </package>
        <package name="autocorr-ga" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-ga-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">90f2f18ab9ac56880972f5936bab53ed4c4303ee06fe295fefb26572c9c4356d</sum>
        </package>
        <package name="libreoffice-impress" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>libreoffice-impress-6.4.7.2-19.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">96091d62d49b3dcd1166935846130e23dbe1c0045cebf6b6d5897a0ceb2ec886</sum>
        </package>
        <package name="libreoffice-ure-common" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>libreoffice-ure-common-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">971c5080b586c41657a012782487922959ddad06f791860b541dc9f517f95031</sum>
        </package>
        <package name="autocorr-ro" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-ro-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">a10c7fad90fa123b4185adcdfb8b9ea63466972dd8c7e0e73877f08948cc81c2</sum>
        </package>
        <package name="autocorr-es" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-es-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">a4a01032b0981f343a07e18daa3c5fe2d62f73d9b9a7eb37d33305d86dc3c1b3</sum>
        </package>
        <package name="libreoffice-help-en" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>libreoffice-help-en-6.4.7.2-19.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">a624f7c844d6535d5ef9f0521958127f5f2d945ad55481aacc980068509f3708</sum>
        </package>
        <package name="libreoffice-graphicfilter" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>libreoffice-graphicfilter-6.4.7.2-19.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">a999436174a7992f8591cff3ac7e9ce71f1429ca25a8015704623a996a561b6f</sum>
        </package>
        <package name="autocorr-sl" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-sl-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">b69103355ecd8f9f0b45db1b969ec39dfe89d59e9ca10e2a334e20241e6263dd</sum>
        </package>
        <package name="autocorr-de" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-de-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">bd8df7845f6413c1166669867bdaf1db75dc4f2c7f0f4ff3f7462a57a579a784</sum>
        </package>
        <package name="autocorr-sv" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-sv-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">bfe4e47e75e574629241df279cfc040797cf0868f9a5550974b7c9f18ba4620b</sum>
        </package>
        <package name="autocorr-hr" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-hr-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">c064ad30f0716c63a121642fa3b63463c37cbede376c12a22ce6dce33b194d69</sum>
        </package>
        <package name="autocorr-hu" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-hu-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">c46cbce8c44b60ec1ff6de7b22936a23bdaa3b4d6cf30183c20614b6dd79b3b9</sum>
        </package>
        <package name="autocorr-pt" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-pt-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">c588439b60bd05730a22ff6fdabd97bf3b3b8d062fcb2f6adc100a0f192df56f</sum>
        </package>
        <package name="libreoffice-pyuno" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>libreoffice-pyuno-6.4.7.2-19.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">c6c4c8c6cafaa94cd1089111f348419695012fed72612a0aed652783e7c8199d</sum>
        </package>
        <package name="autocorr-is" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-is-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">c83cf649ffc6ab6bca53ad9fd8c691b74608be3b1e58be5534d047bbcecbae05</sum>
        </package>
        <package name="autocorr-it" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-it-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">c940532a32f1795bd2b3b522b4e03eaffd4489164261036a1c880054fd23aef5</sum>
        </package>
        <package name="autocorr-sk" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-sk-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">cdc47e74ff3e3ef2101fa4afa41bec3bd1070f8ccf2bb0822691a296b3d8db47</sum>
        </package>
        <package name="autocorr-tr" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-tr-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">d28c13721032769b3819ecdbde41ae26a22c731aa785101bcf1df5f00d2284a0</sum>
        </package>
        <package name="autocorr-ko" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-ko-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">d78bc78f5a8d8c36305dcb3780d767e843ff610c768c07ecae8920ed66410fd3</sum>
        </package>
        <package name="autocorr-nl" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-nl-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">d7a53931aee5e56e5475391f0ae13ef8a1b8c959ec847123f7fded98d5322721</sum>
        </package>
        <package name="autocorr-ru" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-ru-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">dc093f7cbf9d27d09f5c6adfa242ffaf09753a933533ac75910be334ce451049</sum>
        </package>
        <package name="autocorr-zh" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-zh-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">dd0b99f7d8810546d4fbb424881a42bdf960c2e5a9b72fa824c5ab026df9f4f9</sum>
        </package>
        <package name="libreoffice-data" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>libreoffice-data-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">e692564e7b29fc9149da0ba2fd969e227ffcb52b7814cf20a4790dd85cf09854</sum>
        </package>
        <package name="autocorr-lb" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-lb-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">eed797114b572b8ca016243f41ce29e1ce898628880512bff786b04cf43ae1ad</sum>
        </package>
        <package name="autocorr-mn" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-mn-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">efc1b59652dcaefe07240b7d287325a55bf4cd05078dcd933d4102eab95f5701</sum>
        </package>
        <package name="autocorr-af" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-af-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">f31e88b3ebead53f484ba7a57522cfa3de70ec5b3f2668249dbde40d7388fef5</sum>
        </package>
        <package name="autocorr-ca" version="6.4.7.2" release="19.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-19.el8_10.alma.1.src.rpm">
          <filename>autocorr-ca-6.4.7.2-19.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">f77d1040245b3bd9da10975c1b24a97c5e9a5db767d2dfedea963900053130f8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2900</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-03-17 00:00:00"/>
    <updated date="2025-03-17 22:51:46"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: thunderbird: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8 (CVE-2025-1938)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8 (CVE-2025-1937)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2900" id="RHSA-2025:2900" type="rhsa" title="RHSA-2025:2900"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1937" id="CVE-2025-1937" type="cve" title="CVE-2025-1937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1938" id="CVE-2025-1938" type="cve" title="CVE-2025-1938"/>
      <reference href="https://bugzilla.redhat.com/2349793" id="2349793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349795" id="2349795" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-2900.html" id="ALSA-2025:2900" type="self" title="ALSA-2025:2900"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="128.8.0" release="2.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-128.8.0-2.el8_10.alma.1.src.rpm">
          <filename>thunderbird-128.8.0-2.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">01b373424f3908f7ff40dc7cacd228d2fada19da3c3f09e771aac0960e342a32</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3082</id>
    <title>Important: postgresql:12 security update</title>
    <issued date="2025-03-20 00:00:00"/>
    <updated date="2025-04-22 14:38:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:12 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (CVE-2025-1094)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3082" id="RHSA-2025:3082" type="rhsa" title="RHSA-2025:3082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1094" id="CVE-2025-1094" type="cve" title="CVE-2025-1094"/>
      <reference href="https://bugzilla.redhat.com/2345548" id="2345548" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-3082.html" id="ALSA-2025:3082" type="self" title="ALSA-2025:3082"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="12" version="8100020250326135058" context="9edba152" arch="s390x"/>
        <package name="pgaudit" version="1.4.0" release="7.module_el8.9.0+3740+0e74851f.alma.1" epoch="0" arch="s390x" src="pgaudit-1.4.0-7.module_el8.9.0+3740+0e74851f.alma.1.src.rpm">
          <filename>pgaudit-1.4.0-7.module_el8.9.0+3740+0e74851f.alma.1.s390x.rpm</filename>
          <sum type="sha256">05a6d09d675776fb9ab998aa9fb52890d6c4ecc40957331844fd2c42f555ebca</sum>
        </package>
        <package name="postgresql-server-devel" version="12.22" release="3.module_el8.10.0+3971+15b81305" epoch="0" arch="s390x" src="postgresql-12.22-3.module_el8.10.0+3971+15b81305.src.rpm">
          <filename>postgresql-server-devel-12.22-3.module_el8.10.0+3971+15b81305.s390x.rpm</filename>
          <sum type="sha256">0bf9febe8ecb5a86b6f4a7ccfa3453c116753da49d7716a7f0315aaaed26a2a4</sum>
        </package>
        <package name="pg_repack" version="1.4.6" release="3.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="pg_repack-1.4.6-3.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>pg_repack-1.4.6-3.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">14fdf29fe5dd7075aaf956b75aec2c5028f78ea8c06a19b461fa970284284047</sum>
        </package>
        <package name="postgresql-static" version="12.22" release="3.module_el8.10.0+3971+15b81305" epoch="0" arch="s390x" src="postgresql-12.22-3.module_el8.10.0+3971+15b81305.src.rpm">
          <filename>postgresql-static-12.22-3.module_el8.10.0+3971+15b81305.s390x.rpm</filename>
          <sum type="sha256">2272c371faac9dee4a88ab96fe7b8c43b46228990d75e6c48cc1a41ef79f67a7</sum>
        </package>
        <package name="postgresql-upgrade" version="12.22" release="3.module_el8.10.0+3971+15b81305" epoch="0" arch="s390x" src="postgresql-12.22-3.module_el8.10.0+3971+15b81305.src.rpm">
          <filename>postgresql-upgrade-12.22-3.module_el8.10.0+3971+15b81305.s390x.rpm</filename>
          <sum type="sha256">24c3ea6558fa15a311d02a0e65ae41c03e5eeadbca04dd5983e549cf7deb86dc</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="12.22" release="3.module_el8.10.0+3971+15b81305" epoch="0" arch="s390x" src="postgresql-12.22-3.module_el8.10.0+3971+15b81305.src.rpm">
          <filename>postgresql-upgrade-devel-12.22-3.module_el8.10.0+3971+15b81305.s390x.rpm</filename>
          <sum type="sha256">33e00460073f2e5a116fdcb6915ff3902952393bca6b75d39fce01faf8922cbd</sum>
        </package>
        <package name="postgresql-plpython3" version="12.22" release="3.module_el8.10.0+3971+15b81305" epoch="0" arch="s390x" src="postgresql-12.22-3.module_el8.10.0+3971+15b81305.src.rpm">
          <filename>postgresql-plpython3-12.22-3.module_el8.10.0+3971+15b81305.s390x.rpm</filename>
          <sum type="sha256">376b9ec08f3c68a6cb255822acd9a6b15d535ffa0c1f990f7ac62129330d2fcc</sum>
        </package>
        <package name="postgresql-test" version="12.22" release="3.module_el8.10.0+3971+15b81305" epoch="0" arch="s390x" src="postgresql-12.22-3.module_el8.10.0+3971+15b81305.src.rpm">
          <filename>postgresql-test-12.22-3.module_el8.10.0+3971+15b81305.s390x.rpm</filename>
          <sum type="sha256">5eb6e9114cd5f66779af29fa29c8907fdf24d253279fd4b6d2f1187f7e23bbde</sum>
        </package>
        <package name="postgresql-server" version="12.22" release="3.module_el8.10.0+3971+15b81305" epoch="0" arch="s390x" src="postgresql-12.22-3.module_el8.10.0+3971+15b81305.src.rpm">
          <filename>postgresql-server-12.22-3.module_el8.10.0+3971+15b81305.s390x.rpm</filename>
          <sum type="sha256">5efac09110878ea6f197a463681d8e9a0832c67b7a0a9e1f680990715dccb5fd</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="12.22" release="3.module_el8.10.0+3971+15b81305" epoch="0" arch="noarch" src="postgresql-12.22-3.module_el8.10.0+3971+15b81305.src.rpm">
          <filename>postgresql-test-rpm-macros-12.22-3.module_el8.10.0+3971+15b81305.noarch.rpm</filename>
          <sum type="sha256">855c217deca05a73e592be1041a8ed4b55b81051b159ffa52d1ad22a230d7941</sum>
        </package>
        <package name="postgresql-docs" version="12.22" release="3.module_el8.10.0+3971+15b81305" epoch="0" arch="s390x" src="postgresql-12.22-3.module_el8.10.0+3971+15b81305.src.rpm">
          <filename>postgresql-docs-12.22-3.module_el8.10.0+3971+15b81305.s390x.rpm</filename>
          <sum type="sha256">86705f0122eda901dc705b3a6c3767803f5ebcb83b4bd3444a2878683415e8fb</sum>
        </package>
        <package name="postgres-decoderbufs" version="0.10.0" release="2.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="postgres-decoderbufs-0.10.0-2.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>postgres-decoderbufs-0.10.0-2.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">8cd16a1e3af9b7e12bf6df8db5735aeeb762e32913e95ec5dabcb05c6ac34f39</sum>
        </package>
        <package name="postgresql-contrib" version="12.22" release="3.module_el8.10.0+3971+15b81305" epoch="0" arch="s390x" src="postgresql-12.22-3.module_el8.10.0+3971+15b81305.src.rpm">
          <filename>postgresql-contrib-12.22-3.module_el8.10.0+3971+15b81305.s390x.rpm</filename>
          <sum type="sha256">a82d9dea12415e088e4a3544b3260971410ab88901451828725af32436d1e017</sum>
        </package>
        <package name="postgresql-plperl" version="12.22" release="3.module_el8.10.0+3971+15b81305" epoch="0" arch="s390x" src="postgresql-12.22-3.module_el8.10.0+3971+15b81305.src.rpm">
          <filename>postgresql-plperl-12.22-3.module_el8.10.0+3971+15b81305.s390x.rpm</filename>
          <sum type="sha256">aa172b35edb1cef069c11025ab10b037e91be10168d7e990218667041af6f8f4</sum>
        </package>
        <package name="postgresql-pltcl" version="12.22" release="3.module_el8.10.0+3971+15b81305" epoch="0" arch="s390x" src="postgresql-12.22-3.module_el8.10.0+3971+15b81305.src.rpm">
          <filename>postgresql-pltcl-12.22-3.module_el8.10.0+3971+15b81305.s390x.rpm</filename>
          <sum type="sha256">c1fd067979b1b86f337c6f3705cf1cf60b9c73e489b93a742571dba4d7aa84f4</sum>
        </package>
        <package name="postgresql" version="12.22" release="3.module_el8.10.0+3971+15b81305" epoch="0" arch="s390x" src="postgresql-12.22-3.module_el8.10.0+3971+15b81305.src.rpm">
          <filename>postgresql-12.22-3.module_el8.10.0+3971+15b81305.s390x.rpm</filename>
          <sum type="sha256">e2e142391d8bda8cb30823cc07249830d4984a5476fb9e88d769ef782cb8b94e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3210</id>
    <title>Important: container-tools:rhel8 security update</title>
    <issued date="2025-03-26 00:00:00"/>
    <updated date="2026-04-09 18:51:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>container-tools:rhel8 security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.  

Security Fix(es):  

  * golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (CVE-2025-22869)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3210" id="RHSA-2025:3210" type="rhsa" title="RHSA-2025:3210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22869" id="CVE-2025-22869" type="cve" title="CVE-2025-22869"/>
      <reference href="https://bugzilla.redhat.com/2348367" id="2348367" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-3210.html" id="ALSA-2025:3210" type="self" title="ALSA-2025:3210"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="container-tools" stream="rhel8" version="8100020250617080424" context="20125149" arch="s390x"/>
        <package name="python3-podman" version="4.9.0" release="3.module_el8.10.0+4016+efd18bf8" epoch="0" arch="noarch" src="python-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>python3-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.noarch.rpm</filename>
          <sum type="sha256">087549428650af46817206c5d5ddd54bace235c2932b3e2004ac93e3b466cb6d</sum>
        </package>
        <package name="runc" version="1.1.12" release="6.module_el8.10.0+3959+b8dc5e6a" epoch="1" arch="s390x" src="runc-1.1.12-6.module_el8.10.0+3959+b8dc5e6a.src.rpm">
          <filename>runc-1.1.12-6.module_el8.10.0+3959+b8dc5e6a.s390x.rpm</filename>
          <sum type="sha256">0cb9a8dbd3dfd8c842cd2e0ea2e3f51864aba043d336afcab8ee0547d0b3c0d0</sum>
        </package>
        <package name="crun" version="1.14.3" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="crun-1.14.3-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>crun-1.14.3-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">1803f41cb3e0828fe770ce7de14a940b9fad458fd84f420baab724674e2041e7</sum>
        </package>
        <package name="aardvark-dns" version="1.10.1" release="2.module_el8.10.0+4016+efd18bf8" epoch="2" arch="s390x" src="aardvark-dns-1.10.1-2.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>aardvark-dns-1.10.1-2.module_el8.10.0+4016+efd18bf8.s390x.rpm</filename>
          <sum type="sha256">1b902d8206478f42a77204d07243cedda48d7122a3e12c3ed1c307c9d914897c</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="2.module_el8.10.0+4016+efd18bf8" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>libslirp-4.4.0-2.module_el8.10.0+4016+efd18bf8.s390x.rpm</filename>
          <sum type="sha256">208c7b5cd4f261a6579c9e857b809fdcd9f4c6172cc08554ad6a4a0acde24009</sum>
        </package>
        <package name="netavark" version="1.10.3" release="1.module_el8.10.0+3926+f12484f5" epoch="2" arch="s390x" src="netavark-1.10.3-1.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>netavark-1.10.3-1.module_el8.10.0+3926+f12484f5.s390x.rpm</filename>
          <sum type="sha256">229bc7970f251b961853b29e4f6c9b17e6fd309418b96ea955e2eaeba74fc773</sum>
        </package>
        <package name="buildah-tests" version="1.33.12" release="1.module_el8.10.0+3959+b8dc5e6a" epoch="2" arch="s390x" src="buildah-1.33.12-1.module_el8.10.0+3959+b8dc5e6a.src.rpm">
          <filename>buildah-tests-1.33.12-1.module_el8.10.0+3959+b8dc5e6a.s390x.rpm</filename>
          <sum type="sha256">28381977daa2fdd04d3501021dcd934fda21cba83528aa56b3d3ce48986359dc</sum>
        </package>
        <package name="skopeo-tests" version="1.14.5" release="3.module_el8.10.0+3876+e55593a8" epoch="2" arch="s390x" src="skopeo-1.14.5-3.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>skopeo-tests-1.14.5-3.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">29a7b74a18e0a1b63825ee2eb5c3f36a2a3971da39a546401e9c9d07b00cd50e</sum>
        </package>
        <package name="criu-devel" version="3.18" release="5.module_el8.10.0+4016+efd18bf8" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>criu-devel-3.18-5.module_el8.10.0+4016+efd18bf8.s390x.rpm</filename>
          <sum type="sha256">2e1dbd5435a509266a8bcae21cbd09ce6ea0309bd2e8e4ea30876b4efdcc6799</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.10" release="1.module_el8.10.0+3909+6e1c1eb7" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">335953655f25bd1ac71964d14ffc9ab6adaa73033e74e2b3a851b88683283196</sum>
        </package>
        <package name="conmon" version="2.1.10" release="1.module_el8.10.0+3970+8445edf6" epoch="3" arch="s390x" src="conmon-2.1.10-1.module_el8.10.0+3970+8445edf6.src.rpm">
          <filename>conmon-2.1.10-1.module_el8.10.0+3970+8445edf6.s390x.rpm</filename>
          <sum type="sha256">36afcd93148e54bc82b311c3f39d7c1189680ddd0e1865314b0f0346b6ae4650</sum>
        </package>
        <package name="container-selinux" version="2.229.0" release="2.module_el8.10.0+3909+6e1c1eb7" epoch="2" arch="noarch" src="container-selinux-2.229.0-2.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>container-selinux-2.229.0-2.module_el8.10.0+3909+6e1c1eb7.noarch.rpm</filename>
          <sum type="sha256">39df1f8e08cf61f1d3399b9d32cdaa93153cdbd001ff380fa9145a2012d1190c</sum>
        </package>
        <package name="python3-criu" version="3.18" release="5.module_el8.10.0+3970+8445edf6" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3970+8445edf6.src.rpm">
          <filename>python3-criu-3.18-5.module_el8.10.0+3970+8445edf6.s390x.rpm</filename>
          <sum type="sha256">3c0941dbc22948e78e968fd1e7f6860a25876fc03d876f7fb639e97a1d1e1ecb</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="20.module_el8.10.0+3970+8445edf6" epoch="4" arch="s390x" src="podman-4.9.4-20.module_el8.10.0+3970+8445edf6.src.rpm">
          <filename>podman-tests-4.9.4-20.module_el8.10.0+3970+8445edf6.s390x.rpm</filename>
          <sum type="sha256">3d93dc1fee79734168bf1743e6cf30d75822a6acea6bef369064aaa495a8d833</sum>
        </package>
        <package name="skopeo" version="1.14.5" release="3.module_el8.10.0+3909+6e1c1eb7" epoch="2" arch="s390x" src="skopeo-1.14.5-3.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>skopeo-1.14.5-3.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">58dd688a7d9090c672382ae53059ed98d14b6b4784899787384be0e51ed8e2cd</sum>
        </package>
        <package name="udica" version="0.2.6" release="21.module_el8.10.0+3926+f12484f5" epoch="0" arch="noarch" src="udica-0.2.6-21.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>udica-0.2.6-21.module_el8.10.0+3926+f12484f5.noarch.rpm</filename>
          <sum type="sha256">6926e34b1965f9f26dd6b35b2d9809b5e337f117e6b333fb99c624461afd91d8</sum>
        </package>
        <package name="buildah" version="1.33.12" release="1.module_el8.10.0+3959+b8dc5e6a" epoch="2" arch="s390x" src="buildah-1.33.12-1.module_el8.10.0+3959+b8dc5e6a.src.rpm">
          <filename>buildah-1.33.12-1.module_el8.10.0+3959+b8dc5e6a.s390x.rpm</filename>
          <sum type="sha256">7884023e381b4c0f64259018bdcabd8a47925fc73446a1de2d15e984441cb692</sum>
        </package>
        <package name="fuse-overlayfs" version="1.13" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="s390x" src="fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">8118067655696462cee9dfc553f57e4501b089590d837bc88091716914c8d3f5</sum>
        </package>
        <package name="toolbox" version="0.0.99.5" release="2.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>toolbox-0.0.99.5-2.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">8df71d94e465a66228dced33f5189e4789bc2ac13946b5e79a11e8091af4f33e</sum>
        </package>
        <package name="containernetworking-plugins" version="1.4.0" release="5.module_el8.10.0+3926+f12484f5" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-5.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>containernetworking-plugins-1.4.0-5.module_el8.10.0+3926+f12484f5.s390x.rpm</filename>
          <sum type="sha256">96f141033d6130580d82b5d49461f6d8e22652fdd3c2eaa5c87741a6c4bdd7f7</sum>
        </package>
        <package name="containers-common" version="1" release="82.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="s390x" src="containers-common-1-82.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>containers-common-1-82.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">98eb0c5785e1d53743858e76ac35aab0b199a918b88c02e20aa6f64cc6f89618</sum>
        </package>
        <package name="crit" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>crit-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">aeb27c5bcec90a9452f93ad79ef0d4f00ecedf4442f32f9bedb481509db12683</sum>
        </package>
        <package name="podman-gvproxy" version="4.9.4" release="20.module_el8.10.0+3970+8445edf6" epoch="4" arch="s390x" src="podman-4.9.4-20.module_el8.10.0+3970+8445edf6.src.rpm">
          <filename>podman-gvproxy-4.9.4-20.module_el8.10.0+3970+8445edf6.s390x.rpm</filename>
          <sum type="sha256">b16a63fe877f75ef93bbf91fb604e6808c5b533aa2c3ce1231b6c8dab63848db</sum>
        </package>
        <package name="podman" version="4.9.4" release="20.module_el8.10.0+3970+8445edf6" epoch="4" arch="s390x" src="podman-4.9.4-20.module_el8.10.0+3970+8445edf6.src.rpm">
          <filename>podman-4.9.4-20.module_el8.10.0+3970+8445edf6.s390x.rpm</filename>
          <sum type="sha256">b200dd1d8b8c87a316a6032b1c399cc129babe30fcca5a29b584996dff3a1749</sum>
        </package>
        <package name="criu" version="3.18" release="5.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>criu-3.18-5.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">bdaddee931f3746ac7472d9ccee504acd0be805433b3d160b1e7caf8bf361cb8</sum>
        </package>
        <package name="podman-plugins" version="4.9.4" release="20.module_el8.10.0+3970+8445edf6" epoch="4" arch="s390x" src="podman-4.9.4-20.module_el8.10.0+3970+8445edf6.src.rpm">
          <filename>podman-plugins-4.9.4-20.module_el8.10.0+3970+8445edf6.s390x.rpm</filename>
          <sum type="sha256">be9ffb56f84b9a069b21ec890076fbdbefda0e3ccb44c176cda8f8f99fc4af61</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="20.module_el8.10.0+3970+8445edf6" epoch="4" arch="noarch" src="podman-4.9.4-20.module_el8.10.0+3970+8445edf6.src.rpm">
          <filename>podman-docker-4.9.4-20.module_el8.10.0+3970+8445edf6.noarch.rpm</filename>
          <sum type="sha256">c1381be473d8d9e90ca0e0447897aa4cec8f28bcfe74d718ab43911a5743d3d0</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="20.module_el8.10.0+4016+efd18bf8" epoch="4" arch="s390x" src="podman-4.9.4-20.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>podman-remote-4.9.4-20.module_el8.10.0+4016+efd18bf8.s390x.rpm</filename>
          <sum type="sha256">d737d704363a1765153887eab41380596535efd17e68e3b3f5aee6dc418b94f6</sum>
        </package>
        <package name="slirp4netns" version="1.2.3" release="1.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="slirp4netns-1.2.3-1.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>slirp4netns-1.2.3-1.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">d750de35a600a89a6edbd8c2178e292766005ce3339a84c33adecfdef70e7a57</sum>
        </package>
        <package name="criu-libs" version="3.18" release="5.module_el8.10.0+3909+6e1c1eb7" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>criu-libs-3.18-5.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">e0d274cf0f5db049af121f476769c0d601e70c7566ea3aec4e608aca5317b4eb</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.5" release="2.module_el8.10.0+3909+6e1c1eb7" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>toolbox-tests-0.0.99.5-2.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">e5fff3c3d6b6f6023e100d0922c2e8096f567b7f5cfbb57efe322eadd2f43465</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="2.module_el8.10.0+3901+4b80ecd7" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>libslirp-devel-4.4.0-2.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">ea8f3e70f2a1a7886cb1abcdb80e7b2ea3cf36a174dc5158142c286d69fae136</sum>
        </package>
        <package name="cockpit-podman" version="84.1" release="1.module_el8.10.0+4016+efd18bf8" epoch="0" arch="noarch" src="cockpit-podman-84.1-1.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>cockpit-podman-84.1-1.module_el8.10.0+4016+efd18bf8.noarch.rpm</filename>
          <sum type="sha256">f03872dff2aa7d3da8ebcebbb3adc464fd859f8c0fa9c83ece498edb0d3ce572</sum>
        </package>
        <package name="podman-catatonit" version="4.9.4" release="20.module_el8.10.0+4016+efd18bf8" epoch="4" arch="s390x" src="podman-4.9.4-20.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>podman-catatonit-4.9.4-20.module_el8.10.0+4016+efd18bf8.s390x.rpm</filename>
          <sum type="sha256">f139519ebcdd80bd8cf9be538417d09de8a9c3612ce973dfac6ce3038268d939</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3388</id>
    <title>Important: python-jinja2 security update</title>
    <issued date="2025-03-31 00:00:00"/>
    <updated date="2026-04-09 18:19:12"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python-jinja2 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * jinja2: Jinja sandbox breakout through attr filter selecting format method (CVE-2025-27516)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3388" id="RHSA-2025:3388" type="rhsa" title="RHSA-2025:3388"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27516" id="CVE-2025-27516" type="cve" title="CVE-2025-27516"/>
      <reference href="https://bugzilla.redhat.com/2350190" id="2350190" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-3388.html" id="ALSA-2025:3388" type="self" title="ALSA-2025:3388"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3-jinja2" version="2.10.1" release="7.el8_10" epoch="0" arch="noarch" src="python-jinja2-2.10.1-7.el8_10.src.rpm">
          <filename>python3-jinja2-2.10.1-7.el8_10.noarch.rpm</filename>
          <sum type="sha256">5bc6da10f3989a7264df25095951df843b2ccbe04af46c7880cd9fc9c955988f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3582</id>
    <title>Important: firefox security update</title>
    <issued date="2025-04-03 00:00:00"/>
    <updated date="2025-04-04 06:37:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: URL Bar Spoofing via non-BMP Unicode characters (CVE-2025-3029)
  * firefox: thunderbird: Use-after-free triggered by XSLTProcessor (CVE-2025-3028)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9 (CVE-2025-3030)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3582" id="RHSA-2025:3582" type="rhsa" title="RHSA-2025:3582"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3028" id="CVE-2025-3028" type="cve" title="CVE-2025-3028"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3029" id="CVE-2025-3029" type="cve" title="CVE-2025-3029"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3030" id="CVE-2025-3030" type="cve" title="CVE-2025-3030"/>
      <reference href="https://bugzilla.redhat.com/2356556" id="2356556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356562" id="2356562" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356563" id="2356563" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-3582.html" id="ALSA-2025:3582" type="self" title="ALSA-2025:3582"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="128.9.0" release="2.el8_10" epoch="0" arch="s390x" src="firefox-128.9.0-2.el8_10.src.rpm">
          <filename>firefox-128.9.0-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">a054f07bcc556739a71830c77f6a261b192cec0b0240a74f2986bd0a347a95be</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3615</id>
    <title>Important: libxslt security update</title>
    <issued date="2025-04-07 00:00:00"/>
    <updated date="2025-04-07 12:05:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libxslt security update</summary>
    <description>libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.   

Security Fix(es):  

  * libxslt: Use-After-Free in libxslt numbers.c (CVE-2025-24855)
  * libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) (CVE-2024-55549)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3615" id="RHSA-2025:3615" type="rhsa" title="RHSA-2025:3615"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-55549" id="CVE-2024-55549" type="cve" title="CVE-2024-55549"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24855" id="CVE-2025-24855" type="cve" title="CVE-2025-24855"/>
      <reference href="https://bugzilla.redhat.com/2352483" id="2352483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2352484" id="2352484" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-3615.html" id="ALSA-2025:3615" type="self" title="ALSA-2025:3615"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libxslt-devel" version="1.1.32" release="6.1.el8_10" epoch="0" arch="s390x" src="libxslt-1.1.32-6.1.el8_10.src.rpm">
          <filename>libxslt-devel-1.1.32-6.1.el8_10.s390x.rpm</filename>
          <sum type="sha256">82db45eb78d7c5f1563f75c6f3e247ba9ac84670117b9588cba7e86f3fc4a5c1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3683</id>
    <title>Moderate: tomcat security update</title>
    <issued date="2025-04-08 00:00:00"/>
    <updated date="2025-04-09 08:27:17"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>tomcat security update</summary>
    <description>Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.  

Security Fix(es):  

  * tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379)
  * tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3683" id="RHSA-2025:3683" type="rhsa" title="RHSA-2025:3683"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50379" id="CVE-2024-50379" type="cve" title="CVE-2024-50379"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24813" id="CVE-2025-24813" type="cve" title="CVE-2025-24813"/>
      <reference href="https://bugzilla.redhat.com/2332817" id="2332817" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351129" id="2351129" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-3683.html" id="ALSA-2025:3683" type="self" title="ALSA-2025:3683"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="tomcat-webapps" version="9.0.87" release="1.el8_10.3" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.3.src.rpm">
          <filename>tomcat-webapps-9.0.87-1.el8_10.3.noarch.rpm</filename>
          <sum type="sha256">31f150b9066679ce59efe13e84c3a38c9d01cd645801ca958451a2382b79945c</sum>
        </package>
        <package name="tomcat-lib" version="9.0.87" release="1.el8_10.3" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.3.src.rpm">
          <filename>tomcat-lib-9.0.87-1.el8_10.3.noarch.rpm</filename>
          <sum type="sha256">455cd512e5ac489fbf1bf1669c9cf21f94a024fcea570d2c1af86c2880c38c27</sum>
        </package>
        <package name="tomcat-jsp-2.3-api" version="9.0.87" release="1.el8_10.3" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.3.src.rpm">
          <filename>tomcat-jsp-2.3-api-9.0.87-1.el8_10.3.noarch.rpm</filename>
          <sum type="sha256">483bc58df85f76f91512e5e474d3c5842f340dd2484d34dc06070a9907e0b66d</sum>
        </package>
        <package name="tomcat-docs-webapp" version="9.0.87" release="1.el8_10.3" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.3.src.rpm">
          <filename>tomcat-docs-webapp-9.0.87-1.el8_10.3.noarch.rpm</filename>
          <sum type="sha256">a99398c7ca116e8296047d9bf16b5c2eee449a13afafb3038b0445e645fa2a45</sum>
        </package>
        <package name="tomcat-admin-webapps" version="9.0.87" release="1.el8_10.3" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.3.src.rpm">
          <filename>tomcat-admin-webapps-9.0.87-1.el8_10.3.noarch.rpm</filename>
          <sum type="sha256">c17bca0a4546e69104618fbc1da567aa69720579bd26046cd250019a2b4e59c1</sum>
        </package>
        <package name="tomcat" version="9.0.87" release="1.el8_10.3" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.3.src.rpm">
          <filename>tomcat-9.0.87-1.el8_10.3.noarch.rpm</filename>
          <sum type="sha256">c60212ee9208a51b2e9d2fb32d04caf01fd550c399ee3f5ed95de88ae246b56a</sum>
        </package>
        <package name="tomcat-el-3.0-api" version="9.0.87" release="1.el8_10.3" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.3.src.rpm">
          <filename>tomcat-el-3.0-api-9.0.87-1.el8_10.3.noarch.rpm</filename>
          <sum type="sha256">cf489f9f029d10da898e2c3fe995d3c754127273514c38dcc8767e408438a54a</sum>
        </package>
        <package name="tomcat-servlet-4.0-api" version="9.0.87" release="1.el8_10.3" epoch="1" arch="noarch" src="tomcat-9.0.87-1.el8_10.3.src.rpm">
          <filename>tomcat-servlet-4.0-api-9.0.87-1.el8_10.3.noarch.rpm</filename>
          <sum type="sha256">e4a172f8b3a8fa88c7cae8148465fbe97ba51e04f542e2bcbfe165d0072f4236</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3772</id>
    <title>Moderate: go-toolset:rhel8 security update</title>
    <issued date="2025-04-10 00:00:00"/>
    <updated date="2025-04-10 14:51:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>go-toolset:rhel8 security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.   

Security Fix(es):  

  * golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints (CVE-2024-45341)
  * golang: net/[http:](http:) net/[http:](http:) sensitive headers incorrectly sent after cross-domain redirect (CVE-2024-45336)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3772" id="RHSA-2025:3772" type="rhsa" title="RHSA-2025:3772"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45336" id="CVE-2024-45336" type="cve" title="CVE-2024-45336"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45341" id="CVE-2024-45341" type="cve" title="CVE-2024-45341"/>
      <reference href="https://bugzilla.redhat.com/2341750" id="2341750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2341751" id="2341751" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-3772.html" id="ALSA-2025:3772" type="self" title="ALSA-2025:3772"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="go-toolset" stream="rhel8" version="8100020250410132311" context="9edba152" arch="s390x"/>
        <package name="golang-tests" version="1.23.6" release="1.module_el8.10.0+3977+66935a26" epoch="0" arch="noarch" src="golang-1.23.6-1.module_el8.10.0+3977+66935a26.src.rpm">
          <filename>golang-tests-1.23.6-1.module_el8.10.0+3977+66935a26.noarch.rpm</filename>
          <sum type="sha256">21a9f36cccec8941104f1fcee53b1f57e19f5eabe8af34c869a0b894a470c367</sum>
        </package>
        <package name="golang" version="1.23.6" release="1.module_el8.10.0+3977+66935a26" epoch="0" arch="s390x" src="golang-1.23.6-1.module_el8.10.0+3977+66935a26.src.rpm">
          <filename>golang-1.23.6-1.module_el8.10.0+3977+66935a26.s390x.rpm</filename>
          <sum type="sha256">2dd6c2741468fd98dc0a8a84b74db99f8983ed9cc52e8213350fd659402f8b06</sum>
        </package>
        <package name="golang-docs" version="1.23.6" release="1.module_el8.10.0+3977+66935a26" epoch="0" arch="noarch" src="golang-1.23.6-1.module_el8.10.0+3977+66935a26.src.rpm">
          <filename>golang-docs-1.23.6-1.module_el8.10.0+3977+66935a26.noarch.rpm</filename>
          <sum type="sha256">467ed2097eeea5cb3b299c790aae205b859c6eb071df6e65523b650f9fd08327</sum>
        </package>
        <package name="golang-misc" version="1.23.6" release="1.module_el8.10.0+3977+66935a26" epoch="0" arch="noarch" src="golang-1.23.6-1.module_el8.10.0+3977+66935a26.src.rpm">
          <filename>golang-misc-1.23.6-1.module_el8.10.0+3977+66935a26.noarch.rpm</filename>
          <sum type="sha256">58f33e180899842fa00f4b1508a33ef4f95137f7b4282a142aac2f88e6b1a0f7</sum>
        </package>
        <package name="golang-bin" version="1.23.6" release="1.module_el8.10.0+3977+66935a26" epoch="0" arch="s390x" src="golang-1.23.6-1.module_el8.10.0+3977+66935a26.src.rpm">
          <filename>golang-bin-1.23.6-1.module_el8.10.0+3977+66935a26.s390x.rpm</filename>
          <sum type="sha256">6aa4d27ec3e4956d8937b1fa3556834a103f6993677f8d2aa095a221ee8b6aaf</sum>
        </package>
        <package name="golang-src" version="1.23.6" release="1.module_el8.10.0+3977+66935a26" epoch="0" arch="noarch" src="golang-1.23.6-1.module_el8.10.0+3977+66935a26.src.rpm">
          <filename>golang-src-1.23.6-1.module_el8.10.0+3977+66935a26.noarch.rpm</filename>
          <sum type="sha256">cdef9707baf2724c1b8791925118d22df7bc2ec4a16c99fbe232e2c296de590f</sum>
        </package>
        <package name="go-toolset" version="1.23.6" release="1.module_el8.10.0+3977+66935a26" epoch="0" arch="s390x" src="go-toolset-1.23.6-1.module_el8.10.0+3977+66935a26.src.rpm">
          <filename>go-toolset-1.23.6-1.module_el8.10.0+3977+66935a26.s390x.rpm</filename>
          <sum type="sha256">cf09d8a6de447d2128ac77217fd6e83a488afb3f6722eab451392f59040987a9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3828</id>
    <title>Moderate: glibc security update</title>
    <issued date="2025-04-14 00:00:00"/>
    <updated date="2025-04-14 14:25:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: buffer overflow in the GNU C Library's assert() (CVE-2025-0395)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3828" id="RHSA-2025:3828" type="rhsa" title="RHSA-2025:3828"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0395" id="CVE-2025-0395" type="cve" title="CVE-2025-0395"/>
      <reference href="https://bugzilla.redhat.com/2339460" id="2339460" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-3828.html" id="ALSA-2025:3828" type="self" title="ALSA-2025:3828"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="compat-libpthread-nonshared" version="2.28" release="251.el8_10.16" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.16.src.rpm">
          <filename>compat-libpthread-nonshared-2.28-251.el8_10.16.s390x.rpm</filename>
          <sum type="sha256">7d72f68289acc3dcce87b7dc60ee0c7ca67d20f2eae1f3bdbad8297b15812816</sum>
        </package>
        <package name="glibc-utils" version="2.28" release="251.el8_10.16" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.16.src.rpm">
          <filename>glibc-utils-2.28-251.el8_10.16.s390x.rpm</filename>
          <sum type="sha256">8d79a1afd2c87c9d41ce2f032ef04544dff319fdbfe3db2cc97fa874f41f2fce</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3845</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2025-04-16 00:00:00"/>
    <updated date="2025-04-22 08:24:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better TLS connection support (CVE-2025-21587)
  * JDK: Improve compiler transformations (CVE-2025-30691)
  * JDK: Enhance Buffered Image handling (CVE-2025-30698)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3845" id="RHSA-2025:3845" type="rhsa" title="RHSA-2025:3845"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21587" id="CVE-2025-21587" type="cve" title="CVE-2025-21587"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30691" id="CVE-2025-30691" type="cve" title="CVE-2025-30691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30698" id="CVE-2025-30698" type="cve" title="CVE-2025-30698"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-3845.html" id="ALSA-2025:3845" type="self" title="ALSA-2025:3845"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.452.b09" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.452.b09-2.el8.s390x.rpm</filename>
          <sum type="sha256">0716e0aba7ab46d88a44782788a6760acd3a4e9a355432ed46d1dd825a89ca30</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.452.b09" release="2.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.452.b09-2.el8.noarch.rpm</filename>
          <sum type="sha256">28052b6b60e2f0c9dea34f332ca27889e293bdc756b6a76ce0bbe4742eb38895</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.452.b09" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.452.b09-2.el8.s390x.rpm</filename>
          <sum type="sha256">8dea4debf31d434b963e78d76ac344ecea13dadb3806ad9245760df80b6a724b</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.452.b09" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.452.b09-2.el8.s390x.rpm</filename>
          <sum type="sha256">b6c0bd865b622430cd66f8a541e10293d75795ecadea967d81e1c63324e2c35b</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility" version="1.8.0.452.b09" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-1.8.0.452.b09-2.el8.s390x.rpm</filename>
          <sum type="sha256">c2231118cb37f905fc66a1e037b4f14193a19416704be0222dfdacea6172e057</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.452.b09" release="2.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.452.b09-2.el8.noarch.rpm</filename>
          <sum type="sha256">ea20fc6ce5a7ca3101e55ada637614650a468c22890f07b74496781a7665df45</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.452.b09" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.452.b09-2.el8.s390x.rpm</filename>
          <sum type="sha256">ef8c933cbe06d44d2c71443e8746dc5f34586cb628d122fcecb5c141f0adf2fc</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.452.b09" release="2.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.452.b09-2.el8.s390x.rpm</filename>
          <sum type="sha256">eff8cdd97cdff9f6588918083ffc66d02a66d55d32b725b856fabbac55e45e5e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3852</id>
    <title>Moderate: java-17-openjdk security update</title>
    <issued date="2025-04-16 00:00:00"/>
    <updated date="2025-05-08 18:59:48"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better TLS connection support (CVE-2025-21587)
  * JDK: Improve compiler transformations (CVE-2025-30691)
  * JDK: Enhance Buffered Image handling (CVE-2025-30698)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3852" id="RHSA-2025:3852" type="rhsa" title="RHSA-2025:3852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21587" id="CVE-2025-21587" type="cve" title="CVE-2025-21587"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30691" id="CVE-2025-30691" type="cve" title="CVE-2025-30691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30698" id="CVE-2025-30698" type="cve" title="CVE-2025-30698"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-3852.html" id="ALSA-2025:3852" type="self" title="ALSA-2025:3852"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.15.0.6" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.15.0.6-2.el8.s390x.rpm</filename>
          <sum type="sha256">2bae6aeca357e439a6579276fdd955d5b56af89d7791eb404a67f68a84c166fa</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.15.0.6" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.15.0.6-2.el8.s390x.rpm</filename>
          <sum type="sha256">4144059ed44306e2a3b3857c7e9f9def6337930694d768f3ada6536265b51ab0</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.15.0.6" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.15.0.6-2.el8.s390x.rpm</filename>
          <sum type="sha256">49e89e6207f8c07fab501132b598be250e62e278203575db81db56a07db10c14</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.15.0.6" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-17.0.15.0.6-2.el8.s390x.rpm</filename>
          <sum type="sha256">7688f7e648c7e90e1ada25ad31ed4b69a5694faaf90e84625015707c668a42f8</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.15.0.6" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-17.0.15.0.6-2.el8.s390x.rpm</filename>
          <sum type="sha256">88384d20de7362f767c79fb65ad4ce8f66104a422b8e2b7a72d3e15b2f6c3013</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.15.0.6" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-17.0.15.0.6-2.el8.s390x.rpm</filename>
          <sum type="sha256">9a1cb183de9f51842653c6e2477cb70b350e07cdd3579bac6536cb526f4bce76</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.15.0.6" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-src-17.0.15.0.6-2.el8.s390x.rpm</filename>
          <sum type="sha256">d660808a90b90c8fcc33dc8fa78d876ea53d04ea480af83fb010228a5e5946e2</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.15.0.6" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-17.0.15.0.6-2.el8.s390x.rpm</filename>
          <sum type="sha256">eec482faa2cda2dd5273c6486152a0b61c8cdd1b590d891560166e66c548aed9</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.15.0.6" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.15.0.6-2.el8.s390x.rpm</filename>
          <sum type="sha256">fb6d5894db86e7df029d52b7d87c414f041acd74058a5aa70aa53e62fdaae716</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3855</id>
    <title>Moderate: java-21-openjdk security update</title>
    <issued date="2025-04-16 00:00:00"/>
    <updated date="2025-05-08 18:52:31"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better TLS connection support (CVE-2025-21587)
  * JDK: Improve compiler transformations (CVE-2025-30691)
  * JDK: Enhance Buffered Image handling (CVE-2025-30698)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3855" id="RHSA-2025:3855" type="rhsa" title="RHSA-2025:3855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21587" id="CVE-2025-21587" type="cve" title="CVE-2025-21587"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30691" id="CVE-2025-30691" type="cve" title="CVE-2025-30691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30698" id="CVE-2025-30698" type="cve" title="CVE-2025-30698"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-3855.html" id="ALSA-2025:3855" type="self" title="ALSA-2025:3855"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-21-openjdk-src" version="21.0.7.0.6" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-src-21.0.7.0.6-1.el8.s390x.rpm</filename>
          <sum type="sha256">12bc9c86a4e1a637c8cc0c4db25e9b3a13e82f0d7105537356cc02c83bf2d3de</sum>
        </package>
        <package name="java-21-openjdk-devel" version="21.0.7.0.6" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-21.0.7.0.6-1.el8.s390x.rpm</filename>
          <sum type="sha256">50ce851900c65aa53a5a8f16109c9db0609a9c66761067ffc792c032828769a0</sum>
        </package>
        <package name="java-21-openjdk-headless" version="21.0.7.0.6" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-21.0.7.0.6-1.el8.s390x.rpm</filename>
          <sum type="sha256">53058b02f8e1c9c1735f5d60f70e179e8b26170fb17f3fc0883a330252e7579b</sum>
        </package>
        <package name="java-21-openjdk" version="21.0.7.0.6" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-21.0.7.0.6-1.el8.s390x.rpm</filename>
          <sum type="sha256">883219ee0e0eafb92fe9339f8d624c338f72d3e36a14a544f714afcb923b1e4b</sum>
        </package>
        <package name="java-21-openjdk-javadoc" version="21.0.7.0.6" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-javadoc-21.0.7.0.6-1.el8.s390x.rpm</filename>
          <sum type="sha256">9ecbc5178f673f2e06dfd8b72b8e974d0e24424c93cd1bbe27a1b12cf1397f44</sum>
        </package>
        <package name="java-21-openjdk-demo" version="21.0.7.0.6" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-21.0.7.0.6-1.el8.s390x.rpm</filename>
          <sum type="sha256">b63d0d68361bf51c575153713f40fb9a2495132fd05a45c2715b81911b8418ae</sum>
        </package>
        <package name="java-21-openjdk-javadoc-zip" version="21.0.7.0.6" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-javadoc-zip-21.0.7.0.6-1.el8.s390x.rpm</filename>
          <sum type="sha256">bcdabaf7b8c805f11d07a97cf00df78a56eb84720daff5b239ac443ceefd229a</sum>
        </package>
        <package name="java-21-openjdk-static-libs" version="21.0.7.0.6" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-21.0.7.0.6-1.el8.s390x.rpm</filename>
          <sum type="sha256">bd94691918648aa814c0988c8baa0b8c8d05ab2716810dba6cf709b8db6d26fc</sum>
        </package>
        <package name="java-21-openjdk-jmods" version="21.0.7.0.6" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-21.0.7.0.6-1.el8.s390x.rpm</filename>
          <sum type="sha256">bee9ac94f43d3d505558e0b7fdcb6b4dce1654a8ba477326776c31c47a833a69</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3974</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2025-04-17 00:00:00"/>
    <updated date="2025-04-21 07:46:49"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44192)
  * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-54467)
  * webkitgtk: Processing web content may lead to a denial-of-service (CVE-2024-54551)
  * webkitgtk: Loading a malicious iframe may lead to a cross-site scripting attack (CVE-2025-24208)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-24209)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-24216)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-30427)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3974" id="RHSA-2025:3974" type="rhsa" title="RHSA-2025:3974"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-44192" id="CVE-2024-44192" type="cve" title="CVE-2024-44192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-54467" id="CVE-2024-54467" type="cve" title="CVE-2024-54467"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-54551" id="CVE-2024-54551" type="cve" title="CVE-2024-54551"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24208" id="CVE-2025-24208" type="cve" title="CVE-2025-24208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24209" id="CVE-2025-24209" type="cve" title="CVE-2025-24209"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24216" id="CVE-2025-24216" type="cve" title="CVE-2025-24216"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30427" id="CVE-2025-30427" type="cve" title="CVE-2025-30427"/>
      <reference href="https://bugzilla.redhat.com/2353871" id="2353871" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2353872" id="2353872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357909" id="2357909" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357910" id="2357910" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357911" id="2357911" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357917" id="2357917" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357919" id="2357919" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-3974.html" id="ALSA-2025:3974" type="self" title="ALSA-2025:3974"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="webkit2gtk3-devel" version="2.48.1" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.48.1-1.el8_10.src.rpm">
          <filename>webkit2gtk3-devel-2.48.1-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">33ec3ddfd2410b8729fa94522edfdc9d3c6364e04026e1483b13840af196505f</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.48.1" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.48.1-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.48.1-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">4fa427e3dd4306bff609ac88eb4c80f86ef8295905fee400d3ee6b35d704fa46</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.48.1" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.48.1-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-2.48.1-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">9f2634c21f30bf96f849ca1f739ea213ee416482ae42b537578f532bbc59373d</sum>
        </package>
        <package name="webkit2gtk3" version="2.48.1" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.48.1-1.el8_10.src.rpm">
          <filename>webkit2gtk3-2.48.1-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c8b54420c87daec5a37d210559972bc3a4486b38fe89492cd88185176a8159b4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3997</id>
    <title>Important: mod_auth_openidc:2.3 security update</title>
    <issued date="2025-04-17 00:00:00"/>
    <updated date="2025-04-21 07:48:55"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mod_auth_openidc:2.3 security update</summary>
    <description>The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server.   

Security Fix(es):  

  * mod_auth_openidc: mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data (CVE-2025-31492)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3997" id="RHSA-2025:3997" type="rhsa" title="RHSA-2025:3997"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31492" id="CVE-2025-31492" type="cve" title="CVE-2025-31492"/>
      <reference href="https://bugzilla.redhat.com/2357738" id="2357738" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-3997.html" id="ALSA-2025:3997" type="self" title="ALSA-2025:3997"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="mod_auth_openidc" stream="2.3" version="8100020240814160950" context="9edba152" arch="s390x"/>
        <package name="cjose-devel" version="0.6.1" release="4.module_el8.10.0+3881+234adf82" epoch="0" arch="s390x" src="cjose-0.6.1-4.module_el8.10.0+3881+234adf82.src.rpm">
          <filename>cjose-devel-0.6.1-4.module_el8.10.0+3881+234adf82.s390x.rpm</filename>
          <sum type="sha256">559c2230cf633477f6087a021e6c86fcc10f9ddd90a75eff6a9a97e1e9e6462e</sum>
        </package>
        <package name="cjose" version="0.6.1" release="4.module_el8.10.0+3881+234adf82" epoch="0" arch="s390x" src="cjose-0.6.1-4.module_el8.10.0+3881+234adf82.src.rpm">
          <filename>cjose-0.6.1-4.module_el8.10.0+3881+234adf82.s390x.rpm</filename>
          <sum type="sha256">f2276b80986159e6c98c20e7b1f84a175e9f21a5ed4a7bd1e4530f03dd3c3001</sum>
        </package>
        <package name="mod_auth_openidc" version="2.4.9.4" release="7.module_el8.10.0+3978+e883c40d" epoch="0" arch="s390x" src="mod_auth_openidc-2.4.9.4-7.module_el8.10.0+3978+e883c40d.src.rpm">
          <filename>mod_auth_openidc-2.4.9.4-7.module_el8.10.0+3978+e883c40d.s390x.rpm</filename>
          <sum type="sha256">f7c91f7fbe4262c811022e7e2a7183ca8b91c297f66c0f1566e08df5dbb4405b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4043</id>
    <title>Moderate: bluez security update</title>
    <issued date="2025-04-22 00:00:00"/>
    <updated date="2025-04-22 12:08:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bluez security update</summary>
    <description>The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.   

Security Fix(es):  

  * BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability (CVE-2023-27349)
  * bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability (CVE-2023-51589)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4043" id="RHSA-2025:4043" type="rhsa" title="RHSA-2025:4043"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27349" id="CVE-2023-27349" type="cve" title="CVE-2023-27349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51589" id="CVE-2023-51589" type="cve" title="CVE-2023-51589"/>
      <reference href="https://bugzilla.redhat.com/2278787" id="2278787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278965" id="2278965" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4043.html" id="ALSA-2025:4043" type="self" title="ALSA-2025:4043"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="bluez-cups" version="5.63" release="5.el8_10.alma.1" epoch="0" arch="s390x" src="bluez-5.63-5.el8_10.alma.1.src.rpm">
          <filename>bluez-cups-5.63-5.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">4d8aab815d3f4b069b43cf53345f25a3fd38f9dd868cb132ea7ade5403ec7479</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4049</id>
    <title>Moderate: libtasn1 security update</title>
    <issued date="2025-04-22 00:00:00"/>
    <updated date="2026-04-09 18:00:41"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtasn1 security update</summary>
    <description>A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.  

Security Fix(es):  

  * libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS (CVE-2024-12133)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4049" id="RHSA-2025:4049" type="rhsa" title="RHSA-2025:4049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12133" id="CVE-2024-12133" type="cve" title="CVE-2024-12133"/>
      <reference href="https://bugzilla.redhat.com/2344611" id="2344611" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4049.html" id="ALSA-2025:4049" type="self" title="ALSA-2025:4049"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libtasn1-devel" version="4.13" release="5.el8_10" epoch="0" arch="s390x" src="libtasn1-4.13-5.el8_10.src.rpm">
          <filename>libtasn1-devel-4.13-5.el8_10.s390x.rpm</filename>
          <sum type="sha256">6043b75236cdb17559da602e549fafbf14d6424efb13dbfacc5bacdf60ecd995</sum>
        </package>
        <package name="libtasn1-tools" version="4.13" release="5.el8_10" epoch="0" arch="s390x" src="libtasn1-4.13-5.el8_10.src.rpm">
          <filename>libtasn1-tools-4.13-5.el8_10.s390x.rpm</filename>
          <sum type="sha256">f1e464e36382aa5fd3c06c5720c712cda56c12bfa4f7f9d66fd59092afbf0542</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4051</id>
    <title>Moderate: gnutls security update</title>
    <issued date="2025-04-22 00:00:00"/>
    <updated date="2025-05-08 18:49:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls security update</summary>
    <description>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.  

Security Fix(es):  

  * gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS (CVE-2024-12243)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4051" id="RHSA-2025:4051" type="rhsa" title="RHSA-2025:4051"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12243" id="CVE-2024-12243" type="cve" title="CVE-2024-12243"/>
      <reference href="https://bugzilla.redhat.com/2344615" id="2344615" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4051.html" id="ALSA-2025:4051" type="self" title="ALSA-2025:4051"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="gnutls-utils" version="3.6.16" release="8.el8_10.3" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_10.3.src.rpm">
          <filename>gnutls-utils-3.6.16-8.el8_10.3.s390x.rpm</filename>
          <sum type="sha256">1134f11cbda8bf791b4ab80788e1ed859f51bc7db46b8aedd18b3cf59a16a748</sum>
        </package>
        <package name="gnutls-c++" version="3.6.16" release="8.el8_10.3" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_10.3.src.rpm">
          <filename>gnutls-c++-3.6.16-8.el8_10.3.s390x.rpm</filename>
          <sum type="sha256">5092c9bcccec92ec592a494cf24c1182a0270be1b6c0975286d33734880c44db</sum>
        </package>
        <package name="gnutls-dane" version="3.6.16" release="8.el8_10.3" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_10.3.src.rpm">
          <filename>gnutls-dane-3.6.16-8.el8_10.3.s390x.rpm</filename>
          <sum type="sha256">7d55536370b0cc26aa51135c2ad9fd93225c38a0a539b02a6e220bdc8055b95d</sum>
        </package>
        <package name="gnutls-devel" version="3.6.16" release="8.el8_10.3" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_10.3.src.rpm">
          <filename>gnutls-devel-3.6.16-8.el8_10.3.s390x.rpm</filename>
          <sum type="sha256">968068aa4eb78631bed50c9f91ce3e3b4cf981c53b85d520aab6c5e74bda9330</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4063</id>
    <title>Moderate: ruby:3.1 security update</title>
    <issued date="2025-04-22 00:00:00"/>
    <updated date="2026-04-09 17:44:41"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby:3.1 security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  

Security Fix(es):  

  * rexml: DoS vulnerability in REXML (CVE-2024-39908)
  * rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace character, &gt;] and ]&gt; (CVE-2024-41123)
  * rexml: DoS vulnerability in REXML (CVE-2024-41946)
  * rexml: DoS vulnerability in REXML (CVE-2024-43398)
  * CGI: ReDoS in CGI::Util#escapeElement (CVE-2025-27220)
  * CGI: Denial of Service in CGI::Cookie.parse (CVE-2025-27219)
  * uri: userinfo leakage in URI#join, URI#merge and URI#+ (CVE-2025-27221)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4063" id="RHSA-2025:4063" type="rhsa" title="RHSA-2025:4063"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39908" id="CVE-2024-39908" type="cve" title="CVE-2024-39908"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41123" id="CVE-2024-41123" type="cve" title="CVE-2024-41123"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41946" id="CVE-2024-41946" type="cve" title="CVE-2024-41946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43398" id="CVE-2024-43398" type="cve" title="CVE-2024-43398"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27219" id="CVE-2025-27219" type="cve" title="CVE-2025-27219"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27220" id="CVE-2025-27220" type="cve" title="CVE-2025-27220"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27221" id="CVE-2025-27221" type="cve" title="CVE-2025-27221"/>
      <reference href="https://bugzilla.redhat.com/2298243" id="2298243" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302268" id="2302268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302272" id="2302272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2307297" id="2307297" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349696" id="2349696" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349699" id="2349699" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2349700" id="2349700" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4063.html" id="ALSA-2025:4063" type="self" title="ALSA-2025:4063"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="ruby" stream="3.1" version="8100020250422085551" context="9edba152" arch="s390x"/>
        <package name="rubygem-irb" version="1.4.1" release="145.module_el8.10.0+3984+cf55e3df" epoch="0" arch="noarch" src="ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.src.rpm">
          <filename>rubygem-irb-1.4.1-145.module_el8.10.0+3984+cf55e3df.noarch.rpm</filename>
          <sum type="sha256">03f28a1c3d18aceee3254b119361a962ef17db433a205e906a8bacd8b37099e2</sum>
        </package>
        <package name="ruby-libs" version="3.1.7" release="145.module_el8.10.0+3984+cf55e3df" epoch="0" arch="s390x" src="ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.src.rpm">
          <filename>ruby-libs-3.1.7-145.module_el8.10.0+3984+cf55e3df.s390x.rpm</filename>
          <sum type="sha256">1734f19116a55b79fcdbcff7a613275c3dff057f54798a9272cbc9edaae8fad8</sum>
        </package>
        <package name="rubygem-rake" version="13.0.6" release="145.module_el8.10.0+3984+cf55e3df" epoch="0" arch="noarch" src="ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.src.rpm">
          <filename>rubygem-rake-13.0.6-145.module_el8.10.0+3984+cf55e3df.noarch.rpm</filename>
          <sum type="sha256">20c7a06ee9ff4a7be3d43f1266aae539e0b8b7dea5a4c93d813ad1ab0847b6ac</sum>
        </package>
        <package name="ruby" version="3.1.7" release="145.module_el8.10.0+3984+cf55e3df" epoch="0" arch="s390x" src="ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.src.rpm">
          <filename>ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.s390x.rpm</filename>
          <sum type="sha256">27b56ae179f0cdfc028b5f26ebaa3a744231a1a95ab6c91990e95aa689f17318</sum>
        </package>
        <package name="rubygem-psych" version="4.0.4" release="145.module_el8.10.0+3984+cf55e3df" epoch="0" arch="s390x" src="ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.src.rpm">
          <filename>rubygem-psych-4.0.4-145.module_el8.10.0+3984+cf55e3df.s390x.rpm</filename>
          <sum type="sha256">2b138136a9837d759d80434cc7fff9d154711cf7944bf3453616d1c2eaeb991a</sum>
        </package>
        <package name="rubygem-typeprof" version="0.21.3" release="145.module_el8.10.0+3984+cf55e3df" epoch="0" arch="noarch" src="ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.src.rpm">
          <filename>rubygem-typeprof-0.21.3-145.module_el8.10.0+3984+cf55e3df.noarch.rpm</filename>
          <sum type="sha256">2b18e3716f88d332aaf5a3aa06710a1449b91d29c96f30e8a8fd62c1b3d0abe2</sum>
        </package>
        <package name="rubygem-io-console" version="0.5.11" release="145.module_el8.10.0+3984+cf55e3df" epoch="0" arch="s390x" src="ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.src.rpm">
          <filename>rubygem-io-console-0.5.11-145.module_el8.10.0+3984+cf55e3df.s390x.rpm</filename>
          <sum type="sha256">3b999dcceffc818279e005eb761cf461b3fa66b355decf5c587081468385078e</sum>
        </package>
        <package name="ruby-doc" version="3.1.7" release="145.module_el8.10.0+3984+cf55e3df" epoch="0" arch="noarch" src="ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.src.rpm">
          <filename>ruby-doc-3.1.7-145.module_el8.10.0+3984+cf55e3df.noarch.rpm</filename>
          <sum type="sha256">4841c0ade983124f2e673e794a4e288e81003cd1fc3fef2f97e090a445d9a5b1</sum>
        </package>
        <package name="ruby-default-gems" version="3.1.7" release="145.module_el8.10.0+3984+cf55e3df" epoch="0" arch="noarch" src="ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.src.rpm">
          <filename>ruby-default-gems-3.1.7-145.module_el8.10.0+3984+cf55e3df.noarch.rpm</filename>
          <sum type="sha256">4abf0f577b835534e760685b68272ac968365d0e615b51370573849d85e1254a</sum>
        </package>
        <package name="rubygem-abrt-doc" version="0.4.0" release="1.module_el8.10.0+3854+02eaa59a" epoch="0" arch="noarch" src="rubygem-abrt-0.4.0-1.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-abrt-doc-0.4.0-1.module_el8.10.0+3854+02eaa59a.noarch.rpm</filename>
          <sum type="sha256">51fb9e1db49f53a9a9507993d89a3924fadb61f32ff3fb4d3765a4093eea2435</sum>
        </package>
        <package name="rubygem-rss" version="0.3.1" release="145.module_el8.10.0+3984+cf55e3df" epoch="0" arch="noarch" src="ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.src.rpm">
          <filename>rubygem-rss-0.3.1-145.module_el8.10.0+3984+cf55e3df.noarch.rpm</filename>
          <sum type="sha256">530cd5c49cb543f3dbcd11a00f21b69a3e1b26a42060653f6af300816b3421c5</sum>
        </package>
        <package name="ruby-devel" version="3.1.7" release="145.module_el8.10.0+3984+cf55e3df" epoch="0" arch="s390x" src="ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.src.rpm">
          <filename>ruby-devel-3.1.7-145.module_el8.10.0+3984+cf55e3df.s390x.rpm</filename>
          <sum type="sha256">65259ccca31da695cdbe34c660922ca571e56c532d793e9948d34c23dac49d0a</sum>
        </package>
        <package name="ruby-bundled-gems" version="3.1.7" release="145.module_el8.10.0+3984+cf55e3df" epoch="0" arch="s390x" src="ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.src.rpm">
          <filename>ruby-bundled-gems-3.1.7-145.module_el8.10.0+3984+cf55e3df.s390x.rpm</filename>
          <sum type="sha256">7673861297994e04e9ac4b7127543048b02292dfed8b74526d490efddc07b187</sum>
        </package>
        <package name="rubygem-power_assert" version="2.0.1" release="145.module_el8.10.0+3984+cf55e3df" epoch="0" arch="noarch" src="ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.src.rpm">
          <filename>rubygem-power_assert-2.0.1-145.module_el8.10.0+3984+cf55e3df.noarch.rpm</filename>
          <sum type="sha256">804b2e5350c6bc38f8b2f73ee50415f51f9bbd35f927c0e6ae1d2030844db75a</sum>
        </package>
        <package name="rubygem-mysql2" version="0.5.3" release="3.module_el8.10.0+3854+02eaa59a" epoch="0" arch="s390x" src="rubygem-mysql2-0.5.3-3.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-mysql2-0.5.3-3.module_el8.10.0+3854+02eaa59a.s390x.rpm</filename>
          <sum type="sha256">8b3ec08fb578c281d6c13715415ba10cabc35448b2683f96ac5c50844b709577</sum>
        </package>
        <package name="rubygem-rdoc" version="6.4.1.1" release="145.module_el8.10.0+3984+cf55e3df" epoch="0" arch="noarch" src="ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.src.rpm">
          <filename>rubygem-rdoc-6.4.1.1-145.module_el8.10.0+3984+cf55e3df.noarch.rpm</filename>
          <sum type="sha256">9a33da8915705e1a2c64ac06052ff5c595b900c1af3c23534944f7c15cbbab25</sum>
        </package>
        <package name="rubygem-mysql2-doc" version="0.5.3" release="3.module_el8.10.0+3854+02eaa59a" epoch="0" arch="noarch" src="rubygem-mysql2-0.5.3-3.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-mysql2-doc-0.5.3-3.module_el8.10.0+3854+02eaa59a.noarch.rpm</filename>
          <sum type="sha256">9a559958e8544dd441357fa02b6cdcd78d7e7a0f3ca974ec06e48fee212ea6fe</sum>
        </package>
        <package name="rubygem-json" version="2.6.1" release="145.module_el8.10.0+3984+cf55e3df" epoch="0" arch="s390x" src="ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.src.rpm">
          <filename>rubygem-json-2.6.1-145.module_el8.10.0+3984+cf55e3df.s390x.rpm</filename>
          <sum type="sha256">9d3e54512f35003d7ce5cf7033f93255d81b896d978937cdf572258f13ba3f05</sum>
        </package>
        <package name="rubygem-bundler" version="2.3.27" release="145.module_el8.10.0+3984+cf55e3df" epoch="0" arch="noarch" src="ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.src.rpm">
          <filename>rubygem-bundler-2.3.27-145.module_el8.10.0+3984+cf55e3df.noarch.rpm</filename>
          <sum type="sha256">9f8814a6071868d91ec424f115ef3526977423430dbfa8d6646dc0aaf10985fe</sum>
        </package>
        <package name="rubygem-bigdecimal" version="3.1.1" release="145.module_el8.10.0+3984+cf55e3df" epoch="0" arch="s390x" src="ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.src.rpm">
          <filename>rubygem-bigdecimal-3.1.1-145.module_el8.10.0+3984+cf55e3df.s390x.rpm</filename>
          <sum type="sha256">a3963a79eea56d72af586fc813d627aa9806a0a3dfcc93a21e39a9d8c912e007</sum>
        </package>
        <package name="rubygem-abrt" version="0.4.0" release="1.module_el8.9.0+3746+91b8233a" epoch="0" arch="noarch" src="rubygem-abrt-0.4.0-1.module_el8.9.0+3746+91b8233a.src.rpm">
          <filename>rubygem-abrt-0.4.0-1.module_el8.9.0+3746+91b8233a.noarch.rpm</filename>
          <sum type="sha256">a4de616c47a50c4a54611ff12499a00e395fcdf6e3c2ce813e27b0f581ed2c12</sum>
        </package>
        <package name="rubygem-rbs" version="2.7.0" release="145.module_el8.10.0+3984+cf55e3df" epoch="0" arch="s390x" src="ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.src.rpm">
          <filename>rubygem-rbs-2.7.0-145.module_el8.10.0+3984+cf55e3df.s390x.rpm</filename>
          <sum type="sha256">aaeedc9a3394214f3cb337f693de85ffb4e42e5d9870bd0ec743ff0f6b9e0dd4</sum>
        </package>
        <package name="rubygems-devel" version="3.3.27" release="145.module_el8.10.0+3984+cf55e3df" epoch="0" arch="noarch" src="ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.src.rpm">
          <filename>rubygems-devel-3.3.27-145.module_el8.10.0+3984+cf55e3df.noarch.rpm</filename>
          <sum type="sha256">b18535d8859309971dfbc7d953d1f3bb56e0ef07757cf8dfe86a120d846f22d3</sum>
        </package>
        <package name="rubygem-rexml" version="3.3.9" release="145.module_el8.10.0+3984+cf55e3df" epoch="0" arch="noarch" src="ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.src.rpm">
          <filename>rubygem-rexml-3.3.9-145.module_el8.10.0+3984+cf55e3df.noarch.rpm</filename>
          <sum type="sha256">bf44968a05b4577a6f3e33e0f567c8aec802eb5a7da692b7504ca00b7ed34b6d</sum>
        </package>
        <package name="rubygems" version="3.3.27" release="145.module_el8.10.0+3984+cf55e3df" epoch="0" arch="noarch" src="ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.src.rpm">
          <filename>rubygems-3.3.27-145.module_el8.10.0+3984+cf55e3df.noarch.rpm</filename>
          <sum type="sha256">c4bd3ec293d4d7603f89db48d313dd1b76d40d050bd52bc8fd0805090c50728d</sum>
        </package>
        <package name="rubygem-pg-doc" version="1.3.2" release="1.module_el8.10.0+3854+02eaa59a" epoch="0" arch="noarch" src="rubygem-pg-1.3.2-1.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-pg-doc-1.3.2-1.module_el8.10.0+3854+02eaa59a.noarch.rpm</filename>
          <sum type="sha256">d13a747c9bad6a38fe3eff562dd991a0e0eda5c5de73c4e97cbea7b986dedf0f</sum>
        </package>
        <package name="rubygem-pg" version="1.3.2" release="1.module_el8.10.0+3854+02eaa59a" epoch="0" arch="s390x" src="rubygem-pg-1.3.2-1.module_el8.10.0+3854+02eaa59a.src.rpm">
          <filename>rubygem-pg-1.3.2-1.module_el8.10.0+3854+02eaa59a.s390x.rpm</filename>
          <sum type="sha256">d1bff2f887c9e5e758e2d68ed0441446f82fd0d73e43546fa2579d106c92acd6</sum>
        </package>
        <package name="rubygem-test-unit" version="3.5.3" release="145.module_el8.10.0+3984+cf55e3df" epoch="0" arch="noarch" src="ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.src.rpm">
          <filename>rubygem-test-unit-3.5.3-145.module_el8.10.0+3984+cf55e3df.noarch.rpm</filename>
          <sum type="sha256">f1a6a955b4eebcde50066b0d659fe83eb92138c9e94b72e832ee89c4986dfa56</sum>
        </package>
        <package name="rubygem-minitest" version="5.15.0" release="145.module_el8.10.0+3984+cf55e3df" epoch="0" arch="noarch" src="ruby-3.1.7-145.module_el8.10.0+3984+cf55e3df.src.rpm">
          <filename>rubygem-minitest-5.15.0-145.module_el8.10.0+3984+cf55e3df.noarch.rpm</filename>
          <sum type="sha256">fc2ccd60e25edaae847027dd6fdaab30ecec761b40fa4ebbb862d2470e4f94e0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4170</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-04-24 00:00:00"/>
    <updated date="2025-04-25 11:18:44"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: thunderbird: URL Bar Spoofing via non-BMP Unicode characters (CVE-2025-3029)
  * firefox: thunderbird: Use-after-free triggered by XSLTProcessor (CVE-2025-3028)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9 (CVE-2025-3030)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4170" id="RHSA-2025:4170" type="rhsa" title="RHSA-2025:4170"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3028" id="CVE-2025-3028" type="cve" title="CVE-2025-3028"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3029" id="CVE-2025-3029" type="cve" title="CVE-2025-3029"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3030" id="CVE-2025-3030" type="cve" title="CVE-2025-3030"/>
      <reference href="https://bugzilla.redhat.com/2356556" id="2356556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356562" id="2356562" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356563" id="2356563" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4170.html" id="ALSA-2025:4170" type="self" title="ALSA-2025:4170"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="128.9.0" release="2.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-128.9.0-2.el8_10.alma.1.src.rpm">
          <filename>thunderbird-128.9.0-2.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">ab8ce752951330e927d87c8ffd44eb2b8a7f8a98f376e2cf44a1d7b4b5a4e3ac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4362</id>
    <title>Moderate: ghostscript security update</title>
    <issued date="2025-04-30 00:00:00"/>
    <updated date="2025-05-05 09:45:13"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.  

Security Fix(es):  

  * ghostscript: heap buffer over write vulnerability in GhostScript's lp8000_print_page() in gdevlp8k.c (CVE-2020-27792)
  * ghostscript: dangling pointer in gdev_prn_open_printer_seekable() (CVE-2023-46751)
  * ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling (CVE-2024-46952)
  * ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (CVE-2024-46951)
  * ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding (CVE-2024-46954)
  * ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript (CVE-2024-46953)
  * ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution (CVE-2024-46956)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4362" id="RHSA-2025:4362" type="rhsa" title="RHSA-2025:4362"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-27792" id="CVE-2020-27792" type="cve" title="CVE-2020-27792"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46751" id="CVE-2023-46751" type="cve" title="CVE-2023-46751"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46951" id="CVE-2024-46951" type="cve" title="CVE-2024-46951"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46952" id="CVE-2024-46952" type="cve" title="CVE-2024-46952"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46953" id="CVE-2024-46953" type="cve" title="CVE-2024-46953"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46954" id="CVE-2024-46954" type="cve" title="CVE-2024-46954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46956" id="CVE-2024-46956" type="cve" title="CVE-2024-46956"/>
      <reference href="https://bugzilla.redhat.com/2247179" id="2247179" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253365" id="2253365" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325041" id="2325041" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325043" id="2325043" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325044" id="2325044" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325045" id="2325045" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325047" id="2325047" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4362.html" id="ALSA-2025:4362" type="self" title="ALSA-2025:4362"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="ghostscript" version="9.27" release="16.el8_10" epoch="0" arch="s390x" src="ghostscript-9.27-16.el8_10.src.rpm">
          <filename>ghostscript-9.27-16.el8_10.s390x.rpm</filename>
          <sum type="sha256">9ac0a9f854edd85c2a952923f0f8e5ec183b57985efd164df091028648aca1ed</sum>
        </package>
        <package name="ghostscript-x11" version="9.27" release="16.el8_10" epoch="0" arch="s390x" src="ghostscript-9.27-16.el8_10.src.rpm">
          <filename>ghostscript-x11-9.27-16.el8_10.s390x.rpm</filename>
          <sum type="sha256">b22910d1cf111f45b005fbc554fed0e6c397add5d10d010b48906af132ad91a7</sum>
        </package>
        <package name="libgs" version="9.27" release="16.el8_10" epoch="0" arch="s390x" src="ghostscript-9.27-16.el8_10.src.rpm">
          <filename>libgs-9.27-16.el8_10.s390x.rpm</filename>
          <sum type="sha256">c2baf73b94921c992390682fbea43bc6cda0c0c71c7c2784f5f4ff4f97eff02e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4458</id>
    <title>Important: firefox security update</title>
    <issued date="2025-05-05 00:00:00"/>
    <updated date="2025-05-08 12:06:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: Privilege escalation in Firefox Updater (CVE-2025-2817)
  * firefox: thunderbird: Unsafe attribute access during XPath parsing (CVE-2025-4087)
  * firefox: thunderbird: Process isolation bypass using "javascript:" URI links in cross-origin frames (CVE-2025-4083)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 (CVE-2025-4091)
  * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10 (CVE-2025-4093)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4458" id="RHSA-2025:4458" type="rhsa" title="RHSA-2025:4458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-2817" id="CVE-2025-2817" type="cve" title="CVE-2025-2817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4083" id="CVE-2025-4083" type="cve" title="CVE-2025-4083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4087" id="CVE-2025-4087" type="cve" title="CVE-2025-4087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4091" id="CVE-2025-4091" type="cve" title="CVE-2025-4091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4093" id="CVE-2025-4093" type="cve" title="CVE-2025-4093"/>
      <reference href="https://bugzilla.redhat.com/2362902" id="2362902" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2362904" id="2362904" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2362907" id="2362907" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2362912" id="2362912" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2362915" id="2362915" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4458.html" id="ALSA-2025:4458" type="self" title="ALSA-2025:4458"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="128.10.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-128.10.0-1.el8_10.alma.1.src.rpm">
          <filename>firefox-128.10.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">400d9a442308034095f6696d4201197c508fe36709881748972ce267897f964e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4459</id>
    <title>Important: nodejs:22 security update</title>
    <issued date="2025-05-05 00:00:00"/>
    <updated date="2025-05-06 14:38:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:22 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * c-ares: c-ares has a use-after-free in read_answers() (CVE-2025-31498)
  * SQLite: integer overflow in SQLite (CVE-2025-3277)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4459" id="RHSA-2025:4459" type="rhsa" title="RHSA-2025:4459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31498" id="CVE-2025-31498" type="cve" title="CVE-2025-31498"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3277" id="CVE-2025-3277" type="cve" title="CVE-2025-3277"/>
      <reference href="https://bugzilla.redhat.com/2358271" id="2358271" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359553" id="2359553" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4459.html" id="ALSA-2025:4459" type="self" title="ALSA-2025:4459"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="nodejs" stream="22" version="8100020250422085128" context="9c84b808" arch="s390x"/>
        <package name="v8-12.4-devel" version="12.4.254.21" release="1.22.15.0.1.module_el8.10.0+3986+a908e756" epoch="3" arch="s390x" src="nodejs-22.15.0-1.module_el8.10.0+3986+a908e756.src.rpm">
          <filename>v8-12.4-devel-12.4.254.21-1.22.15.0.1.module_el8.10.0+3986+a908e756.s390x.rpm</filename>
          <sum type="sha256">179f264166084b2b4bd28e4aa721179dca758cddc0d30265495d6907e7743db2</sum>
        </package>
        <package name="nodejs-docs" version="22.15.0" release="1.module_el8.10.0+3986+a908e756" epoch="1" arch="noarch" src="nodejs-22.15.0-1.module_el8.10.0+3986+a908e756.src.rpm">
          <filename>nodejs-docs-22.15.0-1.module_el8.10.0+3986+a908e756.noarch.rpm</filename>
          <sum type="sha256">1d824d782e86b23e069f169488a9622d1115d65e84b8bff2190af4685f3265c5</sum>
        </package>
        <package name="npm" version="10.9.2" release="1.22.15.0.1.module_el8.10.0+3986+a908e756" epoch="1" arch="s390x" src="nodejs-22.15.0-1.module_el8.10.0+3986+a908e756.src.rpm">
          <filename>npm-10.9.2-1.22.15.0.1.module_el8.10.0+3986+a908e756.s390x.rpm</filename>
          <sum type="sha256">2fca4ec3c7e6231b151fdd0edebc96bf779a674e36b09bdefeb38c2272be291c</sum>
        </package>
        <package name="nodejs-libs" version="22.15.0" release="1.module_el8.10.0+3986+a908e756" epoch="1" arch="s390x" src="nodejs-22.15.0-1.module_el8.10.0+3986+a908e756.src.rpm">
          <filename>nodejs-libs-22.15.0-1.module_el8.10.0+3986+a908e756.s390x.rpm</filename>
          <sum type="sha256">3a8533d2cf06f32896935c79398728076b5d97fd9474e930ec51d1f51e4bed16</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el8.10.0+3961+6a788e57" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.10.0+3961+6a788e57.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el8.10.0+3961+6a788e57.noarch.rpm</filename>
          <sum type="sha256">46dc3ddb344e0ffee7331f57a2f7b7fc674e9abd901af46cba10926f0c9b0e9d</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.10.0+3983+391a1a04" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.10.0+3983+391a1a04.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.10.0+3983+391a1a04.noarch.rpm</filename>
          <sum type="sha256">53d47bcd3ba5d6d0d0045485ca1f36974f9a4fcf7250dd99e461957b5569b3bd</sum>
        </package>
        <package name="nodejs-devel" version="22.15.0" release="1.module_el8.10.0+3986+a908e756" epoch="1" arch="s390x" src="nodejs-22.15.0-1.module_el8.10.0+3986+a908e756.src.rpm">
          <filename>nodejs-devel-22.15.0-1.module_el8.10.0+3986+a908e756.s390x.rpm</filename>
          <sum type="sha256">aae373cf8ddb3aee98eed6100dfa7f815079b9ee7bb30e964d48b63534e8f7bc</sum>
        </package>
        <package name="nodejs-full-i18n" version="22.15.0" release="1.module_el8.10.0+3986+a908e756" epoch="1" arch="s390x" src="nodejs-22.15.0-1.module_el8.10.0+3986+a908e756.src.rpm">
          <filename>nodejs-full-i18n-22.15.0-1.module_el8.10.0+3986+a908e756.s390x.rpm</filename>
          <sum type="sha256">adc37cbeeb1e689804967b75936f468bb012f230c11b767640003d11067444c4</sum>
        </package>
        <package name="nodejs" version="22.15.0" release="1.module_el8.10.0+3986+a908e756" epoch="1" arch="s390x" src="nodejs-22.15.0-1.module_el8.10.0+3986+a908e756.src.rpm">
          <filename>nodejs-22.15.0-1.module_el8.10.0+3986+a908e756.s390x.rpm</filename>
          <sum type="sha256">d280c401e81d36a5d102b22c88e00870e7fc27ec40fa95188de52601a8fb1c20</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el8.10.0+3961+6a788e57" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.10.0+3961+6a788e57.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el8.10.0+3961+6a788e57.noarch.rpm</filename>
          <sum type="sha256">f68cc5d7a383cbee17ad43acc466061915b2b7309b6696369168e2a3c4a7158c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4461</id>
    <title>Moderate: nodejs:20 security update</title>
    <issued date="2025-05-05 00:00:00"/>
    <updated date="2025-05-06 14:35:00"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nodejs:20 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * c-ares: c-ares has a use-after-free in read_answers() (CVE-2025-31498)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4461" id="RHSA-2025:4461" type="rhsa" title="RHSA-2025:4461"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31498" id="CVE-2025-31498" type="cve" title="CVE-2025-31498"/>
      <reference href="https://bugzilla.redhat.com/2358271" id="2358271" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4461.html" id="ALSA-2025:4461" type="self" title="ALSA-2025:4461"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="nodejs" stream="20" version="8100020250505132133" context="9edba152" arch="s390x"/>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.10.0+3982+85c136aa" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.10.0+3982+85c136aa.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.10.0+3982+85c136aa.noarch.rpm</filename>
          <sum type="sha256">2a3ac075981f56758aac0aa08cc55d71f2ca6610e6bc965f306dd6b9a8db442a</sum>
        </package>
        <package name="nodejs-full-i18n" version="20.19.1" release="1.module_el8.10.0+3987+dbda4426" epoch="1" arch="s390x" src="nodejs-20.19.1-1.module_el8.10.0+3987+dbda4426.src.rpm">
          <filename>nodejs-full-i18n-20.19.1-1.module_el8.10.0+3987+dbda4426.s390x.rpm</filename>
          <sum type="sha256">4253066674558fffa03564e97e389d3a46c553b266eb82b3cf3df87de36ea6da</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el8.10.0+3987+dbda4426" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.10.0+3987+dbda4426.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el8.10.0+3987+dbda4426.noarch.rpm</filename>
          <sum type="sha256">6a479cd49298404b833454d884d50275fdbaebeba78691f37251b420f9b76d71</sum>
        </package>
        <package name="nodejs-docs" version="20.19.1" release="1.module_el8.10.0+3987+dbda4426" epoch="1" arch="noarch" src="nodejs-20.19.1-1.module_el8.10.0+3987+dbda4426.src.rpm">
          <filename>nodejs-docs-20.19.1-1.module_el8.10.0+3987+dbda4426.noarch.rpm</filename>
          <sum type="sha256">a25507e63be403d0bf09d9e0147207fbb4001722be4ae110175a57a7a197ae64</sum>
        </package>
        <package name="nodejs-devel" version="20.19.1" release="1.module_el8.10.0+3987+dbda4426" epoch="1" arch="s390x" src="nodejs-20.19.1-1.module_el8.10.0+3987+dbda4426.src.rpm">
          <filename>nodejs-devel-20.19.1-1.module_el8.10.0+3987+dbda4426.s390x.rpm</filename>
          <sum type="sha256">ac8440bbbe9f61dcee99c09fbcb51e9d677d8a69c960e1cfea4b2878c462a87f</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el8.10.0+3958+472a6467" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.10.0+3958+472a6467.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el8.10.0+3958+472a6467.noarch.rpm</filename>
          <sum type="sha256">af48fab85994e826d5a0ca5a05df770fb8e54b94556401a5c6a6844f4c6dce64</sum>
        </package>
        <package name="nodejs" version="20.19.1" release="1.module_el8.10.0+3987+dbda4426" epoch="1" arch="s390x" src="nodejs-20.19.1-1.module_el8.10.0+3987+dbda4426.src.rpm">
          <filename>nodejs-20.19.1-1.module_el8.10.0+3987+dbda4426.s390x.rpm</filename>
          <sum type="sha256">cfe7db51e842d73571d2f5c08a103a50008e10b4fff0f72fa98631ba661a675f</sum>
        </package>
        <package name="npm" version="10.8.2" release="1.20.19.1.1.module_el8.10.0+3987+dbda4426" epoch="1" arch="s390x" src="nodejs-20.19.1-1.module_el8.10.0+3987+dbda4426.src.rpm">
          <filename>npm-10.8.2-1.20.19.1.1.module_el8.10.0+3987+dbda4426.s390x.rpm</filename>
          <sum type="sha256">d24b91636ed09a9cdf9800d4e1d155b62b2ecb14bc92fa7cdd76b323ec231068</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4560</id>
    <title>Important: libsoup security update</title>
    <issued date="2025-05-06 00:00:00"/>
    <updated date="2025-05-07 13:23:52"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsoup security update</summary>
    <description>The libsoup packages provide an HTTP client and server library for GNOME.  

Security Fix(es):  

  * libsoup: Integer overflow in append_param_quoted (CVE-2025-32050)
  * libsoup: Heap buffer overflow in sniff_unknown() (CVE-2025-32052)
  * libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (CVE-2025-32053)
  * libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906)
  * libsoup: Double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" GHashTable value (CVE-2025-32911)
  * libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in Content-Disposition header (CVE-2025-32913)
  * libsoup: Information disclosure may leads libsoup client sends Authorization header to a different host when being redirected by a server (CVE-2025-46421)
  * libsoup: Memory leak on soup_header_parse_quality_list() via soup-headers.c (CVE-2025-46420)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4560" id="RHSA-2025:4560" type="rhsa" title="RHSA-2025:4560"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32050" id="CVE-2025-32050" type="cve" title="CVE-2025-32050"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32052" id="CVE-2025-32052" type="cve" title="CVE-2025-32052"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32053" id="CVE-2025-32053" type="cve" title="CVE-2025-32053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32906" id="CVE-2025-32906" type="cve" title="CVE-2025-32906"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32911" id="CVE-2025-32911" type="cve" title="CVE-2025-32911"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32913" id="CVE-2025-32913" type="cve" title="CVE-2025-32913"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46420" id="CVE-2025-46420" type="cve" title="CVE-2025-46420"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46421" id="CVE-2025-46421" type="cve" title="CVE-2025-46421"/>
      <reference href="https://bugzilla.redhat.com/2357067" id="2357067" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357069" id="2357069" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357070" id="2357070" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359341" id="2359341" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359355" id="2359355" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359357" id="2359357" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2361962" id="2361962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2361963" id="2361963" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4560.html" id="ALSA-2025:4560" type="self" title="ALSA-2025:4560"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libsoup-devel" version="2.62.3" release="8.el8_10" epoch="0" arch="s390x" src="libsoup-2.62.3-8.el8_10.src.rpm">
          <filename>libsoup-devel-2.62.3-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">9093546354277d55fbfe91f7e072fdb9d1f3c11ed8b7807c6709264ec0a170ad</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4597</id>
    <title>Moderate: mod_auth_openidc:2.3 security update</title>
    <issued date="2025-05-06 00:00:00"/>
    <updated date="2025-05-07 18:53:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mod_auth_openidc:2.3 security update</summary>
    <description>The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server.   

Security Fix(es):  

  * mod_auth_openidc: DoS via Empty POST in mod_auth_openidc with OIDCPreservePost Enabled (CVE-2025-3891)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4597" id="RHSA-2025:4597" type="rhsa" title="RHSA-2025:4597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3891" id="CVE-2025-3891" type="cve" title="CVE-2025-3891"/>
      <reference href="https://bugzilla.redhat.com/2361633" id="2361633" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4597.html" id="ALSA-2025:4597" type="self" title="ALSA-2025:4597"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="mod_auth_openidc" stream="2.3" version="8100020240814160950" context="9edba152" arch="s390x"/>
        <package name="mod_auth_openidc" version="2.4.9.4" release="8.module_el8.10.0+3988+526f0275" epoch="0" arch="s390x" src="mod_auth_openidc-2.4.9.4-8.module_el8.10.0+3988+526f0275.src.rpm">
          <filename>mod_auth_openidc-2.4.9.4-8.module_el8.10.0+3988+526f0275.s390x.rpm</filename>
          <sum type="sha256">111ad643c77768c74688b7d46e2d047447ef8a7f313734758d3e8ac8616efe37</sum>
        </package>
        <package name="cjose-devel" version="0.6.1" release="4.module_el8.10.0+3881+234adf82" epoch="0" arch="s390x" src="cjose-0.6.1-4.module_el8.10.0+3881+234adf82.src.rpm">
          <filename>cjose-devel-0.6.1-4.module_el8.10.0+3881+234adf82.s390x.rpm</filename>
          <sum type="sha256">559c2230cf633477f6087a021e6c86fcc10f9ddd90a75eff6a9a97e1e9e6462e</sum>
        </package>
        <package name="cjose" version="0.6.1" release="4.module_el8.10.0+3881+234adf82" epoch="0" arch="s390x" src="cjose-0.6.1-4.module_el8.10.0+3881+234adf82.src.rpm">
          <filename>cjose-0.6.1-4.module_el8.10.0+3881+234adf82.s390x.rpm</filename>
          <sum type="sha256">f2276b80986159e6c98c20e7b1f84a175e9f21a5ed4a7bd1e4530f03dd3c3001</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4649</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-05-07 00:00:00"/>
    <updated date="2025-05-08 18:46:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * thunderbird: User Interface (UI) Misrepresentation of attachment URL (CVE-2025-3523)
  * thunderbird: Information Disclosure of /tmp directory listing (CVE-2025-2830)
  * thunderbird: Leak of hashed Window credentials via crafted attachment URL (CVE-2025-3522)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4649" id="RHSA-2025:4649" type="rhsa" title="RHSA-2025:4649"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-2830" id="CVE-2025-2830" type="cve" title="CVE-2025-2830"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3522" id="CVE-2025-3522" type="cve" title="CVE-2025-3522"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3523" id="CVE-2025-3523" type="cve" title="CVE-2025-3523"/>
      <reference href="https://bugzilla.redhat.com/2359786" id="2359786" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359789" id="2359789" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359793" id="2359793" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4649.html" id="ALSA-2025:4649" type="self" title="ALSA-2025:4649"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="128.9.2" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-128.9.2-1.el8_10.alma.1.src.rpm">
          <filename>thunderbird-128.9.2-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">9f5ebcd365d8d55d25922368973a936f7c470c7b193fe5da8522ccc0173470a2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4658</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2025-05-07 00:00:00"/>
    <updated date="2025-05-07 15:11:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: Heap-based buffer overflow in tools/pal2rgb.c can lead to denial of service (CVE-2017-17095)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4658" id="RHSA-2025:4658" type="rhsa" title="RHSA-2025:4658"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2017-17095" id="CVE-2017-17095" type="cve" title="CVE-2017-17095"/>
      <reference href="https://bugzilla.redhat.com/1524284" id="1524284" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4658.html" id="ALSA-2025:4658" type="self" title="ALSA-2025:4658"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libtiff-devel" version="4.0.9" release="34.el8_10" epoch="0" arch="s390x" src="libtiff-4.0.9-34.el8_10.src.rpm">
          <filename>libtiff-devel-4.0.9-34.el8_10.s390x.rpm</filename>
          <sum type="sha256">e5df546928dd8bf68bb1d1e4b2f15d496b120ff4a3587c2f56f9f59172e7beee</sum>
        </package>
        <package name="libtiff" version="4.0.9" release="34.el8_10" epoch="0" arch="s390x" src="libtiff-4.0.9-34.el8_10.src.rpm">
          <filename>libtiff-4.0.9-34.el8_10.s390x.rpm</filename>
          <sum type="sha256">fdca7d6522f65c32dd9c05fb8b0c14c7d1c33498d6544347dd04e84a5aea1e32</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4791</id>
    <title>Moderate: python39:3.9 security update</title>
    <issued date="2025-05-12 00:00:00"/>
    <updated date="2025-05-13 12:40:13"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python39:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * mod_wsgi: Trusted Proxy Headers Removing Bypass (CVE-2022-2255)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4791" id="RHSA-2025:4791" type="rhsa" title="RHSA-2025:4791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2255" id="CVE-2022-2255" type="cve" title="CVE-2022-2255"/>
      <reference href="https://bugzilla.redhat.com/2100563" id="2100563" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4791.html" id="ALSA-2025:4791" type="self" title="ALSA-2025:4791"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="python39" stream="3.9" version="8100020240530164632" context="0a5380d9" arch="s390x"/>
        <package name="python39-psycopg2-tests" version="2.8.6" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-psycopg2-tests-2.8.6-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">05d2693d2fda223ef60e5133f0ea03da31cbd0047d13a3bd8f677c4042064ec4</sum>
        </package>
        <package name="python39-devel" version="3.9.20" release="1.module_el8.10.0+3902+1690be06" epoch="0" arch="s390x" src="python39-3.9.20-1.module_el8.10.0+3902+1690be06.src.rpm">
          <filename>python39-devel-3.9.20-1.module_el8.10.0+3902+1690be06.s390x.rpm</filename>
          <sum type="sha256">1c25b77a8aff1cdd39cc7cfe0702a8bb5636339121b1d4f36d112722660a6a31</sum>
        </package>
        <package name="python39-pip" version="20.2.4" release="9.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python3x-pip-20.2.4-9.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-pip-20.2.4-9.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">1cddc6a728150b59b88dadd96ccc569c7bb77f8952761eca587d684b1a9d53dc</sum>
        </package>
        <package name="python39-urllib3" version="1.25.10" release="5.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python-urllib3-1.25.10-5.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-urllib3-1.25.10-5.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">24df140ee4c409e7c015b7d7584ba8aa8df5b95f9ecea9b457ce9ea0f3c68d98</sum>
        </package>
        <package name="python39-test" version="3.9.20" release="1.module_el8.10.0+3902+1690be06" epoch="0" arch="s390x" src="python39-3.9.20-1.module_el8.10.0+3902+1690be06.src.rpm">
          <filename>python39-test-3.9.20-1.module_el8.10.0+3902+1690be06.s390x.rpm</filename>
          <sum type="sha256">27001a1603c0c1f49be9f88679f8274a3184ff3623fce09649a539dc0dd04e93</sum>
        </package>
        <package name="python39-pip-wheel" version="20.2.4" release="9.module_el8.10.0+3765+2f9a457d" epoch="0" arch="noarch" src="python3x-pip-20.2.4-9.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-pip-wheel-20.2.4-9.module_el8.10.0+3765+2f9a457d.noarch.rpm</filename>
          <sum type="sha256">2a77862adcd93af6aa76bbbf2467fbd468eef1d9d6265d21cb2316e69d48cae1</sum>
        </package>
        <package name="python39-idna" version="2.10" release="4.module_el8.10.0+3849+a48d89aa" epoch="0" arch="noarch" src="python-idna-2.10-4.module_el8.10.0+3849+a48d89aa.src.rpm">
          <filename>python39-idna-2.10-4.module_el8.10.0+3849+a48d89aa.noarch.rpm</filename>
          <sum type="sha256">381f6f79555962d405b57a48952a958cf6f71a88772061ae3a017ad2a49f40c6</sum>
        </package>
        <package name="python39-psycopg2" version="2.8.6" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">3938e67a4a4560730a8004aa6291d4a5162286bd6f68bc00b16e2ed49d466377</sum>
        </package>
        <package name="python39-idle" version="3.9.20" release="1.module_el8.10.0+3902+1690be06" epoch="0" arch="s390x" src="python39-3.9.20-1.module_el8.10.0+3902+1690be06.src.rpm">
          <filename>python39-idle-3.9.20-1.module_el8.10.0+3902+1690be06.s390x.rpm</filename>
          <sum type="sha256">4aef33871eb2df1bf90a39519cd32d6d56c4ee9282da0a25999f953fc2830e8f</sum>
        </package>
        <package name="python39-numpy-f2py" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-f2py-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">56f4a39fc3b7cacfec741e84c3c59e67da9e3b2f122f09e59cac8a8020a4ba7c</sum>
        </package>
        <package name="python39-psycopg2-doc" version="2.8.6" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-psycopg2-2.8.6-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-psycopg2-doc-2.8.6-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">5c33f9b35f95710fe82294dc826e72f8a2af5309c9f694687b92f36df933e837</sum>
        </package>
        <package name="python39-scipy" version="1.5.4" release="5.module_el8.9.0+3634+fb2a896c" epoch="0" arch="s390x" src="scipy-1.5.4-5.module_el8.9.0+3634+fb2a896c.src.rpm">
          <filename>python39-scipy-1.5.4-5.module_el8.9.0+3634+fb2a896c.s390x.rpm</filename>
          <sum type="sha256">68206ec5b6bf886e1266c848bf014248b598bea11cce32708352e16fceaa4475</sum>
        </package>
        <package name="python39-mod_wsgi" version="4.7.1" release="7.module_el8.10.0+3989+a618fe15.1" epoch="0" arch="s390x" src="mod_wsgi-4.7.1-7.module_el8.10.0+3989+a618fe15.1.src.rpm">
          <filename>python39-mod_wsgi-4.7.1-7.module_el8.10.0+3989+a618fe15.1.s390x.rpm</filename>
          <sum type="sha256">699c74d4de476f3622f9b09329e23abb89c3e7e6efc60d4fc43b9e5569c12648</sum>
        </package>
        <package name="python39-setuptools" version="50.3.2" release="6.module_el8.10.0+3885+d986a391" epoch="0" arch="noarch" src="python3x-setuptools-50.3.2-6.module_el8.10.0+3885+d986a391.src.rpm">
          <filename>python39-setuptools-50.3.2-6.module_el8.10.0+3885+d986a391.noarch.rpm</filename>
          <sum type="sha256">715bf17ab3ab070828be20ba0e485b383bacfe6244860a01169d79e309c3aef0</sum>
        </package>
        <package name="python39-rpm-macros" version="3.9.20" release="1.module_el8.10.0+3902+1690be06" epoch="0" arch="noarch" src="python39-3.9.20-1.module_el8.10.0+3902+1690be06.src.rpm">
          <filename>python39-rpm-macros-3.9.20-1.module_el8.10.0+3902+1690be06.noarch.rpm</filename>
          <sum type="sha256">7da9f8a4661ec91e76331a64468713442c84a2796445a54ffb51582996643a34</sum>
        </package>
        <package name="python39-cryptography" version="3.3.1" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python-cryptography-3.3.1-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-cryptography-3.3.1-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">8834a7762b7982546305749c0b8ab5193a8b777110eaddbdbb80e69fdaf6ea8a</sum>
        </package>
        <package name="python39-psutil" version="5.8.0" release="4.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-psutil-5.8.0-4.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9300840b5b4e742063f5617bc74cc2b05b4f3d5bdcd113ee5b3a9745baf3d0dc</sum>
        </package>
        <package name="python39-numpy" version="1.19.4" release="3.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-numpy-1.19.4-3.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">9ffe33f6e51a25e79b88e45fa5cdca37a3b77d0868fe40e156f615224308810c</sum>
        </package>
        <package name="python39-libs" version="3.9.20" release="1.module_el8.10.0+3902+1690be06" epoch="0" arch="s390x" src="python39-3.9.20-1.module_el8.10.0+3902+1690be06.src.rpm">
          <filename>python39-libs-3.9.20-1.module_el8.10.0+3902+1690be06.s390x.rpm</filename>
          <sum type="sha256">a64f21bd108427202e973f95e7c18098d1168a329d6f586b1b973bf3a8e0c1b1</sum>
        </package>
        <package name="python39-tkinter" version="3.9.20" release="1.module_el8.10.0+3902+1690be06" epoch="0" arch="s390x" src="python39-3.9.20-1.module_el8.10.0+3902+1690be06.src.rpm">
          <filename>python39-tkinter-3.9.20-1.module_el8.10.0+3902+1690be06.s390x.rpm</filename>
          <sum type="sha256">ba3239cf964d66396f03f332634cfe8e145cf46555bbee6371d63b386db1ffcd</sum>
        </package>
        <package name="python39-requests" version="2.25.0" release="3.module_el8.9.0+3634+fb2a896c" epoch="0" arch="noarch" src="python-requests-2.25.0-3.module_el8.9.0+3634+fb2a896c.src.rpm">
          <filename>python39-requests-2.25.0-3.module_el8.9.0+3634+fb2a896c.noarch.rpm</filename>
          <sum type="sha256">d021b1b5bb6a395348b4764885ec17842861193b8e60c25abcf8e1ad7a047641</sum>
        </package>
        <package name="python39-lxml" version="4.6.5" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-lxml-4.6.5-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">dc2ce0990738ea69e2b3641de1886825066554244cf58815971db30e321b56b2</sum>
        </package>
        <package name="python39" version="3.9.20" release="1.module_el8.10.0+3902+1690be06" epoch="0" arch="s390x" src="python39-3.9.20-1.module_el8.10.0+3902+1690be06.src.rpm">
          <filename>python39-3.9.20-1.module_el8.10.0+3902+1690be06.s390x.rpm</filename>
          <sum type="sha256">eb0eae87ccf834940d6849fc43054bfc4cd6373f47de6df41860ca96611c01d5</sum>
        </package>
        <package name="python39-cffi" version="1.14.3" release="2.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="python-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-cffi-1.14.3-2.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">ec3acbe8ceecf82559556caacd8c41e2b40e69348f2e6893f0b7598aa36371fd</sum>
        </package>
        <package name="python39-setuptools-wheel" version="50.3.2" release="6.module_el8.10.0+3885+d986a391" epoch="0" arch="noarch" src="python3x-setuptools-50.3.2-6.module_el8.10.0+3885+d986a391.src.rpm">
          <filename>python39-setuptools-wheel-50.3.2-6.module_el8.10.0+3885+d986a391.noarch.rpm</filename>
          <sum type="sha256">f24400c76f23e4e3ce4c36e34154b4d10aeceaf76cbc0f9470f61ebc8bbfdb16</sum>
        </package>
        <package name="python39-pyyaml" version="5.4.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="PyYAML-5.4.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pyyaml-5.4.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">faa90d54ace8329c64942f01e18434bce14edf19cc3a534ae07de7bc301cd27f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4797</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-05-12 00:00:00"/>
    <updated date="2025-05-13 13:15:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: thunderbird: Privilege escalation in Firefox Updater (CVE-2025-2817)
  * firefox: thunderbird: Unsafe attribute access during XPath parsing (CVE-2025-4087)
  * firefox: thunderbird: Process isolation bypass using "javascript:" URI links in cross-origin frames (CVE-2025-4083)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 (CVE-2025-4091)
  * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10 (CVE-2025-4093)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4797" id="RHSA-2025:4797" type="rhsa" title="RHSA-2025:4797"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-2817" id="CVE-2025-2817" type="cve" title="CVE-2025-2817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4083" id="CVE-2025-4083" type="cve" title="CVE-2025-4083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4087" id="CVE-2025-4087" type="cve" title="CVE-2025-4087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4091" id="CVE-2025-4091" type="cve" title="CVE-2025-4091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4093" id="CVE-2025-4093" type="cve" title="CVE-2025-4093"/>
      <reference href="https://bugzilla.redhat.com/2362902" id="2362902" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2362904" id="2362904" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2362907" id="2362907" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2362912" id="2362912" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2362915" id="2362915" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4797.html" id="ALSA-2025:4797" type="self" title="ALSA-2025:4797"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="128.10.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-128.10.0-1.el8_10.alma.1.src.rpm">
          <filename>thunderbird-128.10.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">634a415c3c4f3492b653a4eb55f8f24bf3c3d534412727cbcbff596cf7afc4df</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7539</id>
    <title>Moderate: ruby:2.5 security update</title>
    <issued date="2025-05-14 00:00:00"/>
    <updated date="2025-07-02 12:19:09"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby:2.5 security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  

Security Fix(es):  

  * oniguruma: integer overflow in search_in_range function in regexec.c leads to out-of-bounds read (CVE-2019-19012)
  * rubygem-bundler: unexpected code execution in Gemfiles (CVE-2021-43809)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7539" id="RHSA-2025:7539" type="rhsa" title="RHSA-2025:7539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-19012" id="CVE-2019-19012" type="cve" title="CVE-2019-19012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-43809" id="CVE-2021-43809" type="cve" title="CVE-2021-43809"/>
      <reference href="https://bugzilla.redhat.com/1802051" id="1802051" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2035260" id="2035260" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-7539.html" id="ALSA-2025:7539" type="self" title="ALSA-2025:7539"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="ruby" stream="2.5" version="8100020250514123147" context="9edba152" arch="s390x"/>
        <package name="rubygems" version="2.7.6.3" release="114.module_el8.10.0+3991+5e651d4e" epoch="0" arch="noarch" src="ruby-2.5.9-114.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>rubygems-2.7.6.3-114.module_el8.10.0+3991+5e651d4e.noarch.rpm</filename>
          <sum type="sha256">0471b8ec50fbda5fb067c8624ded4dd3b48c84f995193f9ea36d8ca727f1b201</sum>
        </package>
        <package name="rubygem-bundler" version="1.16.1" release="5.module_el8.10.0+3991+5e651d4e" epoch="0" arch="noarch" src="rubygem-bundler-1.16.1-5.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>rubygem-bundler-1.16.1-5.module_el8.10.0+3991+5e651d4e.noarch.rpm</filename>
          <sum type="sha256">20c5d77a7746caeb6cca2cb1e23267c50fd2cbc14d3869ca824e55b3a36aa3b7</sum>
        </package>
        <package name="rubygem-abrt-doc" version="0.3.0" release="4.module_el8.10.0+3871+342e2c2f" epoch="0" arch="noarch" src="rubygem-abrt-0.3.0-4.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>rubygem-abrt-doc-0.3.0-4.module_el8.10.0+3871+342e2c2f.noarch.rpm</filename>
          <sum type="sha256">23f4e5352303fbe382eb4c6194887ff9e2dad8797516dd85ae0efd8eff375c61</sum>
        </package>
        <package name="ruby-libs" version="2.5.9" release="114.module_el8.10.0+3991+5e651d4e" epoch="0" arch="s390x" src="ruby-2.5.9-114.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>ruby-libs-2.5.9-114.module_el8.10.0+3991+5e651d4e.s390x.rpm</filename>
          <sum type="sha256">2fc5983c2164be0056a75e00ccf8c72879a4eb9732c2d79d0bfe538dc22f7aa4</sum>
        </package>
        <package name="rubygem-rdoc" version="6.0.1.1" release="114.module_el8.10.0+3991+5e651d4e" epoch="0" arch="noarch" src="ruby-2.5.9-114.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>rubygem-rdoc-6.0.1.1-114.module_el8.10.0+3991+5e651d4e.noarch.rpm</filename>
          <sum type="sha256">316dd9f2ed4a859d410be364273c324d19ec565038e69f155dac281505e75fb8</sum>
        </package>
        <package name="rubygem-io-console" version="0.4.6" release="114.module_el8.10.0+3991+5e651d4e" epoch="0" arch="s390x" src="ruby-2.5.9-114.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>rubygem-io-console-0.4.6-114.module_el8.10.0+3991+5e651d4e.s390x.rpm</filename>
          <sum type="sha256">4b830015c1ce1432bd38d232b479570df73bd1d781449b64dc473434d5b922c2</sum>
        </package>
        <package name="rubygem-rake" version="12.3.3" release="114.module_el8.10.0+3991+5e651d4e" epoch="0" arch="noarch" src="ruby-2.5.9-114.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>rubygem-rake-12.3.3-114.module_el8.10.0+3991+5e651d4e.noarch.rpm</filename>
          <sum type="sha256">59e146e59913fdc22d1ad3c26eeb5944aec46619a042271b41303519809202e6</sum>
        </package>
        <package name="rubygem-did_you_mean" version="1.2.0" release="114.module_el8.10.0+3991+5e651d4e" epoch="0" arch="noarch" src="ruby-2.5.9-114.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>rubygem-did_you_mean-1.2.0-114.module_el8.10.0+3991+5e651d4e.noarch.rpm</filename>
          <sum type="sha256">708a70c739228903f9ac703b56670d10094d5acaab51cec661038e1ec0fc9d30</sum>
        </package>
        <package name="rubygem-minitest" version="5.10.3" release="114.module_el8.10.0+3991+5e651d4e" epoch="0" arch="noarch" src="ruby-2.5.9-114.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>rubygem-minitest-5.10.3-114.module_el8.10.0+3991+5e651d4e.noarch.rpm</filename>
          <sum type="sha256">78002dd4d3e6658a9fb634a0b624bfd23187751cab80a13b66b5206f9555aade</sum>
        </package>
        <package name="rubygem-bson" version="4.3.0" release="2.module_el8.6.0+3170+4b08f9d4" epoch="0" arch="s390x" src="rubygem-bson-4.3.0-2.module_el8.6.0+3170+4b08f9d4.src.rpm">
          <filename>rubygem-bson-4.3.0-2.module_el8.6.0+3170+4b08f9d4.s390x.rpm</filename>
          <sum type="sha256">871397eff83a497bf29db2e02e81837d1648c1813afa6030e2bab44d3f0db282</sum>
        </package>
        <package name="rubygem-pg-doc" version="1.0.0" release="3.module_el8.9.0+3635+c6f99506" epoch="0" arch="noarch" src="rubygem-pg-1.0.0-3.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygem-pg-doc-1.0.0-3.module_el8.9.0+3635+c6f99506.noarch.rpm</filename>
          <sum type="sha256">8d04b2fdb59f2b51995d4fc57a412831e5d4d1c9d80fea1bcd0a7f5beaa55ab7</sum>
        </package>
        <package name="ruby-irb" version="2.5.9" release="114.module_el8.10.0+3991+5e651d4e" epoch="0" arch="noarch" src="ruby-2.5.9-114.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>ruby-irb-2.5.9-114.module_el8.10.0+3991+5e651d4e.noarch.rpm</filename>
          <sum type="sha256">8e6406cc50a2384f4b3691dd3588e70f017871dcea27a77c8342ad5568821999</sum>
        </package>
        <package name="rubygem-test-unit" version="3.2.7" release="114.module_el8.10.0+3991+5e651d4e" epoch="0" arch="noarch" src="ruby-2.5.9-114.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>rubygem-test-unit-3.2.7-114.module_el8.10.0+3991+5e651d4e.noarch.rpm</filename>
          <sum type="sha256">9063cc6f2ce9494474d6ea7ab13d44a13fa1301227fdb2134c2833b380644eb9</sum>
        </package>
        <package name="ruby" version="2.5.9" release="114.module_el8.10.0+3991+5e651d4e" epoch="0" arch="s390x" src="ruby-2.5.9-114.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>ruby-2.5.9-114.module_el8.10.0+3991+5e651d4e.s390x.rpm</filename>
          <sum type="sha256">9fe200b14be40d47787da7212fa87b52cd1f904726f6e56f1eddcdf93f072cf5</sum>
        </package>
        <package name="ruby-devel" version="2.5.9" release="114.module_el8.10.0+3991+5e651d4e" epoch="0" arch="s390x" src="ruby-2.5.9-114.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>ruby-devel-2.5.9-114.module_el8.10.0+3991+5e651d4e.s390x.rpm</filename>
          <sum type="sha256">a2ba6282b6f4c2a4c63b2e7378776be6b2ad3d2d49922a9ef4f8c1d9b0da1f6b</sum>
        </package>
        <package name="ruby-doc" version="2.5.9" release="114.module_el8.10.0+3991+5e651d4e" epoch="0" arch="noarch" src="ruby-2.5.9-114.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>ruby-doc-2.5.9-114.module_el8.10.0+3991+5e651d4e.noarch.rpm</filename>
          <sum type="sha256">aee49b23377f4c95823bb1de8c89ea303e214ced27b20cf9c3f57d35ad2eaacc</sum>
        </package>
        <package name="rubygem-xmlrpc" version="0.3.0" release="114.module_el8.10.0+3991+5e651d4e" epoch="0" arch="noarch" src="ruby-2.5.9-114.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>rubygem-xmlrpc-0.3.0-114.module_el8.10.0+3991+5e651d4e.noarch.rpm</filename>
          <sum type="sha256">b11a846b3b9a01a962c9d38aea91247d7186fcb8926dbe476820d24c41048dc2</sum>
        </package>
        <package name="rubygem-psych" version="3.0.2" release="114.module_el8.10.0+3991+5e651d4e" epoch="0" arch="s390x" src="ruby-2.5.9-114.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>rubygem-psych-3.0.2-114.module_el8.10.0+3991+5e651d4e.s390x.rpm</filename>
          <sum type="sha256">bc6e1485e76ef333429469012490eca540e7cb293f8bd939128fc11526583f93</sum>
        </package>
        <package name="rubygem-power_assert" version="1.1.1" release="114.module_el8.10.0+3991+5e651d4e" epoch="0" arch="noarch" src="ruby-2.5.9-114.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>rubygem-power_assert-1.1.1-114.module_el8.10.0+3991+5e651d4e.noarch.rpm</filename>
          <sum type="sha256">c1d95ceeff7631602dd9b4760b2601d1b88e2d45caedcf08eb6b5b68c835e9f6</sum>
        </package>
        <package name="rubygems-devel" version="2.7.6.3" release="114.module_el8.10.0+3991+5e651d4e" epoch="0" arch="noarch" src="ruby-2.5.9-114.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>rubygems-devel-2.7.6.3-114.module_el8.10.0+3991+5e651d4e.noarch.rpm</filename>
          <sum type="sha256">c845e7a9fbc50fade1fa67ee7149c9df83ab51f7c95c48155315c27b860a6e64</sum>
        </package>
        <package name="rubygem-pg" version="1.0.0" release="3.module_el8.9.0+3635+c6f99506" epoch="0" arch="s390x" src="rubygem-pg-1.0.0-3.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygem-pg-1.0.0-3.module_el8.9.0+3635+c6f99506.s390x.rpm</filename>
          <sum type="sha256">d52a51f8cfdbeb3099ce92946748481f426b77c9da23f77737fe3d4fcd1b245c</sum>
        </package>
        <package name="rubygem-json" version="2.1.0" release="114.module_el8.10.0+3991+5e651d4e" epoch="0" arch="s390x" src="ruby-2.5.9-114.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>rubygem-json-2.1.0-114.module_el8.10.0+3991+5e651d4e.s390x.rpm</filename>
          <sum type="sha256">d78bdf0b7aa7c45d3de5cd62b58e818b573c8d84a20c65ef962cc1c407da38ff</sum>
        </package>
        <package name="rubygem-openssl" version="2.1.2" release="114.module_el8.10.0+3991+5e651d4e" epoch="0" arch="s390x" src="ruby-2.5.9-114.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>rubygem-openssl-2.1.2-114.module_el8.10.0+3991+5e651d4e.s390x.rpm</filename>
          <sum type="sha256">de0ffced594a172132b99578b7cf4a0c6886470357038c1bb6e05e643f6e7aec</sum>
        </package>
        <package name="rubygem-bundler-doc" version="1.16.1" release="5.module_el8.10.0+3991+5e651d4e" epoch="0" arch="noarch" src="rubygem-bundler-1.16.1-5.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>rubygem-bundler-doc-1.16.1-5.module_el8.10.0+3991+5e651d4e.noarch.rpm</filename>
          <sum type="sha256">e0ac470177072cfa2230683fb44f531a60cabc9ecb486c5b00708f70a84ffc34</sum>
        </package>
        <package name="rubygem-mysql2" version="0.4.10" release="4.module_el8.6.0+3170+4b08f9d4" epoch="0" arch="s390x" src="rubygem-mysql2-0.4.10-4.module_el8.6.0+3170+4b08f9d4.src.rpm">
          <filename>rubygem-mysql2-0.4.10-4.module_el8.6.0+3170+4b08f9d4.s390x.rpm</filename>
          <sum type="sha256">e8ee63b6046ba22292c8ac7eb85440ace9fe11b17fef5bf5f590b754f4c7aadb</sum>
        </package>
        <package name="rubygem-net-telnet" version="0.1.1" release="114.module_el8.10.0+3991+5e651d4e" epoch="0" arch="noarch" src="ruby-2.5.9-114.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>rubygem-net-telnet-0.1.1-114.module_el8.10.0+3991+5e651d4e.noarch.rpm</filename>
          <sum type="sha256">ebac3ac54d936a44ccd3a24c1c34bcd3f538c7651dd33d2ec4e88b243c127403</sum>
        </package>
        <package name="rubygem-bigdecimal" version="1.3.4" release="114.module_el8.10.0+3991+5e651d4e" epoch="0" arch="s390x" src="ruby-2.5.9-114.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>rubygem-bigdecimal-1.3.4-114.module_el8.10.0+3991+5e651d4e.s390x.rpm</filename>
          <sum type="sha256">fcbe5d8815605125cfaa3ef6bb05a6216ad85d802e2ca534fd4fd7fba61149ba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7540</id>
    <title>Moderate: libjpeg-turbo security update</title>
    <issued date="2025-05-14 00:00:00"/>
    <updated date="2025-06-10 19:29:05"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libjpeg-turbo security update</summary>
    <description>The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.  

Security Fix(es):  

  * libjpeg-turbo: heap-based buffer over-read in get_rgb_row() in rdppm.c (CVE-2020-13790)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7540" id="RHSA-2025:7540" type="rhsa" title="RHSA-2025:7540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-13790" id="CVE-2020-13790" type="cve" title="CVE-2020-13790"/>
      <reference href="https://bugzilla.redhat.com/1847155" id="1847155" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-7540.html" id="ALSA-2025:7540" type="self" title="ALSA-2025:7540"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="turbojpeg" version="1.5.3" release="14.el8_10" epoch="0" arch="s390x" src="libjpeg-turbo-1.5.3-14.el8_10.src.rpm">
          <filename>turbojpeg-1.5.3-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">29781ddf5042597d628e10ad4203472dd2e411d97bda2dab23d1ec889e7218d5</sum>
        </package>
        <package name="libjpeg-turbo-utils" version="1.5.3" release="14.el8_10" epoch="0" arch="s390x" src="libjpeg-turbo-1.5.3-14.el8_10.src.rpm">
          <filename>libjpeg-turbo-utils-1.5.3-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">3427a3e3707d3817aad104ec7ac6bfa91506ac641ad2b17491912b02c15655b9</sum>
        </package>
        <package name="libjpeg-turbo-devel" version="1.5.3" release="14.el8_10" epoch="0" arch="s390x" src="libjpeg-turbo-1.5.3-14.el8_10.src.rpm">
          <filename>libjpeg-turbo-devel-1.5.3-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">7d326aa74da4f433b26c10e88de43f97328aefdac682d48400a61f600965bb98</sum>
        </package>
        <package name="libjpeg-turbo" version="1.5.3" release="14.el8_10" epoch="0" arch="s390x" src="libjpeg-turbo-1.5.3-14.el8_10.src.rpm">
          <filename>libjpeg-turbo-1.5.3-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">d9e1f0584fe1e1833c6a01cc3fa2d5e45a2dd15d11a3b4006c0d270c31b65263</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7569</id>
    <title>Important: yelp and yelp-xsl security update</title>
    <issued date="2025-05-14 00:00:00"/>
    <updated date="2025-05-16 09:52:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>yelp and yelp-xsl security update</summary>
    <description>Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook.  

Security Fix(es):  

  * yelp: Arbitrary file read (CVE-2025-3155)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7569" id="RHSA-2025:7569" type="rhsa" title="RHSA-2025:7569"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3155" id="CVE-2025-3155" type="cve" title="CVE-2025-3155"/>
      <reference href="https://bugzilla.redhat.com/2357091" id="2357091" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-7569.html" id="ALSA-2025:7569" type="self" title="ALSA-2025:7569"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="yelp" version="3.28.1" release="3.el8_10.1" epoch="2" arch="s390x" src="yelp-3.28.1-3.el8_10.1.src.rpm">
          <filename>yelp-3.28.1-3.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">2c15363872f38a5d58f269c6ca6b4705136182a1cbab1e2958a0e710644c8707</sum>
        </package>
        <package name="yelp-xsl" version="3.28.0" release="2.el8_10.1" epoch="0" arch="noarch" src="yelp-xsl-3.28.0-2.el8_10.1.src.rpm">
          <filename>yelp-xsl-3.28.0-2.el8_10.1.noarch.rpm</filename>
          <sum type="sha256">2c70cefb070d085c9da9c4781a85feaaf1dd346ab3764cda845905105f113ae5</sum>
        </package>
        <package name="yelp-libs" version="3.28.1" release="3.el8_10.1" epoch="2" arch="s390x" src="yelp-3.28.1-3.el8_10.1.src.rpm">
          <filename>yelp-libs-3.28.1-3.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">f06018a1349954bb615ee384a6d699443ad21268ac301881befcc88d5818d9a5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7571</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2025-05-14 00:00:00"/>
    <updated date="2025-05-16 09:46:40"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.106 and .NET Runtime 9.0.5.Security Fix(es):  

  * dotnet: .NET and Visual Studio Spoofing Vulnerability (CVE-2025-26646)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7571" id="RHSA-2025:7571" type="rhsa" title="RHSA-2025:7571"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26646" id="CVE-2025-26646" type="cve" title="CVE-2025-26646"/>
      <reference href="https://bugzilla.redhat.com/2365317" id="2365317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-7571.html" id="ALSA-2025:7571" type="self" title="ALSA-2025:7571"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="dotnet-host" version="9.0.5" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el8_10.src.rpm">
          <filename>dotnet-host-9.0.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0b26c3f450a29f30b2abd0f6e87f5f4d1d6cf7b09a3fdf34f9f650c4c3130857</sum>
        </package>
        <package name="dotnet-runtime-dbg-9.0" version="9.0.5" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-9.0-9.0.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">45be562cbd596c113666b912b7439ed8e2ec4cc024521af6903c8d806db906fa</sum>
        </package>
        <package name="dotnet-hostfxr-9.0" version="9.0.5" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-9.0-9.0.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5cf3fd3fed634a78632f0a3ee7df518d2198244d3b32bf89f331dfb6b4487ff4</sum>
        </package>
        <package name="dotnet-runtime-9.0" version="9.0.5" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el8_10.src.rpm">
          <filename>dotnet-runtime-9.0-9.0.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">70344a8f7a8ed58a7a81887a458343d043853094d6db29ce038518f2c4d181ba</sum>
        </package>
        <package name="dotnet-apphost-pack-9.0" version="9.0.5" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-9.0-9.0.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">8c2bdefed6fd5a1fe1274957e3237064be08ab44cf4b8fc2fcd7c92b4f44de44</sum>
        </package>
        <package name="dotnet-templates-9.0" version="9.0.106" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el8_10.src.rpm">
          <filename>dotnet-templates-9.0-9.0.106-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">94d0f7bc4a5b088f3fc0ed02469280a92d99e65fcd1ac8a3b9797430199adf33</sum>
        </package>
        <package name="dotnet-targeting-pack-9.0" version="9.0.5" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-9.0-9.0.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">9ae1263c7c2f68732de858abc2e89016d1ad63758ce30084612862aa64a6a940</sum>
        </package>
        <package name="aspnetcore-runtime-9.0" version="9.0.5" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-9.0-9.0.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a85a13c2add2fceb5aa94adf30e8786291a5f10f4aa1b8cfb2e7e8f92aff2e5e</sum>
        </package>
        <package name="aspnetcore-targeting-pack-9.0" version="9.0.5" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-9.0-9.0.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">acf029ae48cb1a6abd76a3ca46f9f16d4a39782931de837cd32a5a5181dc211a</sum>
        </package>
        <package name="dotnet-sdk-9.0" version="9.0.106" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-9.0.106-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b75a0b1e44f6406b17cf460a34c97659a020ce20128ca355b668ee970bffc70e</sum>
        </package>
        <package name="dotnet-sdk-dbg-9.0" version="9.0.106" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-9.0-9.0.106-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b835302bca9a2c8a514c16aa06fb7f90979c2a1ccd282582d6f4ac71fa1ab7c3</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="9.0.106" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el8_10.src.rpm">
          <filename>netstandard-targeting-pack-2.1-9.0.106-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">ed40a30fb4beb619fd834a5bf431b233a32e3d3226582c1f8761d4a249463434</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-9.0" version="9.0.5" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-9.0-9.0.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">ed51ff55859990db26a755189dcff0fe39f50f3fb518f4e26bd034f98e8477ad</sum>
        </package>
        <package name="dotnet" version="9.0.106" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el8_10.src.rpm">
          <filename>dotnet-9.0.106-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">f81f10d1fc43fb7ee3ec4bba486957790f9f727f7cd30ec702ce46eaad69538b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7589</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2025-05-14 00:00:00"/>
    <updated date="2025-05-16 09:41:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.116 and .NET Runtime 8.0.16.Security Fix(es):  

  * dotnet: .NET and Visual Studio Spoofing Vulnerability (CVE-2025-26646)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7589" id="RHSA-2025:7589" type="rhsa" title="RHSA-2025:7589"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26646" id="CVE-2025-26646" type="cve" title="CVE-2025-26646"/>
      <reference href="https://bugzilla.redhat.com/2365317" id="2365317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-7589.html" id="ALSA-2025:7589" type="self" title="ALSA-2025:7589"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="dotnet-apphost-pack-8.0" version="8.0.16" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.16-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0138a97605d4e65a84940a06f28570f8477437e9c0757be34603cc8874edc4a8</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.16" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.16-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">04ed579ada1ea9fbd29a02787119d8128f786ffafe11ea13f1ade14764b25b21</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.116" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el8_10.src.rpm">
          <filename>dotnet-templates-8.0-8.0.116-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">2325733a1e9e83ef5c9c95540c03f812b3ea3330d7a961ecdd1e37987a26b487</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.16" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.16-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">2c9bf6a2098ad77b53eedfdb24500418a1f7cc6bc84a0e2cb63287a52df5de64</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.16" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.16-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">34563b9c3a1b85aa12aed2a4f4daa9ab230402a3bcc33c275c72cc7fea0fa300</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.116" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.116-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">4eb11168ac4f2b92f36bd59c6bb9f63a896ec9f288de878b48e14e9891f6ae0c</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.16" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el8_10.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.16-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5c38799ea9fff0217e827627b5ed4e6cc6a50d813eabb3de32f82aaf57f5187f</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.16" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.16-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a5b75e6130d0e8cb8ed24513e6193970ca9878497a4900d7eff6383b0baa93ee</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.16" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.16-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a64390c6692e948146db7bb10d70e49e12d407cf5023de6579d06c23258f8a3e</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.116" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.116-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">cd88105dfefc845b0263a950dfb217d625db44a7115c014bf71727ba1eb00580</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.16" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.16-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">d76002544944e06d6f0e8c2782a43248a0f7296f8e2a054f04c918c49bccbfb3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7686</id>
    <title>Important: redis:6 security update</title>
    <issued date="2025-05-15 00:00:00"/>
    <updated date="2025-05-16 09:38:39"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>redis:6 security update</summary>
    <description>Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.  

Security Fix(es):  

  * redis: Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client (CVE-2025-21605)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7686" id="RHSA-2025:7686" type="rhsa" title="RHSA-2025:7686"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21605" id="CVE-2025-21605" type="cve" title="CVE-2025-21605"/>
      <reference href="https://bugzilla.redhat.com/2361883" id="2361883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-7686.html" id="ALSA-2025:7686" type="self" title="ALSA-2025:7686"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="redis" stream="6" version="8100020250515163135" context="9edba152" arch="s390x"/>
        <package name="redis-devel" version="6.2.18" release="1.module_el8.10.0+3994+c2cc5395" epoch="0" arch="s390x" src="redis-6.2.18-1.module_el8.10.0+3994+c2cc5395.src.rpm">
          <filename>redis-devel-6.2.18-1.module_el8.10.0+3994+c2cc5395.s390x.rpm</filename>
          <sum type="sha256">79bb27da7c04b12159e113d1db3da8affee76e0592e05a5705324ad725f7555c</sum>
        </package>
        <package name="redis-doc" version="6.2.18" release="1.module_el8.10.0+3994+c2cc5395" epoch="0" arch="noarch" src="redis-6.2.18-1.module_el8.10.0+3994+c2cc5395.src.rpm">
          <filename>redis-doc-6.2.18-1.module_el8.10.0+3994+c2cc5395.noarch.rpm</filename>
          <sum type="sha256">a851f72489d3d629f12a0399b282f142c19e03fd95ffd673f640feceb06cfe39</sum>
        </package>
        <package name="redis" version="6.2.18" release="1.module_el8.10.0+3994+c2cc5395" epoch="0" arch="s390x" src="redis-6.2.18-1.module_el8.10.0+3994+c2cc5395.src.rpm">
          <filename>redis-6.2.18-1.module_el8.10.0+3994+c2cc5395.s390x.rpm</filename>
          <sum type="sha256">f44c3f397ebffc5d8ba5bcdaa8dd22162c7012a0eda5b158852f43a43858eb8e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7894</id>
    <title>Important: grafana security update</title>
    <issued date="2025-05-19 00:00:00"/>
    <updated date="2025-05-19 13:28:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.   

Security Fix(es):  

  * grafana: Cross-site Scripting (XSS) in Grafana via Custom Frontend Plugins and Open Redirect (CVE-2025-4123)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7894" id="RHSA-2025:7894" type="rhsa" title="RHSA-2025:7894"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4123" id="CVE-2025-4123" type="cve" title="CVE-2025-4123"/>
      <reference href="https://bugzilla.redhat.com/2364632" id="2364632" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-7894.html" id="ALSA-2025:7894" type="self" title="ALSA-2025:7894"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="grafana" version="9.2.10" release="23.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-23.el8_10.src.rpm">
          <filename>grafana-9.2.10-23.el8_10.s390x.rpm</filename>
          <sum type="sha256">4bac17ae640843e503a2dd48500919a542a9d99844b3c334d00f0b2a471b506f</sum>
        </package>
        <package name="grafana-selinux" version="9.2.10" release="23.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-23.el8_10.src.rpm">
          <filename>grafana-selinux-9.2.10-23.el8_10.s390x.rpm</filename>
          <sum type="sha256">8b5c826aea47fa90bc88c431f99f567366851fa7b77f2df4045147648559be34</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7895</id>
    <title>Important: compat-openssl10 security update</title>
    <issued date="2025-05-19 00:00:00"/>
    <updated date="2025-05-19 13:26:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>compat-openssl10 security update</summary>
    <description>The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries and is provided for compatibility with previous releases and software that does not support compilation with OpenSSL-1.1.  

Security Fix(es):  

  * openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7895" id="RHSA-2025:7895" type="rhsa" title="RHSA-2025:7895"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0286" id="CVE-2023-0286" type="cve" title="CVE-2023-0286"/>
      <reference href="https://bugzilla.redhat.com/2164440" id="2164440" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-7895.html" id="ALSA-2025:7895" type="self" title="ALSA-2025:7895"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="compat-openssl10" version="1.0.2o" release="4.el8_10.1" epoch="1" arch="s390x" src="compat-openssl10-1.0.2o-4.el8_10.1.src.rpm">
          <filename>compat-openssl10-1.0.2o-4.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">72042a24ec7d7b2c2cf01dd91e85c89409e8c528b45cf0cce44a8172ff9d26c5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7967</id>
    <title>Important: osbuild-composer security update</title>
    <issued date="2025-05-19 00:00:00"/>
    <updated date="2025-05-19 13:24:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>osbuild-composer security update</summary>
    <description>A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients.  

Security Fix(es):  

  * golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7967" id="RHSA-2025:7967" type="rhsa" title="RHSA-2025:7967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30204" id="CVE-2025-30204" type="cve" title="CVE-2025-30204"/>
      <reference href="https://bugzilla.redhat.com/2354195" id="2354195" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-7967.html" id="ALSA-2025:7967" type="self" title="ALSA-2025:7967"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="osbuild-composer" version="101" release="3.el8_10.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101-3.el8_10.alma.1.src.rpm">
          <filename>osbuild-composer-101-3.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">048b18829905d6e320333910c8e5056bf7b7848fa0b7302dfea6eb4f81f38ffa</sum>
        </package>
        <package name="osbuild-composer-worker" version="101" release="3.el8_10.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101-3.el8_10.alma.1.src.rpm">
          <filename>osbuild-composer-worker-101-3.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">3dd87f230d5f2c5bdc91f95737d02e49869d404999b4a49d55f39c25d350fbae</sum>
        </package>
        <package name="osbuild-composer-core" version="101" release="3.el8_10.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101-3.el8_10.alma.1.src.rpm">
          <filename>osbuild-composer-core-101-3.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">64c74e54b54a0675ca80a898c6ef922b8a0a16af6df6462c3320215c4d480150</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8046</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2025-05-20 00:00:00"/>
    <updated date="2025-05-21 12:49:52"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2025-31205)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-31257)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8046" id="RHSA-2025:8046" type="rhsa" title="RHSA-2025:8046"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31205" id="CVE-2025-31205" type="cve" title="CVE-2025-31205"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31257" id="CVE-2025-31257" type="cve" title="CVE-2025-31257"/>
      <reference href="https://bugzilla.redhat.com/2366501" id="2366501" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2366504" id="2366504" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8046.html" id="ALSA-2025:8046" type="self" title="ALSA-2025:8046"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="webkit2gtk3" version="2.48.2" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.48.2-1.el8_10.src.rpm">
          <filename>webkit2gtk3-2.48.2-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">9e0f8fc946b39540617ced9a1030682e9502c8202c6162c7448bdf1239fa19d6</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.48.2" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.48.2-1.el8_10.src.rpm">
          <filename>webkit2gtk3-devel-2.48.2-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a05d24c0462577c867ff3a5a0e1aa41dc8341768f428d1e7ce91c2558cdcdca6</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.48.2" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.48.2-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-2.48.2-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b9bb65cae3a10992ed63e964e4830a95f01d55506449279b3a9b9f2e8172694d</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.48.2" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.48.2-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.48.2-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b9c517abe6f3538a741008efccab6bff3398f5ce40e1e70afa41c316335dc88b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8060</id>
    <title>Important: firefox security update</title>
    <issued date="2025-05-21 00:00:00"/>
    <updated date="2025-05-21 07:19:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: Out-of-bounds access when resolving Promise objects (CVE-2025-4918)
  * firefox: Out-of-bounds access when optimizing linear sums (CVE-2025-4919)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8060" id="RHSA-2025:8060" type="rhsa" title="RHSA-2025:8060"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4918" id="CVE-2025-4918" type="cve" title="CVE-2025-4918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4919" id="CVE-2025-4919" type="cve" title="CVE-2025-4919"/>
      <reference href="https://bugzilla.redhat.com/2367016" id="2367016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367018" id="2367018" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8060.html" id="ALSA-2025:8060" type="self" title="ALSA-2025:8060"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="128.10.1" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-128.10.1-1.el8_10.alma.1.src.rpm">
          <filename>firefox-128.10.1-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">7b13ae6a4f4f1301a86b3248b3106d1eb5f914b7fc0cd35464b127f56ae43ccc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8132</id>
    <title>Important: libsoup security update</title>
    <issued date="2025-05-26 00:00:00"/>
    <updated date="2025-05-26 16:12:39"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsoup security update</summary>
    <description>The libsoup packages provide an HTTP client and server library for GNOME.  

Security Fix(es):  

  * libsoup: Heap buffer over-read in `skip_insignificant_space` when sniffing content (CVE-2025-2784)
  * libsoup: Denial of Service attack to websocket server (CVE-2025-32049)
  * libsoup: OOB Read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process (CVE-2025-32914)
  * libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup (CVE-2025-4948)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8132" id="RHSA-2025:8132" type="rhsa" title="RHSA-2025:8132"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-2784" id="CVE-2025-2784" type="cve" title="CVE-2025-2784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32049" id="CVE-2025-32049" type="cve" title="CVE-2025-32049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32914" id="CVE-2025-32914" type="cve" title="CVE-2025-32914"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4948" id="CVE-2025-4948" type="cve" title="CVE-2025-4948"/>
      <reference href="https://bugzilla.redhat.com/2354669" id="2354669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357066" id="2357066" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359358" id="2359358" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367183" id="2367183" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8132.html" id="ALSA-2025:8132" type="self" title="ALSA-2025:8132"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libsoup-devel" version="2.62.3" release="9.el8_10" epoch="0" arch="s390x" src="libsoup-2.62.3-9.el8_10.src.rpm">
          <filename>libsoup-devel-2.62.3-9.el8_10.s390x.rpm</filename>
          <sum type="sha256">c6d8c9ab91b3f94a10425510721cd7c60ad77198ed8ab86ca9136e784fc14a16</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8201</id>
    <title>Important: gstreamer1-plugins-bad-free security update</title>
    <issued date="2025-05-27 00:00:00"/>
    <updated date="2025-05-27 13:26:13"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-bad-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.  

Security Fix(es):  

  * GStreamer: GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-3887)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8201" id="RHSA-2025:8201" type="rhsa" title="RHSA-2025:8201"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3887" id="CVE-2025-3887" type="cve" title="CVE-2025-3887"/>
      <reference href="https://bugzilla.redhat.com/2367919" id="2367919" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8201.html" id="ALSA-2025:8201" type="self" title="ALSA-2025:8201"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="gstreamer1-plugins-bad-free" version="1.16.1" release="5.el8_10" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.16.1-5.el8_10.src.rpm">
          <filename>gstreamer1-plugins-bad-free-1.16.1-5.el8_10.s390x.rpm</filename>
          <sum type="sha256">13a5d8f922c6b5f57d75b208505f3c9224241fd719bf06b636d7a81a075e75c6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8308</id>
    <title>Important: firefox security update</title>
    <issued date="2025-05-29 00:00:00"/>
    <updated date="2025-05-29 21:11:26"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details (CVE-2025-5267)
  * firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)
  * firefox: thunderbird: Memory safety bugs (CVE-2025-5268)
  * firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)
  * firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content (CVE-2025-5263)
  * firefox: thunderbird: Memory safety bug (CVE-2025-5269)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8308" id="RHSA-2025:8308" type="rhsa" title="RHSA-2025:8308"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5263" id="CVE-2025-5263" type="cve" title="CVE-2025-5263"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5264" id="CVE-2025-5264" type="cve" title="CVE-2025-5264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5266" id="CVE-2025-5266" type="cve" title="CVE-2025-5266"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5267" id="CVE-2025-5267" type="cve" title="CVE-2025-5267"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5268" id="CVE-2025-5268" type="cve" title="CVE-2025-5268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5269" id="CVE-2025-5269" type="cve" title="CVE-2025-5269"/>
      <reference href="https://bugzilla.redhat.com/2368750" id="2368750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368751" id="2368751" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368752" id="2368752" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368755" id="2368755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368756" id="2368756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368757" id="2368757" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8308.html" id="ALSA-2025:8308" type="self" title="ALSA-2025:8308"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="128.11.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-128.11.0-1.el8_10.alma.1.src.rpm">
          <filename>firefox-128.11.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">051c2d4837a964956c9cd561a97a35a6da7c2a3b4953cc254fa954018f047c5a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8336</id>
    <title>Important: varnish:6 security update</title>
    <issued date="2025-06-02 00:00:00"/>
    <updated date="2025-07-02 11:50:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>varnish:6 security update</summary>
    <description>Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.  

Security Fix(es):  

  * varnish: request smuggling attacks (CVE-2025-47905)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8336" id="RHSA-2025:8336" type="rhsa" title="RHSA-2025:8336"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47905" id="CVE-2025-47905" type="cve" title="CVE-2025-47905"/>
      <reference href="https://bugzilla.redhat.com/2364235" id="2364235" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8336.html" id="ALSA-2025:8336" type="self" title="ALSA-2025:8336"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="varnish" stream="6" version="8100020250604102012" context="9edba152" arch="s390x"/>
        <package name="varnish-modules" version="0.15.0" release="6.module_el8.9.0+3826+307eaba4" epoch="0" arch="s390x" src="varnish-modules-0.15.0-6.module_el8.9.0+3826+307eaba4.src.rpm">
          <filename>varnish-modules-0.15.0-6.module_el8.9.0+3826+307eaba4.s390x.rpm</filename>
          <sum type="sha256">28659d37dbbca025744a92bfc64de1f5c76568a4bdb476681c359f70da0cbb6f</sum>
        </package>
        <package name="varnish-devel" version="6.0.13" release="1.module_el8.10.0+4003+9759c3c1.1" epoch="0" arch="s390x" src="varnish-6.0.13-1.module_el8.10.0+4003+9759c3c1.1.src.rpm">
          <filename>varnish-devel-6.0.13-1.module_el8.10.0+4003+9759c3c1.1.s390x.rpm</filename>
          <sum type="sha256">ad7ba8fc16afe3e61e185fb109cc994d0f72a3a1686633e554cdc59c9e98ebde</sum>
        </package>
        <package name="varnish-docs" version="6.0.13" release="1.module_el8.10.0+4003+9759c3c1.1" epoch="0" arch="s390x" src="varnish-6.0.13-1.module_el8.10.0+4003+9759c3c1.1.src.rpm">
          <filename>varnish-docs-6.0.13-1.module_el8.10.0+4003+9759c3c1.1.s390x.rpm</filename>
          <sum type="sha256">b057d69c3a4f1b1ff86b40b5cee00ecd50ef332994ee706b9f40bf37607d3d2a</sum>
        </package>
        <package name="varnish" version="6.0.13" release="1.module_el8.10.0+4003+9759c3c1.1" epoch="0" arch="s390x" src="varnish-6.0.13-1.module_el8.10.0+4003+9759c3c1.1.src.rpm">
          <filename>varnish-6.0.13-1.module_el8.10.0+4003+9759c3c1.1.s390x.rpm</filename>
          <sum type="sha256">deb24a87eb41430c1d24601798218cc3fab1c4010e15381c1711b4c0908aa823</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8414</id>
    <title>Moderate: git security update</title>
    <issued date="2025-06-03 00:00:00"/>
    <updated date="2025-06-03 09:37:45"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>git security update</summary>
    <description>Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.  

Security Fix(es):  

  * git: The sideband payload is passed unfiltered to the terminal in git (CVE-2024-52005)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8414" id="RHSA-2025:8414" type="rhsa" title="RHSA-2025:8414"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52005" id="CVE-2024-52005" type="cve" title="CVE-2024-52005"/>
      <reference href="https://bugzilla.redhat.com/2338289" id="2338289" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8414.html" id="ALSA-2025:8414" type="self" title="ALSA-2025:8414"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="gitk" version="2.43.5" release="3.el8_10" epoch="0" arch="noarch" src="git-2.43.5-3.el8_10.src.rpm">
          <filename>gitk-2.43.5-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">1a67195f6528acbb5262342b7efb08f165a44c830afb348bfbbbf81ca243403a</sum>
        </package>
        <package name="git-svn" version="2.43.5" release="3.el8_10" epoch="0" arch="noarch" src="git-2.43.5-3.el8_10.src.rpm">
          <filename>git-svn-2.43.5-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">2b5c40ff404017a94a3b0db9441a0a367c239348eed01660041bfb6f2f10c92b</sum>
        </package>
        <package name="perl-Git" version="2.43.5" release="3.el8_10" epoch="0" arch="noarch" src="git-2.43.5-3.el8_10.src.rpm">
          <filename>perl-Git-2.43.5-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">44217d7593b680de570f31548f7a9ca1d6b40b8bc834490273fc993364566182</sum>
        </package>
        <package name="git-gui" version="2.43.5" release="3.el8_10" epoch="0" arch="noarch" src="git-2.43.5-3.el8_10.src.rpm">
          <filename>git-gui-2.43.5-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">4886a91e48213f99381214bcfb569db003a9c4916eccdb4b1a0b12dc434b8b67</sum>
        </package>
        <package name="git-subtree" version="2.43.5" release="3.el8_10" epoch="0" arch="s390x" src="git-2.43.5-3.el8_10.src.rpm">
          <filename>git-subtree-2.43.5-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">4e8a0a12d809e1d0e89b882b528577bbdf1d94733d11e7afc1d543866b9980f3</sum>
        </package>
        <package name="gitweb" version="2.43.5" release="3.el8_10" epoch="0" arch="noarch" src="git-2.43.5-3.el8_10.src.rpm">
          <filename>gitweb-2.43.5-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">5449e81dcfb5f0862ac0131b04cbed88c715eaf616cfb20acb2786c6334d31ba</sum>
        </package>
        <package name="git-email" version="2.43.5" release="3.el8_10" epoch="0" arch="noarch" src="git-2.43.5-3.el8_10.src.rpm">
          <filename>git-email-2.43.5-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">58dfee701cfe8b593bebbd152b4880ed1fc680160477dfe8a0c4f14722f9f849</sum>
        </package>
        <package name="git-credential-libsecret" version="2.43.5" release="3.el8_10" epoch="0" arch="s390x" src="git-2.43.5-3.el8_10.src.rpm">
          <filename>git-credential-libsecret-2.43.5-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">59c6c21d46fa9de6c3703b0c34df70acf183f9fdd66c53ee376f0e1ee04c011f</sum>
        </package>
        <package name="git-core-doc" version="2.43.5" release="3.el8_10" epoch="0" arch="noarch" src="git-2.43.5-3.el8_10.src.rpm">
          <filename>git-core-doc-2.43.5-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">5c8cffbaf336c613198dbaac76c403c7e11a72dd061084f5149e65913c63091e</sum>
        </package>
        <package name="perl-Git-SVN" version="2.43.5" release="3.el8_10" epoch="0" arch="noarch" src="git-2.43.5-3.el8_10.src.rpm">
          <filename>perl-Git-SVN-2.43.5-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">79c12998516bdf929e9095df35568fb00357089706898036b86edff5d7aa488e</sum>
        </package>
        <package name="git-core" version="2.43.5" release="3.el8_10" epoch="0" arch="s390x" src="git-2.43.5-3.el8_10.src.rpm">
          <filename>git-core-2.43.5-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">8a45cd93851fea394bc49d234428fb8716a1c3f11beea4adab0fd2c5e3386cd8</sum>
        </package>
        <package name="git" version="2.43.5" release="3.el8_10" epoch="0" arch="s390x" src="git-2.43.5-3.el8_10.src.rpm">
          <filename>git-2.43.5-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">95620423fcc4ade39c313eee8530c5c12b64ecb2a5cab35efe1b7e73a22566eb</sum>
        </package>
        <package name="git-instaweb" version="2.43.5" release="3.el8_10" epoch="0" arch="noarch" src="git-2.43.5-3.el8_10.src.rpm">
          <filename>git-instaweb-2.43.5-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">a9e281b2f49f3c03ddf960072f1ed9e19da0bcf8dadaa897f54632f8a13081a6</sum>
        </package>
        <package name="git-all" version="2.43.5" release="3.el8_10" epoch="0" arch="noarch" src="git-2.43.5-3.el8_10.src.rpm">
          <filename>git-all-2.43.5-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">ae9e583a7f04244c1cbe476afb1fb975d99ffa21bea46c549e675a79285e6a2a</sum>
        </package>
        <package name="git-daemon" version="2.43.5" release="3.el8_10" epoch="0" arch="s390x" src="git-2.43.5-3.el8_10.src.rpm">
          <filename>git-daemon-2.43.5-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">da7fb6b4cbc1c06e13f5af5293779cdb27a665dfbe445a0d6b01bd63a85926d3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8419</id>
    <title>Low: python36:3.6 security update</title>
    <issued date="2025-06-03 00:00:00"/>
    <updated date="2025-06-05 14:04:55"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>python36:3.6 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python-pymongo: Out-of-bounds read in bson module (CVE-2024-5629)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8419" id="RHSA-2025:8419" type="rhsa" title="RHSA-2025:8419"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5629" id="CVE-2024-5629" type="cve" title="CVE-2024-5629"/>
      <reference href="https://bugzilla.redhat.com/2290585" id="2290585" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8419.html" id="ALSA-2025:8419" type="self" title="ALSA-2025:8419"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="python36" stream="3.6" version="8100020250604045142" context="17efdbc7" arch="s390x"/>
        <package name="python3-PyMySQL" version="0.10.1" release="2.module_el8.9.0+3700+efebe9fd" epoch="0" arch="noarch" src="python-PyMySQL-0.10.1-2.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python3-PyMySQL-0.10.1-2.module_el8.9.0+3700+efebe9fd.noarch.rpm</filename>
          <sum type="sha256">00ce4561db1aa8332eb4df72cc4ce7a7849ad039ea8d26435ee2ae2c8e79e5e8</sum>
        </package>
        <package name="python3-wheel" version="0.31.1" release="3.module_el8.9.0+3700+efebe9fd" epoch="1" arch="noarch" src="python-wheel-0.31.1-3.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python3-wheel-0.31.1-3.module_el8.9.0+3700+efebe9fd.noarch.rpm</filename>
          <sum type="sha256">07363d59325506ef178e5681f428e352fa9f9004b1b808dbc91cde789f779978</sum>
        </package>
        <package name="python3-pymongo-gridfs" version="3.7.0" release="2.module_el8.10.0+3998+2cf36268" epoch="0" arch="s390x" src="python-pymongo-3.7.0-2.module_el8.10.0+3998+2cf36268.src.rpm">
          <filename>python3-pymongo-gridfs-3.7.0-2.module_el8.10.0+3998+2cf36268.s390x.rpm</filename>
          <sum type="sha256">0c3d36f8df03d6cdedcd4129ad941fb9aaf0d421c9b9bb8d099589352362dccd</sum>
        </package>
        <package name="python-nose-docs" version="1.3.7" release="31.module_el8.9.0+3700+efebe9fd" epoch="0" arch="noarch" src="python-nose-1.3.7-31.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python-nose-docs-1.3.7-31.module_el8.9.0+3700+efebe9fd.noarch.rpm</filename>
          <sum type="sha256">0fc8a8e1a308fd4898c5f00bdfa6b6b96ee7eafb3c92e63103002ca2ba63ca1a</sum>
        </package>
        <package name="python3-nose" version="1.3.7" release="31.module_el8.9.0+3700+efebe9fd" epoch="0" arch="noarch" src="python-nose-1.3.7-31.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python3-nose-1.3.7-31.module_el8.9.0+3700+efebe9fd.noarch.rpm</filename>
          <sum type="sha256">153b00d62c1f300cef4f8133dab99c2a2b260ec0318ddcb0fe7ad45f11233869</sum>
        </package>
        <package name="python-pymongo-doc" version="3.7.0" release="2.module_el8.10.0+3998+2cf36268" epoch="0" arch="noarch" src="python-pymongo-3.7.0-2.module_el8.10.0+3998+2cf36268.src.rpm">
          <filename>python-pymongo-doc-3.7.0-2.module_el8.10.0+3998+2cf36268.noarch.rpm</filename>
          <sum type="sha256">1978c33a27096c21f9101bdde2cc4b222c7245db15e125a3ba42b8469a6e162e</sum>
        </package>
        <package name="python-sqlalchemy-doc" version="1.3.2" release="3.module_el8.10.0+3769+3838165b" epoch="0" arch="noarch" src="python-sqlalchemy-1.3.2-3.module_el8.10.0+3769+3838165b.src.rpm">
          <filename>python-sqlalchemy-doc-1.3.2-3.module_el8.10.0+3769+3838165b.noarch.rpm</filename>
          <sum type="sha256">2d1210603f6b89e97a47993310aa67ff484c1c9955bb9ed8df221ecca38b7437</sum>
        </package>
        <package name="python3-sqlalchemy" version="1.3.2" release="3.module_el8.10.0+3769+3838165b" epoch="0" arch="s390x" src="python-sqlalchemy-1.3.2-3.module_el8.10.0+3769+3838165b.src.rpm">
          <filename>python3-sqlalchemy-1.3.2-3.module_el8.10.0+3769+3838165b.s390x.rpm</filename>
          <sum type="sha256">30f759f27583cb3151e7a396af5fafe5e57757665ff7d6607c016a3ed9bc4562</sum>
        </package>
        <package name="python3-wheel-wheel" version="0.31.1" release="3.module_el8.9.0+3700+efebe9fd" epoch="1" arch="noarch" src="python-wheel-0.31.1-3.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python3-wheel-wheel-0.31.1-3.module_el8.9.0+3700+efebe9fd.noarch.rpm</filename>
          <sum type="sha256">4aa9829901847b71c453da851d6732efbe4ca26c5ee9dfcae01b189380c42840</sum>
        </package>
        <package name="python3-pymongo" version="3.7.0" release="2.module_el8.10.0+3998+2cf36268" epoch="0" arch="s390x" src="python-pymongo-3.7.0-2.module_el8.10.0+3998+2cf36268.src.rpm">
          <filename>python3-pymongo-3.7.0-2.module_el8.10.0+3998+2cf36268.s390x.rpm</filename>
          <sum type="sha256">4f7cf6ec34e2f70de3f78ab97f9342d8d89aa9842e42f3ae4dec309b72e77080</sum>
        </package>
        <package name="python3-bson" version="3.7.0" release="2.module_el8.10.0+3998+2cf36268" epoch="0" arch="s390x" src="python-pymongo-3.7.0-2.module_el8.10.0+3998+2cf36268.src.rpm">
          <filename>python3-bson-3.7.0-2.module_el8.10.0+3998+2cf36268.s390x.rpm</filename>
          <sum type="sha256">537cf9b85adde005dfe09dd6245738b05b0561cea391e012211f033a8fc42a5c</sum>
        </package>
        <package name="python3-docutils" version="0.14" release="12.module_el8.9.0+3700+efebe9fd" epoch="0" arch="noarch" src="python-docutils-0.14-12.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python3-docutils-0.14-12.module_el8.9.0+3700+efebe9fd.noarch.rpm</filename>
          <sum type="sha256">7beb84a9dcc1562264284092c7a9183262364e73e3804f5a081f974f2674adbc</sum>
        </package>
        <package name="python3-docs" version="3.6.7" release="2.module_el8.9.0+3700+efebe9fd" epoch="0" arch="noarch" src="python-docs-3.6.7-2.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python3-docs-3.6.7-2.module_el8.9.0+3700+efebe9fd.noarch.rpm</filename>
          <sum type="sha256">87f04159e458d0aa921e1f3dec6ccdb98d9535bf1ab68fbecf6aa25b5d44a410</sum>
        </package>
        <package name="python3-pygments" version="2.2.0" release="22.module_el8.9.0+3700+efebe9fd" epoch="0" arch="noarch" src="python-pygments-2.2.0-22.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python3-pygments-2.2.0-22.module_el8.9.0+3700+efebe9fd.noarch.rpm</filename>
          <sum type="sha256">93ea55c7a1e9ea1b53a53e0ad2cae0528ca01c486bcb5341dfe78cce19e61e4b</sum>
        </package>
        <package name="python3-distro" version="1.4.0" release="2.module_el8.9.0+3700+efebe9fd" epoch="0" arch="noarch" src="python-distro-1.4.0-2.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python3-distro-1.4.0-2.module_el8.9.0+3700+efebe9fd.noarch.rpm</filename>
          <sum type="sha256">96ba6744f5f48c89242c92cd68e73ef43f7fbeb495adae87a47e03f10c80f80d</sum>
        </package>
        <package name="python3-virtualenv" version="15.1.0" release="23.module_el8.10.0+3937+b6a3652f" epoch="0" arch="noarch" src="python-virtualenv-15.1.0-23.module_el8.10.0+3937+b6a3652f.src.rpm">
          <filename>python3-virtualenv-15.1.0-23.module_el8.10.0+3937+b6a3652f.noarch.rpm</filename>
          <sum type="sha256">ad076fec16c93bf196fc809d0fd82c7c3a56f2140e43568ccc211188313bd4ac</sum>
        </package>
        <package name="python3-scipy" version="1.0.0" release="21.module_el8.9.0+3700+efebe9fd" epoch="0" arch="s390x" src="scipy-1.0.0-21.module_el8.9.0+3700+efebe9fd.src.rpm">
          <filename>python3-scipy-1.0.0-21.module_el8.9.0+3700+efebe9fd.s390x.rpm</filename>
          <sum type="sha256">c4131f454751cf4cf043dd885123bde738a3fa2b62a458e412fdf205b0b909fb</sum>
        </package>
        <package name="python36-rpm-macros" version="3.6.8" release="39.module_el8.10.0+3769+3838165b" epoch="0" arch="noarch" src="python36-3.6.8-39.module_el8.10.0+3769+3838165b.src.rpm">
          <filename>python36-rpm-macros-3.6.8-39.module_el8.10.0+3769+3838165b.noarch.rpm</filename>
          <sum type="sha256">d2950adab74b29df44acbcc69a46b510b543ee7ba2d12246ed957d9badb5808c</sum>
        </package>
        <package name="python36-devel" version="3.6.8" release="39.module_el8.10.0+3769+3838165b" epoch="0" arch="s390x" src="python36-3.6.8-39.module_el8.10.0+3769+3838165b.src.rpm">
          <filename>python36-devel-3.6.8-39.module_el8.10.0+3769+3838165b.s390x.rpm</filename>
          <sum type="sha256">d9ff38c2e46759d49dc748f8acfb930e5950fbb12651fce560647b26ed5b06d6</sum>
        </package>
        <package name="python36-debug" version="3.6.8" release="39.module_el8.10.0+3769+3838165b" epoch="0" arch="s390x" src="python36-3.6.8-39.module_el8.10.0+3769+3838165b.src.rpm">
          <filename>python36-debug-3.6.8-39.module_el8.10.0+3769+3838165b.s390x.rpm</filename>
          <sum type="sha256">e43089c8ca90e89f643652aec9ecac35e65febac434bc9c69a3c91e850897e2f</sum>
        </package>
        <package name="python36" version="3.6.8" release="39.module_el8.10.0+3769+3838165b" epoch="0" arch="s390x" src="python36-3.6.8-39.module_el8.10.0+3769+3838165b.src.rpm">
          <filename>python36-3.6.8-39.module_el8.10.0+3769+3838165b.s390x.rpm</filename>
          <sum type="sha256">f077fd684030aacbdca92cf0d1b0d2e52f27234adc95a7dfa09ec1f54285163f</sum>
        </package>
        <package name="python-virtualenv-doc" version="15.1.0" release="23.module_el8.10.0+3937+b6a3652f" epoch="0" arch="noarch" src="python-virtualenv-15.1.0-23.module_el8.10.0+3937+b6a3652f.src.rpm">
          <filename>python-virtualenv-doc-15.1.0-23.module_el8.10.0+3937+b6a3652f.noarch.rpm</filename>
          <sum type="sha256">feaaf8e62c003c6924fa09e554fa946dba1da41a53fd0b74dd9b001fd3a56980</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8421</id>
    <title>Moderate: ghostscript security update</title>
    <issued date="2025-06-03 00:00:00"/>
    <updated date="2025-07-02 11:45:18"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.  

Security Fix(es):  

  * Ghostscript: NPDL device: Compression buffer overflow (CVE-2025-27832)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8421" id="RHSA-2025:8421" type="rhsa" title="RHSA-2025:8421"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27832" id="CVE-2025-27832" type="cve" title="CVE-2025-27832"/>
      <reference href="https://bugzilla.redhat.com/2354949" id="2354949" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8421.html" id="ALSA-2025:8421" type="self" title="ALSA-2025:8421"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="ghostscript" version="9.27" release="17.el8_10" epoch="0" arch="s390x" src="ghostscript-9.27-17.el8_10.src.rpm">
          <filename>ghostscript-9.27-17.el8_10.s390x.rpm</filename>
          <sum type="sha256">5e15d63cbfbb780e664faf70b6e5a9e7c7407eb4552ce237b068aba054c5f2c9</sum>
        </package>
        <package name="libgs" version="9.27" release="17.el8_10" epoch="0" arch="s390x" src="ghostscript-9.27-17.el8_10.src.rpm">
          <filename>libgs-9.27-17.el8_10.s390x.rpm</filename>
          <sum type="sha256">bf36860bde099c7fc8e995922c9bf750ef61cdabb039f10ea3de942f70bc4b03</sum>
        </package>
        <package name="ghostscript-x11" version="9.27" release="17.el8_10" epoch="0" arch="s390x" src="ghostscript-9.27-17.el8_10.src.rpm">
          <filename>ghostscript-x11-9.27-17.el8_10.s390x.rpm</filename>
          <sum type="sha256">cc6f93fff5c6f7719fda4c60f41ae3ba920ffa964915257b8ed3338550be8e87</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8432</id>
    <title>Moderate: perl-CPAN security update</title>
    <issued date="2025-06-03 00:00:00"/>
    <updated date="2025-06-03 15:12:15"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>perl-CPAN security update</summary>
    <description>The CPAN module is a tool to query, download and build perl modules from CPAN sites.  

Security Fix(es):  

  * perl-CPAN: Bypass of verification of signatures in CHECKSUMS files (CVE-2020-16156)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8432" id="RHSA-2025:8432" type="rhsa" title="RHSA-2025:8432"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-16156" id="CVE-2020-16156" type="cve" title="CVE-2020-16156"/>
      <reference href="https://bugzilla.redhat.com/2035273" id="2035273" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8432.html" id="ALSA-2025:8432" type="self" title="ALSA-2025:8432"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="perl-CPAN" version="2.18" release="402.el8_10" epoch="0" arch="noarch" src="perl-CPAN-2.18-402.el8_10.src.rpm">
          <filename>perl-CPAN-2.18-402.el8_10.noarch.rpm</filename>
          <sum type="sha256">7e236bdcc1dce17eccaf27f6648b5142bf1c6f5ec0869eac8d686ad5d523fc67</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8478</id>
    <title>Moderate: go-toolset:rhel8 security update</title>
    <issued date="2025-06-04 00:00:00"/>
    <updated date="2025-06-05 13:57:38"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>go-toolset:rhel8 security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.   

Security Fix(es):  

  * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8478" id="RHSA-2025:8478" type="rhsa" title="RHSA-2025:8478"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22871" id="CVE-2025-22871" type="cve" title="CVE-2025-22871"/>
      <reference href="https://bugzilla.redhat.com/2358493" id="2358493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8478.html" id="ALSA-2025:8478" type="self" title="ALSA-2025:8478"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="go-toolset" stream="rhel8" version="8100020250604045508" context="9edba152" arch="s390x"/>
        <package name="go-toolset" version="1.23.9" release="1.module_el8.10.0+4000+1ad1b2cc" epoch="0" arch="s390x" src="go-toolset-1.23.9-1.module_el8.10.0+4000+1ad1b2cc.src.rpm">
          <filename>go-toolset-1.23.9-1.module_el8.10.0+4000+1ad1b2cc.s390x.rpm</filename>
          <sum type="sha256">1ce4afea387799c5e32270816fa0c5b9e06effb49753ce24381d9871a9c7af27</sum>
        </package>
        <package name="golang-bin" version="1.23.9" release="1.module_el8.10.0+4000+1ad1b2cc" epoch="0" arch="s390x" src="golang-1.23.9-1.module_el8.10.0+4000+1ad1b2cc.src.rpm">
          <filename>golang-bin-1.23.9-1.module_el8.10.0+4000+1ad1b2cc.s390x.rpm</filename>
          <sum type="sha256">400e4e63627b83bc2fe5ec3ba44274f8e8769554179db405d7dc577d79636156</sum>
        </package>
        <package name="golang-src" version="1.23.9" release="1.module_el8.10.0+4000+1ad1b2cc" epoch="0" arch="noarch" src="golang-1.23.9-1.module_el8.10.0+4000+1ad1b2cc.src.rpm">
          <filename>golang-src-1.23.9-1.module_el8.10.0+4000+1ad1b2cc.noarch.rpm</filename>
          <sum type="sha256">6a974b6a9349f988dc6f3eec233d7cfec63d1790f8811ffc999bff5363d5f42b</sum>
        </package>
        <package name="golang-misc" version="1.23.9" release="1.module_el8.10.0+4000+1ad1b2cc" epoch="0" arch="noarch" src="golang-1.23.9-1.module_el8.10.0+4000+1ad1b2cc.src.rpm">
          <filename>golang-misc-1.23.9-1.module_el8.10.0+4000+1ad1b2cc.noarch.rpm</filename>
          <sum type="sha256">aebcaad7ab962a908f88af792715af3e96e160c083a1c9c0e307a14158d40c8f</sum>
        </package>
        <package name="golang" version="1.23.9" release="1.module_el8.10.0+4000+1ad1b2cc" epoch="0" arch="s390x" src="golang-1.23.9-1.module_el8.10.0+4000+1ad1b2cc.src.rpm">
          <filename>golang-1.23.9-1.module_el8.10.0+4000+1ad1b2cc.s390x.rpm</filename>
          <sum type="sha256">c073167b1fd2fa839b37fbee850e70bac867a4b77e43a4c8c7c624271067af95</sum>
        </package>
        <package name="golang-tests" version="1.23.9" release="1.module_el8.10.0+4000+1ad1b2cc" epoch="0" arch="noarch" src="golang-1.23.9-1.module_el8.10.0+4000+1ad1b2cc.src.rpm">
          <filename>golang-tests-1.23.9-1.module_el8.10.0+4000+1ad1b2cc.noarch.rpm</filename>
          <sum type="sha256">d4fa862c2a724c5cb62e5afd0c77360316cc839bdae8b31725dbd66930e3f710</sum>
        </package>
        <package name="golang-docs" version="1.23.9" release="1.module_el8.10.0+4000+1ad1b2cc" epoch="0" arch="noarch" src="golang-1.23.9-1.module_el8.10.0+4000+1ad1b2cc.src.rpm">
          <filename>golang-docs-1.23.9-1.module_el8.10.0+4000+1ad1b2cc.noarch.rpm</filename>
          <sum type="sha256">d85c173d55847d5270995522e5a0edff273c2774682db7498f44fc011426df82</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8506</id>
    <title>Important: nodejs:22 security update</title>
    <issued date="2025-06-04 00:00:00"/>
    <updated date="2025-06-05 14:07:25"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:22 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js (CVE-2025-23166)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8506" id="RHSA-2025:8506" type="rhsa" title="RHSA-2025:8506"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23166" id="CVE-2025-23166" type="cve" title="CVE-2025-23166"/>
      <reference href="https://bugzilla.redhat.com/2367163" id="2367163" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8506.html" id="ALSA-2025:8506" type="self" title="ALSA-2025:8506"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="nodejs" stream="22" version="8100020250604143121" context="9c84b808" arch="s390x"/>
        <package name="nodejs-full-i18n" version="22.16.0" release="1.module_el8.10.0+4006+3c416519" epoch="1" arch="s390x" src="nodejs-22.16.0-1.module_el8.10.0+4006+3c416519.src.rpm">
          <filename>nodejs-full-i18n-22.16.0-1.module_el8.10.0+4006+3c416519.s390x.rpm</filename>
          <sum type="sha256">0369a92e9f305b87e756be3732c4b814f2d313dcd6a46de7da9feb640e4cdc22</sum>
        </package>
        <package name="nodejs" version="22.16.0" release="1.module_el8.10.0+4006+3c416519" epoch="1" arch="s390x" src="nodejs-22.16.0-1.module_el8.10.0+4006+3c416519.src.rpm">
          <filename>nodejs-22.16.0-1.module_el8.10.0+4006+3c416519.s390x.rpm</filename>
          <sum type="sha256">16c02c58c666efa363466e26e0c65fa2ae7f58652b1e91b16c237e79c954b3f6</sum>
        </package>
        <package name="nodejs-libs" version="22.16.0" release="1.module_el8.10.0+4006+3c416519" epoch="1" arch="s390x" src="nodejs-22.16.0-1.module_el8.10.0+4006+3c416519.src.rpm">
          <filename>nodejs-libs-22.16.0-1.module_el8.10.0+4006+3c416519.s390x.rpm</filename>
          <sum type="sha256">1af3a006b2525a1ec8cc25e8079bfca46167408199f585b96b3f1cc3083364ab</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el8.10.0+4006+3c416519" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.10.0+4006+3c416519.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el8.10.0+4006+3c416519.noarch.rpm</filename>
          <sum type="sha256">2bd2bc02d533996f2f5591fe5845ffa85fc8cbf2b4c76370d7ed5d8010a16d05</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.10.0+3983+391a1a04" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.10.0+3983+391a1a04.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.10.0+3983+391a1a04.noarch.rpm</filename>
          <sum type="sha256">53d47bcd3ba5d6d0d0045485ca1f36974f9a4fcf7250dd99e461957b5569b3bd</sum>
        </package>
        <package name="v8-12.4-devel" version="12.4.254.21" release="1.22.16.0.1.module_el8.10.0+4006+3c416519" epoch="3" arch="s390x" src="nodejs-22.16.0-1.module_el8.10.0+4006+3c416519.src.rpm">
          <filename>v8-12.4-devel-12.4.254.21-1.22.16.0.1.module_el8.10.0+4006+3c416519.s390x.rpm</filename>
          <sum type="sha256">57274b64b55faea7a953851fc87f8c8834510e1267de41cff50fc7b5a3e83283</sum>
        </package>
        <package name="npm" version="10.9.2" release="1.22.16.0.1.module_el8.10.0+4006+3c416519" epoch="1" arch="s390x" src="nodejs-22.16.0-1.module_el8.10.0+4006+3c416519.src.rpm">
          <filename>npm-10.9.2-1.22.16.0.1.module_el8.10.0+4006+3c416519.s390x.rpm</filename>
          <sum type="sha256">57e499cd8c08bf8c4485737e5afc61e7bc6149c183893dc35381b85c2ee2112c</sum>
        </package>
        <package name="nodejs-docs" version="22.16.0" release="1.module_el8.10.0+4006+3c416519" epoch="1" arch="noarch" src="nodejs-22.16.0-1.module_el8.10.0+4006+3c416519.src.rpm">
          <filename>nodejs-docs-22.16.0-1.module_el8.10.0+4006+3c416519.noarch.rpm</filename>
          <sum type="sha256">6c746cf4d5a256154b7d33ee9ca987b70ce5c581848cb5a103e628a280b47dfe</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el8.10.0+3961+6a788e57" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.10.0+3961+6a788e57.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el8.10.0+3961+6a788e57.noarch.rpm</filename>
          <sum type="sha256">f68cc5d7a383cbee17ad43acc466061915b2b7309b6696369168e2a3c4a7158c</sum>
        </package>
        <package name="nodejs-devel" version="22.16.0" release="1.module_el8.10.0+4006+3c416519" epoch="1" arch="s390x" src="nodejs-22.16.0-1.module_el8.10.0+4006+3c416519.src.rpm">
          <filename>nodejs-devel-22.16.0-1.module_el8.10.0+4006+3c416519.s390x.rpm</filename>
          <sum type="sha256">f9b76775929a42f358db6da9d0faab9af7464ac37c0cb3651ddc33a9c6c591c5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8514</id>
    <title>Important: nodejs:20 security update</title>
    <issued date="2025-06-04 00:00:00"/>
    <updated date="2025-06-05 14:09:44"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:20 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js (CVE-2025-23166)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8514" id="RHSA-2025:8514" type="rhsa" title="RHSA-2025:8514"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23166" id="CVE-2025-23166" type="cve" title="CVE-2025-23166"/>
      <reference href="https://bugzilla.redhat.com/2367163" id="2367163" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8514.html" id="ALSA-2025:8514" type="self" title="ALSA-2025:8514"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="nodejs" stream="20" version="8100020250604143337" context="9edba152" arch="s390x"/>
        <package name="nodejs-docs" version="20.19.2" release="1.module_el8.10.0+4007+01f7d99b" epoch="1" arch="noarch" src="nodejs-20.19.2-1.module_el8.10.0+4007+01f7d99b.src.rpm">
          <filename>nodejs-docs-20.19.2-1.module_el8.10.0+4007+01f7d99b.noarch.rpm</filename>
          <sum type="sha256">155eb7974e04d3be9fa275b42f2964547769f10a9f54ea8e5064b3f73759af7e</sum>
        </package>
        <package name="nodejs-devel" version="20.19.2" release="1.module_el8.10.0+4007+01f7d99b" epoch="1" arch="s390x" src="nodejs-20.19.2-1.module_el8.10.0+4007+01f7d99b.src.rpm">
          <filename>nodejs-devel-20.19.2-1.module_el8.10.0+4007+01f7d99b.s390x.rpm</filename>
          <sum type="sha256">2935477db4be3e28b23787f98755f0626b138673a4c2849029ad70efa89e4a6d</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.10.0+3982+85c136aa" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.10.0+3982+85c136aa.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.10.0+3982+85c136aa.noarch.rpm</filename>
          <sum type="sha256">2a3ac075981f56758aac0aa08cc55d71f2ca6610e6bc965f306dd6b9a8db442a</sum>
        </package>
        <package name="nodejs" version="20.19.2" release="1.module_el8.10.0+4007+01f7d99b" epoch="1" arch="s390x" src="nodejs-20.19.2-1.module_el8.10.0+4007+01f7d99b.src.rpm">
          <filename>nodejs-20.19.2-1.module_el8.10.0+4007+01f7d99b.s390x.rpm</filename>
          <sum type="sha256">351ba24e12a98b90996a74fd696608ee9e1d8936ca24a7afb5cfa2ceab9b1c32</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="4.module_el8.10.0+3987+dbda4426" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.10.0+3987+dbda4426.src.rpm">
          <filename>nodejs-packaging-2021.06-4.module_el8.10.0+3987+dbda4426.noarch.rpm</filename>
          <sum type="sha256">6a479cd49298404b833454d884d50275fdbaebeba78691f37251b420f9b76d71</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="4.module_el8.10.0+3958+472a6467" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-4.module_el8.10.0+3958+472a6467.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-4.module_el8.10.0+3958+472a6467.noarch.rpm</filename>
          <sum type="sha256">af48fab85994e826d5a0ca5a05df770fb8e54b94556401a5c6a6844f4c6dce64</sum>
        </package>
        <package name="npm" version="10.8.2" release="1.20.19.2.1.module_el8.10.0+4007+01f7d99b" epoch="1" arch="s390x" src="nodejs-20.19.2-1.module_el8.10.0+4007+01f7d99b.src.rpm">
          <filename>npm-10.8.2-1.20.19.2.1.module_el8.10.0+4007+01f7d99b.s390x.rpm</filename>
          <sum type="sha256">e2e74c0eaaa2d851f6dd8965610d0c0be878ac4d65c0aa195f16cf29c860fb21</sum>
        </package>
        <package name="nodejs-full-i18n" version="20.19.2" release="1.module_el8.10.0+4007+01f7d99b" epoch="1" arch="s390x" src="nodejs-20.19.2-1.module_el8.10.0+4007+01f7d99b.src.rpm">
          <filename>nodejs-full-i18n-20.19.2-1.module_el8.10.0+4007+01f7d99b.s390x.rpm</filename>
          <sum type="sha256">ff2ac8d640e6b83c741e8fea356523e91e2c90e76a87adeda8e6417e401c5e77</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8667</id>
    <title>Moderate: grafana security update</title>
    <issued date="2025-06-09 00:00:00"/>
    <updated date="2025-06-10 08:21:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.   

Security Fix(es):  

  * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8667" id="RHSA-2025:8667" type="rhsa" title="RHSA-2025:8667"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22871" id="CVE-2025-22871" type="cve" title="CVE-2025-22871"/>
      <reference href="https://bugzilla.redhat.com/2358493" id="2358493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8667.html" id="ALSA-2025:8667" type="self" title="ALSA-2025:8667"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="grafana" version="9.2.10" release="25.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-25.el8_10.src.rpm">
          <filename>grafana-9.2.10-25.el8_10.s390x.rpm</filename>
          <sum type="sha256">2bda817c081bd02029802d275e1c88b35d663a14496ec23de3e03f154a0c8011</sum>
        </package>
        <package name="grafana-selinux" version="9.2.10" release="25.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-25.el8_10.src.rpm">
          <filename>grafana-selinux-9.2.10-25.el8_10.s390x.rpm</filename>
          <sum type="sha256">ebc9963c23b187c15d406f6893c90f1ed75abafa91b8363df380ca6d75df5c1f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8676</id>
    <title>Moderate: libxslt security update</title>
    <issued date="2025-06-09 00:00:00"/>
    <updated date="2025-06-11 11:34:52"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxslt security update</summary>
    <description>libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.   

Security Fix(es):  

  * libxslt: Processing web content may disclose sensitive information (CVE-2023-40403)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8676" id="RHSA-2025:8676" type="rhsa" title="RHSA-2025:8676"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40403" id="CVE-2023-40403" type="cve" title="CVE-2023-40403"/>
      <reference href="https://bugzilla.redhat.com/2349766" id="2349766" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8676.html" id="ALSA-2025:8676" type="self" title="ALSA-2025:8676"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libxslt-devel" version="1.1.32" release="6.2.el8_10" epoch="0" arch="s390x" src="libxslt-1.1.32-6.2.el8_10.src.rpm">
          <filename>libxslt-devel-1.1.32-6.2.el8_10.s390x.rpm</filename>
          <sum type="sha256">2f87c313e26b68598ff203d63d34abc5b7d332b660dcfe7820245d228362acf8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8686</id>
    <title>Moderate: glibc security update</title>
    <issued date="2025-06-09 00:00:00"/>
    <updated date="2025-06-11 11:31:14"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH (CVE-2025-4802)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8686" id="RHSA-2025:8686" type="rhsa" title="RHSA-2025:8686"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4802" id="CVE-2025-4802" type="cve" title="CVE-2025-4802"/>
      <reference href="https://bugzilla.redhat.com/2367468" id="2367468" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8686.html" id="ALSA-2025:8686" type="self" title="ALSA-2025:8686"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="compat-libpthread-nonshared" version="2.28" release="251.el8_10.22" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.22.src.rpm">
          <filename>compat-libpthread-nonshared-2.28-251.el8_10.22.s390x.rpm</filename>
          <sum type="sha256">04888e849f7b2356bc4366b043e4c9afc35ce6d707972d90a599ee5faa200401</sum>
        </package>
        <package name="glibc-utils" version="2.28" release="251.el8_10.22" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.22.src.rpm">
          <filename>glibc-utils-2.28-251.el8_10.22.s390x.rpm</filename>
          <sum type="sha256">507f7110994f6006f5ca70b5f7b1641c0fb7df4bfb3440595dc9916bd6123a70</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8696</id>
    <title>Important: perl-FCGI:0.78 security update</title>
    <issued date="2025-06-09 00:00:00"/>
    <updated date="2025-07-02 11:34:27"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>perl-FCGI:0.78 security update</summary>
    <description>The perl-FCGI package provides a Perl module for writing FastCGI applications. FastCGI is a more efficient alternative to traditional CGI, as it keeps application processes persistent across multiple requests. This module allows Perl web applications to handle requests faster and with lower resource overhead, making it suitable for high-traffic environments.  

Security Fix(es):  

  * perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library (CVE-2025-40907)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8696" id="RHSA-2025:8696" type="rhsa" title="RHSA-2025:8696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40907" id="CVE-2025-40907" type="cve" title="CVE-2025-40907"/>
      <reference href="https://bugzilla.redhat.com/2366847" id="2366847" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8696.html" id="ALSA-2025:8696" type="self" title="ALSA-2025:8696"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="perl-FCGI" stream="0.78" version="8100020250612083908" context="082fdf2f" arch="s390x"/>
        <package name="perl-FCGI" version="0.78" release="12.module_el8.10.0+4011+62915be2" epoch="1" arch="s390x" src="perl-FCGI-0.78-12.module_el8.10.0+4011+62915be2.src.rpm">
          <filename>perl-FCGI-0.78-12.module_el8.10.0+4011+62915be2.s390x.rpm</filename>
          <sum type="sha256">f0f90d493529ce4786d290907b8ddbf81c18f28627e238e47c775a6799822f36</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8756</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-06-10 00:00:00"/>
    <updated date="2025-06-10 14:57:05"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link (CVE-2025-3909)
  * thunderbird: Sender Spoofing via Malformed From Header in Thunderbird (CVE-2025-3875)
  * thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-3877)
  * thunderbird: Tracking Links in Attachments Bypassed Remote Content Blocking (CVE-2025-3932)
  * firefox: thunderbird: Out-of-bounds access when resolving Promise objects (CVE-2025-4918)
  * firefox: thunderbird: Out-of-bounds access when optimizing linear sums (CVE-2025-4919)
  * firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details (CVE-2025-5267)
  * firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)
  * firefox: thunderbird: Memory safety bugs (CVE-2025-5268)
  * firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)
  * firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content (CVE-2025-5263)
  * firefox: thunderbird: Memory safety bug (CVE-2025-5269)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8756" id="RHSA-2025:8756" type="rhsa" title="RHSA-2025:8756"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3875" id="CVE-2025-3875" type="cve" title="CVE-2025-3875"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3877" id="CVE-2025-3877" type="cve" title="CVE-2025-3877"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3909" id="CVE-2025-3909" type="cve" title="CVE-2025-3909"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3932" id="CVE-2025-3932" type="cve" title="CVE-2025-3932"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4918" id="CVE-2025-4918" type="cve" title="CVE-2025-4918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4919" id="CVE-2025-4919" type="cve" title="CVE-2025-4919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5263" id="CVE-2025-5263" type="cve" title="CVE-2025-5263"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5264" id="CVE-2025-5264" type="cve" title="CVE-2025-5264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5266" id="CVE-2025-5266" type="cve" title="CVE-2025-5266"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5267" id="CVE-2025-5267" type="cve" title="CVE-2025-5267"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5268" id="CVE-2025-5268" type="cve" title="CVE-2025-5268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5269" id="CVE-2025-5269" type="cve" title="CVE-2025-5269"/>
      <reference href="https://bugzilla.redhat.com/2366283" id="2366283" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2366287" id="2366287" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2366291" id="2366291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2366297" id="2366297" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367016" id="2367016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367018" id="2367018" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368750" id="2368750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368751" id="2368751" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368752" id="2368752" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368755" id="2368755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368756" id="2368756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368757" id="2368757" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8756.html" id="ALSA-2025:8756" type="self" title="ALSA-2025:8756"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="128.11.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-128.11.0-1.el8_10.alma.1.src.rpm">
          <filename>thunderbird-128.11.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">e8f3d14ea889e5fb53fc4695daf42d0330b8dc3d0c368458115bf9b3e59302cd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8812</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2025-06-11 00:00:00"/>
    <updated date="2025-06-12 08:13:41"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.117 and .NET Runtime 8.0.17.Security Fix(es):  

  * dotnet: .NET Remote Code Vulnerability (CVE-2025-30399)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8812" id="RHSA-2025:8812" type="rhsa" title="RHSA-2025:8812"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30399" id="CVE-2025-30399" type="cve" title="CVE-2025-30399"/>
      <reference href="https://bugzilla.redhat.com/2369701" id="2369701" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8812.html" id="ALSA-2025:8812" type="self" title="ALSA-2025:8812"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.17" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.17-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0687da6bbed962d18616d875f99bfa8b6f0ad3d75e9861d979f7ba500cdf7e0a</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.117" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el8_10.src.rpm">
          <filename>dotnet-templates-8.0-8.0.117-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">08e35196b9a28c048f8b48d8eeaaff2a502c428fcf791e28d8ebda5e202b4e2e</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.17" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.17-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0fb02d7eb4c09a1542f5cf6d5ce617fc1f3f8f432205352444900a9bc92c1ea1</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.17" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.17-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">26fca232b88e2c013c87ea30cc935fc08f7cf7d4b13112fe4b764d82ef324b21</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.17" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.17-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">4937694b38198d4c502f3f1a24d3ed0529631c45852f24a796b02ed501cc2956</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.17" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el8_10.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.17-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">507e1cc03ad9f1ab923b82f0a6d71c7d6dd7d5bae1ee806cb85f92434ab4e1fe</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.17" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.17-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5ac3ad037c65692672cc438a65c9acd059ab4005df2a32c52e45dec0e655662e</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.17" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.17-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">6aee8a3a4043f41ee4480ff5e8e495591c2cf12bee070017cb3f6e49ed45094d</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.17" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.17-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">7a11c1aa9964d1e05662417d6c4e4b80f8018deffd7858e58cf6143666bbdc73</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.117" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.117-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">87afe01ca3b3abe6453276a8c43bab6b57028f602b1ccf1667dcbc1125dae3e0</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.117" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.117-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">9ec2f2353d01ee09b6a6db8816f9cd608867e96aaed3803dee183eee717cf336</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8815</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2025-06-11 00:00:00"/>
    <updated date="2025-07-02 11:32:13"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.107 and .NET Runtime 9.0.6.Security Fix(es):  

  * dotnet: .NET Remote Code Vulnerability (CVE-2025-30399)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8815" id="RHSA-2025:8815" type="rhsa" title="RHSA-2025:8815"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30399" id="CVE-2025-30399" type="cve" title="CVE-2025-30399"/>
      <reference href="https://bugzilla.redhat.com/2369701" id="2369701" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8815.html" id="ALSA-2025:8815" type="self" title="ALSA-2025:8815"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="dotnet-runtime-dbg-9.0" version="9.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-9.0-9.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0449c61bccb72d72dffd6f2ffbe754a86547ace3724216a1d43389fafdb03131</sum>
        </package>
        <package name="dotnet" version="9.0.107" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el8_10.src.rpm">
          <filename>dotnet-9.0.107-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">114242b95568ce82d11aee014a3946af4f9be9e7a1def1e31cae38d065dc719e</sum>
        </package>
        <package name="dotnet-host" version="9.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el8_10.src.rpm">
          <filename>dotnet-host-9.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">2402f839bd9ac7e240004984a0ee78f7dd61416f7eb380c025452c39895d0d41</sum>
        </package>
        <package name="dotnet-hostfxr-9.0" version="9.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-9.0-9.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">4397601e609cbd42caab4558cc010027ec8fecf5beb34deae398546cf5c1634d</sum>
        </package>
        <package name="aspnetcore-targeting-pack-9.0" version="9.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-9.0-9.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">44b0ef0f00951b79eda44b0c980cfb5502f2d5ae1565b18478c160871292be14</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-9.0" version="9.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-9.0-9.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">4f56c05bffd28b6c342c8d7da29deb93fba0e9de59ca7a362de3a5a99547d465</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="9.0.107" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el8_10.src.rpm">
          <filename>netstandard-targeting-pack-2.1-9.0.107-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">60833ddc826ec938a25aca521bad2165d242e1f09822b762a4e60aa976082c3a</sum>
        </package>
        <package name="aspnetcore-runtime-9.0" version="9.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-9.0-9.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">78bf968673bb8e7ab8ecf38a321cf7d60c0bff1f4d3a81e3d01ccb53eb2e9dc0</sum>
        </package>
        <package name="dotnet-sdk-dbg-9.0" version="9.0.107" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-9.0-9.0.107-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">89d5989d1d043cd5b2b59d261c2b9fcea2a07d70edd8d85e4dc7572138e0f5a9</sum>
        </package>
        <package name="dotnet-sdk-9.0" version="9.0.107" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-9.0.107-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a12e047f5c9f7fc0fb661c002625aa139470accc7f5d2261db47d2e94bd141bf</sum>
        </package>
        <package name="dotnet-targeting-pack-9.0" version="9.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-9.0-9.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">be44dcc0dd092f60b9eae2cf09e2881cc689f958c3090f5a58790b7964c152a6</sum>
        </package>
        <package name="dotnet-templates-9.0" version="9.0.107" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el8_10.src.rpm">
          <filename>dotnet-templates-9.0-9.0.107-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">cb6c074ffe50cc7d5c059a563e6191b0256ffdab0aade4b3c457475d61ba82c2</sum>
        </package>
        <package name="dotnet-runtime-9.0" version="9.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el8_10.src.rpm">
          <filename>dotnet-runtime-9.0-9.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">d1f3f714928876866e151952abdb589a9f8c5081cb9263d47da6c344ad84ffec</sum>
        </package>
        <package name="dotnet-apphost-pack-9.0" version="9.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-9.0-9.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">ea37591d757cb53cb4ed7397827ed90e71f0644aeb4ef86cdf258408d4529f06</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8844</id>
    <title>Important: mod_security security update</title>
    <issued date="2025-06-11 00:00:00"/>
    <updated date="2025-06-12 08:28:39"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mod_security security update</summary>
    <description>ModSecurity is an open source intrusion detection and prevention engine for web applications.  

Security Fix(es):  

  * modsecurity: ModSecurity Has Possible DoS Vulnerability (CVE-2025-47947)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8844" id="RHSA-2025:8844" type="rhsa" title="RHSA-2025:8844"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47947" id="CVE-2025-47947" type="cve" title="CVE-2025-47947"/>
      <reference href="https://bugzilla.redhat.com/2367903" id="2367903" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8844.html" id="ALSA-2025:8844" type="self" title="ALSA-2025:8844"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="mod_security-mlogc" version="2.9.6" release="2.el8_10" epoch="0" arch="s390x" src="mod_security-2.9.6-2.el8_10.src.rpm">
          <filename>mod_security-mlogc-2.9.6-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">6d646ab67136db918018abc8b2b5ac55ae4cafce4314a78520c8a559066fd9b9</sum>
        </package>
        <package name="mod_security" version="2.9.6" release="2.el8_10" epoch="0" arch="s390x" src="mod_security-2.9.6-2.el8_10.src.rpm">
          <filename>mod_security-2.9.6-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">b150af8811083d23fe55a7be3ef944a070374e1e8a31e1bd41bd87f8acb424d2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8918</id>
    <title>Moderate: grafana-pcp security update</title>
    <issued date="2025-06-11 00:00:00"/>
    <updated date="2025-07-02 11:27:00"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grafana-pcp security update</summary>
    <description>The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.  

Security Fix(es):  

  * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8918" id="RHSA-2025:8918" type="rhsa" title="RHSA-2025:8918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22871" id="CVE-2025-22871" type="cve" title="CVE-2025-22871"/>
      <reference href="https://bugzilla.redhat.com/2358493" id="2358493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8918.html" id="ALSA-2025:8918" type="self" title="ALSA-2025:8918"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="grafana-pcp" version="5.1.1" release="10.el8_10" epoch="0" arch="s390x" src="grafana-pcp-5.1.1-10.el8_10.src.rpm">
          <filename>grafana-pcp-5.1.1-10.el8_10.s390x.rpm</filename>
          <sum type="sha256">17e4548a4252ab54e4423f30841639c1bad3024ed8893dd68dffcacbf08fbd48</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8958</id>
    <title>Moderate: libxml2 security update</title>
    <issued date="2025-06-11 00:00:00"/>
    <updated date="2025-06-30 12:35:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8958" id="RHSA-2025:8958" type="rhsa" title="RHSA-2025:8958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32414" id="CVE-2025-32414" type="cve" title="CVE-2025-32414"/>
      <reference href="https://bugzilla.redhat.com/2358121" id="2358121" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8958.html" id="ALSA-2025:8958" type="self" title="ALSA-2025:8958"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libxml2-devel" version="2.9.7" release="20.el8_10" epoch="0" arch="s390x" src="libxml2-2.9.7-20.el8_10.src.rpm">
          <filename>libxml2-devel-2.9.7-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">b3f8d59468650be57cc2ac144312f858fcddcb6f8084ebedfd1a0937beeb2480</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9060</id>
    <title>Moderate: git-lfs security update</title>
    <issued date="2025-06-16 00:00:00"/>
    <updated date="2025-07-02 11:23:58"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>git-lfs security update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.  

Security Fix(es):  

  * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9060" id="RHSA-2025:9060" type="rhsa" title="RHSA-2025:9060"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22871" id="CVE-2025-22871" type="cve" title="CVE-2025-22871"/>
      <reference href="https://bugzilla.redhat.com/2358493" id="2358493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9060.html" id="ALSA-2025:9060" type="self" title="ALSA-2025:9060"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="git-lfs" version="3.4.1" release="5.el8_10" epoch="0" arch="s390x" src="git-lfs-3.4.1-5.el8_10.src.rpm">
          <filename>git-lfs-3.4.1-5.el8_10.s390x.rpm</filename>
          <sum type="sha256">cc0d97b6a5a4f07df8e63d20a1eac8e9b8606be7aa778093f9acdd5b52f755ec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9119</id>
    <title>Important: libvpx security update</title>
    <issued date="2025-06-16 00:00:00"/>
    <updated date="2025-07-02 07:38:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libvpx security update</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.  

Security Fix(es):  

  * libvpx: Double-free in libvpx encoder (CVE-2025-5283)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9119" id="RHSA-2025:9119" type="rhsa" title="RHSA-2025:9119"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5283" id="CVE-2025-5283" type="cve" title="CVE-2025-5283"/>
      <reference href="https://bugzilla.redhat.com/2368749" id="2368749" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9119.html" id="ALSA-2025:9119" type="self" title="ALSA-2025:9119"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libvpx" version="1.7.0" release="12.el8_10" epoch="0" arch="s390x" src="libvpx-1.7.0-12.el8_10.src.rpm">
          <filename>libvpx-1.7.0-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">261cb7e9274a2ac0e17481c5c0dda7955961b9c88fee614de204b623454d9256</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9142</id>
    <title>Moderate: container-tools:rhel8 security update</title>
    <issued date="2025-06-17 00:00:00"/>
    <updated date="2025-07-02 11:09:22"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>container-tools:rhel8 security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.  

Security Fix(es):  

  * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9142" id="RHSA-2025:9142" type="rhsa" title="RHSA-2025:9142"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22871" id="CVE-2025-22871" type="cve" title="CVE-2025-22871"/>
      <reference href="https://bugzilla.redhat.com/2358493" id="2358493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9142.html" id="ALSA-2025:9142" type="self" title="ALSA-2025:9142"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="container-tools" stream="rhel8" version="8100020250617080424" context="20125149" arch="s390x"/>
        <package name="containernetworking-plugins" version="1.4.0" release="6.module_el8.10.0+4016+efd18bf8" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-6.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>containernetworking-plugins-1.4.0-6.module_el8.10.0+4016+efd18bf8.s390x.rpm</filename>
          <sum type="sha256">01ce475d6b55bfde8145f5504470f60e087576049049ad624b54efcd0787fe6a</sum>
        </package>
        <package name="python3-podman" version="4.9.0" release="3.module_el8.10.0+4016+efd18bf8" epoch="0" arch="noarch" src="python-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>python3-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.noarch.rpm</filename>
          <sum type="sha256">087549428650af46817206c5d5ddd54bace235c2932b3e2004ac93e3b466cb6d</sum>
        </package>
        <package name="runc" version="1.1.12" release="6.module_el8.10.0+3959+b8dc5e6a" epoch="1" arch="s390x" src="runc-1.1.12-6.module_el8.10.0+3959+b8dc5e6a.src.rpm">
          <filename>runc-1.1.12-6.module_el8.10.0+3959+b8dc5e6a.s390x.rpm</filename>
          <sum type="sha256">0cb9a8dbd3dfd8c842cd2e0ea2e3f51864aba043d336afcab8ee0547d0b3c0d0</sum>
        </package>
        <package name="buildah-tests" version="1.33.12" release="2.module_el8.10.0+4016+efd18bf8" epoch="2" arch="s390x" src="buildah-1.33.12-2.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>buildah-tests-1.33.12-2.module_el8.10.0+4016+efd18bf8.s390x.rpm</filename>
          <sum type="sha256">15b6a1c53db7b1e2ae91edcbddd61326f9f868e945d5d64c33967835dd38bf07</sum>
        </package>
        <package name="crun" version="1.14.3" release="2.module_el8.10.0+3845+87b84552" epoch="0" arch="s390x" src="crun-1.14.3-2.module_el8.10.0+3845+87b84552.src.rpm">
          <filename>crun-1.14.3-2.module_el8.10.0+3845+87b84552.s390x.rpm</filename>
          <sum type="sha256">1803f41cb3e0828fe770ce7de14a940b9fad458fd84f420baab724674e2041e7</sum>
        </package>
        <package name="aardvark-dns" version="1.10.1" release="2.module_el8.10.0+4016+efd18bf8" epoch="2" arch="s390x" src="aardvark-dns-1.10.1-2.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>aardvark-dns-1.10.1-2.module_el8.10.0+4016+efd18bf8.s390x.rpm</filename>
          <sum type="sha256">1b902d8206478f42a77204d07243cedda48d7122a3e12c3ed1c307c9d914897c</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="2.module_el8.10.0+4016+efd18bf8" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>libslirp-4.4.0-2.module_el8.10.0+4016+efd18bf8.s390x.rpm</filename>
          <sum type="sha256">208c7b5cd4f261a6579c9e857b809fdcd9f4c6172cc08554ad6a4a0acde24009</sum>
        </package>
        <package name="netavark" version="1.10.3" release="1.module_el8.10.0+3926+f12484f5" epoch="2" arch="s390x" src="netavark-1.10.3-1.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>netavark-1.10.3-1.module_el8.10.0+3926+f12484f5.s390x.rpm</filename>
          <sum type="sha256">229bc7970f251b961853b29e4f6c9b17e6fd309418b96ea955e2eaeba74fc773</sum>
        </package>
        <package name="criu-devel" version="3.18" release="5.module_el8.10.0+4016+efd18bf8" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>criu-devel-3.18-5.module_el8.10.0+4016+efd18bf8.s390x.rpm</filename>
          <sum type="sha256">2e1dbd5435a509266a8bcae21cbd09ce6ea0309bd2e8e4ea30876b4efdcc6799</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.10" release="1.module_el8.10.0+3909+6e1c1eb7" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">335953655f25bd1ac71964d14ffc9ab6adaa73033e74e2b3a851b88683283196</sum>
        </package>
        <package name="conmon" version="2.1.10" release="1.module_el8.10.0+3970+8445edf6" epoch="3" arch="s390x" src="conmon-2.1.10-1.module_el8.10.0+3970+8445edf6.src.rpm">
          <filename>conmon-2.1.10-1.module_el8.10.0+3970+8445edf6.s390x.rpm</filename>
          <sum type="sha256">36afcd93148e54bc82b311c3f39d7c1189680ddd0e1865314b0f0346b6ae4650</sum>
        </package>
        <package name="container-selinux" version="2.229.0" release="2.module_el8.10.0+3909+6e1c1eb7" epoch="2" arch="noarch" src="container-selinux-2.229.0-2.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>container-selinux-2.229.0-2.module_el8.10.0+3909+6e1c1eb7.noarch.rpm</filename>
          <sum type="sha256">39df1f8e08cf61f1d3399b9d32cdaa93153cdbd001ff380fa9145a2012d1190c</sum>
        </package>
        <package name="python3-criu" version="3.18" release="5.module_el8.10.0+3970+8445edf6" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3970+8445edf6.src.rpm">
          <filename>python3-criu-3.18-5.module_el8.10.0+3970+8445edf6.s390x.rpm</filename>
          <sum type="sha256">3c0941dbc22948e78e968fd1e7f6860a25876fc03d876f7fb639e97a1d1e1ecb</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="20.module_el8.10.0+3970+8445edf6" epoch="4" arch="s390x" src="podman-4.9.4-20.module_el8.10.0+3970+8445edf6.src.rpm">
          <filename>podman-tests-4.9.4-20.module_el8.10.0+3970+8445edf6.s390x.rpm</filename>
          <sum type="sha256">3d93dc1fee79734168bf1743e6cf30d75822a6acea6bef369064aaa495a8d833</sum>
        </package>
        <package name="buildah" version="1.33.12" release="2.module_el8.10.0+4016+efd18bf8" epoch="2" arch="s390x" src="buildah-1.33.12-2.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>buildah-1.33.12-2.module_el8.10.0+4016+efd18bf8.s390x.rpm</filename>
          <sum type="sha256">5276b27cd26368de366231bf118ca4c4867bf5d93bb841486beadcf49915a4f8</sum>
        </package>
        <package name="udica" version="0.2.6" release="21.module_el8.10.0+3926+f12484f5" epoch="0" arch="noarch" src="udica-0.2.6-21.module_el8.10.0+3926+f12484f5.src.rpm">
          <filename>udica-0.2.6-21.module_el8.10.0+3926+f12484f5.noarch.rpm</filename>
          <sum type="sha256">6926e34b1965f9f26dd6b35b2d9809b5e337f117e6b333fb99c624461afd91d8</sum>
        </package>
        <package name="fuse-overlayfs" version="1.13" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="s390x" src="fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">8118067655696462cee9dfc553f57e4501b089590d837bc88091716914c8d3f5</sum>
        </package>
        <package name="toolbox" version="0.0.99.5" release="2.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>toolbox-0.0.99.5-2.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">8df71d94e465a66228dced33f5189e4789bc2ac13946b5e79a11e8091af4f33e</sum>
        </package>
        <package name="containers-common" version="1" release="82.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="s390x" src="containers-common-1-82.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>containers-common-1-82.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">98eb0c5785e1d53743858e76ac35aab0b199a918b88c02e20aa6f64cc6f89618</sum>
        </package>
        <package name="crit" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>crit-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">aeb27c5bcec90a9452f93ad79ef0d4f00ecedf4442f32f9bedb481509db12683</sum>
        </package>
        <package name="podman-gvproxy" version="4.9.4" release="20.module_el8.10.0+3970+8445edf6" epoch="4" arch="s390x" src="podman-4.9.4-20.module_el8.10.0+3970+8445edf6.src.rpm">
          <filename>podman-gvproxy-4.9.4-20.module_el8.10.0+3970+8445edf6.s390x.rpm</filename>
          <sum type="sha256">b16a63fe877f75ef93bbf91fb604e6808c5b533aa2c3ce1231b6c8dab63848db</sum>
        </package>
        <package name="podman" version="4.9.4" release="20.module_el8.10.0+3970+8445edf6" epoch="4" arch="s390x" src="podman-4.9.4-20.module_el8.10.0+3970+8445edf6.src.rpm">
          <filename>podman-4.9.4-20.module_el8.10.0+3970+8445edf6.s390x.rpm</filename>
          <sum type="sha256">b200dd1d8b8c87a316a6032b1c399cc129babe30fcca5a29b584996dff3a1749</sum>
        </package>
        <package name="skopeo-tests" version="1.14.5" release="4.module_el8.10.0+4016+efd18bf8" epoch="2" arch="s390x" src="skopeo-1.14.5-4.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>skopeo-tests-1.14.5-4.module_el8.10.0+4016+efd18bf8.s390x.rpm</filename>
          <sum type="sha256">b25cf9c5218b05b607686aebf63de736b63d80ebcf3b71da274bda25a5cbce17</sum>
        </package>
        <package name="criu" version="3.18" release="5.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>criu-3.18-5.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">bdaddee931f3746ac7472d9ccee504acd0be805433b3d160b1e7caf8bf361cb8</sum>
        </package>
        <package name="podman-plugins" version="4.9.4" release="20.module_el8.10.0+3970+8445edf6" epoch="4" arch="s390x" src="podman-4.9.4-20.module_el8.10.0+3970+8445edf6.src.rpm">
          <filename>podman-plugins-4.9.4-20.module_el8.10.0+3970+8445edf6.s390x.rpm</filename>
          <sum type="sha256">be9ffb56f84b9a069b21ec890076fbdbefda0e3ccb44c176cda8f8f99fc4af61</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="20.module_el8.10.0+3970+8445edf6" epoch="4" arch="noarch" src="podman-4.9.4-20.module_el8.10.0+3970+8445edf6.src.rpm">
          <filename>podman-docker-4.9.4-20.module_el8.10.0+3970+8445edf6.noarch.rpm</filename>
          <sum type="sha256">c1381be473d8d9e90ca0e0447897aa4cec8f28bcfe74d718ab43911a5743d3d0</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="20.module_el8.10.0+4016+efd18bf8" epoch="4" arch="s390x" src="podman-4.9.4-20.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>podman-remote-4.9.4-20.module_el8.10.0+4016+efd18bf8.s390x.rpm</filename>
          <sum type="sha256">d737d704363a1765153887eab41380596535efd17e68e3b3f5aee6dc418b94f6</sum>
        </package>
        <package name="slirp4netns" version="1.2.3" release="1.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="slirp4netns-1.2.3-1.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>slirp4netns-1.2.3-1.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">d750de35a600a89a6edbd8c2178e292766005ce3339a84c33adecfdef70e7a57</sum>
        </package>
        <package name="criu-libs" version="3.18" release="5.module_el8.10.0+3909+6e1c1eb7" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>criu-libs-3.18-5.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">e0d274cf0f5db049af121f476769c0d601e70c7566ea3aec4e608aca5317b4eb</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.5" release="2.module_el8.10.0+3909+6e1c1eb7" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+3909+6e1c1eb7.src.rpm">
          <filename>toolbox-tests-0.0.99.5-2.module_el8.10.0+3909+6e1c1eb7.s390x.rpm</filename>
          <sum type="sha256">e5fff3c3d6b6f6023e100d0922c2e8096f567b7f5cfbb57efe322eadd2f43465</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="2.module_el8.10.0+3901+4b80ecd7" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>libslirp-devel-4.4.0-2.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">ea8f3e70f2a1a7886cb1abcdb80e7b2ea3cf36a174dc5158142c286d69fae136</sum>
        </package>
        <package name="skopeo" version="1.14.5" release="4.module_el8.10.0+4016+efd18bf8" epoch="2" arch="s390x" src="skopeo-1.14.5-4.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>skopeo-1.14.5-4.module_el8.10.0+4016+efd18bf8.s390x.rpm</filename>
          <sum type="sha256">ee1637100b6327d45deb6c41fc0f92bfeb58c67eb00bacfac0a080ee3eb4abdb</sum>
        </package>
        <package name="cockpit-podman" version="84.1" release="1.module_el8.10.0+4016+efd18bf8" epoch="0" arch="noarch" src="cockpit-podman-84.1-1.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>cockpit-podman-84.1-1.module_el8.10.0+4016+efd18bf8.noarch.rpm</filename>
          <sum type="sha256">f03872dff2aa7d3da8ebcebbb3adc464fd859f8c0fa9c83ece498edb0d3ce572</sum>
        </package>
        <package name="podman-catatonit" version="4.9.4" release="20.module_el8.10.0+4016+efd18bf8" epoch="4" arch="s390x" src="podman-4.9.4-20.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>podman-catatonit-4.9.4-20.module_el8.10.0+4016+efd18bf8.s390x.rpm</filename>
          <sum type="sha256">f139519ebcdd80bd8cf9be538417d09de8a9c3612ce973dfac6ce3038268d939</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9165</id>
    <title>Important: gimp:2.8 security update</title>
    <issued date="2025-06-17 00:00:00"/>
    <updated date="2025-06-30 13:38:58"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gimp:2.8 security update</summary>
    <description>The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.  

Security Fix(es):  

  * gimp: Multiple use after free in XCF parser (CVE-2025-48798)
  * gimp: Multiple heap buffer overflows in TGA parser (CVE-2025-48797)
  * gimp: GIMP ICO File Parsing Integer Overflow (CVE-2025-5473)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9165" id="RHSA-2025:9165" type="rhsa" title="RHSA-2025:9165"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48797" id="CVE-2025-48797" type="cve" title="CVE-2025-48797"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48798" id="CVE-2025-48798" type="cve" title="CVE-2025-48798"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5473" id="CVE-2025-5473" type="cve" title="CVE-2025-5473"/>
      <reference href="https://bugzilla.redhat.com/2368557" id="2368557" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368558" id="2368558" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370867" id="2370867" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9165.html" id="ALSA-2025:9165" type="self" title="ALSA-2025:9165"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="gimp" stream="2.8" version="8100020250617102610" context="77fc8825" arch="s390x"/>
        <package name="gimp-devel-tools" version="2.8.22" release="26.module_el8.10.0+4017+5eb23531.2" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+4017+5eb23531.2.src.rpm">
          <filename>gimp-devel-tools-2.8.22-26.module_el8.10.0+4017+5eb23531.2.s390x.rpm</filename>
          <sum type="sha256">081966b15c26d51974902ec2972d3f45e6d51ad9af3df8bb3de4a2992d3cfe17</sum>
        </package>
        <package name="pygobject2-codegen" version="2.28.7" release="5.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>pygobject2-codegen-2.28.7-5.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">1a42f4acacfe6991c3ea72ee10bdbe8bb963fe6e94e725c0c6cc5162d35f2e55</sum>
        </package>
        <package name="gimp-devel" version="2.8.22" release="26.module_el8.10.0+4017+5eb23531.2" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+4017+5eb23531.2.src.rpm">
          <filename>gimp-devel-2.8.22-26.module_el8.10.0+4017+5eb23531.2.s390x.rpm</filename>
          <sum type="sha256">2c1bc5f49fb290f93d3e800ffb3794ae51be837134bcd2d28aed49048c63b772</sum>
        </package>
        <package name="pygtk2-devel" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="s390x" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-devel-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">42ea8b58abfff83cebc7a09a7f6f264b168a95782decbb03b4fcfef37fd7c062</sum>
        </package>
        <package name="pygtk2" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="s390x" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">43c790ef899908821a64cfad4af33097d1a9d9351a75d63d45e4363e0d91eec8</sum>
        </package>
        <package name="pygobject2-doc" version="2.28.7" release="5.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>pygobject2-doc-2.28.7-5.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">5104a2191c14aaf70d6f3d9ebf6374c054a182a2a7b0f63f32c1adc918ad4111</sum>
        </package>
        <package name="gimp-libs" version="2.8.22" release="26.module_el8.10.0+4017+5eb23531.2" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+4017+5eb23531.2.src.rpm">
          <filename>gimp-libs-2.8.22-26.module_el8.10.0+4017+5eb23531.2.s390x.rpm</filename>
          <sum type="sha256">6b19084908412ed030cec167261d0b9e5f1247fc5bfdf934785076b925e0cff4</sum>
        </package>
        <package name="pygobject2-devel" version="2.28.7" release="5.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>pygobject2-devel-2.28.7-5.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">753e845a487e2072a62bfa272332266761c207df3360102c42900695a0fe3d32</sum>
        </package>
        <package name="pygtk2-codegen" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="s390x" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-codegen-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">91402fea22feef9d15400358a93ae5d2ff0b95b332edfbae2245ac5846848476</sum>
        </package>
        <package name="pygtk2-doc" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="noarch" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-doc-2.24.0-25.module_el8.9.0+3725+d1441900.noarch.rpm</filename>
          <sum type="sha256">bec32577bca5233d67a34af1ef0ae0d1ca15f8896607b22d94cc18d8d4c93d70</sum>
        </package>
        <package name="pygobject2" version="2.28.7" release="5.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">d9c541afe98fa2f9c4fb770991f7c15dae66b0b36616ff2b94ae7c824b1b0e84</sum>
        </package>
        <package name="python2-cairo" version="1.16.3" release="7.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="python2-pycairo-1.16.3-7.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>python2-cairo-1.16.3-7.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">e015ce54a4c31a35c21aa3d77fd6d10674ff10a9058f1dd194a9167328d8a0d9</sum>
        </package>
        <package name="python2-cairo-devel" version="1.16.3" release="7.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="python2-pycairo-1.16.3-7.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>python2-cairo-devel-1.16.3-7.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">ecc0dda98450cefa8281d354f444d8e91876cc91f2cf6c8fd8ecf460a4dbdc8b</sum>
        </package>
        <package name="gimp" version="2.8.22" release="26.module_el8.10.0+4017+5eb23531.2" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+4017+5eb23531.2.src.rpm">
          <filename>gimp-2.8.22-26.module_el8.10.0+4017+5eb23531.2.s390x.rpm</filename>
          <sum type="sha256">f220494abcd0c4fb304937f042d2bf9d1ee3c55d16dcdb15b5a4757f95161bfa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9188</id>
    <title>Important: idm:DL1 security update</title>
    <issued date="2025-06-17 00:00:00"/>
    <updated date="2025-06-30 13:31:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>idm:DL1 security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.   

Security Fix(es):  

  * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9188" id="RHSA-2025:9188" type="rhsa" title="RHSA-2025:9188"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4404" id="CVE-2025-4404" type="cve" title="CVE-2025-4404"/>
      <reference href="https://bugzilla.redhat.com/2364606" id="2364606" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9188.html" id="ALSA-2025:9188" type="self" title="ALSA-2025:9188"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="idm" stream="DL1" version="8100020250623101258" context="93c20af6" arch="s390x"/>
        <package name="python3-qrcode" version="5.3" release="1.module_el8.10.0+3942+63b39a46" epoch="0" arch="noarch" src="python-qrcode-5.3-1.module_el8.10.0+3942+63b39a46.src.rpm">
          <filename>python3-qrcode-5.3-1.module_el8.10.0+3942+63b39a46.noarch.rpm</filename>
          <sum type="sha256">109f98be9cf4358f1892e43363dc3d1163173bd6f1f58365f9fc153b2fbad8d7</sum>
        </package>
        <package name="ipa-client" version="4.9.13" release="18.module_el8.10.0+4018+32aeeb28" epoch="0" arch="s390x" src="ipa-4.9.13-18.module_el8.10.0+4018+32aeeb28.src.rpm">
          <filename>ipa-client-4.9.13-18.module_el8.10.0+4018+32aeeb28.s390x.rpm</filename>
          <sum type="sha256">1e1e0c08ce341b59f0fd2a64694bc7c74b1bdfb01e0cf5955db34fa10c8728fe</sum>
        </package>
        <package name="ipa-client-common" version="4.9.13" release="18.module_el8.10.0+4018+32aeeb28" epoch="0" arch="noarch" src="ipa-4.9.13-18.module_el8.10.0+4018+32aeeb28.src.rpm">
          <filename>ipa-client-common-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm</filename>
          <sum type="sha256">21f5d24308136198aa718208dc9f79e92e6d2dfc7b10bd1b49493e919d73fc38</sum>
        </package>
        <package name="ipa-server-trust-ad" version="4.9.13" release="18.module_el8.10.0+4018+32aeeb28" epoch="0" arch="s390x" src="ipa-4.9.13-18.module_el8.10.0+4018+32aeeb28.src.rpm">
          <filename>ipa-server-trust-ad-4.9.13-18.module_el8.10.0+4018+32aeeb28.s390x.rpm</filename>
          <sum type="sha256">28b0b9481dbc0fde6a45a4bfbc07a1e63138dce9f237535ed7b515a266d43fe1</sum>
        </package>
        <package name="bind-dyndb-ldap" version="11.6" release="6.module_el8.10.0+3980+d78e8e90" epoch="0" arch="s390x" src="bind-dyndb-ldap-11.6-6.module_el8.10.0+3980+d78e8e90.src.rpm">
          <filename>bind-dyndb-ldap-11.6-6.module_el8.10.0+3980+d78e8e90.s390x.rpm</filename>
          <sum type="sha256">2c700ccfc92d7dea4c2bd2b386a200dbe70a6d9e88144470c331345f4694c1b3</sum>
        </package>
        <package name="python3-ipatests" version="4.9.13" release="18.module_el8.10.0+4018+32aeeb28" epoch="0" arch="noarch" src="ipa-4.9.13-18.module_el8.10.0+4018+32aeeb28.src.rpm">
          <filename>python3-ipatests-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm</filename>
          <sum type="sha256">303ddbf7b9150cfac4510632323b565f2759baa8cf86576d93a050e8e18f86a1</sum>
        </package>
        <package name="python3-jwcrypto" version="0.5.0" release="2.module_el8.10.0+3844+20e075e5" epoch="0" arch="noarch" src="python-jwcrypto-0.5.0-2.module_el8.10.0+3844+20e075e5.src.rpm">
          <filename>python3-jwcrypto-0.5.0-2.module_el8.10.0+3844+20e075e5.noarch.rpm</filename>
          <sum type="sha256">3827ec1b1ddb7641307d2aae1a6e9d8a9634a2f4e2f2ee7e8ba866903524734b</sum>
        </package>
        <package name="ipa-server-common" version="4.9.13" release="18.module_el8.10.0+4018+32aeeb28" epoch="0" arch="noarch" src="ipa-4.9.13-18.module_el8.10.0+4018+32aeeb28.src.rpm">
          <filename>ipa-server-common-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm</filename>
          <sum type="sha256">3ba505bc9d78830978408b7025512d8fdb2834042c2cba7ff735db1d22f04d5d</sum>
        </package>
        <package name="python3-kdcproxy" version="0.4" release="5.module_el8.10.0+3942+63b39a46.1" epoch="0" arch="noarch" src="python-kdcproxy-0.4-5.module_el8.10.0+3942+63b39a46.1.src.rpm">
          <filename>python3-kdcproxy-0.4-5.module_el8.10.0+3942+63b39a46.1.noarch.rpm</filename>
          <sum type="sha256">4ea4f303ee75781e5ebb0d16728e9fbd5f1fc4cdc4e34dca4ac19c4a3b350925</sum>
        </package>
        <package name="ipa-healthcheck" version="0.12" release="5.module_el8.10.0+3980+d78e8e90" epoch="0" arch="noarch" src="ipa-healthcheck-0.12-5.module_el8.10.0+3980+d78e8e90.src.rpm">
          <filename>ipa-healthcheck-0.12-5.module_el8.10.0+3980+d78e8e90.noarch.rpm</filename>
          <sum type="sha256">56b8766fd06a41900a4bc86ecc305d35eed3657241b7fe9e1760aa64c0eaa21c</sum>
        </package>
        <package name="python3-pyusb" version="1.0.0" release="9.1.module_el8.7.0+3349+cfeff52e" epoch="0" arch="noarch" src="pyusb-1.0.0-9.1.module_el8.7.0+3349+cfeff52e.src.rpm">
          <filename>python3-pyusb-1.0.0-9.1.module_el8.7.0+3349+cfeff52e.noarch.rpm</filename>
          <sum type="sha256">5f45866e2459f1c9a0b969263baab4ffed264d2998456658cafd554de6300cfa</sum>
        </package>
        <package name="python3-yubico" version="1.3.2" release="9.1.module_el8.7.0+3349+cfeff52e" epoch="0" arch="noarch" src="python-yubico-1.3.2-9.1.module_el8.7.0+3349+cfeff52e.src.rpm">
          <filename>python3-yubico-1.3.2-9.1.module_el8.7.0+3349+cfeff52e.noarch.rpm</filename>
          <sum type="sha256">68b28b3fb94f5026730feca1a1c3feb64c06ad5601a7cf8befb4e704510edd73</sum>
        </package>
        <package name="python3-qrcode-core" version="5.3" release="1.module_el8.10.0+3942+63b39a46" epoch="0" arch="noarch" src="python-qrcode-5.3-1.module_el8.10.0+3942+63b39a46.src.rpm">
          <filename>python3-qrcode-core-5.3-1.module_el8.10.0+3942+63b39a46.noarch.rpm</filename>
          <sum type="sha256">7a7706a06f589393224f10f99b9aef62d5559f02e1c97754b86d2763dfefa70d</sum>
        </package>
        <package name="ipa-python-compat" version="4.9.13" release="18.module_el8.10.0+4018+32aeeb28" epoch="0" arch="noarch" src="ipa-4.9.13-18.module_el8.10.0+4018+32aeeb28.src.rpm">
          <filename>ipa-python-compat-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm</filename>
          <sum type="sha256">84496c57b7f6a92c80c690d5efd007a610f57dbb4476aae28fd47d40552f90ae</sum>
        </package>
        <package name="python3-ipaclient" version="4.9.13" release="18.module_el8.10.0+4018+32aeeb28" epoch="0" arch="noarch" src="ipa-4.9.13-18.module_el8.10.0+4018+32aeeb28.src.rpm">
          <filename>python3-ipaclient-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm</filename>
          <sum type="sha256">8bbdb06d51b61ca2a5843662628c8e9f65ed0d253f547d333ef8e3dc31750a8c</sum>
        </package>
        <package name="python3-ipalib" version="4.9.13" release="18.module_el8.10.0+4018+32aeeb28" epoch="0" arch="noarch" src="ipa-4.9.13-18.module_el8.10.0+4018+32aeeb28.src.rpm">
          <filename>python3-ipalib-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm</filename>
          <sum type="sha256">91440eec3438e89daf484d37914e038e0d6bd83fe0e3137821797719dea4007b</sum>
        </package>
        <package name="ipa-client-samba" version="4.9.13" release="18.module_el8.10.0+4018+32aeeb28" epoch="0" arch="s390x" src="ipa-4.9.13-18.module_el8.10.0+4018+32aeeb28.src.rpm">
          <filename>ipa-client-samba-4.9.13-18.module_el8.10.0+4018+32aeeb28.s390x.rpm</filename>
          <sum type="sha256">94896db6e152d8c123c0141e65446d01f743d23f56d51cf06e7e19b5f56069e9</sum>
        </package>
        <package name="ipa-selinux" version="4.9.13" release="18.module_el8.10.0+4018+32aeeb28" epoch="0" arch="noarch" src="ipa-4.9.13-18.module_el8.10.0+4018+32aeeb28.src.rpm">
          <filename>ipa-selinux-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm</filename>
          <sum type="sha256">989211ad9db4fef6227579c2f88475d245a8ce09d341d6ef670c90d188b1b38e</sum>
        </package>
        <package name="softhsm-devel" version="2.6.0" release="5.module_el8.6.0+3031+2f24dc92" epoch="0" arch="s390x" src="softhsm-2.6.0-5.module_el8.6.0+3031+2f24dc92.src.rpm">
          <filename>softhsm-devel-2.6.0-5.module_el8.6.0+3031+2f24dc92.s390x.rpm</filename>
          <sum type="sha256">99b0ac3696d5de6fbbd0e2bb5882b9a36feef44b0fcb4f42dd82963f3077f8ab</sum>
        </package>
        <package name="ipa-server" version="4.9.13" release="18.module_el8.10.0+4018+32aeeb28" epoch="0" arch="s390x" src="ipa-4.9.13-18.module_el8.10.0+4018+32aeeb28.src.rpm">
          <filename>ipa-server-4.9.13-18.module_el8.10.0+4018+32aeeb28.s390x.rpm</filename>
          <sum type="sha256">a588040cbbd902cbff713ef4c287e6afba031c999ee61e40cd8321d77c281c6e</sum>
        </package>
        <package name="ipa-server-dns" version="4.9.13" release="18.module_el8.10.0+4018+32aeeb28" epoch="0" arch="noarch" src="ipa-4.9.13-18.module_el8.10.0+4018+32aeeb28.src.rpm">
          <filename>ipa-server-dns-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm</filename>
          <sum type="sha256">accd6092b597737762e6936c1eab6467a2752e5dde51ba8f9a23aa2461be804e</sum>
        </package>
        <package name="softhsm" version="2.6.0" release="5.module_el8.6.0+3031+2f24dc92" epoch="0" arch="s390x" src="softhsm-2.6.0-5.module_el8.6.0+3031+2f24dc92.src.rpm">
          <filename>softhsm-2.6.0-5.module_el8.6.0+3031+2f24dc92.s390x.rpm</filename>
          <sum type="sha256">ad706f5e338373e1c6880dce46ce69f7e82ebf416e464ec0abc5c316b27306a1</sum>
        </package>
        <package name="python3-ipaserver" version="4.9.13" release="18.module_el8.10.0+4018+32aeeb28" epoch="0" arch="noarch" src="ipa-4.9.13-18.module_el8.10.0+4018+32aeeb28.src.rpm">
          <filename>python3-ipaserver-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm</filename>
          <sum type="sha256">be5881ad817c676c938ae1976012411bf3ff0606f4cb4ecd4a8da85854f143a9</sum>
        </package>
        <package name="slapi-nis" version="0.60.0" release="4.module_el8.10.0+3844+20e075e5.alma.1" epoch="0" arch="s390x" src="slapi-nis-0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1.src.rpm">
          <filename>slapi-nis-0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1.s390x.rpm</filename>
          <sum type="sha256">bfc1ed725a4b9c6d74b4b99b8b4dd82647f4f1a4e958e8e455cb5762aae70113</sum>
        </package>
        <package name="ipa-common" version="4.9.13" release="18.module_el8.10.0+4018+32aeeb28" epoch="0" arch="noarch" src="ipa-4.9.13-18.module_el8.10.0+4018+32aeeb28.src.rpm">
          <filename>ipa-common-4.9.13-18.module_el8.10.0+4018+32aeeb28.noarch.rpm</filename>
          <sum type="sha256">cb3caac3a325a801ad6e25861c52bb2cabf8656bf531706b6b0fe6c63ca2c76d</sum>
        </package>
        <package name="opendnssec" version="2.1.7" release="2.module_el8.10.0+3980+d78e8e90" epoch="0" arch="s390x" src="opendnssec-2.1.7-2.module_el8.10.0+3980+d78e8e90.src.rpm">
          <filename>opendnssec-2.1.7-2.module_el8.10.0+3980+d78e8e90.s390x.rpm</filename>
          <sum type="sha256">d54df6918ca5a7264f2793ef6d6b2a42884458f030404ce47a19cb6abbfdb9cf</sum>
        </package>
        <package name="ipa-client-epn" version="4.9.13" release="18.module_el8.10.0+4018+32aeeb28" epoch="0" arch="s390x" src="ipa-4.9.13-18.module_el8.10.0+4018+32aeeb28.src.rpm">
          <filename>ipa-client-epn-4.9.13-18.module_el8.10.0+4018+32aeeb28.s390x.rpm</filename>
          <sum type="sha256">dd395e323f9eeeda52cf191d102204e957a620d49672559cc673e0f7fc62cb78</sum>
        </package>
        <package name="ipa-healthcheck-core" version="0.12" release="5.module_el8.10.0+3980+d78e8e90" epoch="0" arch="noarch" src="ipa-healthcheck-0.12-5.module_el8.10.0+3980+d78e8e90.src.rpm">
          <filename>ipa-healthcheck-core-0.12-5.module_el8.10.0+3980+d78e8e90.noarch.rpm</filename>
          <sum type="sha256">e4456c627a761ce2f486f804962f8897844db02de278a63d6bdb686ea93efdca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9305</id>
    <title>Important: xorg-x11-server and xorg-x11-server-Xwayland security update</title>
    <issued date="2025-06-23 00:00:00"/>
    <updated date="2025-06-30 13:21:56"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server and xorg-x11-server-Xwayland security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors (CVE-2025-49175)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in Big Requests Extension (CVE-2025-49176)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Unprocessed Client Request Due to Bytes to Ignore (CVE-2025-49178)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer overflow in X Record extension (CVE-2025-49179)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension (CVE-2025-49180)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9305" id="RHSA-2025:9305" type="rhsa" title="RHSA-2025:9305"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49175" id="CVE-2025-49175" type="cve" title="CVE-2025-49175"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49176" id="CVE-2025-49176" type="cve" title="CVE-2025-49176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49178" id="CVE-2025-49178" type="cve" title="CVE-2025-49178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49179" id="CVE-2025-49179" type="cve" title="CVE-2025-49179"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49180" id="CVE-2025-49180" type="cve" title="CVE-2025-49180"/>
      <reference href="https://bugzilla.redhat.com/2369947" id="2369947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369954" id="2369954" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369977" id="2369977" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369978" id="2369978" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369981" id="2369981" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9305.html" id="ALSA-2025:9305" type="self" title="ALSA-2025:9305"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="xorg-x11-server-Xwayland" version="21.1.3" release="18.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-21.1.3-18.el8_10.src.rpm">
          <filename>xorg-x11-server-Xwayland-21.1.3-18.el8_10.s390x.rpm</filename>
          <sum type="sha256">0273feeeb180ba2344ec1cfbd91ea06e93f59f560b3d99e904e01755d61f4dbf</sum>
        </package>
        <package name="xorg-x11-server-Xnest" version="1.20.11" release="26.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-26.el8_10.src.rpm">
          <filename>xorg-x11-server-Xnest-1.20.11-26.el8_10.s390x.rpm</filename>
          <sum type="sha256">2c48e33f1210707c6fe21ee0392d297e4276e57cf56e1a05a22350d0c1b75f17</sum>
        </package>
        <package name="xorg-x11-server-Xvfb" version="1.20.11" release="26.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-26.el8_10.src.rpm">
          <filename>xorg-x11-server-Xvfb-1.20.11-26.el8_10.s390x.rpm</filename>
          <sum type="sha256">49a15c4c8545ff965b4698fb5c0119041cbc3be03bf90f40d265135be218f35d</sum>
        </package>
        <package name="xorg-x11-server-Xorg" version="1.20.11" release="26.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-26.el8_10.src.rpm">
          <filename>xorg-x11-server-Xorg-1.20.11-26.el8_10.s390x.rpm</filename>
          <sum type="sha256">52b4c706324a800cd31e872ecb8f39c40d9956e4866e3bb8515986dfafeaec97</sum>
        </package>
        <package name="xorg-x11-server-Xdmx" version="1.20.11" release="26.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-26.el8_10.src.rpm">
          <filename>xorg-x11-server-Xdmx-1.20.11-26.el8_10.s390x.rpm</filename>
          <sum type="sha256">541e389f7ac89f43b43eaa599cf300a377b1fb471b3204d305255f71b9297bda</sum>
        </package>
        <package name="xorg-x11-server-Xephyr" version="1.20.11" release="26.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-26.el8_10.src.rpm">
          <filename>xorg-x11-server-Xephyr-1.20.11-26.el8_10.s390x.rpm</filename>
          <sum type="sha256">7d41085edc7bedd9aaa5c0f50ffb08dec3f87f2409cba758d5d0c56df810e562</sum>
        </package>
        <package name="xorg-x11-server-common" version="1.20.11" release="26.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-26.el8_10.src.rpm">
          <filename>xorg-x11-server-common-1.20.11-26.el8_10.s390x.rpm</filename>
          <sum type="sha256">f25abbe4adf106d8f9db1a6582a7d97a182b901b7f315d3217ee78b83a9a6b42</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9318</id>
    <title>Important: javapackages-tools:201801 security update</title>
    <issued date="2025-06-23 00:00:00"/>
    <updated date="2025-07-03 08:31:56"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>javapackages-tools:201801 security update</summary>
    <description>The javapackages-tools packages provide macros and scripts to support Java packaging.  

Security Fix(es):  

  * apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default (CVE-2019-10086)
  * commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default (CVE-2025-48734)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9318" id="RHSA-2025:9318" type="rhsa" title="RHSA-2025:9318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-10086" id="CVE-2019-10086" type="cve" title="CVE-2019-10086"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48734" id="CVE-2025-48734" type="cve" title="CVE-2025-48734"/>
      <reference href="https://bugzilla.redhat.com/1767483" id="1767483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368956" id="2368956" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9318.html" id="ALSA-2025:9318" type="self" title="ALSA-2025:9318"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="javapackages-tools" stream="201801" version="8100020250623120251" context="9edba152" arch="s390x"/>
        <package name="sisu-plexus" version="0.3.3" release="7.module_el8.10.0+4020+7deec6e4" epoch="1" arch="noarch" src="sisu-0.3.3-7.module_el8.10.0+4020+7deec6e4.src.rpm">
          <filename>sisu-plexus-0.3.3-7.module_el8.10.0+4020+7deec6e4.noarch.rpm</filename>
          <sum type="sha256">3bdc5b844b321b8b0ea52eea40909491b3cb4b493ebe2444f94037db2e6f78f9</sum>
        </package>
        <package name="sisu-inject" version="0.3.3" release="7.module_el8.10.0+4020+7deec6e4" epoch="1" arch="noarch" src="sisu-0.3.3-7.module_el8.10.0+4020+7deec6e4.src.rpm">
          <filename>sisu-inject-0.3.3-7.module_el8.10.0+4020+7deec6e4.noarch.rpm</filename>
          <sum type="sha256">ef29ebced6604b95ad3dbf8fd5b64bbd5e0320ac9aa9e7dfcef02756c7c331d1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9392</id>
    <title>Important: tigervnc security update</title>
    <issued date="2025-06-23 00:00:00"/>
    <updated date="2025-07-03 08:21:18"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.  

Security Fix(es):  

  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors (CVE-2025-49175)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in Big Requests Extension (CVE-2025-49176)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Unprocessed Client Request Due to Bytes to Ignore (CVE-2025-49178)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer overflow in X Record extension (CVE-2025-49179)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension (CVE-2025-49180)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9392" id="RHSA-2025:9392" type="rhsa" title="RHSA-2025:9392"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49175" id="CVE-2025-49175" type="cve" title="CVE-2025-49175"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49176" id="CVE-2025-49176" type="cve" title="CVE-2025-49176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49178" id="CVE-2025-49178" type="cve" title="CVE-2025-49178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49179" id="CVE-2025-49179" type="cve" title="CVE-2025-49179"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49180" id="CVE-2025-49180" type="cve" title="CVE-2025-49180"/>
      <reference href="https://bugzilla.redhat.com/2369947" id="2369947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369954" id="2369954" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369977" id="2369977" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369978" id="2369978" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369981" id="2369981" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9392.html" id="ALSA-2025:9392" type="self" title="ALSA-2025:9392"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="tigervnc-selinux" version="1.15.0" release="7.el8_10" epoch="0" arch="noarch" src="tigervnc-1.15.0-7.el8_10.src.rpm">
          <filename>tigervnc-selinux-1.15.0-7.el8_10.noarch.rpm</filename>
          <sum type="sha256">94e5261f745334ef10f02f40c51932b0872bee49cdfacb3e96e0a373e1bf8097</sum>
        </package>
        <package name="tigervnc-server-module" version="1.15.0" release="7.el8_10" epoch="0" arch="s390x" src="tigervnc-1.15.0-7.el8_10.src.rpm">
          <filename>tigervnc-server-module-1.15.0-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">97b988b7f97ca1a562d8690d8fa5e3e40190ee72bc2f61180dacb20c25add30d</sum>
        </package>
        <package name="tigervnc-license" version="1.15.0" release="7.el8_10" epoch="0" arch="noarch" src="tigervnc-1.15.0-7.el8_10.src.rpm">
          <filename>tigervnc-license-1.15.0-7.el8_10.noarch.rpm</filename>
          <sum type="sha256">aab7395fe072615eba486b8a37400d00c25053e67fe12f53a267884336340c51</sum>
        </package>
        <package name="tigervnc-server" version="1.15.0" release="7.el8_10" epoch="0" arch="s390x" src="tigervnc-1.15.0-7.el8_10.src.rpm">
          <filename>tigervnc-server-1.15.0-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">cdaa79b94bf252ce960f1e7e15db405fc0e96edc5e09ed73a1032b105e724f3a</sum>
        </package>
        <package name="tigervnc-server-minimal" version="1.15.0" release="7.el8_10" epoch="0" arch="s390x" src="tigervnc-1.15.0-7.el8_10.src.rpm">
          <filename>tigervnc-server-minimal-1.15.0-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">e6c46c29e10b022c30ec0c5ba9dee6fa881bba10b886ea5d7102e0c68809c4df</sum>
        </package>
        <package name="tigervnc" version="1.15.0" release="7.el8_10" epoch="0" arch="s390x" src="tigervnc-1.15.0-7.el8_10.src.rpm">
          <filename>tigervnc-1.15.0-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">f1e63429dd08ee863a2c5589140ee2ec22d8656e4d084b9c839cdbbd4b30a190</sum>
        </package>
        <package name="tigervnc-icons" version="1.15.0" release="7.el8_10" epoch="0" arch="noarch" src="tigervnc-1.15.0-7.el8_10.src.rpm">
          <filename>tigervnc-icons-1.15.0-7.el8_10.noarch.rpm</filename>
          <sum type="sha256">fcb641c782b06223bf9edd1ce3a6d1f0b8927553c2c11c2d159c1f3ecf784e3d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9844</id>
    <title>Moderate: osbuild-composer security update</title>
    <issued date="2025-06-26 00:00:00"/>
    <updated date="2025-06-30 12:59:48"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>osbuild-composer security update</summary>
    <description>A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients.  

Security Fix(es):  

  * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9844" id="RHSA-2025:9844" type="rhsa" title="RHSA-2025:9844"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22871" id="CVE-2025-22871" type="cve" title="CVE-2025-22871"/>
      <reference href="https://bugzilla.redhat.com/2358493" id="2358493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9844.html" id="ALSA-2025:9844" type="self" title="ALSA-2025:9844"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="osbuild-composer-core" version="101" release="4.el8_10.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101-4.el8_10.alma.1.src.rpm">
          <filename>osbuild-composer-core-101-4.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">0b3500a1256fa2fe4d3488c2d0f84cdf635d4cc3e8d3709421927c78a49e66ce</sum>
        </package>
        <package name="osbuild-composer-worker" version="101" release="4.el8_10.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101-4.el8_10.alma.1.src.rpm">
          <filename>osbuild-composer-worker-101-4.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">cbc5f89b06a5d35c940a6e7435d6f8ca969095e2b280b0b6eeeeab98e57604e0</sum>
        </package>
        <package name="osbuild-composer" version="101" release="4.el8_10.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101-4.el8_10.alma.1.src.rpm">
          <filename>osbuild-composer-101-4.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">ef9064633fe42aef4a43add61fa96a7bd007a41194b6cb17d6b526b5628bccf1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9845</id>
    <title>Moderate: weldr-client security update</title>
    <issued date="2025-06-26 00:00:00"/>
    <updated date="2025-06-30 12:56:17"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>weldr-client security update</summary>
    <description>Command line utility to control osbuild-composer  

Security Fix(es):  

  * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9845" id="RHSA-2025:9845" type="rhsa" title="RHSA-2025:9845"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22871" id="CVE-2025-22871" type="cve" title="CVE-2025-22871"/>
      <reference href="https://bugzilla.redhat.com/2358493" id="2358493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9845.html" id="ALSA-2025:9845" type="self" title="ALSA-2025:9845"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="weldr-client" version="35.12" release="3.el8_10" epoch="0" arch="s390x" src="weldr-client-35.12-3.el8_10.src.rpm">
          <filename>weldr-client-35.12-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">c0b66ddcb0c5ce7c7966e8fff22ae6bf7b9f72bf1255537e014c52b5070b5f69</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9878</id>
    <title>Important: libblockdev security update</title>
    <issued date="2025-06-30 00:00:00"/>
    <updated date="2025-07-01 22:08:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libblockdev security update</summary>
    <description>The libblockdev packages provide a C library with GObject introspection support used for low-level operations on block devices. The library serves as a thin wrapper around plug-ins for specific functionality, such as LVM, Btrfs, LUKS, or MD RAID.  

Security Fix(es):  

  * libblockdev: LPE from allow_active to root in libblockdev via udisks (CVE-2025-6019)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9878" id="RHSA-2025:9878" type="rhsa" title="RHSA-2025:9878"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6019" id="CVE-2025-6019" type="cve" title="CVE-2025-6019"/>
      <reference href="https://bugzilla.redhat.com/2370051" id="2370051" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9878.html" id="ALSA-2025:9878" type="self" title="ALSA-2025:9878"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libblockdev-crypto" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-crypto-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">0c48d746415ee92b1f6246e9eb6b1f5f2ed24793ad2770062a9b19d3a865f776</sum>
        </package>
        <package name="libblockdev-part" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-part-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">2a9681c94cc173c6c32403dd793f4183a03400df3047bff380550af8b204be9c</sum>
        </package>
        <package name="libblockdev-utils" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-utils-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">3fa85c74e98d4ff4294cae86ee83d612ff1f78d3a838b957fee0a36df972881f</sum>
        </package>
        <package name="libblockdev-lvm-dbus" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-lvm-dbus-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">4079b2ca7b52f081100e6357eb7041e81fefec874259601d49988cbe8c6b94f7</sum>
        </package>
        <package name="libblockdev-fs" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-fs-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">4316d7f548787868d79752fe482bbad4265c4502b78d747cb3abf8edb0cde3d8</sum>
        </package>
        <package name="libblockdev-swap" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-swap-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">4dfa93163b095f5d585d86e5745236b94876e0fa53c303bf931f3e1be29a5d83</sum>
        </package>
        <package name="libblockdev-mpath" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-mpath-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">8974b363470572efb95c80a008b210bbe555bcf65cc506ea65d49acd25888db6</sum>
        </package>
        <package name="libblockdev-mdraid" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-mdraid-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">9158e136826497b07547fd0abb6a2c91af6a0f00c328b723d5ed4375c528f69a</sum>
        </package>
        <package name="libblockdev-vdo" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-vdo-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">9495956864cd898cce44ee71c64d3978ce233957f18958a393118f56a48d9892</sum>
        </package>
        <package name="libblockdev-s390" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-s390-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">9bd545d39472dc79c69fd70feb7fcf3a9d7aa546872b7d23a399312a68dc31e0</sum>
        </package>
        <package name="libblockdev-nvdimm" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-nvdimm-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">a5cc294d48718312c23ff6ed059ee6e695db54b49e781e56087782b9cdfa030d</sum>
        </package>
        <package name="libblockdev" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">c4ed440d7a6be28320927add0600af86ad244c2f72549cedbd8dbcb8a6e15e4d</sum>
        </package>
        <package name="libblockdev-dm" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-dm-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">d57a5d534121eee00309bf559ab9228261c8c48193654e6d70133cdb8877acab</sum>
        </package>
        <package name="python3-blockdev" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>python3-blockdev-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">d652bc1f4fcc49189b1d09095b982ea651ec2dac332a705d081e61152a3b6908</sum>
        </package>
        <package name="libblockdev-kbd" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-kbd-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">e5f5965ae330a2dfa0aa878e98f6b2cd684a14e65623ff5ca95a221a93778439</sum>
        </package>
        <package name="libblockdev-loop" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-loop-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">f0ac269e816f134910bff2159efc28cc9266288e7398ee72233f7b5fb17ebd8c</sum>
        </package>
        <package name="libblockdev-lvm" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-lvm-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">f5db8c12760fbfb43554a018d0ba80563c3739078b946a01eee6ae1327281b11</sum>
        </package>
        <package name="libblockdev-plugins-all" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-plugins-all-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">f9f2ce7f96321e693e133987a0e0c7034008d6bd5d8a6b2d80e08f2405f0e4c2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:A004</id>
    <title>Important: libblockdev security update</title>
    <issued date="2025-06-20 00:00:00"/>
    <updated date="2025-06-20 14:58:25"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libblockdev security update</summary>
    <description>libblockdev is a C library supporting GObject introspection for manipulation of block devices. It has a plugin-based architecture where each technology (like LVM, Btrfs, MD RAID, Swap,...) is implemented in a separate plugin, possibly with multiple implementations (e.g. using LVM CLI or the new LVM DBus API).

Security Fix(es):

* libblockdev: Due to the way libblockdev interacts with the udisks daemon, an "allow_active" user on a system may be able escalate to full root privileges on the target host. (CVE-2025-6019)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6019" id="CVE-2025-6019" type="cve" title="CVE-2025-6019"/>
      <reference href="https://bugzilla.redhat.com/2370051" id="2370051" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-A004.html" id="ALSA-2025:A004" type="self" title="ALSA-2025:A004"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libblockdev-utils" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-utils-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">0cc02f90c779c0268b84f69002c9330216a8710055e076a922111477a1d78314</sum>
        </package>
        <package name="libblockdev-fs" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-fs-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">178b73d9c7bd563bf2f68e3ae7347207363b97dbe02905b5ae629a3a7ced1a17</sum>
        </package>
        <package name="libblockdev-mpath" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-mpath-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">1e80237ca0fcfb8198cf094c540f67c8e0d5e574d9f5265ad077248d5876261b</sum>
        </package>
        <package name="libblockdev-loop" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-loop-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">3d43c5107f80b377cefe3cbb46e8e2ff38b5e3af33e345d2633bd0ba67cff9fb</sum>
        </package>
        <package name="libblockdev-nvdimm" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-nvdimm-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">50f38323e39ec68b5fd2cae7b6a4bb949e23d4164935ef7dfbcef31310e7fdd4</sum>
        </package>
        <package name="libblockdev-s390" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-s390-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">55e6031249b607db74156a2ec32d9710990fad75ceba7f76ef29f773beddcca6</sum>
        </package>
        <package name="libblockdev-vdo" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-vdo-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">6757e4b47c76a19e683ea4e04e0ffdb9e5ae062882a88de7cd4d41ddb49fc44a</sum>
        </package>
        <package name="libblockdev-mdraid" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-mdraid-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">7ccd3e29075d4e2b9e96ed34b983a5b3abfcd67ebdccbb76ae5eb041534bf316</sum>
        </package>
        <package name="libblockdev-kbd" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-kbd-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">80f28e12fe3f5ae9f2805343a1878527c00721204d85056832ac277ab8283a59</sum>
        </package>
        <package name="libblockdev-crypto" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-crypto-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">8aed8b1d0b9fa4ea0a25e387a73da0e8c0b803e1b5127021c8b9422d962c061a</sum>
        </package>
        <package name="libblockdev-lvm" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-lvm-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">8fe49d39094823737831af3fe1e9d4894489778540058d5b126dc5684a4ffb84</sum>
        </package>
        <package name="libblockdev-swap" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-swap-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">a4d4aecf0398ccd33884d9a71f76e4f37457af6becf09045495a9edf7ef774cb</sum>
        </package>
        <package name="libblockdev-lvm-dbus" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-lvm-dbus-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">cc443e423d2f22bd41a6f6f1ada5133575cc89944c188d7122f9953bad4ac155</sum>
        </package>
        <package name="libblockdev-plugins-all" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-plugins-all-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">d9f8bb45510cd89612ff7187817ccff437f5560fdc9d472271b63cd0976f2af8</sum>
        </package>
        <package name="libblockdev-dm" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-dm-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">db3cbdea6c5322d5c2ea37eec105d2c8e4414c8d6418221d193ce5d792329dce</sum>
        </package>
        <package name="libblockdev" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">de410cd4fe203e59a1cea2b0218b5c8518f1bc5b0215e269436ecc05d227b7e7</sum>
        </package>
        <package name="python3-blockdev" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>python3-blockdev-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">eb914db99dd2098a9e6aca35003e6b1eb287051ab5876f9bfbf15ebe964ceffc</sum>
        </package>
        <package name="libblockdev-part" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-part-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">f0420955fadd12fc7d159a8eac75c5f1536a25a014a7d79c2c71a2d88be93612</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0026</id>
    <title>Important: thunderbird security update</title>
    <issued date="2026-01-05 00:00:00"/>
    <updated date="2026-01-05 10:18:14"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146 (CVE-2025-14333)
  * firefox: Use-after-free in the WebRTC: Signaling component (CVE-2025-14321)
  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14325)
  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2025-14322)
  * firefox: Privilege escalation in the Netmonitor component (CVE-2025-14328)
  * firefox: Privilege escalation in the Netmonitor component (CVE-2025-14329)
  * firefox: Same-origin policy bypass in the Request Handling component (CVE-2025-14331)
  * firefox: Privilege escalation in the DOM: Notifications component (CVE-2025-14323)
  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14330)
  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14324)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0026" id="RHSA-2026:0026" type="rhsa" title="RHSA-2026:0026"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14321" id="CVE-2025-14321" type="cve" title="CVE-2025-14321"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14322" id="CVE-2025-14322" type="cve" title="CVE-2025-14322"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14323" id="CVE-2025-14323" type="cve" title="CVE-2025-14323"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14324" id="CVE-2025-14324" type="cve" title="CVE-2025-14324"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14325" id="CVE-2025-14325" type="cve" title="CVE-2025-14325"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14328" id="CVE-2025-14328" type="cve" title="CVE-2025-14328"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14329" id="CVE-2025-14329" type="cve" title="CVE-2025-14329"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14330" id="CVE-2025-14330" type="cve" title="CVE-2025-14330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14331" id="CVE-2025-14331" type="cve" title="CVE-2025-14331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14333" id="CVE-2025-14333" type="cve" title="CVE-2025-14333"/>
      <reference href="https://bugzilla.redhat.com/2420502" id="2420502" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420503" id="2420503" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420504" id="2420504" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420506" id="2420506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420508" id="2420508" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420509" id="2420509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420512" id="2420512" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420513" id="2420513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420516" id="2420516" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420517" id="2420517" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0026.html" id="ALSA-2026:0026" type="self" title="ALSA-2026:0026"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="140.6.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-140.6.0-1.el8_10.alma.1.src.rpm">
          <filename>thunderbird-140.6.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">d3fdefe99674ef6da3ce9a03f9a186124c2cc98a7aa1b2867af55045cf1e303a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0123</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2026-01-06 00:00:00"/>
    <updated date="2026-01-07 14:18:42"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)
  * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0123" id="RHSA-2026:0123" type="rhsa" title="RHSA-2026:0123"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12084" id="CVE-2025-12084" type="cve" title="CVE-2025-12084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8291" id="CVE-2025-8291" type="cve" title="CVE-2025-8291"/>
      <reference href="https://bugzilla.redhat.com/2402342" id="2402342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418655" id="2418655" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0123.html" id="ALSA-2026:0123" type="self" title="ALSA-2026:0123"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.12-rpm-macros" version="3.12.12" release="1.el8_10" epoch="0" arch="noarch" src="python3.12-3.12.12-1.el8_10.src.rpm">
          <filename>python3.12-rpm-macros-3.12.12-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">0cc61a1e66482d6a493c1a6e7ba66289f626a60f1ae6e05c6eadbd746b3add5a</sum>
        </package>
        <package name="python3.12-tkinter" version="3.12.12" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-1.el8_10.src.rpm">
          <filename>python3.12-tkinter-3.12.12-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">4fcea3b4b7ed051ab0961bb3e6ecf83cf357cb4b9bbdf865449cef80b5768c19</sum>
        </package>
        <package name="python3.12-devel" version="3.12.12" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-1.el8_10.src.rpm">
          <filename>python3.12-devel-3.12.12-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">620c12f7d4cdb569c071e2e20ab6ceabfdbb36bcac79abb56d0b70bd0706a134</sum>
        </package>
        <package name="python3.12" version="3.12.12" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-1.el8_10.src.rpm">
          <filename>python3.12-3.12.12-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">e2526117fd65061e6003fcbbaa5384f3b9cfb97f24364df336a84af4a23590e3</sum>
        </package>
        <package name="python3.12-libs" version="3.12.12" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-1.el8_10.src.rpm">
          <filename>python3.12-libs-3.12.12-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">ee3482c77fcd0a28b3dc1345bb27e3545a763fa2608888b2aef68840a7dbffb2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0130</id>
    <title>Moderate: poppler security update</title>
    <issued date="2026-01-06 00:00:00"/>
    <updated date="2026-01-07 14:26:29"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.  

Security Fix(es):  

  * poppler: Out-of-Bounds Read in Poppler (CVE-2025-32365)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0130" id="RHSA-2026:0130" type="rhsa" title="RHSA-2026:0130"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32365" id="CVE-2025-32365" type="cve" title="CVE-2025-32365"/>
      <reference href="https://bugzilla.redhat.com/2357656" id="2357656" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0130.html" id="ALSA-2026:0130" type="self" title="ALSA-2026:0130"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="poppler-utils" version="20.11.0" release="13.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-13.el8_10.src.rpm">
          <filename>poppler-utils-20.11.0-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">3add7eb964566770a417b963214a0778a7fac692f2f1c82b6636d5c912b619f2</sum>
        </package>
        <package name="poppler-glib" version="20.11.0" release="13.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-13.el8_10.src.rpm">
          <filename>poppler-glib-20.11.0-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">cba406ad68c2e266fa5d350c1b50db2b19e032fc92fe47ee4b98dca683b1be08</sum>
        </package>
        <package name="poppler-qt5" version="20.11.0" release="13.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-13.el8_10.src.rpm">
          <filename>poppler-qt5-20.11.0-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">e3f9f6fd4023ec047d4cecb09e48ae1835acdc0f40a728b066ce72e178d114bb</sum>
        </package>
        <package name="poppler" version="20.11.0" release="13.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-13.el8_10.src.rpm">
          <filename>poppler-20.11.0-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">f94a259f9337ed62007cbf823d82f0ec719fd68e90c4ef2f833195b8d08929ac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0225</id>
    <title>Important: mariadb:10.3 security update</title>
    <issued date="2026-01-07 00:00:00"/>
    <updated date="2026-01-12 10:51:12"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mariadb:10.3 security update</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.   

Security Fix(es):  

  * mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation (CVE-2025-13699)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0225" id="RHSA-2026:0225" type="rhsa" title="RHSA-2026:0225"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13699" id="CVE-2025-13699" type="cve" title="CVE-2025-13699"/>
      <reference href="https://bugzilla.redhat.com/2417693" id="2417693" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0225.html" id="ALSA-2026:0225" type="self" title="ALSA-2026:0225"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="mariadb" stream="10.3" version="8100020260111191131" context="9edba152" arch="s390x"/>
        <package name="mariadb-gssapi-server" version="10.3.39" release="2.module_el8.10.0+4093+5130acef" epoch="3" arch="s390x" src="mariadb-10.3.39-2.module_el8.10.0+4093+5130acef.src.rpm">
          <filename>mariadb-gssapi-server-10.3.39-2.module_el8.10.0+4093+5130acef.s390x.rpm</filename>
          <sum type="sha256">0c7408621c29aa05375abd8a7d86c24ab1c1ac758885e2a8b4ffdd704bbbfa07</sum>
        </package>
        <package name="mariadb-common" version="10.3.39" release="2.module_el8.10.0+4093+5130acef" epoch="3" arch="s390x" src="mariadb-10.3.39-2.module_el8.10.0+4093+5130acef.src.rpm">
          <filename>mariadb-common-10.3.39-2.module_el8.10.0+4093+5130acef.s390x.rpm</filename>
          <sum type="sha256">131dd37342947b60f2731c81f49615553b2d8c5e56e97a7e05c07eeb70e3bfa0</sum>
        </package>
        <package name="mariadb-embedded-devel" version="10.3.39" release="2.module_el8.10.0+4093+5130acef" epoch="3" arch="s390x" src="mariadb-10.3.39-2.module_el8.10.0+4093+5130acef.src.rpm">
          <filename>mariadb-embedded-devel-10.3.39-2.module_el8.10.0+4093+5130acef.s390x.rpm</filename>
          <sum type="sha256">2ae0bba6753e415162f5740e6a2d793e4bd34c782015e50ec3c1618c1a1acebc</sum>
        </package>
        <package name="galera" version="25.3.37" release="1.module_el8.8.0+3609+204d4ab0" epoch="0" arch="s390x" src="galera-25.3.37-1.module_el8.8.0+3609+204d4ab0.src.rpm">
          <filename>galera-25.3.37-1.module_el8.8.0+3609+204d4ab0.s390x.rpm</filename>
          <sum type="sha256">2ed6ad752d2c43a32105d8c2c7532db2f75fec62d4a2403e90afae864df9c0f1</sum>
        </package>
        <package name="mariadb-server" version="10.3.39" release="2.module_el8.10.0+4093+5130acef" epoch="3" arch="s390x" src="mariadb-10.3.39-2.module_el8.10.0+4093+5130acef.src.rpm">
          <filename>mariadb-server-10.3.39-2.module_el8.10.0+4093+5130acef.s390x.rpm</filename>
          <sum type="sha256">3497d654d83a47572c0431554dbac646f57e3b671b1ca912012adc16d3d84819</sum>
        </package>
        <package name="mariadb-errmsg" version="10.3.39" release="2.module_el8.10.0+4093+5130acef" epoch="3" arch="s390x" src="mariadb-10.3.39-2.module_el8.10.0+4093+5130acef.src.rpm">
          <filename>mariadb-errmsg-10.3.39-2.module_el8.10.0+4093+5130acef.s390x.rpm</filename>
          <sum type="sha256">3a8ce3d12a7f341eed655a3fcaf8cfe9ed2f85b691622696a29885c3e72e6923</sum>
        </package>
        <package name="mariadb-server-galera" version="10.3.39" release="2.module_el8.10.0+4093+5130acef" epoch="3" arch="s390x" src="mariadb-10.3.39-2.module_el8.10.0+4093+5130acef.src.rpm">
          <filename>mariadb-server-galera-10.3.39-2.module_el8.10.0+4093+5130acef.s390x.rpm</filename>
          <sum type="sha256">67ed74c9a85ad793e9b8a2c3fd829f176b66c72a2015ebeed1c98111ac0bb709</sum>
        </package>
        <package name="mariadb-backup" version="10.3.39" release="2.module_el8.10.0+4093+5130acef" epoch="3" arch="s390x" src="mariadb-10.3.39-2.module_el8.10.0+4093+5130acef.src.rpm">
          <filename>mariadb-backup-10.3.39-2.module_el8.10.0+4093+5130acef.s390x.rpm</filename>
          <sum type="sha256">67fd0629c0861ecaab442f4fe731fb38c1462f6b176c6c78922caa001e4d2f68</sum>
        </package>
        <package name="mariadb-devel" version="10.3.39" release="2.module_el8.10.0+4093+5130acef" epoch="3" arch="s390x" src="mariadb-10.3.39-2.module_el8.10.0+4093+5130acef.src.rpm">
          <filename>mariadb-devel-10.3.39-2.module_el8.10.0+4093+5130acef.s390x.rpm</filename>
          <sum type="sha256">8136ceffeb68b43ce48b9152e0e712255cf847237d0461c8a79fd9ee45b3355d</sum>
        </package>
        <package name="mariadb-test" version="10.3.39" release="2.module_el8.10.0+4093+5130acef" epoch="3" arch="s390x" src="mariadb-10.3.39-2.module_el8.10.0+4093+5130acef.src.rpm">
          <filename>mariadb-test-10.3.39-2.module_el8.10.0+4093+5130acef.s390x.rpm</filename>
          <sum type="sha256">8c1ae51e18264a8537fb4e1a5e640984b04f1244d6e7b37fefe8fd1d87d58987</sum>
        </package>
        <package name="mariadb-oqgraph-engine" version="10.3.39" release="2.module_el8.10.0+4093+5130acef" epoch="3" arch="s390x" src="mariadb-10.3.39-2.module_el8.10.0+4093+5130acef.src.rpm">
          <filename>mariadb-oqgraph-engine-10.3.39-2.module_el8.10.0+4093+5130acef.s390x.rpm</filename>
          <sum type="sha256">955bb9b85912185474d4c459b7723a8181c6001416f316ac3ed6b6c446d6cfa9</sum>
        </package>
        <package name="mariadb-embedded" version="10.3.39" release="2.module_el8.10.0+4093+5130acef" epoch="3" arch="s390x" src="mariadb-10.3.39-2.module_el8.10.0+4093+5130acef.src.rpm">
          <filename>mariadb-embedded-10.3.39-2.module_el8.10.0+4093+5130acef.s390x.rpm</filename>
          <sum type="sha256">962aefb3d299e4a35863d86e461329a006ac6de4ab8af052b69c2c458da4787e</sum>
        </package>
        <package name="Judy" version="1.0.5" release="18.module_el8.6.0+3138+72759d2f" epoch="0" arch="s390x" src="Judy-1.0.5-18.module_el8.6.0+3138+72759d2f.src.rpm">
          <filename>Judy-1.0.5-18.module_el8.6.0+3138+72759d2f.s390x.rpm</filename>
          <sum type="sha256">b376d3549511285acea7e0dde37b7ccd41444e935fde76ab71d0218e2f690e6f</sum>
        </package>
        <package name="mariadb-server-utils" version="10.3.39" release="2.module_el8.10.0+4093+5130acef" epoch="3" arch="s390x" src="mariadb-10.3.39-2.module_el8.10.0+4093+5130acef.src.rpm">
          <filename>mariadb-server-utils-10.3.39-2.module_el8.10.0+4093+5130acef.s390x.rpm</filename>
          <sum type="sha256">d44ffd9199ac819ab429c540265b3ec0fee5fdeef81515432f44937a89f5a5cd</sum>
        </package>
        <package name="mariadb" version="10.3.39" release="2.module_el8.10.0+4093+5130acef" epoch="3" arch="s390x" src="mariadb-10.3.39-2.module_el8.10.0+4093+5130acef.src.rpm">
          <filename>mariadb-10.3.39-2.module_el8.10.0+4093+5130acef.s390x.rpm</filename>
          <sum type="sha256">f5f7e8331fd25c78b7f57ed6a5d090c6ff8bce1b92114aca5c320b4dbd93b49e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0232</id>
    <title>Important: mariadb:10.11 security update</title>
    <issued date="2026-01-07 00:00:00"/>
    <updated date="2026-01-12 10:48:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mariadb:10.11 security update</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.   

Security Fix(es):  

  * mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation (CVE-2025-13699)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0232" id="RHSA-2026:0232" type="rhsa" title="RHSA-2026:0232"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13699" id="CVE-2025-13699" type="cve" title="CVE-2025-13699"/>
      <reference href="https://bugzilla.redhat.com/2417693" id="2417693" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0232.html" id="ALSA-2026:0232" type="self" title="ALSA-2026:0232"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="mariadb" stream="10.11" version="8100020250128105049" context="9edba152" arch="s390x"/>
        <package name="mariadb-devel" version="10.11.10" release="2.module_el8.10.0+4091+e8693c5e" epoch="3" arch="s390x" src="mariadb-10.11.10-2.module_el8.10.0+4091+e8693c5e.src.rpm">
          <filename>mariadb-devel-10.11.10-2.module_el8.10.0+4091+e8693c5e.s390x.rpm</filename>
          <sum type="sha256">0ecdfd108da1285762272a5ec0afc6c3cb82c3c4d3c28672a18d77aecf17b08c</sum>
        </package>
        <package name="mariadb-server" version="10.11.10" release="2.module_el8.10.0+4091+e8693c5e" epoch="3" arch="s390x" src="mariadb-10.11.10-2.module_el8.10.0+4091+e8693c5e.src.rpm">
          <filename>mariadb-server-10.11.10-2.module_el8.10.0+4091+e8693c5e.s390x.rpm</filename>
          <sum type="sha256">11b2d44ae14223c0e31d50c1edf98cad6f74179918ac628dca9c872d1a9a0c5c</sum>
        </package>
        <package name="mariadb-common" version="10.11.10" release="2.module_el8.10.0+4091+e8693c5e" epoch="3" arch="s390x" src="mariadb-10.11.10-2.module_el8.10.0+4091+e8693c5e.src.rpm">
          <filename>mariadb-common-10.11.10-2.module_el8.10.0+4091+e8693c5e.s390x.rpm</filename>
          <sum type="sha256">1e9c029dd27bf88fe3b5fa4f542159eb525a1fbe6d2b357ecc3ea01403b292da</sum>
        </package>
        <package name="mariadb-test" version="10.11.10" release="2.module_el8.10.0+4091+e8693c5e" epoch="3" arch="s390x" src="mariadb-10.11.10-2.module_el8.10.0+4091+e8693c5e.src.rpm">
          <filename>mariadb-test-10.11.10-2.module_el8.10.0+4091+e8693c5e.s390x.rpm</filename>
          <sum type="sha256">4956dee89bf62f85858dc279c47adc48cf499aebc882372a075cf376964f4b33</sum>
        </package>
        <package name="mariadb-server-utils" version="10.11.10" release="2.module_el8.10.0+4091+e8693c5e" epoch="3" arch="s390x" src="mariadb-10.11.10-2.module_el8.10.0+4091+e8693c5e.src.rpm">
          <filename>mariadb-server-utils-10.11.10-2.module_el8.10.0+4091+e8693c5e.s390x.rpm</filename>
          <sum type="sha256">5fc705388d43c832518196b0b449fc089cd4ebdbe96413bc118f2288f3ab139a</sum>
        </package>
        <package name="mariadb-server-galera" version="10.11.10" release="2.module_el8.10.0+4091+e8693c5e" epoch="3" arch="s390x" src="mariadb-10.11.10-2.module_el8.10.0+4091+e8693c5e.src.rpm">
          <filename>mariadb-server-galera-10.11.10-2.module_el8.10.0+4091+e8693c5e.s390x.rpm</filename>
          <sum type="sha256">87542703f047995cb9e740c5e78e18febacdee48cbc16469b90a358fae1c3a12</sum>
        </package>
        <package name="mariadb-gssapi-server" version="10.11.10" release="2.module_el8.10.0+4091+e8693c5e" epoch="3" arch="s390x" src="mariadb-10.11.10-2.module_el8.10.0+4091+e8693c5e.src.rpm">
          <filename>mariadb-gssapi-server-10.11.10-2.module_el8.10.0+4091+e8693c5e.s390x.rpm</filename>
          <sum type="sha256">936c90f6b7dafe310660f84a9c08a7c284ba53b54900761b7066d8a4465ca66f</sum>
        </package>
        <package name="galera" version="26.4.20" release="1.module_el8.10.0+3955+6534edaf" epoch="0" arch="s390x" src="galera-26.4.20-1.module_el8.10.0+3955+6534edaf.src.rpm">
          <filename>galera-26.4.20-1.module_el8.10.0+3955+6534edaf.s390x.rpm</filename>
          <sum type="sha256">9469c2dc10d35a3f797b60a8cd6e3cb90170968cda729a1221a85701cb74b875</sum>
        </package>
        <package name="Judy" version="1.0.5" release="18.module_el8.10.0+3955+6534edaf" epoch="0" arch="s390x" src="Judy-1.0.5-18.module_el8.10.0+3955+6534edaf.src.rpm">
          <filename>Judy-1.0.5-18.module_el8.10.0+3955+6534edaf.s390x.rpm</filename>
          <sum type="sha256">99b62cdef6ceaba085de83cc984e6cbf05038bdb656233ab329acb0253ef0e8b</sum>
        </package>
        <package name="mariadb-embedded-devel" version="10.11.10" release="2.module_el8.10.0+4091+e8693c5e" epoch="3" arch="s390x" src="mariadb-10.11.10-2.module_el8.10.0+4091+e8693c5e.src.rpm">
          <filename>mariadb-embedded-devel-10.11.10-2.module_el8.10.0+4091+e8693c5e.s390x.rpm</filename>
          <sum type="sha256">99da645bc513280caa0ca1ee872c1b128e495ee8adc1ea138d6d4bbebbd9ef7e</sum>
        </package>
        <package name="mariadb-backup" version="10.11.10" release="2.module_el8.10.0+4091+e8693c5e" epoch="3" arch="s390x" src="mariadb-10.11.10-2.module_el8.10.0+4091+e8693c5e.src.rpm">
          <filename>mariadb-backup-10.11.10-2.module_el8.10.0+4091+e8693c5e.s390x.rpm</filename>
          <sum type="sha256">a669b10e830d591363d79ba0dfbcdddfda2a230a09e507f294dc58700b2ffd68</sum>
        </package>
        <package name="mariadb-embedded" version="10.11.10" release="2.module_el8.10.0+4091+e8693c5e" epoch="3" arch="s390x" src="mariadb-10.11.10-2.module_el8.10.0+4091+e8693c5e.src.rpm">
          <filename>mariadb-embedded-10.11.10-2.module_el8.10.0+4091+e8693c5e.s390x.rpm</filename>
          <sum type="sha256">acec3b1ed62c4f3777d4b2f1e7c1b493ac762e23f834a04f1b069234688df921</sum>
        </package>
        <package name="mariadb" version="10.11.10" release="2.module_el8.10.0+4091+e8693c5e" epoch="3" arch="s390x" src="mariadb-10.11.10-2.module_el8.10.0+4091+e8693c5e.src.rpm">
          <filename>mariadb-10.11.10-2.module_el8.10.0+4091+e8693c5e.s390x.rpm</filename>
          <sum type="sha256">bbe09d162e8c613ce3f04151dd3e82b15600f66759b2b32297c0ee1b8c3b8b15</sum>
        </package>
        <package name="mariadb-oqgraph-engine" version="10.11.10" release="2.module_el8.10.0+4091+e8693c5e" epoch="3" arch="s390x" src="mariadb-10.11.10-2.module_el8.10.0+4091+e8693c5e.src.rpm">
          <filename>mariadb-oqgraph-engine-10.11.10-2.module_el8.10.0+4091+e8693c5e.s390x.rpm</filename>
          <sum type="sha256">bfb8ada8c51e8ace5046d44ee6cf1afb279f30ccd9a7c7ebff965a0f2bdc9dcc</sum>
        </package>
        <package name="mariadb-pam" version="10.11.10" release="2.module_el8.10.0+4091+e8693c5e" epoch="3" arch="s390x" src="mariadb-10.11.10-2.module_el8.10.0+4091+e8693c5e.src.rpm">
          <filename>mariadb-pam-10.11.10-2.module_el8.10.0+4091+e8693c5e.s390x.rpm</filename>
          <sum type="sha256">d06a8778bdb65b4ffd4bb2b679d13fb852a4c00997126386a590e18f15a4832b</sum>
        </package>
        <package name="mariadb-errmsg" version="10.11.10" release="2.module_el8.10.0+4091+e8693c5e" epoch="3" arch="s390x" src="mariadb-10.11.10-2.module_el8.10.0+4091+e8693c5e.src.rpm">
          <filename>mariadb-errmsg-10.11.10-2.module_el8.10.0+4091+e8693c5e.s390x.rpm</filename>
          <sum type="sha256">d3c9268ee0dd4287934c4f49c6a0efa1395b5f5b3c478e335eac1f506be5c6a4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0233</id>
    <title>Important: mariadb:10.5 security update</title>
    <issued date="2026-01-07 00:00:00"/>
    <updated date="2026-01-12 10:45:26"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mariadb:10.5 security update</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.   

Security Fix(es):  

  * mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation (CVE-2025-13699)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0233" id="RHSA-2026:0233" type="rhsa" title="RHSA-2026:0233"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13699" id="CVE-2025-13699" type="cve" title="CVE-2025-13699"/>
      <reference href="https://bugzilla.redhat.com/2417693" id="2417693" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0233.html" id="ALSA-2026:0233" type="self" title="ALSA-2026:0233"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="mariadb" stream="10.5" version="8100020250128084844" context="9edba152" arch="s390x"/>
        <package name="mariadb-devel" version="10.5.29" release="3.module_el8.10.0+4094+f90dcfa6" epoch="3" arch="s390x" src="mariadb-10.5.29-3.module_el8.10.0+4094+f90dcfa6.src.rpm">
          <filename>mariadb-devel-10.5.29-3.module_el8.10.0+4094+f90dcfa6.s390x.rpm</filename>
          <sum type="sha256">28b6cd544ad23b7a450620a5b2ef3c7e7df7537777084bab33efd1e27d5a2b7b</sum>
        </package>
        <package name="mariadb-server" version="10.5.29" release="3.module_el8.10.0+4094+f90dcfa6" epoch="3" arch="s390x" src="mariadb-10.5.29-3.module_el8.10.0+4094+f90dcfa6.src.rpm">
          <filename>mariadb-server-10.5.29-3.module_el8.10.0+4094+f90dcfa6.s390x.rpm</filename>
          <sum type="sha256">373ddd5e04bf5c6d785d41b000aa4e0bd0c4f2ce41c74366cccccb315d6d711b</sum>
        </package>
        <package name="mariadb-test" version="10.5.29" release="3.module_el8.10.0+4094+f90dcfa6" epoch="3" arch="s390x" src="mariadb-10.5.29-3.module_el8.10.0+4094+f90dcfa6.src.rpm">
          <filename>mariadb-test-10.5.29-3.module_el8.10.0+4094+f90dcfa6.s390x.rpm</filename>
          <sum type="sha256">5cd1068bb6942573dfd6f869af502d2ded1146fd214c8bfff8f488d19aba749f</sum>
        </package>
        <package name="mariadb-oqgraph-engine" version="10.5.29" release="3.module_el8.10.0+4094+f90dcfa6" epoch="3" arch="s390x" src="mariadb-10.5.29-3.module_el8.10.0+4094+f90dcfa6.src.rpm">
          <filename>mariadb-oqgraph-engine-10.5.29-3.module_el8.10.0+4094+f90dcfa6.s390x.rpm</filename>
          <sum type="sha256">6c46e050011812b061b686f3efadc52803810e392f6ed7014dec369e63078eda</sum>
        </package>
        <package name="mariadb-server-utils" version="10.5.29" release="3.module_el8.10.0+4094+f90dcfa6" epoch="3" arch="s390x" src="mariadb-10.5.29-3.module_el8.10.0+4094+f90dcfa6.src.rpm">
          <filename>mariadb-server-utils-10.5.29-3.module_el8.10.0+4094+f90dcfa6.s390x.rpm</filename>
          <sum type="sha256">6e792f13b75dbbb3e46ed8c1adfb2131045eb51d16d4f9c6572dbb40198d06ce</sum>
        </package>
        <package name="mariadb-errmsg" version="10.5.29" release="3.module_el8.10.0+4094+f90dcfa6" epoch="3" arch="s390x" src="mariadb-10.5.29-3.module_el8.10.0+4094+f90dcfa6.src.rpm">
          <filename>mariadb-errmsg-10.5.29-3.module_el8.10.0+4094+f90dcfa6.s390x.rpm</filename>
          <sum type="sha256">7afe887aec2e04c37088b9c52e09c06e33c97790dcfb4b622a9cb4c59c11dd8c</sum>
        </package>
        <package name="mariadb" version="10.5.29" release="3.module_el8.10.0+4094+f90dcfa6" epoch="3" arch="s390x" src="mariadb-10.5.29-3.module_el8.10.0+4094+f90dcfa6.src.rpm">
          <filename>mariadb-10.5.29-3.module_el8.10.0+4094+f90dcfa6.s390x.rpm</filename>
          <sum type="sha256">889e93bb3bb84c465894433eaa5da7a8fa07a6aee6a75e34eaa16a7f35880376</sum>
        </package>
        <package name="mariadb-backup" version="10.5.29" release="3.module_el8.10.0+4094+f90dcfa6" epoch="3" arch="s390x" src="mariadb-10.5.29-3.module_el8.10.0+4094+f90dcfa6.src.rpm">
          <filename>mariadb-backup-10.5.29-3.module_el8.10.0+4094+f90dcfa6.s390x.rpm</filename>
          <sum type="sha256">a1032ffd5f2bf169264ea9933ac44deec772f045f76757ec9d0a9868f0bc84c0</sum>
        </package>
        <package name="mariadb-pam" version="10.5.29" release="3.module_el8.10.0+4094+f90dcfa6" epoch="3" arch="s390x" src="mariadb-10.5.29-3.module_el8.10.0+4094+f90dcfa6.src.rpm">
          <filename>mariadb-pam-10.5.29-3.module_el8.10.0+4094+f90dcfa6.s390x.rpm</filename>
          <sum type="sha256">a90cc55ced93637353b22357ede1d4e51b194f4a639ad59ab40f630a2e8bb303</sum>
        </package>
        <package name="mariadb-gssapi-server" version="10.5.29" release="3.module_el8.10.0+4094+f90dcfa6" epoch="3" arch="s390x" src="mariadb-10.5.29-3.module_el8.10.0+4094+f90dcfa6.src.rpm">
          <filename>mariadb-gssapi-server-10.5.29-3.module_el8.10.0+4094+f90dcfa6.s390x.rpm</filename>
          <sum type="sha256">b83cc1981a1545f6971d5692823db8eabffe1d5bc644e89ca4dc51752a276943</sum>
        </package>
        <package name="mariadb-common" version="10.5.29" release="3.module_el8.10.0+4094+f90dcfa6" epoch="3" arch="s390x" src="mariadb-10.5.29-3.module_el8.10.0+4094+f90dcfa6.src.rpm">
          <filename>mariadb-common-10.5.29-3.module_el8.10.0+4094+f90dcfa6.s390x.rpm</filename>
          <sum type="sha256">d95726b512865951cf0966fdc99e6c4756fb14cf59aef49a73484321131dae1e</sum>
        </package>
        <package name="galera" version="26.4.22" release="1.module_el8.10.0+4059+10818090" epoch="0" arch="s390x" src="galera-26.4.22-1.module_el8.10.0+4059+10818090.src.rpm">
          <filename>galera-26.4.22-1.module_el8.10.0+4059+10818090.s390x.rpm</filename>
          <sum type="sha256">df9de5c25e180506072194e1c5173b581629c175acb87d53912c8f7b780bb4f5</sum>
        </package>
        <package name="Judy" version="1.0.5" release="18.module_el8.10.0+3947+ac422511" epoch="0" arch="s390x" src="Judy-1.0.5-18.module_el8.10.0+3947+ac422511.src.rpm">
          <filename>Judy-1.0.5-18.module_el8.10.0+3947+ac422511.s390x.rpm</filename>
          <sum type="sha256">e004c007bad35247f91e70787432966941e40d2b399880da0818c23178f1d260</sum>
        </package>
        <package name="mariadb-server-galera" version="10.5.29" release="3.module_el8.10.0+4094+f90dcfa6" epoch="3" arch="s390x" src="mariadb-10.5.29-3.module_el8.10.0+4094+f90dcfa6.src.rpm">
          <filename>mariadb-server-galera-10.5.29-3.module_el8.10.0+4094+f90dcfa6.s390x.rpm</filename>
          <sum type="sha256">e42918145eccbdbfa00aa0059609b82cca336c8f90185d917c346aaeed036d63</sum>
        </package>
        <package name="mariadb-embedded-devel" version="10.5.29" release="3.module_el8.10.0+4094+f90dcfa6" epoch="3" arch="s390x" src="mariadb-10.5.29-3.module_el8.10.0+4094+f90dcfa6.src.rpm">
          <filename>mariadb-embedded-devel-10.5.29-3.module_el8.10.0+4094+f90dcfa6.s390x.rpm</filename>
          <sum type="sha256">ee5af5266910bdcc985e1ea77c69868cb740d62eb05cf8ec012785c493bbfb94</sum>
        </package>
        <package name="mariadb-embedded" version="10.5.29" release="3.module_el8.10.0+4094+f90dcfa6" epoch="3" arch="s390x" src="mariadb-10.5.29-3.module_el8.10.0+4094+f90dcfa6.src.rpm">
          <filename>mariadb-embedded-10.5.29-3.module_el8.10.0+4094+f90dcfa6.s390x.rpm</filename>
          <sum type="sha256">ef7808c695f610e59d308fe635314bce409f9b78af6e5a8a38eaedc612791013</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0421</id>
    <title>Important: libsoup security update</title>
    <issued date="2026-01-12 00:00:00"/>
    <updated date="2026-01-16 15:44:34"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsoup security update</summary>
    <description>The libsoup packages provide an HTTP client and server library for GNOME.  

Security Fix(es):  

  * libsoup: libsoup: Duplicate Host Header Handling Causes Host-Parsing Discrepancy (First- vs Last-Value Wins) (CVE-2025-14523)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0421" id="RHSA-2026:0421" type="rhsa" title="RHSA-2026:0421"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14523" id="CVE-2025-14523" type="cve" title="CVE-2025-14523"/>
      <reference href="https://bugzilla.redhat.com/2421349" id="2421349" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0421.html" id="ALSA-2026:0421" type="self" title="ALSA-2026:0421"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libsoup-devel" version="2.62.3" release="11.el8_10" epoch="0" arch="s390x" src="libsoup-2.62.3-11.el8_10.src.rpm">
          <filename>libsoup-devel-2.62.3-11.el8_10.s390x.rpm</filename>
          <sum type="sha256">4215fa1daaf78511d9da0fcfa02123267e89d31575f02dd83588418171934d1f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0519</id>
    <title>Moderate: postgresql:16 security update</title>
    <issued date="2026-01-13 00:00:00"/>
    <updated date="2026-01-16 15:14:12"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql:16 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: CREATE STATISTICS does not check for schema CREATE privilege (CVE-2025-12817)
  * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0519" id="RHSA-2026:0519" type="rhsa" title="RHSA-2026:0519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12817" id="CVE-2025-12817" type="cve" title="CVE-2025-12817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12818" id="CVE-2025-12818" type="cve" title="CVE-2025-12818"/>
      <reference href="https://bugzilla.redhat.com/2414825" id="2414825" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414826" id="2414826" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0519.html" id="ALSA-2026:0519" type="self" title="ALSA-2026:0519"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="16" version="8100020241205105204" context="9edba152" arch="s390x"/>
        <package name="postgresql-server" version="16.11" release="1.module_el8.10.0+4099+381a55d6" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el8.10.0+4099+381a55d6.src.rpm">
          <filename>postgresql-server-16.11-1.module_el8.10.0+4099+381a55d6.s390x.rpm</filename>
          <sum type="sha256">13d8ff56f3b99efb643e5f4bfd06306998f73f90baafd677ba8acbc80de679bf</sum>
        </package>
        <package name="postgresql" version="16.11" release="1.module_el8.10.0+4099+381a55d6" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el8.10.0+4099+381a55d6.src.rpm">
          <filename>postgresql-16.11-1.module_el8.10.0+4099+381a55d6.s390x.rpm</filename>
          <sum type="sha256">1f7a8a480f9712df29483dd9ad849b1b823a212941c74a00063845db394685f9</sum>
        </package>
        <package name="postgresql-contrib" version="16.11" release="1.module_el8.10.0+4099+381a55d6" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el8.10.0+4099+381a55d6.src.rpm">
          <filename>postgresql-contrib-16.11-1.module_el8.10.0+4099+381a55d6.s390x.rpm</filename>
          <sum type="sha256">2519e32dde6a1801143d4b9eb20d4efe3eb7da337e45fdaca8e780ef7c31436e</sum>
        </package>
        <package name="postgresql-private-devel" version="16.11" release="1.module_el8.10.0+4099+381a55d6" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el8.10.0+4099+381a55d6.src.rpm">
          <filename>postgresql-private-devel-16.11-1.module_el8.10.0+4099+381a55d6.s390x.rpm</filename>
          <sum type="sha256">338bb55d8cb6334ba3aabdc7a8da305f106a41c30042262feec36b6bc3a96305</sum>
        </package>
        <package name="postgresql-docs" version="16.11" release="1.module_el8.10.0+4099+381a55d6" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el8.10.0+4099+381a55d6.src.rpm">
          <filename>postgresql-docs-16.11-1.module_el8.10.0+4099+381a55d6.s390x.rpm</filename>
          <sum type="sha256">4daec0e91776c986368fbd28dc3a5e115976d867c50bbf5d34c41acd00dc7725</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="16.11" release="1.module_el8.10.0+4099+381a55d6" epoch="0" arch="noarch" src="postgresql-16.11-1.module_el8.10.0+4099+381a55d6.src.rpm">
          <filename>postgresql-test-rpm-macros-16.11-1.module_el8.10.0+4099+381a55d6.noarch.rpm</filename>
          <sum type="sha256">539ba80ef354312c6df57ee772402867cfbac07c70e1a6df24ecf9c9a34541c4</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="16.11" release="1.module_el8.10.0+4099+381a55d6" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el8.10.0+4099+381a55d6.src.rpm">
          <filename>postgresql-upgrade-devel-16.11-1.module_el8.10.0+4099+381a55d6.s390x.rpm</filename>
          <sum type="sha256">5d6821de95a019ac2422e33d87016bc434b37137b3dedca0516e06ccc9bcbe9f</sum>
        </package>
        <package name="postgresql-plpython3" version="16.11" release="1.module_el8.10.0+4099+381a55d6" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el8.10.0+4099+381a55d6.src.rpm">
          <filename>postgresql-plpython3-16.11-1.module_el8.10.0+4099+381a55d6.s390x.rpm</filename>
          <sum type="sha256">60d82580a5f8b4ee7f077ef06d355b45de6e1a7eb661df1e84af7fce43183989</sum>
        </package>
        <package name="postgresql-plperl" version="16.11" release="1.module_el8.10.0+4099+381a55d6" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el8.10.0+4099+381a55d6.src.rpm">
          <filename>postgresql-plperl-16.11-1.module_el8.10.0+4099+381a55d6.s390x.rpm</filename>
          <sum type="sha256">6247543caa9d4124740a5c5c3568cccdc080bd05ad062bb265153065bc0dffdc</sum>
        </package>
        <package name="postgresql-upgrade" version="16.11" release="1.module_el8.10.0+4099+381a55d6" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el8.10.0+4099+381a55d6.src.rpm">
          <filename>postgresql-upgrade-16.11-1.module_el8.10.0+4099+381a55d6.s390x.rpm</filename>
          <sum type="sha256">63aae91ffffe5d49157732b98485f7358c934f47362a3872bdcc39139b33af67</sum>
        </package>
        <package name="postgresql-pltcl" version="16.11" release="1.module_el8.10.0+4099+381a55d6" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el8.10.0+4099+381a55d6.src.rpm">
          <filename>postgresql-pltcl-16.11-1.module_el8.10.0+4099+381a55d6.s390x.rpm</filename>
          <sum type="sha256">75c9c46144619fb1251ecc38d589377db41d54ff148ef1e15732b24bba8484c7</sum>
        </package>
        <package name="postgresql-server-devel" version="16.11" release="1.module_el8.10.0+4099+381a55d6" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el8.10.0+4099+381a55d6.src.rpm">
          <filename>postgresql-server-devel-16.11-1.module_el8.10.0+4099+381a55d6.s390x.rpm</filename>
          <sum type="sha256">9194932ba73796372ab4c200e5273b2197fb2571605ee2deb216d4e79c7feea0</sum>
        </package>
        <package name="postgresql-private-libs" version="16.11" release="1.module_el8.10.0+4099+381a55d6" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el8.10.0+4099+381a55d6.src.rpm">
          <filename>postgresql-private-libs-16.11-1.module_el8.10.0+4099+381a55d6.s390x.rpm</filename>
          <sum type="sha256">94e5ff733c3788dbcc8f68a35771ad8faab91329c2a9e81b5b336f5594c5a636</sum>
        </package>
        <package name="pg_repack" version="1.5.1" release="1.module_el8.10.0+3930+ecf33554" epoch="0" arch="s390x" src="pg_repack-1.5.1-1.module_el8.10.0+3930+ecf33554.src.rpm">
          <filename>pg_repack-1.5.1-1.module_el8.10.0+3930+ecf33554.s390x.rpm</filename>
          <sum type="sha256">9b13f1d5444f6cf8500fa428e1512f73c0cf1f4ddddd6964d429433ae4e5f724</sum>
        </package>
        <package name="postgresql-static" version="16.11" release="1.module_el8.10.0+4099+381a55d6" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el8.10.0+4099+381a55d6.src.rpm">
          <filename>postgresql-static-16.11-1.module_el8.10.0+4099+381a55d6.s390x.rpm</filename>
          <sum type="sha256">aa3672c27a7aee02a428814a852afd4a8192103f66c422ec823195877c6d7820</sum>
        </package>
        <package name="postgres-decoderbufs" version="2.4.0" release="1.Final.module_el8.10.0+3798+606ebb9f" epoch="0" arch="s390x" src="postgres-decoderbufs-2.4.0-1.Final.module_el8.10.0+3798+606ebb9f.src.rpm">
          <filename>postgres-decoderbufs-2.4.0-1.Final.module_el8.10.0+3798+606ebb9f.s390x.rpm</filename>
          <sum type="sha256">b4ab4ce80d621ce9e80cef82edec35ef1ab32c9448d690e668db0bb17bd1a90a</sum>
        </package>
        <package name="postgresql-test" version="16.11" release="1.module_el8.10.0+4099+381a55d6" epoch="0" arch="s390x" src="postgresql-16.11-1.module_el8.10.0+4099+381a55d6.src.rpm">
          <filename>postgresql-test-16.11-1.module_el8.10.0+4099+381a55d6.s390x.rpm</filename>
          <sum type="sha256">c835d5b3a3bef37f604a74257dc7d6437649873be7f10fe7fe782f7fee38373d</sum>
        </package>
        <package name="pgaudit" version="16.0" release="1.module_el8.10.0+3798+606ebb9f" epoch="0" arch="s390x" src="pgaudit-16.0-1.module_el8.10.0+3798+606ebb9f.src.rpm">
          <filename>pgaudit-16.0-1.module_el8.10.0+3798+606ebb9f.s390x.rpm</filename>
          <sum type="sha256">e1395e420ef0b455c809e9fbbc50b5a27410be72d91603805a4907b86ca95cce</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0523</id>
    <title>Moderate: postgresql:13 security update</title>
    <issued date="2026-01-13 00:00:00"/>
    <updated date="2026-01-16 15:11:39"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql:13 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: CREATE STATISTICS does not check for schema CREATE privilege (CVE-2025-12817)
  * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0523" id="RHSA-2026:0523" type="rhsa" title="RHSA-2026:0523"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12817" id="CVE-2025-12817" type="cve" title="CVE-2025-12817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12818" id="CVE-2025-12818" type="cve" title="CVE-2025-12818"/>
      <reference href="https://bugzilla.redhat.com/2414825" id="2414825" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414826" id="2414826" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0523.html" id="ALSA-2026:0523" type="self" title="ALSA-2026:0523"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="13" version="8100020260115141226" context="9edba152" arch="s390x"/>
        <package name="postgresql-plpython3" version="13.23" release="1.module_el8.10.0+4097+ed3c9b5c" epoch="0" arch="s390x" src="postgresql-13.23-1.module_el8.10.0+4097+ed3c9b5c.src.rpm">
          <filename>postgresql-plpython3-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm</filename>
          <sum type="sha256">08f845a9daa15da27576f8e1e0a8ce41022ab9ede44ebf16ee66a991a90aeaae</sum>
        </package>
        <package name="postgresql-upgrade" version="13.23" release="1.module_el8.10.0+4097+ed3c9b5c" epoch="0" arch="s390x" src="postgresql-13.23-1.module_el8.10.0+4097+ed3c9b5c.src.rpm">
          <filename>postgresql-upgrade-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm</filename>
          <sum type="sha256">0daea037173b67bff9d1d5eb0c67930b4929a8e47267e1565ae4cb0b7f051f5d</sum>
        </package>
        <package name="postgresql-plperl" version="13.23" release="1.module_el8.10.0+4097+ed3c9b5c" epoch="0" arch="s390x" src="postgresql-13.23-1.module_el8.10.0+4097+ed3c9b5c.src.rpm">
          <filename>postgresql-plperl-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm</filename>
          <sum type="sha256">3779ab20abb6b395286766341fee1e8a4de2832a566f630217e0a943ea04c278</sum>
        </package>
        <package name="postgresql-contrib" version="13.23" release="1.module_el8.10.0+4097+ed3c9b5c" epoch="0" arch="s390x" src="postgresql-13.23-1.module_el8.10.0+4097+ed3c9b5c.src.rpm">
          <filename>postgresql-contrib-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm</filename>
          <sum type="sha256">60de1318484dbf8a96e02b2af421926c11fb88930cdc37bae092b8064ac48493</sum>
        </package>
        <package name="postgresql" version="13.23" release="1.module_el8.10.0+4097+ed3c9b5c" epoch="0" arch="s390x" src="postgresql-13.23-1.module_el8.10.0+4097+ed3c9b5c.src.rpm">
          <filename>postgresql-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm</filename>
          <sum type="sha256">73d9c2df2f057f58d7bf983aaee60e0b7482cbce1ef6a764e574cc1a35a7d9db</sum>
        </package>
        <package name="postgresql-test" version="13.23" release="1.module_el8.10.0+4097+ed3c9b5c" epoch="0" arch="s390x" src="postgresql-13.23-1.module_el8.10.0+4097+ed3c9b5c.src.rpm">
          <filename>postgresql-test-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm</filename>
          <sum type="sha256">7947afb61ccadc3611a5b0ae75b5b532a3cb9bf1df4cba6f0c3253ae2919c058</sum>
        </package>
        <package name="postgresql-pltcl" version="13.23" release="1.module_el8.10.0+4097+ed3c9b5c" epoch="0" arch="s390x" src="postgresql-13.23-1.module_el8.10.0+4097+ed3c9b5c.src.rpm">
          <filename>postgresql-pltcl-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm</filename>
          <sum type="sha256">8120a6a496b7a4f0e69f774b4ec0fea19763fc27c9d3bf8e34751a3462a2e57a</sum>
        </package>
        <package name="postgresql-server-devel" version="13.23" release="1.module_el8.10.0+4097+ed3c9b5c" epoch="0" arch="s390x" src="postgresql-13.23-1.module_el8.10.0+4097+ed3c9b5c.src.rpm">
          <filename>postgresql-server-devel-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm</filename>
          <sum type="sha256">85f94c0a381733426237a90e1c381fbd31428af0c9ef01512fe98b03197c9fa6</sum>
        </package>
        <package name="postgresql-docs" version="13.23" release="1.module_el8.10.0+4097+ed3c9b5c" epoch="0" arch="s390x" src="postgresql-13.23-1.module_el8.10.0+4097+ed3c9b5c.src.rpm">
          <filename>postgresql-docs-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm</filename>
          <sum type="sha256">873979ef0b22b80fd171dcf6baf80a25dca5e97ea2ad442a89e7e4f52e2b51d5</sum>
        </package>
        <package name="pgaudit" version="1.5.0" release="1.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="pgaudit-1.5.0-1.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>pgaudit-1.5.0-1.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">a29cba50326b3c78b1cff9ad076eff7837022e71f02d7ec9e918aed69a9c3f35</sum>
        </package>
        <package name="postgres-decoderbufs" version="0.10.0" release="2.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">b11226898b888f8213eefe941cece0f636a08ccce2ceaa8bee2a38e6058ed4f3</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="13.23" release="1.module_el8.10.0+4097+ed3c9b5c" epoch="0" arch="noarch" src="postgresql-13.23-1.module_el8.10.0+4097+ed3c9b5c.src.rpm">
          <filename>postgresql-test-rpm-macros-13.23-1.module_el8.10.0+4097+ed3c9b5c.noarch.rpm</filename>
          <sum type="sha256">b484f3d2a2cf0eaa6eeb3276c7bb27c0f7fe1280b2562abf47803f23a9705775</sum>
        </package>
        <package name="pg_repack" version="1.4.6" release="3.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="pg_repack-1.4.6-3.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>pg_repack-1.4.6-3.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">c1b386540b304a4de3ff8d840ec35dc9d67ecd1827aa06cd695f06060e8d2ea7</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.23" release="1.module_el8.10.0+4097+ed3c9b5c" epoch="0" arch="s390x" src="postgresql-13.23-1.module_el8.10.0+4097+ed3c9b5c.src.rpm">
          <filename>postgresql-upgrade-devel-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm</filename>
          <sum type="sha256">e29f08377eaff82009ec3e2ba85e87095d2118865913eea65c18092afb4777c4</sum>
        </package>
        <package name="postgresql-server" version="13.23" release="1.module_el8.10.0+4097+ed3c9b5c" epoch="0" arch="s390x" src="postgresql-13.23-1.module_el8.10.0+4097+ed3c9b5c.src.rpm">
          <filename>postgresql-server-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm</filename>
          <sum type="sha256">e80294522ee5d97a55898e55844e8082156fda156adc954f5efa535f609a7377</sum>
        </package>
        <package name="postgresql-static" version="13.23" release="1.module_el8.10.0+4097+ed3c9b5c" epoch="0" arch="s390x" src="postgresql-13.23-1.module_el8.10.0+4097+ed3c9b5c.src.rpm">
          <filename>postgresql-static-13.23-1.module_el8.10.0+4097+ed3c9b5c.s390x.rpm</filename>
          <sum type="sha256">f46bbd25d1568144205381caed5f19206f19f94317eb9e86dae96afb0686a9c0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0524</id>
    <title>Moderate: postgresql:15 security update</title>
    <issued date="2026-01-13 00:00:00"/>
    <updated date="2026-01-16 15:09:06"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql:15 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: CREATE STATISTICS does not check for schema CREATE privilege (CVE-2025-12817)
  * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0524" id="RHSA-2026:0524" type="rhsa" title="RHSA-2026:0524"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12817" id="CVE-2025-12817" type="cve" title="CVE-2025-12817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12818" id="CVE-2025-12818" type="cve" title="CVE-2025-12818"/>
      <reference href="https://bugzilla.redhat.com/2414825" id="2414825" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414826" id="2414826" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0524.html" id="ALSA-2026:0524" type="self" title="ALSA-2026:0524"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="15" version="8100020260115141703" context="9edba152" arch="s390x"/>
        <package name="postgresql-upgrade" version="15.15" release="1.module_el8.10.0+4098+1f4e965c" epoch="0" arch="s390x" src="postgresql-15.15-1.module_el8.10.0+4098+1f4e965c.src.rpm">
          <filename>postgresql-upgrade-15.15-1.module_el8.10.0+4098+1f4e965c.s390x.rpm</filename>
          <sum type="sha256">206e756d8fb8b7626972d4557162f98d385b11142d3706b3a73e89d10fee6e54</sum>
        </package>
        <package name="postgresql-contrib" version="15.15" release="1.module_el8.10.0+4098+1f4e965c" epoch="0" arch="s390x" src="postgresql-15.15-1.module_el8.10.0+4098+1f4e965c.src.rpm">
          <filename>postgresql-contrib-15.15-1.module_el8.10.0+4098+1f4e965c.s390x.rpm</filename>
          <sum type="sha256">29d26dba00494407b77d2e4c5a73fd36f13406481c251803cd833e32119ab7e6</sum>
        </package>
        <package name="postgresql-plperl" version="15.15" release="1.module_el8.10.0+4098+1f4e965c" epoch="0" arch="s390x" src="postgresql-15.15-1.module_el8.10.0+4098+1f4e965c.src.rpm">
          <filename>postgresql-plperl-15.15-1.module_el8.10.0+4098+1f4e965c.s390x.rpm</filename>
          <sum type="sha256">39f0f00b16d3ac7fd330ca6967532599b6ff42d5cf23be328d6a368d18107961</sum>
        </package>
        <package name="postgresql-plpython3" version="15.15" release="1.module_el8.10.0+4098+1f4e965c" epoch="0" arch="s390x" src="postgresql-15.15-1.module_el8.10.0+4098+1f4e965c.src.rpm">
          <filename>postgresql-plpython3-15.15-1.module_el8.10.0+4098+1f4e965c.s390x.rpm</filename>
          <sum type="sha256">4a3dbf9c21d1f20522c6d582ae27abb6b52984c3b2f1e1e1e074ed88b9ad22cd</sum>
        </package>
        <package name="postgresql-private-devel" version="15.15" release="1.module_el8.10.0+4098+1f4e965c" epoch="0" arch="s390x" src="postgresql-15.15-1.module_el8.10.0+4098+1f4e965c.src.rpm">
          <filename>postgresql-private-devel-15.15-1.module_el8.10.0+4098+1f4e965c.s390x.rpm</filename>
          <sum type="sha256">4ecc9e90bc105d86a39089cbdf4234b14e137e0c07584ff5d397fd926ebb0d0c</sum>
        </package>
        <package name="postgresql-private-libs" version="15.15" release="1.module_el8.10.0+4098+1f4e965c" epoch="0" arch="s390x" src="postgresql-15.15-1.module_el8.10.0+4098+1f4e965c.src.rpm">
          <filename>postgresql-private-libs-15.15-1.module_el8.10.0+4098+1f4e965c.s390x.rpm</filename>
          <sum type="sha256">5fb3fbc073b20226db1010d5b4d0b94c63f876f233277da0bee56742051cd4c9</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="15.15" release="1.module_el8.10.0+4098+1f4e965c" epoch="0" arch="s390x" src="postgresql-15.15-1.module_el8.10.0+4098+1f4e965c.src.rpm">
          <filename>postgresql-upgrade-devel-15.15-1.module_el8.10.0+4098+1f4e965c.s390x.rpm</filename>
          <sum type="sha256">69de0fefe116852e240e5d8879c830f2a2010733c0942ac8fadb1013e35fa345</sum>
        </package>
        <package name="postgresql-server" version="15.15" release="1.module_el8.10.0+4098+1f4e965c" epoch="0" arch="s390x" src="postgresql-15.15-1.module_el8.10.0+4098+1f4e965c.src.rpm">
          <filename>postgresql-server-15.15-1.module_el8.10.0+4098+1f4e965c.s390x.rpm</filename>
          <sum type="sha256">6a01686fc67c62d9ffa11928bb7b3de214293cf12247dd6e7e9b1fb9e0ca20e7</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="15.15" release="1.module_el8.10.0+4098+1f4e965c" epoch="0" arch="noarch" src="postgresql-15.15-1.module_el8.10.0+4098+1f4e965c.src.rpm">
          <filename>postgresql-test-rpm-macros-15.15-1.module_el8.10.0+4098+1f4e965c.noarch.rpm</filename>
          <sum type="sha256">6ce878c21ae45b9f15c854848687d0f5f8a2db2e653c4854621848b6c04de794</sum>
        </package>
        <package name="postgresql-test" version="15.15" release="1.module_el8.10.0+4098+1f4e965c" epoch="0" arch="s390x" src="postgresql-15.15-1.module_el8.10.0+4098+1f4e965c.src.rpm">
          <filename>postgresql-test-15.15-1.module_el8.10.0+4098+1f4e965c.s390x.rpm</filename>
          <sum type="sha256">7cecfae1198c8c670b72d5740902b85439c06757e781ca70569ae544627b205f</sum>
        </package>
        <package name="postgresql-docs" version="15.15" release="1.module_el8.10.0+4098+1f4e965c" epoch="0" arch="s390x" src="postgresql-15.15-1.module_el8.10.0+4098+1f4e965c.src.rpm">
          <filename>postgresql-docs-15.15-1.module_el8.10.0+4098+1f4e965c.s390x.rpm</filename>
          <sum type="sha256">7ed571b6ebef073b3b36825431a7f9c7a59fc2ace08a73d220b8d2deda62ee88</sum>
        </package>
        <package name="postgresql-server-devel" version="15.15" release="1.module_el8.10.0+4098+1f4e965c" epoch="0" arch="s390x" src="postgresql-15.15-1.module_el8.10.0+4098+1f4e965c.src.rpm">
          <filename>postgresql-server-devel-15.15-1.module_el8.10.0+4098+1f4e965c.s390x.rpm</filename>
          <sum type="sha256">7ef72da6c56b00115792a1087445fbbddd3e2471e3682132f4ca031ab0f86b20</sum>
        </package>
        <package name="pg_repack" version="1.4.8" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="pg_repack-1.4.8-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>pg_repack-1.4.8-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">7fbd57e759f737f8bc3c7bc2715300640b00ae84ed9b74d469be03ee537d20b9</sum>
        </package>
        <package name="postgresql-pltcl" version="15.15" release="1.module_el8.10.0+4098+1f4e965c" epoch="0" arch="s390x" src="postgresql-15.15-1.module_el8.10.0+4098+1f4e965c.src.rpm">
          <filename>postgresql-pltcl-15.15-1.module_el8.10.0+4098+1f4e965c.s390x.rpm</filename>
          <sum type="sha256">9a2f733c9a46342a3882bc85de16ca158565eec5f3e5c2a1429a0bd130151eb3</sum>
        </package>
        <package name="postgresql" version="15.15" release="1.module_el8.10.0+4098+1f4e965c" epoch="0" arch="s390x" src="postgresql-15.15-1.module_el8.10.0+4098+1f4e965c.src.rpm">
          <filename>postgresql-15.15-1.module_el8.10.0+4098+1f4e965c.s390x.rpm</filename>
          <sum type="sha256">a48dc885fd14665f2281c5e65e4c7c4a971883a50bae256da24315e53da3be3e</sum>
        </package>
        <package name="postgresql-static" version="15.15" release="1.module_el8.10.0+4098+1f4e965c" epoch="0" arch="s390x" src="postgresql-15.15-1.module_el8.10.0+4098+1f4e965c.src.rpm">
          <filename>postgresql-static-15.15-1.module_el8.10.0+4098+1f4e965c.s390x.rpm</filename>
          <sum type="sha256">b7c6e8c794b2dfa5f5e4badf01afd57ff836b9443cf59cdfdabcf40643045928</sum>
        </package>
        <package name="pgaudit" version="1.7.0" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="pgaudit-1.7.0-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>pgaudit-1.7.0-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">bebebc0b85b4d88d466cf43a44e5ae321c851b621377e2c96e1564cf00fd07bd</sum>
        </package>
        <package name="postgres-decoderbufs" version="1.9.7" release="1.Final.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="postgres-decoderbufs-1.9.7-1.Final.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>postgres-decoderbufs-1.9.7-1.Final.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">d93f26982b8a0299bb5535e5aed623996c696a2eb2f9157554b4dae3f5cce2ef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0596</id>
    <title>Moderate: cups security update</title>
    <issued date="2026-01-14 00:00:00"/>
    <updated date="2026-01-16 14:59:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>cups security update</summary>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.  

Security Fix(es):  

  * CUPS: Local denial-of-service via cupsd.conf update and related issues (CVE-2025-61915)
  * cups: Slow client communication leads to a possible DoS attack (CVE-2025-58436)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0596" id="RHSA-2026:0596" type="rhsa" title="RHSA-2026:0596"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58436" id="CVE-2025-58436" type="cve" title="CVE-2025-58436"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61915" id="CVE-2025-61915" type="cve" title="CVE-2025-61915"/>
      <reference href="https://bugzilla.redhat.com/2416039" id="2416039" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416040" id="2416040" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0596.html" id="ALSA-2026:0596" type="self" title="ALSA-2026:0596"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="cups" version="2.2.6" release="66.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-66.el8_10.src.rpm">
          <filename>cups-2.2.6-66.el8_10.s390x.rpm</filename>
          <sum type="sha256">61280a57a5c8b8f7e3b60a122ac69cfaabe343ffc3f31e36b78916669dc22b3d</sum>
        </package>
        <package name="cups-filesystem" version="2.2.6" release="66.el8_10" epoch="1" arch="noarch" src="cups-2.2.6-66.el8_10.src.rpm">
          <filename>cups-filesystem-2.2.6-66.el8_10.noarch.rpm</filename>
          <sum type="sha256">6bb2f8dca3510e5301bc7567783d72a587149671a30ede0bb2bb86d9ad54c36c</sum>
        </package>
        <package name="cups-client" version="2.2.6" release="66.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-66.el8_10.src.rpm">
          <filename>cups-client-2.2.6-66.el8_10.s390x.rpm</filename>
          <sum type="sha256">920474831ffd50f8dba031846a58620629ad9b4876f3e8d56fa21775e39bbade</sum>
        </package>
        <package name="cups-devel" version="2.2.6" release="66.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-66.el8_10.src.rpm">
          <filename>cups-devel-2.2.6-66.el8_10.s390x.rpm</filename>
          <sum type="sha256">a0659921ae9d93df1f923e84d79603c98c063287dd057d8e900eebff8e8c2140</sum>
        </package>
        <package name="cups-lpd" version="2.2.6" release="66.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-66.el8_10.src.rpm">
          <filename>cups-lpd-2.2.6-66.el8_10.s390x.rpm</filename>
          <sum type="sha256">c76d6499d5dca0343de8fe1c613e35414ce07a9f41b45ebf647a45456e7fd62d</sum>
        </package>
        <package name="cups-ipptool" version="2.2.6" release="66.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-66.el8_10.src.rpm">
          <filename>cups-ipptool-2.2.6-66.el8_10.s390x.rpm</filename>
          <sum type="sha256">d2bb74556dd82b768679dd5d614f1bafc8b15f0cb103368a5515569e1197aa37</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0608</id>
    <title>Moderate: vsftpd security update</title>
    <issued date="2026-01-14 00:00:00"/>
    <updated date="2026-01-16 14:54:25"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>vsftpd security update</summary>
    <description>The vsftpd packages include a Very Secure File Transfer Protocol (FTP) daemon, which is used to serve files over a network.  

Security Fix(es):  

  * vsftpd: vsftpd: Denial of service via integer overflow in ls command parameter parsing (CVE-2025-14242)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0608" id="RHSA-2026:0608" type="rhsa" title="RHSA-2026:0608"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14242" id="CVE-2025-14242" type="cve" title="CVE-2025-14242"/>
      <reference href="https://bugzilla.redhat.com/2419826" id="2419826" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0608.html" id="ALSA-2026:0608" type="self" title="ALSA-2026:0608"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="vsftpd" version="3.0.3" release="36.el8_10.3" epoch="0" arch="s390x" src="vsftpd-3.0.3-36.el8_10.3.src.rpm">
          <filename>vsftpd-3.0.3-36.el8_10.3.s390x.rpm</filename>
          <sum type="sha256">4a698fbb82e4a42f7ad7ba9b2fdb07886f32ba4556e5a2e202ee2ddb09d231e3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0667</id>
    <title>Important: firefox security update</title>
    <issued date="2026-01-15 00:00:00"/>
    <updated date="2026-02-12 10:37:47"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: Spoofing issue in the Downloads Panel component (CVE-2025-14327)
  * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-0885)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147 (CVE-2026-0891)
  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-0878)
  * firefox: Use-after-free in the IPC component (CVE-2026-0882)
  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-0884)
  * firefox: Information disclosure in the Networking component (CVE-2026-0883)
  * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-0877)
  * firefox: Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop component (CVE-2026-0890)
  * firefox: Clickjacking issue, information disclosure in the PDF Viewer component (CVE-2026-0887)
  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-0879)
  * firefox: Sandbox escape due to integer overflow in the Graphics component (CVE-2026-0880)
  * firefox: Incorrect boundary conditions in the Graphics component (CVE-2026-0886)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0667" id="RHSA-2026:0667" type="rhsa" title="RHSA-2026:0667"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14327" id="CVE-2025-14327" type="cve" title="CVE-2025-14327"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0877" id="CVE-2026-0877" type="cve" title="CVE-2026-0877"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0878" id="CVE-2026-0878" type="cve" title="CVE-2026-0878"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0879" id="CVE-2026-0879" type="cve" title="CVE-2026-0879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0880" id="CVE-2026-0880" type="cve" title="CVE-2026-0880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0882" id="CVE-2026-0882" type="cve" title="CVE-2026-0882"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0883" id="CVE-2026-0883" type="cve" title="CVE-2026-0883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0884" id="CVE-2026-0884" type="cve" title="CVE-2026-0884"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0885" id="CVE-2026-0885" type="cve" title="CVE-2026-0885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0886" id="CVE-2026-0886" type="cve" title="CVE-2026-0886"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0887" id="CVE-2026-0887" type="cve" title="CVE-2026-0887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0890" id="CVE-2026-0890" type="cve" title="CVE-2026-0890"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0891" id="CVE-2026-0891" type="cve" title="CVE-2026-0891"/>
      <reference href="https://bugzilla.redhat.com/2420507" id="2420507" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428961" id="2428961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428963" id="2428963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428965" id="2428965" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428966" id="2428966" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428967" id="2428967" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428968" id="2428968" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428969" id="2428969" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428971" id="2428971" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428972" id="2428972" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428973" id="2428973" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428975" id="2428975" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428978" id="2428978" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0667.html" id="ALSA-2026:0667" type="self" title="ALSA-2026:0667"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="140.7.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-140.7.0-1.el8_10.alma.1.src.rpm">
          <filename>firefox-140.7.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">69bd2e6eede10d3a8e78ad84cfb8cf1bb36d5b63bb99e3b6fec90b799065fc6a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0695</id>
    <title>Moderate: libpq security update</title>
    <issued date="2026-01-15 00:00:00"/>
    <updated date="2026-01-16 14:48:25"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libpq security update</summary>
    <description>The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers.   

Security Fix(es):  

  * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0695" id="RHSA-2026:0695" type="rhsa" title="RHSA-2026:0695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12818" id="CVE-2025-12818" type="cve" title="CVE-2025-12818"/>
      <reference href="https://bugzilla.redhat.com/2414826" id="2414826" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0695.html" id="ALSA-2026:0695" type="self" title="ALSA-2026:0695"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libpq" version="13.23" release="1.el8_10" epoch="0" arch="s390x" src="libpq-13.23-1.el8_10.src.rpm">
          <filename>libpq-13.23-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0d7c40e0bc3388e263b571bbe91f4c36f2703e27faaa35bb348568e6409d6d1b</sum>
        </package>
        <package name="libpq-devel" version="13.23" release="1.el8_10" epoch="0" arch="s390x" src="libpq-13.23-1.el8_10.src.rpm">
          <filename>libpq-devel-13.23-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">525a8b6db3042ce4a0691926797e26feda801be9507adaa17d531046088e2a78</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0750</id>
    <title>Important: net-snmp security update</title>
    <issued date="2026-01-19 00:00:00"/>
    <updated date="2026-01-20 07:38:34"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>net-snmp security update</summary>
    <description>The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser.  

Security Fix(es):  

  * net-snmp: buffer overflow via a specially crafted packet can cause a crash in snmptrapd (CVE-2025-68615)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0750" id="RHSA-2026:0750" type="rhsa" title="RHSA-2026:0750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68615" id="CVE-2025-68615" type="cve" title="CVE-2025-68615"/>
      <reference href="https://bugzilla.redhat.com/2424618" id="2424618" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0750.html" id="ALSA-2026:0750" type="self" title="ALSA-2026:0750"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="net-snmp-devel" version="5.8" release="33.el8_10" epoch="1" arch="s390x" src="net-snmp-5.8-33.el8_10.src.rpm">
          <filename>net-snmp-devel-5.8-33.el8_10.s390x.rpm</filename>
          <sum type="sha256">001b985a2edf55dd3452eb99b0de129eb85a63b954a310db47f2bc30de32c8c7</sum>
        </package>
        <package name="net-snmp-perl" version="5.8" release="33.el8_10" epoch="1" arch="s390x" src="net-snmp-5.8-33.el8_10.src.rpm">
          <filename>net-snmp-perl-5.8-33.el8_10.s390x.rpm</filename>
          <sum type="sha256">0886afc3262dcbeeaec08424f673371b6a98e9d024987905cd1826d0a9bb232e</sum>
        </package>
        <package name="net-snmp-agent-libs" version="5.8" release="33.el8_10" epoch="1" arch="s390x" src="net-snmp-5.8-33.el8_10.src.rpm">
          <filename>net-snmp-agent-libs-5.8-33.el8_10.s390x.rpm</filename>
          <sum type="sha256">75c9f5b8de7f23da6f27e554e8a96d45661f23840a6a5426582bafe2168e2315</sum>
        </package>
        <package name="net-snmp-utils" version="5.8" release="33.el8_10" epoch="1" arch="s390x" src="net-snmp-5.8-33.el8_10.src.rpm">
          <filename>net-snmp-utils-5.8-33.el8_10.s390x.rpm</filename>
          <sum type="sha256">e6d68aedea3c4d3a88566780ca3a908f2b821043c3eb03c3e548199038a64792</sum>
        </package>
        <package name="net-snmp" version="5.8" release="33.el8_10" epoch="1" arch="s390x" src="net-snmp-5.8-33.el8_10.src.rpm">
          <filename>net-snmp-5.8-33.el8_10.s390x.rpm</filename>
          <sum type="sha256">fb4c7f1ec577ef8fa9142ecbeaedf1fdc85f962b1e1a6b2255716fd7f08ab0b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0753</id>
    <title>Important: container-tools:rhel8 security update</title>
    <issued date="2026-01-19 00:00:00"/>
    <updated date="2026-01-21 09:07:00"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>container-tools:rhel8 security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.  

Security Fix(es):  

  * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS (CVE-2025-47913)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0753" id="RHSA-2026:0753" type="rhsa" title="RHSA-2026:0753"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47913" id="CVE-2025-47913" type="cve" title="CVE-2025-47913"/>
      <reference href="https://bugzilla.redhat.com/2414943" id="2414943" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0753.html" id="ALSA-2026:0753" type="self" title="ALSA-2026:0753"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="container-tools" stream="rhel8" version="8100020260120091026" context="20125149" arch="s390x"/>
        <package name="podman-plugins" version="4.9.4" release="27.module_el8.10.0+4102+6c76e544" epoch="4" arch="s390x" src="podman-4.9.4-27.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>podman-plugins-4.9.4-27.module_el8.10.0+4102+6c76e544.s390x.rpm</filename>
          <sum type="sha256">00407d905b0bdebb9756fb304722b214df22e6cd4727de9c71cdad1560b9c1d9</sum>
        </package>
        <package name="containernetworking-plugins" version="1.4.0" release="6.module_el8.10.0+4016+efd18bf8" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-6.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>containernetworking-plugins-1.4.0-6.module_el8.10.0+4016+efd18bf8.s390x.rpm</filename>
          <sum type="sha256">01ce475d6b55bfde8145f5504470f60e087576049049ad624b54efcd0787fe6a</sum>
        </package>
        <package name="buildah" version="1.33.14" release="1.module_el8.10.0+4102+6c76e544" epoch="2" arch="s390x" src="buildah-1.33.14-1.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>buildah-1.33.14-1.module_el8.10.0+4102+6c76e544.s390x.rpm</filename>
          <sum type="sha256">0340986649ebe6308fd3a5228fa1eb8ecd80329a660af17308e21b1598de56f2</sum>
        </package>
        <package name="libslirp-devel" version="4.4.0" release="2.module_el8.10.0+4102+6c76e544" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>libslirp-devel-4.4.0-2.module_el8.10.0+4102+6c76e544.s390x.rpm</filename>
          <sum type="sha256">04d89a36990aa212a94bb2747825e0da8c83a7b25e78a61558e4d5b43429e4f4</sum>
        </package>
        <package name="python3-podman" version="4.9.0" release="3.module_el8.10.0+4016+efd18bf8" epoch="0" arch="noarch" src="python-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>python3-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.noarch.rpm</filename>
          <sum type="sha256">087549428650af46817206c5d5ddd54bace235c2932b3e2004ac93e3b466cb6d</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.10" release="1.module_el8.10.0+4068+0e21408f" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">10f8030860f742280a164946b182addd39796c2b86786ec977e37ae026354799</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="2.module_el8.10.0+4023+db236c53" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>libslirp-4.4.0-2.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">1fb16f13bc4c318fd2714e829a188f97facb4a31222911e078f5604ab7bcd2d9</sum>
        </package>
        <package name="runc" version="1.2.9" release="2.module_el8.10.0+4089+ce72bbbe" epoch="4" arch="s390x" src="runc-1.2.9-2.module_el8.10.0+4089+ce72bbbe.src.rpm">
          <filename>runc-1.2.9-2.module_el8.10.0+4089+ce72bbbe.s390x.rpm</filename>
          <sum type="sha256">383c519d0ae43cf1b012cc8ba7e4b5eb63a9d823b73cb152697e4183ff6a7e8e</sum>
        </package>
        <package name="skopeo-tests" version="1.14.5" release="5.module_el8.10.0+4082+f7f0c95e" epoch="2" arch="s390x" src="skopeo-1.14.5-5.module_el8.10.0+4082+f7f0c95e.src.rpm">
          <filename>skopeo-tests-1.14.5-5.module_el8.10.0+4082+f7f0c95e.s390x.rpm</filename>
          <sum type="sha256">3cfbd88f69a932fb98457e7e2e04901d89b08372ff34b6aa9b5d52096b7d9bd1</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.5" release="2.module_el8.10.0+4089+ce72bbbe" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+4089+ce72bbbe.src.rpm">
          <filename>toolbox-tests-0.0.99.5-2.module_el8.10.0+4089+ce72bbbe.s390x.rpm</filename>
          <sum type="sha256">3d197497f7616c6135bbb5e979f80ccb3bc6d11a63b4fa53181412054fac8c84</sum>
        </package>
        <package name="podman" version="4.9.4" release="27.module_el8.10.0+4102+6c76e544" epoch="4" arch="s390x" src="podman-4.9.4-27.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>podman-4.9.4-27.module_el8.10.0+4102+6c76e544.s390x.rpm</filename>
          <sum type="sha256">4a8ac9e475b2b6afb5332a03e079ef5f69e49720a593244cc0187f4dbc94acc2</sum>
        </package>
        <package name="python3-criu" version="3.18" release="5.module_el8.10.0+4023+db236c53" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>python3-criu-3.18-5.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">63a762e1b6963204cd36602216730858805e405178999018be7f659aea67dd29</sum>
        </package>
        <package name="udica" version="0.2.6" release="21.module_el8.10.0+4068+0e21408f" epoch="0" arch="noarch" src="udica-0.2.6-21.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>udica-0.2.6-21.module_el8.10.0+4068+0e21408f.noarch.rpm</filename>
          <sum type="sha256">79a48c91cfda7b53eceaf7fc427f6b428b66680f0441fed06fc3bb55a0327feb</sum>
        </package>
        <package name="cockpit-podman" version="84.1" release="1.module_el8.10.0+4102+6c76e544" epoch="0" arch="noarch" src="cockpit-podman-84.1-1.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>cockpit-podman-84.1-1.module_el8.10.0+4102+6c76e544.noarch.rpm</filename>
          <sum type="sha256">7ebfd9c6721f16e93505c790faf678779b529dd5d380e17887b0ba1629de4871</sum>
        </package>
        <package name="fuse-overlayfs" version="1.13" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="s390x" src="fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">8118067655696462cee9dfc553f57e4501b089590d837bc88091716914c8d3f5</sum>
        </package>
        <package name="buildah-tests" version="1.33.14" release="1.module_el8.10.0+4102+6c76e544" epoch="2" arch="s390x" src="buildah-1.33.14-1.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>buildah-tests-1.33.14-1.module_el8.10.0+4102+6c76e544.s390x.rpm</filename>
          <sum type="sha256">839a2b6646ffbd84cad3f7922c95d313a81682917e3cc99d36db95995c093771</sum>
        </package>
        <package name="criu-devel" version="3.18" release="5.module_el8.10.0+4068+0e21408f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>criu-devel-3.18-5.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">8d858b9b5053b95ab7cb5eba9ab5bbd3cf5a1d07b77394b4d0f0d9d6c0769768</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="27.module_el8.10.0+4102+6c76e544" epoch="4" arch="s390x" src="podman-4.9.4-27.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>podman-remote-4.9.4-27.module_el8.10.0+4102+6c76e544.s390x.rpm</filename>
          <sum type="sha256">9358dd1c010c27f11af4303589c56c97d2ec936b7cddddb146a2fdacd49d335c</sum>
        </package>
        <package name="toolbox" version="0.0.99.5" release="2.module_el8.10.0+4089+ce72bbbe" epoch="0" arch="s390x" src="toolbox-0.0.99.5-2.module_el8.10.0+4089+ce72bbbe.src.rpm">
          <filename>toolbox-0.0.99.5-2.module_el8.10.0+4089+ce72bbbe.s390x.rpm</filename>
          <sum type="sha256">9846e814c5a7917bf0df97abc37adc391365fda5b64ea89dc21db05b0acff6f3</sum>
        </package>
        <package name="containers-common" version="1" release="82.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="s390x" src="containers-common-1-82.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>containers-common-1-82.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">98eb0c5785e1d53743858e76ac35aab0b199a918b88c02e20aa6f64cc6f89618</sum>
        </package>
        <package name="container-selinux" version="2.229.0" release="2.module_el8.10.0+4090+91932338" epoch="2" arch="noarch" src="container-selinux-2.229.0-2.module_el8.10.0+4090+91932338.src.rpm">
          <filename>container-selinux-2.229.0-2.module_el8.10.0+4090+91932338.noarch.rpm</filename>
          <sum type="sha256">9bee177863e693c8b3f4cf092222ef14a59409617b381b0dd764102212ab2074</sum>
        </package>
        <package name="aardvark-dns" version="1.10.1" release="2.module_el8.10.0+4047+545787c4" epoch="2" arch="s390x" src="aardvark-dns-1.10.1-2.module_el8.10.0+4047+545787c4.src.rpm">
          <filename>aardvark-dns-1.10.1-2.module_el8.10.0+4047+545787c4.s390x.rpm</filename>
          <sum type="sha256">9e7e5cc9877a685769ee43c72dc867d179fe027d41775a01f1e73cfe366872ef</sum>
        </package>
        <package name="crit" version="3.18" release="5.module_el8.10.0+3858+6ad51f9f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3858+6ad51f9f.src.rpm">
          <filename>crit-3.18-5.module_el8.10.0+3858+6ad51f9f.s390x.rpm</filename>
          <sum type="sha256">aeb27c5bcec90a9452f93ad79ef0d4f00ecedf4442f32f9bedb481509db12683</sum>
        </package>
        <package name="skopeo" version="1.14.5" release="5.module_el8.10.0+4102+6c76e544" epoch="2" arch="s390x" src="skopeo-1.14.5-5.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>skopeo-1.14.5-5.module_el8.10.0+4102+6c76e544.s390x.rpm</filename>
          <sum type="sha256">aec03d46782f39f5881e6f3e6a712f9127901db88872386e6d97bd6554481a25</sum>
        </package>
        <package name="crun" version="1.14.3" release="2.module_el8.10.0+4102+6c76e544" epoch="0" arch="s390x" src="crun-1.14.3-2.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>crun-1.14.3-2.module_el8.10.0+4102+6c76e544.s390x.rpm</filename>
          <sum type="sha256">b21ff72aa6dc2112775c618b7c6df02c4b2545cc7ee43ec04a1c6e1c84682757</sum>
        </package>
        <package name="criu" version="3.18" release="5.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>criu-3.18-5.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">bdaddee931f3746ac7472d9ccee504acd0be805433b3d160b1e7caf8bf361cb8</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="27.module_el8.10.0+4102+6c76e544" epoch="4" arch="noarch" src="podman-4.9.4-27.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>podman-docker-4.9.4-27.module_el8.10.0+4102+6c76e544.noarch.rpm</filename>
          <sum type="sha256">c58f0a52a3ff411c333e5f78751a0445784ea6be6a75434a6dc9646a8ec0f8c2</sum>
        </package>
        <package name="conmon" version="2.1.10" release="1.module_el8.10.0+4068+0e21408f" epoch="3" arch="s390x" src="conmon-2.1.10-1.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>conmon-2.1.10-1.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">c845407c7f2bb04735705b66ad0ca47b44437e8d6988148eeee4986701a2ab8d</sum>
        </package>
        <package name="netavark" version="1.10.3" release="1.module_el8.10.0+4082+f7f0c95e" epoch="2" arch="s390x" src="netavark-1.10.3-1.module_el8.10.0+4082+f7f0c95e.src.rpm">
          <filename>netavark-1.10.3-1.module_el8.10.0+4082+f7f0c95e.s390x.rpm</filename>
          <sum type="sha256">d9544359d8c73170c2d8cd880c18de92e0aa9f33f4cd3fb28d7c692a3f65ff41</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="27.module_el8.10.0+4102+6c76e544" epoch="4" arch="s390x" src="podman-4.9.4-27.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>podman-tests-4.9.4-27.module_el8.10.0+4102+6c76e544.s390x.rpm</filename>
          <sum type="sha256">db246513588cabdfdf8280a6a4f4a10873d72e5f1963f106d51e383bd17e253c</sum>
        </package>
        <package name="podman-gvproxy" version="4.9.4" release="27.module_el8.10.0+4102+6c76e544" epoch="4" arch="s390x" src="podman-4.9.4-27.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>podman-gvproxy-4.9.4-27.module_el8.10.0+4102+6c76e544.s390x.rpm</filename>
          <sum type="sha256">e5d0fc6eef52024422310ee15e940518b3b05af9e50a8fc342e31cee11263159</sum>
        </package>
        <package name="criu-libs" version="3.18" release="5.module_el8.10.0+4082+f7f0c95e" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4082+f7f0c95e.src.rpm">
          <filename>criu-libs-3.18-5.module_el8.10.0+4082+f7f0c95e.s390x.rpm</filename>
          <sum type="sha256">ef19ef2ed0463ac1a663bbbfaa1ebc2c430ca0f751305b9d5d0b4e41046bb967</sum>
        </package>
        <package name="podman-catatonit" version="4.9.4" release="27.module_el8.10.0+4102+6c76e544" epoch="4" arch="s390x" src="podman-4.9.4-27.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>podman-catatonit-4.9.4-27.module_el8.10.0+4102+6c76e544.s390x.rpm</filename>
          <sum type="sha256">f47a96f0162cbcd81965b0e5bb9f0188f6a17c426480f7b403581cd5ff5e6ca9</sum>
        </package>
        <package name="slirp4netns" version="1.2.3" release="1.module_el8.10.0+4082+f7f0c95e" epoch="0" arch="s390x" src="slirp4netns-1.2.3-1.module_el8.10.0+4082+f7f0c95e.src.rpm">
          <filename>slirp4netns-1.2.3-1.module_el8.10.0+4082+f7f0c95e.s390x.rpm</filename>
          <sum type="sha256">fd08808c8bda8cc9c5ecad38af925ba82a8d2124ba69ca9153b315c7e4879fd2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0921</id>
    <title>Important: go-toolset:rhel8 security update</title>
    <issued date="2026-01-21 00:00:00"/>
    <updated date="2026-01-26 10:07:09"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>go-toolset:rhel8 security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.   

Security Fix(es):  

  * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0921" id="RHSA-2026:0921" type="rhsa" title="RHSA-2026:0921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61729" id="CVE-2025-61729" type="cve" title="CVE-2025-61729"/>
      <reference href="https://bugzilla.redhat.com/2418462" id="2418462" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0921.html" id="ALSA-2026:0921" type="self" title="ALSA-2026:0921"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="go-toolset" stream="rhel8" version="8100020260126084650" context="9edba152" arch="s390x"/>
        <package name="golang-race" version="1.25.5" release="1.module_el8.10.0+4107+b32a33ce" epoch="0" arch="s390x" src="golang-1.25.5-1.module_el8.10.0+4107+b32a33ce.src.rpm">
          <filename>golang-race-1.25.5-1.module_el8.10.0+4107+b32a33ce.s390x.rpm</filename>
          <sum type="sha256">19de4b661ec6c12be5ff2661499676894b5a96950c557b5c70f74a5dcc922bc4</sum>
        </package>
        <package name="golang" version="1.25.5" release="1.module_el8.10.0+4107+b32a33ce" epoch="0" arch="s390x" src="golang-1.25.5-1.module_el8.10.0+4107+b32a33ce.src.rpm">
          <filename>golang-1.25.5-1.module_el8.10.0+4107+b32a33ce.s390x.rpm</filename>
          <sum type="sha256">45079d9bed8a9f591d20ccd533550cda60130d390ccdb9a4a5466a002bac51ff</sum>
        </package>
        <package name="go-toolset" version="1.25.5" release="1.module_el8.10.0+4107+b32a33ce" epoch="0" arch="s390x" src="golang-1.25.5-1.module_el8.10.0+4107+b32a33ce.src.rpm">
          <filename>go-toolset-1.25.5-1.module_el8.10.0+4107+b32a33ce.s390x.rpm</filename>
          <sum type="sha256">4a3e159e22341652533e5bcc4ee897f74757fc80bd3183b82195e42fe44a0d01</sum>
        </package>
        <package name="golang-tests" version="1.25.5" release="1.module_el8.10.0+4107+b32a33ce" epoch="0" arch="noarch" src="golang-1.25.5-1.module_el8.10.0+4107+b32a33ce.src.rpm">
          <filename>golang-tests-1.25.5-1.module_el8.10.0+4107+b32a33ce.noarch.rpm</filename>
          <sum type="sha256">514460a555d991bb8e0bfdeaf2834d2875c59833d2922f8c2536827d3a2f49f3</sum>
        </package>
        <package name="golang-bin" version="1.25.5" release="1.module_el8.10.0+4107+b32a33ce" epoch="0" arch="s390x" src="golang-1.25.5-1.module_el8.10.0+4107+b32a33ce.src.rpm">
          <filename>golang-bin-1.25.5-1.module_el8.10.0+4107+b32a33ce.s390x.rpm</filename>
          <sum type="sha256">6035400728bed3d6ec9b23a14fb9c694b6ea4501b6d95cdc34fc41a61d099d85</sum>
        </package>
        <package name="golang-src" version="1.25.5" release="1.module_el8.10.0+4107+b32a33ce" epoch="0" arch="noarch" src="golang-1.25.5-1.module_el8.10.0+4107+b32a33ce.src.rpm">
          <filename>golang-src-1.25.5-1.module_el8.10.0+4107+b32a33ce.noarch.rpm</filename>
          <sum type="sha256">682c45f571298f7463594d32015811fef4539822d0cf310cfb3361bd90d55d36</sum>
        </package>
        <package name="golang-misc" version="1.25.5" release="1.module_el8.10.0+4107+b32a33ce" epoch="0" arch="noarch" src="golang-1.25.5-1.module_el8.10.0+4107+b32a33ce.src.rpm">
          <filename>golang-misc-1.25.5-1.module_el8.10.0+4107+b32a33ce.noarch.rpm</filename>
          <sum type="sha256">b8a8a5eb20ae63930b9be8fdfbabeec8401fd9335da13e441d17d9a837a3a58c</sum>
        </package>
        <package name="golang-docs" version="1.25.5" release="1.module_el8.10.0+4107+b32a33ce" epoch="0" arch="noarch" src="golang-1.25.5-1.module_el8.10.0+4107+b32a33ce.src.rpm">
          <filename>golang-docs-1.25.5-1.module_el8.10.0+4107+b32a33ce.noarch.rpm</filename>
          <sum type="sha256">c3b9dfb456706dc7278326d5fd19efebe7b23a57dec20b6b470cc205051c404e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0927</id>
    <title>Important: java-17-openjdk security update</title>
    <issued date="2026-01-22 00:00:00"/>
    <updated date="2026-01-24 01:52:04"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Improve JMX connections (CVE-2026-21925)
  * JDK: Improve HttpServer Request handling (CVE-2026-21933)
  * JDK: Enhance Certificate Checking (CVE-2026-21945)
  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)


Bug Fix(es):  

  * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142862, AlmaLinux-142881, AlmaLinux-142882, AlmaLinux-142883, AlmaLinux-142884, AlmaLinux-142885, AlmaLinux-142886, AlmaLinux-142887, AlmaLinux-142888)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0927" id="RHSA-2026:0927" type="rhsa" title="RHSA-2026:0927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21925" id="CVE-2026-21925" type="cve" title="CVE-2026-21925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21933" id="CVE-2026-21933" type="cve" title="CVE-2026-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21945" id="CVE-2026-21945" type="cve" title="CVE-2026-21945"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0927.html" id="ALSA-2026:0927" type="self" title="ALSA-2026:0927"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-17-openjdk" version="17.0.18.0.8" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-17.0.18.0.8-1.el8.s390x.rpm</filename>
          <sum type="sha256">00fdac28f7e7d6aafaa9563a22d839eff59ec226145f7c53034fd274bbdecd12</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.18.0.8" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-demo-17.0.18.0.8-1.el8.s390x.rpm</filename>
          <sum type="sha256">016098d5926832e9cd94aadd0e8c4b7cabf0834a8cb94170df3f869bbcb9b2f9</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.18.0.8" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.18.0.8-1.el8.s390x.rpm</filename>
          <sum type="sha256">0c39df36429c36c698e156453a2cc1c718634b32b34391c4ada566b3945aca1e</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.18.0.8" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.18.0.8-1.el8.s390x.rpm</filename>
          <sum type="sha256">1c7a3d7e14d219d528de4775aa27c37a2acfe1110bc8cb4d9886c1028db93241</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.18.0.8" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-headless-17.0.18.0.8-1.el8.s390x.rpm</filename>
          <sum type="sha256">63acf882716f90268b6b367431e5526ecbb38c48c96ffd48894e1e52f818794a</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.18.0.8" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.18.0.8-1.el8.s390x.rpm</filename>
          <sum type="sha256">6ffb3917cc1849d78cfc9207fc92eb4f71080b33487963f37a6f96f10a4662d6</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.18.0.8" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-devel-17.0.18.0.8-1.el8.s390x.rpm</filename>
          <sum type="sha256">7e82269d317bee7e4f9b06ef10c9dd16cb1a2970e22a80b97ca9a14b3e12c570</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.18.0.8" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.18.0.8-1.el8.s390x.rpm</filename>
          <sum type="sha256">7f6174d5a28678766028a36d709186a4eecdc6898392d52369fb2ba4a39daedc</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.18.0.8" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-src-17.0.18.0.8-1.el8.s390x.rpm</filename>
          <sum type="sha256">e65cc9365e4cf9a12c4c8cecf1fde780a35565166dc446fca4459184c9565835</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0928</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2026-01-22 00:00:00"/>
    <updated date="2026-01-26 11:04:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Improve JMX connections (CVE-2026-21925)
  * JDK: Improve HttpServer Request handling (CVE-2026-21933)
  * JDK: Enhance Certificate Checking (CVE-2026-21945)
  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)


Bug Fix(es):  

  * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142860, AlmaLinux-142876, AlmaLinux-142877, AlmaLinux-142878, AlmaLinux-142879, AlmaLinux-142880)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0928" id="RHSA-2026:0928" type="rhsa" title="RHSA-2026:0928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21925" id="CVE-2026-21925" type="cve" title="CVE-2026-21925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21933" id="CVE-2026-21933" type="cve" title="CVE-2026-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21945" id="CVE-2026-21945" type="cve" title="CVE-2026-21945"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0928.html" id="ALSA-2026:0928" type="self" title="ALSA-2026:0928"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-21-openjdk-demo" version="21.0.10.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-21.0.10.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">034222376ee562b77e975213d6a8e57abd29efa644c63a9a3ba51349130da99e</sum>
        </package>
        <package name="java-21-openjdk-jmods" version="21.0.10.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-21.0.10.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">1e472ad59aa050c8108d3c880aea14953c6a94501192f82d227b81492c4d3a58</sum>
        </package>
        <package name="java-21-openjdk-headless" version="21.0.10.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-21.0.10.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">4221e6c4a735fc3abc5c05bcef6b8db091307d48dfc3fbf1a23d51f227078a74</sum>
        </package>
        <package name="java-21-openjdk" version="21.0.10.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-21.0.10.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">4f66fd9d075feffcd025b260cdda2fac0e03d074cb0535cc35b83db7df449c3f</sum>
        </package>
        <package name="java-21-openjdk-static-libs" version="21.0.10.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-21.0.10.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">8806e2fe5457273d59dd8fea2c138dd07285be0b0089f9c129632ebc44d9a5a4</sum>
        </package>
        <package name="java-21-openjdk-src" version="21.0.10.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-src-21.0.10.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">986ed54cbaeeef60c84ab2a76e24a4b1079998577c3e1e05ed4c0fb7cc52921e</sum>
        </package>
        <package name="java-21-openjdk-javadoc" version="21.0.10.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-javadoc-21.0.10.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">a180900e60e939668d6e9a386c27468cedbecc7a1d09a6a8b6841e7dbd67ab2d</sum>
        </package>
        <package name="java-21-openjdk-devel" version="21.0.10.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-21.0.10.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">b5396fe7c1bacff7d1deb43b2d13cb3297235b07635efd01b1395cbeaaa33991</sum>
        </package>
        <package name="java-21-openjdk-javadoc-zip" version="21.0.10.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-javadoc-zip-21.0.10.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">dc1eee2e6c7058678744fd7e7cc638636e551c73ecc27d61d8c23b8d1dc35004</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0932</id>
    <title>Important: java-1.8.0-openjdk security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-01-28 07:05:26"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Improve JMX connections (CVE-2026-21925)
  * JDK: Improve HttpServer Request handling (CVE-2026-21933)
  * JDK: Enhance Certificate Checking (CVE-2026-21945)
  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)


Bug Fix(es):  

  * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142865, AlmaLinux-142866, AlmaLinux-142867, AlmaLinux-142868, AlmaLinux-142869, AlmaLinux-142870, AlmaLinux-142871, AlmaLinux-142872, AlmaLinux-142873, AlmaLinux-142874)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0932" id="RHSA-2026:0932" type="rhsa" title="RHSA-2026:0932"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21925" id="CVE-2026-21925" type="cve" title="CVE-2026-21925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21933" id="CVE-2026-21933" type="cve" title="CVE-2026-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21945" id="CVE-2026-21945" type="cve" title="CVE-2026-21945"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0932.html" id="ALSA-2026:0932" type="self" title="ALSA-2026:0932"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.482.b08" release="1.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.482.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.482.b08-1.el8.s390x.rpm</filename>
          <sum type="sha256">3d23d43814ac5cb8492990aaf4ebe2315576df675d3f9ed870c901d53e766f79</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.482.b08" release="1.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.482.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.482.b08-1.el8.s390x.rpm</filename>
          <sum type="sha256">89f70fd066c6f2b5b34d78a7abe5660c399337813cd276075a30355cdda46f94</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.482.b08" release="1.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.482.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.482.b08-1.el8.s390x.rpm</filename>
          <sum type="sha256">b36d33879e03d874f55265ad3de049c12bbddf014d11779fb2b9be33fec9c678</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.482.b08" release="1.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.482.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.482.b08-1.el8.noarch.rpm</filename>
          <sum type="sha256">b83a671ec477bfba45a16e2dc118c3b19c99e626ef2965a1c28bca85f63fee06</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.482.b08" release="1.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.482.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.482.b08-1.el8.s390x.rpm</filename>
          <sum type="sha256">c49aa2abd54f04e367d3343c051005da2917fc5b47c5b692ec362ca59167719b</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility" version="1.8.0.482.b08" release="1.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.482.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-1.8.0.482.b08-1.el8.s390x.rpm</filename>
          <sum type="sha256">c924db9caa6e46bd0d51e97e07261caf6a90b65d515b51567048e79bc0c93d00</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.482.b08" release="1.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.482.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.482.b08-1.el8.s390x.rpm</filename>
          <sum type="sha256">e2cb35655039af609ca4d754c526df78e9d512f7ad4197f69e119e3e6e54f82b</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.482.b08" release="1.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.482.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.482.b08-1.el8.noarch.rpm</filename>
          <sum type="sha256">f520d234f6d9ce675eb1ca68d9dee6e1a1c28fe4f1294b56f86f2c2e188ef975</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:10702</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-04-28 13:23:04"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43213)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43214)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43457)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43511)
  * webkitgtk: Processing maliciously crafted web content may disclose internal states of the app (CVE-2025-46299)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20608)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20635)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20636)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20644)
  * webkitgtk: A remote attacker may be able to cause a denial-of-service (CVE-2026-20652)
  * webkitgtk: A website may be able to track users through Safari web extensions (CVE-2026-20676)
  * webkitgtk: Processing maliciously crafted web content may bypass Same Origin Policy (CVE-2026-20643)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-20664)
  * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-20665)
  * webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2026-20691)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28857)
  * webkitgtk: A malicious website may be able to process restricted web content outside the sandbox (CVE-2026-28859)
  * webkitgtk: Visiting a maliciously crafted website may lead to a cross-site scripting attack (CVE-2026-28871)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:10702" id="RHSA-2026:10702" type="rhsa" title="RHSA-2026:10702"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43213" id="CVE-2025-43213" type="cve" title="CVE-2025-43213"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43214" id="CVE-2025-43214" type="cve" title="CVE-2025-43214"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43457" id="CVE-2025-43457" type="cve" title="CVE-2025-43457"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-43511" id="CVE-2025-43511" type="cve" title="CVE-2025-43511"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46299" id="CVE-2025-46299" type="cve" title="CVE-2025-46299"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-20608" id="CVE-2026-20608" type="cve" title="CVE-2026-20608"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-20635" id="CVE-2026-20635" type="cve" title="CVE-2026-20635"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-20636" id="CVE-2026-20636" type="cve" title="CVE-2026-20636"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-20643" id="CVE-2026-20643" type="cve" title="CVE-2026-20643"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-20644" id="CVE-2026-20644" type="cve" title="CVE-2026-20644"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-20652" id="CVE-2026-20652" type="cve" title="CVE-2026-20652"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-20664" id="CVE-2026-20664" type="cve" title="CVE-2026-20664"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-20665" id="CVE-2026-20665" type="cve" title="CVE-2026-20665"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-20676" id="CVE-2026-20676" type="cve" title="CVE-2026-20676"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-20691" id="CVE-2026-20691" type="cve" title="CVE-2026-20691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28857" id="CVE-2026-28857" type="cve" title="CVE-2026-28857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28859" id="CVE-2026-28859" type="cve" title="CVE-2026-28859"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28871" id="CVE-2026-28871" type="cve" title="CVE-2026-28871"/>
      <reference href="https://bugzilla.redhat.com/2448781" id="2448781" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448782" id="2448782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448786" id="2448786" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448787" id="2448787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448788" id="2448788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448789" id="2448789" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448790" id="2448790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448791" id="2448791" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448792" id="2448792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448793" id="2448793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448794" id="2448794" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453000" id="2453000" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453001" id="2453001" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453002" id="2453002" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453003" id="2453003" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453004" id="2453004" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453006" id="2453006" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453008" id="2453008" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-10702.html" id="ALSA-2026:10702" type="self" title="ALSA-2026:10702"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="webkit2gtk3-devel" version="2.52.3" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.52.3-1.el8_10.src.rpm">
          <filename>webkit2gtk3-devel-2.52.3-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">035c0f30e48cee61ffa37ef4b6c7a8e643e8a156db85762ea5f31bbb35fa4952</sum>
        </package>
        <package name="webkit2gtk3" version="2.52.3" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.52.3-1.el8_10.src.rpm">
          <filename>webkit2gtk3-2.52.3-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">4b266dd64202e844477c91c14ddb1622660cb8471850657605cd36a83956a1cc</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.52.3" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.52.3-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-2.52.3-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">557016c96a2f9d6b7a999c20cb35c369f1db6735633eefd8a2bf6bb4e7cb229f</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.52.3" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.52.3-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.52.3-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a6765db5e194fcc334f8d62f2aa0fa6ef7eee80dccf8e6cb621b750b972c845b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:10704</id>
    <title>Important: go-toolset:rhel8 security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-07-22 10:04:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>go-toolset:rhel8 security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.   

Security Fix(es):  

  * golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282)
  * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
  * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)
  * golang: cmd/compile: no-op interface conversion bypasses overlap checking (CVE-2026-27144)
  * cmd/go: golang: Go (golang) and cmd/go: Arbitrary Code Execution via malicious SWIG file names (CVE-2026-27140)
  * golang: cmd/compile: possible memory corruption after bound check elimination (CVE-2026-27143)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:10704" id="RHSA-2026:10704" type="rhsa" title="RHSA-2026:10704"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27140" id="CVE-2026-27140" type="cve" title="CVE-2026-27140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27143" id="CVE-2026-27143" type="cve" title="CVE-2026-27143"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27144" id="CVE-2026-27144" type="cve" title="CVE-2026-27144"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32280" id="CVE-2026-32280" type="cve" title="CVE-2026-32280"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32282" id="CVE-2026-32282" type="cve" title="CVE-2026-32282"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32283" id="CVE-2026-32283" type="cve" title="CVE-2026-32283"/>
      <reference href="https://bugzilla.redhat.com/2456336" id="2456336" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2456339" id="2456339" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2456340" id="2456340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2456341" id="2456341" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2456342" id="2456342" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-10704.html" id="ALSA-2026:10704" type="self" title="ALSA-2026:10704"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="go-toolset" stream="rhel8" version="8100020260428074114" context="9edba152" arch="s390x"/>
        <package name="golang-src" version="1.25.9" release="1.module_el8.10.0+4167+2e2e20dd" epoch="0" arch="noarch" src="golang-1.25.9-1.module_el8.10.0+4167+2e2e20dd.src.rpm">
          <filename>golang-src-1.25.9-1.module_el8.10.0+4167+2e2e20dd.noarch.rpm</filename>
          <sum type="sha256">08ae020c22d2509223bed3cffc426eb98d2b369b27c2b6990b5360693825784b</sum>
        </package>
        <package name="golang-bin" version="1.25.9" release="1.module_el8.10.0+4167+2e2e20dd" epoch="0" arch="s390x" src="golang-1.25.9-1.module_el8.10.0+4167+2e2e20dd.src.rpm">
          <filename>golang-bin-1.25.9-1.module_el8.10.0+4167+2e2e20dd.s390x.rpm</filename>
          <sum type="sha256">0d78287bf3e69364fac5e40376d6ae13cf6d11f551efdaf72b05e238f16138b4</sum>
        </package>
        <package name="golang-misc" version="1.25.9" release="1.module_el8.10.0+4167+2e2e20dd" epoch="0" arch="noarch" src="golang-1.25.9-1.module_el8.10.0+4167+2e2e20dd.src.rpm">
          <filename>golang-misc-1.25.9-1.module_el8.10.0+4167+2e2e20dd.noarch.rpm</filename>
          <sum type="sha256">4d6748b67bf8d872c7e6561d81bf555ae6ee20910d0abba0b8f17f015f9268ec</sum>
        </package>
        <package name="golang-tests" version="1.25.9" release="1.module_el8.10.0+4167+2e2e20dd" epoch="0" arch="noarch" src="golang-1.25.9-1.module_el8.10.0+4167+2e2e20dd.src.rpm">
          <filename>golang-tests-1.25.9-1.module_el8.10.0+4167+2e2e20dd.noarch.rpm</filename>
          <sum type="sha256">98f71b55233dcf12c8e375f80412ed3e74bb41fae719b935f79b51bd2640dcfc</sum>
        </package>
        <package name="golang-race" version="1.25.9" release="1.module_el8.10.0+4167+2e2e20dd" epoch="0" arch="s390x" src="golang-1.25.9-1.module_el8.10.0+4167+2e2e20dd.src.rpm">
          <filename>golang-race-1.25.9-1.module_el8.10.0+4167+2e2e20dd.s390x.rpm</filename>
          <sum type="sha256">acbaea1d23c064788ad9934154a80f42b1547ea344bbc71e73bf277e12a9cd75</sum>
        </package>
        <package name="golang-docs" version="1.25.9" release="1.module_el8.10.0+4167+2e2e20dd" epoch="0" arch="noarch" src="golang-1.25.9-1.module_el8.10.0+4167+2e2e20dd.src.rpm">
          <filename>golang-docs-1.25.9-1.module_el8.10.0+4167+2e2e20dd.noarch.rpm</filename>
          <sum type="sha256">c1ea754687e6067b2ed0d6344f04105df290f439f3525dbfdb8a5e7e299bce00</sum>
        </package>
        <package name="golang" version="1.25.9" release="1.module_el8.10.0+4167+2e2e20dd" epoch="0" arch="s390x" src="golang-1.25.9-1.module_el8.10.0+4167+2e2e20dd.src.rpm">
          <filename>golang-1.25.9-1.module_el8.10.0+4167+2e2e20dd.s390x.rpm</filename>
          <sum type="sha256">d0894c575d5f3e8691408303fb4a574a265fbb6ad0e8a3a52b62670141ea56fd</sum>
        </package>
        <package name="go-toolset" version="1.25.9" release="1.module_el8.10.0+4167+2e2e20dd" epoch="0" arch="s390x" src="golang-1.25.9-1.module_el8.10.0+4167+2e2e20dd.src.rpm">
          <filename>go-toolset-1.25.9-1.module_el8.10.0+4167+2e2e20dd.s390x.rpm</filename>
          <sum type="sha256">fdf624d0ce69a414a68cb626951bd7630921f94da6b8c0ffe18f9028c117cb1f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:10741</id>
    <title>Important: gdk-pixbuf2 security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-04-28 13:29:05"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gdk-pixbuf2 security update</summary>
    <description>The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter.  

Security Fix(es):  

  * gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image (CVE-2026-5201)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:10741" id="RHSA-2026:10741" type="rhsa" title="RHSA-2026:10741"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5201" id="CVE-2026-5201" type="cve" title="CVE-2026-5201"/>
      <reference href="https://bugzilla.redhat.com/2453291" id="2453291" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-10741.html" id="ALSA-2026:10741" type="self" title="ALSA-2026:10741"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="gdk-pixbuf2-modules" version="2.36.12" release="8.el8_10" epoch="0" arch="s390x" src="gdk-pixbuf2-2.36.12-8.el8_10.src.rpm">
          <filename>gdk-pixbuf2-modules-2.36.12-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">5e83516f244cb8730151b2f1651a4b4cd84aeb8c034230a3f493f56fb0c3f88b</sum>
        </package>
        <package name="gdk-pixbuf2-devel" version="2.36.12" release="8.el8_10" epoch="0" arch="s390x" src="gdk-pixbuf2-2.36.12-8.el8_10.src.rpm">
          <filename>gdk-pixbuf2-devel-2.36.12-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">d388b85b93d8e1ff510d77b462fcec81ab1bf0b74b271054fd798b8e0f01d846</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:10766</id>
    <title>Important: firefox security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-04-29 08:56:50"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772)
  * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754)
  * firefox: thunderbird: Spoofing issue in the DOM: Core &amp; HTML component (CVE-2026-6762)
  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752)
  * firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770)
  * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757)
  * firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786)
  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753)
  * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759)
  * firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747)
  * firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749)
  * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766)
  * firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761)
  * firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763)
  * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750)
  * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785)
  * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771)
  * firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764)
  * firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765)
  * firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769)
  * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751)
  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776)
  * firefox: thunderbird: Use-after-free in the DOM: Core &amp; HTML component (CVE-2026-6746)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:10766" id="RHSA-2026:10766" type="rhsa" title="RHSA-2026:10766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6746" id="CVE-2026-6746" type="cve" title="CVE-2026-6746"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6747" id="CVE-2026-6747" type="cve" title="CVE-2026-6747"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6748" id="CVE-2026-6748" type="cve" title="CVE-2026-6748"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6749" id="CVE-2026-6749" type="cve" title="CVE-2026-6749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6750" id="CVE-2026-6750" type="cve" title="CVE-2026-6750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6751" id="CVE-2026-6751" type="cve" title="CVE-2026-6751"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6752" id="CVE-2026-6752" type="cve" title="CVE-2026-6752"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6753" id="CVE-2026-6753" type="cve" title="CVE-2026-6753"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6754" id="CVE-2026-6754" type="cve" title="CVE-2026-6754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6757" id="CVE-2026-6757" type="cve" title="CVE-2026-6757"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6759" id="CVE-2026-6759" type="cve" title="CVE-2026-6759"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6761" id="CVE-2026-6761" type="cve" title="CVE-2026-6761"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6762" id="CVE-2026-6762" type="cve" title="CVE-2026-6762"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6763" id="CVE-2026-6763" type="cve" title="CVE-2026-6763"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6764" id="CVE-2026-6764" type="cve" title="CVE-2026-6764"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6765" id="CVE-2026-6765" type="cve" title="CVE-2026-6765"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6766" id="CVE-2026-6766" type="cve" title="CVE-2026-6766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6767" id="CVE-2026-6767" type="cve" title="CVE-2026-6767"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6769" id="CVE-2026-6769" type="cve" title="CVE-2026-6769"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6770" id="CVE-2026-6770" type="cve" title="CVE-2026-6770"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6771" id="CVE-2026-6771" type="cve" title="CVE-2026-6771"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6772" id="CVE-2026-6772" type="cve" title="CVE-2026-6772"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6776" id="CVE-2026-6776" type="cve" title="CVE-2026-6776"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6785" id="CVE-2026-6785" type="cve" title="CVE-2026-6785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6786" id="CVE-2026-6786" type="cve" title="CVE-2026-6786"/>
      <reference href="https://bugzilla.redhat.com/2460074" id="2460074" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460075" id="2460075" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460076" id="2460076" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460078" id="2460078" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460079" id="2460079" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460085" id="2460085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460086" id="2460086" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460088" id="2460088" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460092" id="2460092" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460094" id="2460094" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460095" id="2460095" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460096" id="2460096" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460097" id="2460097" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460099" id="2460099" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460101" id="2460101" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460102" id="2460102" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460103" id="2460103" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460104" id="2460104" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460105" id="2460105" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460106" id="2460106" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460107" id="2460107" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460108" id="2460108" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460109" id="2460109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460110" id="2460110" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460112" id="2460112" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-10766.html" id="ALSA-2026:10766" type="self" title="ALSA-2026:10766"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="140.10.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-140.10.0-1.el8_10.alma.1.src.rpm">
          <filename>firefox-140.10.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">6a7d71da1b325044e5936f3ca0d5310257d67be13a248dfabfe022d59c8cbb53</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:10950</id>
    <title>Important: python3.12 security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-04-28 13:40:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)
  * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)
  * cpython: Out-of-memory when loading Plist (CVE-2025-13837)
  * cpython: Header injection via newlines in data URL mediatype in Python (CVE-2025-15282)
  * cpython: Header injection in http.cookies.Morsel in Python (CVE-2026-0672)
  * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)
  * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)
  * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)
  * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)
  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)
  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:10950" id="RHSA-2026:10950" type="rhsa" title="RHSA-2026:10950"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13837" id="CVE-2025-13837" type="cve" title="CVE-2025-13837"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15282" id="CVE-2025-15282" type="cve" title="CVE-2025-15282"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59375" id="CVE-2025-59375" type="cve" title="CVE-2025-59375"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6075" id="CVE-2025-6075" type="cve" title="CVE-2025-6075"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0672" id="CVE-2026-0672" type="cve" title="CVE-2026-0672"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1502" id="CVE-2026-1502" type="cve" title="CVE-2026-1502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2297" id="CVE-2026-2297" type="cve" title="CVE-2026-2297"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3644" id="CVE-2026-3644" type="cve" title="CVE-2026-3644"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4224" id="CVE-2026-4224" type="cve" title="CVE-2026-4224"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4786" id="CVE-2026-4786" type="cve" title="CVE-2026-4786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6100" id="CVE-2026-6100" type="cve" title="CVE-2026-6100"/>
      <reference href="https://bugzilla.redhat.com/2395108" id="2395108" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2408891" id="2408891" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418084" id="2418084" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431366" id="2431366" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431374" id="2431374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2444691" id="2444691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448168" id="2448168" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448181" id="2448181" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457409" id="2457409" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457932" id="2457932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458049" id="2458049" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-10950.html" id="ALSA-2026:10950" type="self" title="ALSA-2026:10950"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.12-tkinter" version="3.12.13" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.13-2.el8_10.src.rpm">
          <filename>python3.12-tkinter-3.12.13-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">a1bc036e107dc97ae620a5a703378b2577806b2e8c6a16170c567ab5ea0e4050</sum>
        </package>
        <package name="python3.12-rpm-macros" version="3.12.13" release="2.el8_10" epoch="0" arch="noarch" src="python3.12-3.12.13-2.el8_10.src.rpm">
          <filename>python3.12-rpm-macros-3.12.13-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">b33f99d6429af10985bb4f64ca1c521df580e650857d8eea56d9ce81b16c00ac</sum>
        </package>
        <package name="python3.12" version="3.12.13" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.13-2.el8_10.src.rpm">
          <filename>python3.12-3.12.13-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">c5c66cdc7f22627f010fb5d5d32436ca9f94a31edc4f59a1150eadf4078e2d0e</sum>
        </package>
        <package name="python3.12-libs" version="3.12.13" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.13-2.el8_10.src.rpm">
          <filename>python3.12-libs-3.12.13-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">ea783d7838d81b01a32a7947cd20884fde685959fdbc063b1b8bba248911fa6a</sum>
        </package>
        <package name="python3.12-devel" version="3.12.13" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.13-2.el8_10.src.rpm">
          <filename>python3.12-devel-3.12.13-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">ec42fbf55e3a069fc7eaeee940e74c4a1e1d740e6459adc3ddbf4f95c45e87df</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11062</id>
    <title>Important: python3.11 security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-04-28 13:42:33"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)
  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11062" id="RHSA-2026:11062" type="rhsa" title="RHSA-2026:11062"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4786" id="CVE-2026-4786" type="cve" title="CVE-2026-4786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6100" id="CVE-2026-6100" type="cve" title="CVE-2026-6100"/>
      <reference href="https://bugzilla.redhat.com/2457932" id="2457932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458049" id="2458049" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-11062.html" id="ALSA-2026:11062" type="self" title="ALSA-2026:11062"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.11-tkinter" version="3.11.13" release="7.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-7.el8_10.src.rpm">
          <filename>python3.11-tkinter-3.11.13-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">23843c939d53a836e6278a90bd7e3941bf6b8109e59f3c9a6a2aabf46f7fe136</sum>
        </package>
        <package name="python3.11-rpm-macros" version="3.11.13" release="7.el8_10" epoch="0" arch="noarch" src="python3.11-3.11.13-7.el8_10.src.rpm">
          <filename>python3.11-rpm-macros-3.11.13-7.el8_10.noarch.rpm</filename>
          <sum type="sha256">27a8184802c6c8e6d969151d83728ab344befbbe4363ada9036b304f30bf84ba</sum>
        </package>
        <package name="python3.11" version="3.11.13" release="7.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-7.el8_10.src.rpm">
          <filename>python3.11-3.11.13-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">4cc7d510f7e5c3cef5fc745d8dca3171fa6b743cd174dd3bac15e2fa9c26f0d2</sum>
        </package>
        <package name="python3.11-libs" version="3.11.13" release="7.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-7.el8_10.src.rpm">
          <filename>python3.11-libs-3.11.13-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">558d0ab974f5436b1fe00424df2d46d0aed19bd3cbe68816cb51b5bfce685f57</sum>
        </package>
        <package name="python3.11-devel" version="3.11.13" release="7.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-7.el8_10.src.rpm">
          <filename>python3.11-devel-3.11.13-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">daff9874c5b59e5eb9330cb085574ac6b6b18b88a4a714a68d54ef683988af3e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11077</id>
    <title>Important: python3 security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-04-29 09:05:09"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)
  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11077" id="RHSA-2026:11077" type="rhsa" title="RHSA-2026:11077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4786" id="CVE-2026-4786" type="cve" title="CVE-2026-4786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6100" id="CVE-2026-6100" type="cve" title="CVE-2026-6100"/>
      <reference href="https://bugzilla.redhat.com/2457932" id="2457932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458049" id="2458049" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-11077.html" id="ALSA-2026:11077" type="self" title="ALSA-2026:11077"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="platform-python-devel" version="3.6.8" release="76.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-76.el8_10.alma.1.src.rpm">
          <filename>platform-python-devel-3.6.8-76.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">04ca10ac6349356933b09efca299f609c6eba9e52f0fe715fb5d5391dc2baf49</sum>
        </package>
        <package name="python3-idle" version="3.6.8" release="76.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-76.el8_10.alma.1.src.rpm">
          <filename>python3-idle-3.6.8-76.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">070ccfa03c64f514c34f471552047566c211c1d15d5dc348c2bf8ecf60a1e4a8</sum>
        </package>
        <package name="platform-python-debug" version="3.6.8" release="76.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-76.el8_10.alma.1.src.rpm">
          <filename>platform-python-debug-3.6.8-76.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">686f6f2c2f149d49de84f458af150fde082221f062955ee6549b2578a06d687a</sum>
        </package>
        <package name="python3-tkinter" version="3.6.8" release="76.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-76.el8_10.alma.1.src.rpm">
          <filename>python3-tkinter-3.6.8-76.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">8a71cb6ed4a269c0b8b8e09ea2a2c979ca1ef86f12070f196c9025df11928ee1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11349</id>
    <title>Moderate: libxml2 security update</title>
    <issued date="2026-04-28 00:00:00"/>
    <updated date="2026-04-29 08:51:01"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c (CVE-2025-9714)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11349" id="RHSA-2026:11349" type="rhsa" title="RHSA-2026:11349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9714" id="CVE-2025-9714" type="cve" title="CVE-2025-9714"/>
      <reference href="https://bugzilla.redhat.com/2392605" id="2392605" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-11349.html" id="ALSA-2026:11349" type="self" title="ALSA-2026:11349"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libxml2-devel" version="2.9.7" release="21.el8_10.4" epoch="0" arch="s390x" src="libxml2-2.9.7-21.el8_10.4.src.rpm">
          <filename>libxml2-devel-2.9.7-21.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">803d8c95fc8624cc6fdc444b3c3987bdd09ebf9e9099f403238a96383f76ca86</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11507</id>
    <title>Important: grafana security update</title>
    <issued date="2026-04-29 00:00:00"/>
    <updated date="2026-07-22 10:00:29"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.   

Security Fix(es):  

  * golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282)
  * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
  * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11507" id="RHSA-2026:11507" type="rhsa" title="RHSA-2026:11507"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32280" id="CVE-2026-32280" type="cve" title="CVE-2026-32280"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32282" id="CVE-2026-32282" type="cve" title="CVE-2026-32282"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32283" id="CVE-2026-32283" type="cve" title="CVE-2026-32283"/>
      <reference href="https://bugzilla.redhat.com/2456336" id="2456336" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2456339" id="2456339" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-11507.html" id="ALSA-2026:11507" type="self" title="ALSA-2026:11507"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="grafana-selinux" version="9.2.10" release="30.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-30.el8_10.src.rpm">
          <filename>grafana-selinux-9.2.10-30.el8_10.s390x.rpm</filename>
          <sum type="sha256">afc6c0ff3a07d71cb92a09cc99985366dc7e7de43b62d7e217f4a489cbcd32d6</sum>
        </package>
        <package name="grafana" version="9.2.10" release="30.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-30.el8_10.src.rpm">
          <filename>grafana-9.2.10-30.el8_10.s390x.rpm</filename>
          <sum type="sha256">d4d263bcfe471340775c9804f74019b634267921910aae4030fbdf7ac06dbe2c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11509</id>
    <title>Important: vim security update</title>
    <issued date="2026-04-29 00:00:00"/>
    <updated date="2026-04-30 07:09:12"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: arbitrary command execution via modeline sandbox bypass (CVE-2026-34982)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11509" id="RHSA-2026:11509" type="rhsa" title="RHSA-2026:11509"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34982" id="CVE-2026-34982" type="cve" title="CVE-2026-34982"/>
      <reference href="https://bugzilla.redhat.com/2455400" id="2455400" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-11509.html" id="ALSA-2026:11509" type="self" title="ALSA-2026:11509"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="vim-enhanced" version="8.0.1763" release="22.el8_10.3" epoch="2" arch="s390x" src="vim-8.0.1763-22.el8_10.3.src.rpm">
          <filename>vim-enhanced-8.0.1763-22.el8_10.3.s390x.rpm</filename>
          <sum type="sha256">41ee29c7fc147eed89bfe933497b64a7d397ac6853c98ce175a2ef7cfd9e291e</sum>
        </package>
        <package name="vim-filesystem" version="8.0.1763" release="22.el8_10.3" epoch="2" arch="noarch" src="vim-8.0.1763-22.el8_10.3.src.rpm">
          <filename>vim-filesystem-8.0.1763-22.el8_10.3.noarch.rpm</filename>
          <sum type="sha256">cf372e4342d4ed6beb27c68cf9bd6363657da2e682ddcc30702c189355d21dfb</sum>
        </package>
        <package name="vim-common" version="8.0.1763" release="22.el8_10.3" epoch="2" arch="s390x" src="vim-8.0.1763-22.el8_10.3.src.rpm">
          <filename>vim-common-8.0.1763-22.el8_10.3.s390x.rpm</filename>
          <sum type="sha256">eb2b503ab244e08801bcb2985eb2e1ce1c4cabf7aece74f41f5a942527993b98</sum>
        </package>
        <package name="vim-X11" version="8.0.1763" release="22.el8_10.3" epoch="2" arch="s390x" src="vim-8.0.1763-22.el8_10.3.src.rpm">
          <filename>vim-X11-8.0.1763-22.el8_10.3.s390x.rpm</filename>
          <sum type="sha256">f8b6eecb0ee3359df0cea1194cfc80b372ebb30822da5f4d2c4d8315b3b3313e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11514</id>
    <title>Important: grafana-pcp security update</title>
    <issued date="2026-04-29 00:00:00"/>
    <updated date="2026-07-22 09:59:58"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana-pcp security update</summary>
    <description>The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.  

Security Fix(es):  

  * golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282)
  * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
  * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11514" id="RHSA-2026:11514" type="rhsa" title="RHSA-2026:11514"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32280" id="CVE-2026-32280" type="cve" title="CVE-2026-32280"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32282" id="CVE-2026-32282" type="cve" title="CVE-2026-32282"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32283" id="CVE-2026-32283" type="cve" title="CVE-2026-32283"/>
      <reference href="https://bugzilla.redhat.com/2456336" id="2456336" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2456339" id="2456339" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-11514.html" id="ALSA-2026:11514" type="self" title="ALSA-2026:11514"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="grafana-pcp" version="5.1.1" release="14.el8_10" epoch="0" arch="s390x" src="grafana-pcp-5.1.1-14.el8_10.src.rpm">
          <filename>grafana-pcp-5.1.1-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">3ae809b268fcb8804e668d2b54bc8cef0acbe3af85ec33e3e94090b2cf91049f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11635</id>
    <title>Important: PackageKit security update</title>
    <issued date="2026-04-29 00:00:00"/>
    <updated date="2026-04-29 12:49:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>PackageKit security update</summary>
    <description>PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API.  

Security Fix(es):  

  * PackageKit: race condition vulnerability leads to arbitrary package installation as root (CVE-2026-41651)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11635" id="RHSA-2026:11635" type="rhsa" title="RHSA-2026:11635"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-41651" id="CVE-2026-41651" type="cve" title="CVE-2026-41651"/>
      <reference href="https://bugzilla.redhat.com/2460604" id="2460604" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-11635.html" id="ALSA-2026:11635" type="self" title="ALSA-2026:11635"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="PackageKit" version="1.1.12" release="8.el8_10" epoch="0" arch="s390x" src="PackageKit-1.1.12-8.el8_10.src.rpm">
          <filename>PackageKit-1.1.12-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">2bb6ea454c88646da5a58782fea883d866cb29ea296bb0599f0b71db7e896482</sum>
        </package>
        <package name="PackageKit-gtk3-module" version="1.1.12" release="8.el8_10" epoch="0" arch="s390x" src="PackageKit-1.1.12-8.el8_10.src.rpm">
          <filename>PackageKit-gtk3-module-1.1.12-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">3c83ce37e8c7945b9d874e1eb7419595d7e17b8cf887918644055786826acf6f</sum>
        </package>
        <package name="PackageKit-glib" version="1.1.12" release="8.el8_10" epoch="0" arch="s390x" src="PackageKit-1.1.12-8.el8_10.src.rpm">
          <filename>PackageKit-glib-1.1.12-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">41f77df548c172bca2c662aae78922cb996fbbd6b44e368f8d39d624050755b3</sum>
        </package>
        <package name="PackageKit-cron" version="1.1.12" release="8.el8_10" epoch="0" arch="s390x" src="PackageKit-1.1.12-8.el8_10.src.rpm">
          <filename>PackageKit-cron-1.1.12-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">b1c738f1acdf234d4387b48d3f8e2bba4bd0f1393877a595660abcc6350fa64f</sum>
        </package>
        <package name="PackageKit-gstreamer-plugin" version="1.1.12" release="8.el8_10" epoch="0" arch="s390x" src="PackageKit-1.1.12-8.el8_10.src.rpm">
          <filename>PackageKit-gstreamer-plugin-1.1.12-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">c9688e6a444465d6679b8b7a26ba9085dcc07d81e8a89e8a170683afe88a7d72</sum>
        </package>
        <package name="PackageKit-command-not-found" version="1.1.12" release="8.el8_10" epoch="0" arch="s390x" src="PackageKit-1.1.12-8.el8_10.src.rpm">
          <filename>PackageKit-command-not-found-1.1.12-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">e9fc8199379632114eeed7bcf1ee523d461f30d80c3e7940d6cf1517bf603df6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11656</id>
    <title>Important: xorg-x11-server-Xwayland security update</title>
    <issued date="2026-04-29 00:00:00"/>
    <updated date="2026-04-30 07:03:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.  

Security Fix(es):  

  * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999)
  * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001)
  * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11656" id="RHSA-2026:11656" type="rhsa" title="RHSA-2026:11656"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33999" id="CVE-2026-33999" type="cve" title="CVE-2026-33999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34001" id="CVE-2026-34001" type="cve" title="CVE-2026-34001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34003" id="CVE-2026-34003" type="cve" title="CVE-2026-34003"/>
      <reference href="https://bugzilla.redhat.com/2451106" id="2451106" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451109" id="2451109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451113" id="2451113" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-11656.html" id="ALSA-2026:11656" type="self" title="ALSA-2026:11656"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="xorg-x11-server-Xwayland" version="21.1.3" release="20.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-21.1.3-20.el8_10.src.rpm">
          <filename>xorg-x11-server-Xwayland-21.1.3-20.el8_10.s390x.rpm</filename>
          <sum type="sha256">cb260a0f94126d888740135b9b7bff169225ea3bc660a20ef3ac441da72be94c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11692</id>
    <title>Important: xorg-x11-server security update</title>
    <issued date="2026-04-29 00:00:00"/>
    <updated date="2026-04-30 07:07:01"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999)
  * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001)
  * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11692" id="RHSA-2026:11692" type="rhsa" title="RHSA-2026:11692"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33999" id="CVE-2026-33999" type="cve" title="CVE-2026-33999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34001" id="CVE-2026-34001" type="cve" title="CVE-2026-34001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34003" id="CVE-2026-34003" type="cve" title="CVE-2026-34003"/>
      <reference href="https://bugzilla.redhat.com/2451106" id="2451106" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451109" id="2451109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451113" id="2451113" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-11692.html" id="ALSA-2026:11692" type="self" title="ALSA-2026:11692"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="xorg-x11-server-Xorg" version="1.20.11" release="28.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el8_10.src.rpm">
          <filename>xorg-x11-server-Xorg-1.20.11-28.el8_10.s390x.rpm</filename>
          <sum type="sha256">2f14a71c2353985309bc459f0173cfe1654927ba559842ec03be8673cc3583e9</sum>
        </package>
        <package name="xorg-x11-server-Xnest" version="1.20.11" release="28.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el8_10.src.rpm">
          <filename>xorg-x11-server-Xnest-1.20.11-28.el8_10.s390x.rpm</filename>
          <sum type="sha256">3953cbdb5211b084b16114039a6bbc1b25a376fe8e809a92c0d96a63b41e43a7</sum>
        </package>
        <package name="xorg-x11-server-Xvfb" version="1.20.11" release="28.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el8_10.src.rpm">
          <filename>xorg-x11-server-Xvfb-1.20.11-28.el8_10.s390x.rpm</filename>
          <sum type="sha256">4b66636c51dfcdbd0a9f0610da6ba93ce9ce6e0f32fed9ae99252eeafacb1039</sum>
        </package>
        <package name="xorg-x11-server-common" version="1.20.11" release="28.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el8_10.src.rpm">
          <filename>xorg-x11-server-common-1.20.11-28.el8_10.s390x.rpm</filename>
          <sum type="sha256">585302501771964b74ec348f6d96df513243899317495f119bfe0227a2dd0818</sum>
        </package>
        <package name="xorg-x11-server-Xephyr" version="1.20.11" release="28.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el8_10.src.rpm">
          <filename>xorg-x11-server-Xephyr-1.20.11-28.el8_10.s390x.rpm</filename>
          <sum type="sha256">bb5f9793f60c5541115d9e83dec256a7ea28d0f6574a7941a7462e48901252e8</sum>
        </package>
        <package name="xorg-x11-server-Xdmx" version="1.20.11" release="28.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el8_10.src.rpm">
          <filename>xorg-x11-server-Xdmx-1.20.11-28.el8_10.s390x.rpm</filename>
          <sum type="sha256">bc34ba949d3ad55aad5845ecf43f8003bc906dedf97c94c3cef4b4a1702c8d38</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:12176</id>
    <title>Important: fence-agents security update</title>
    <issued date="2026-04-30 00:00:00"/>
    <updated date="2026-04-30 11:54:21"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.   

Security Fix(es):  

  * cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves (CVE-2026-26007)
  * pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 ?4.1.11 MUST violation) (CVE-2026-32597)
  * pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:12176" id="RHSA-2026:12176" type="rhsa" title="RHSA-2026:12176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26007" id="CVE-2026-26007" type="cve" title="CVE-2026-26007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-30922" id="CVE-2026-30922" type="cve" title="CVE-2026-30922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32597" id="CVE-2026-32597" type="cve" title="CVE-2026-32597"/>
      <reference href="https://bugzilla.redhat.com/2438762" id="2438762" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447194" id="2447194" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448553" id="2448553" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-12176.html" id="ALSA-2026:12176" type="self" title="ALSA-2026:12176"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="fence-agents-ifmib" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-ifmib-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">044b0b10ad722b7668f2cef431727c2c7a51ec7c58ac6251a8bf39900e9f63ff</sum>
        </package>
        <package name="fence-agents-vmware-rest" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-vmware-rest-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">050935e9a8802cfe2e8ce90cc69b2e16586a5ab228881e6f8cfb20bd9c943c87</sum>
        </package>
        <package name="fence-agents-mpath" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-mpath-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">0bc2147ebf15015bdcd41df90783e37ebcd5736d917e3f5404fcc446b8e33cd8</sum>
        </package>
        <package name="fence-agents-eps" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-eps-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">0c5c1fc490206e44d5ddee85ac798f9d3171762500f1f6791f1960f1603ef842</sum>
        </package>
        <package name="fence-agents-compute" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-compute-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">0dc91e187b29954c6e712697280f77269a82dfcf92a66560dfbcaa27159986dc</sum>
        </package>
        <package name="fence-agents-hpblade" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-hpblade-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">0e467ed5ae0397689583ad189f4bea8b58a8bfca0ec9a1092173c439c1c68de1</sum>
        </package>
        <package name="fence-agents-apc" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-apc-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">1449a7673cf54ab928b1100601fd3641a014fa3b6cf1e93e1ee9024bed4ee1ac</sum>
        </package>
        <package name="fence-agents-scsi" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-scsi-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">16ef8c36bed98ab5b551f44785b5ebc18d0767a8f6dfecdb48e68a66f7d77f92</sum>
        </package>
        <package name="fence-agents-zvm" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-zvm-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">1a2bae3e7c04fcbe60385d24203eace95b01fde631e2cd0d739713771ab94a96</sum>
        </package>
        <package name="fence-agents-ilo2" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-ilo2-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">2a9058a13d375d2a78f2207c2aa2308b28126d4ae18bf166cb10421413bf2ab7</sum>
        </package>
        <package name="fence-agents-wti" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-wti-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">3712c140f85ec3b9ebb5153eb382a24568ee1c2309aec61848cddb7607d9ae0a</sum>
        </package>
        <package name="fence-agents-bladecenter" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-bladecenter-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">412221f5df878175c8e87b62c275a2e81b4fd377b21cd066212e85a8de47eece</sum>
        </package>
        <package name="fence-agents-ipmilan" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-ipmilan-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">4e3539b1ceb90256d0a310497fd964557ad6782dd441615edc20a90f14c77954</sum>
        </package>
        <package name="fence-agents-kdump" version="4.2.1" release="129.el8_10.25" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-kdump-4.2.1-129.el8_10.25.s390x.rpm</filename>
          <sum type="sha256">5ae473eb31ccb1de0f6f04bb71a62fc62181cd8a2b0e0eaa637f3bd18ef12581</sum>
        </package>
        <package name="fence-agents-redfish" version="4.2.1" release="129.el8_10.25" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-redfish-4.2.1-129.el8_10.25.s390x.rpm</filename>
          <sum type="sha256">5e2d7580b629b5889c89f831eed8c8b433bb7be7cfcf8ef2e3b7dd089db6254e</sum>
        </package>
        <package name="fence-agents-amt-ws" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-amt-ws-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">61c8e8e352bede9ca552502c9e82a17896448642295fe7a188694754d4ac66c8</sum>
        </package>
        <package name="fence-agents-virsh" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-virsh-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">62d066e8dfb58c0691e92856549474ed5eb6a397c1ee5a2a72d5bca1d4a1b9a1</sum>
        </package>
        <package name="fence-agents-ibm-powervs" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-ibm-powervs-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">6b3dd465605be112289a2694524152b155382e7e975adec603b002fc4207039a</sum>
        </package>
        <package name="fence-agents-cisco-ucs" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-cisco-ucs-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">785a5928226eb61ac59b1b3f5a8a8f733cb70e672c17879a8ab5eac526dd1c7b</sum>
        </package>
        <package name="fence-agents-kubevirt" version="4.2.1" release="129.el8_10.25" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-kubevirt-4.2.1-129.el8_10.25.s390x.rpm</filename>
          <sum type="sha256">7b578e5f4802816fa66d2226e9ec3e0cb64e58912ec678401dd486148bc71261</sum>
        </package>
        <package name="fence-agents-cisco-mds" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-cisco-mds-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">8a315bafa99ee152b58143436252980e7da0ceb90d07548c753a2faf5141ab6d</sum>
        </package>
        <package name="fence-agents-emerson" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-emerson-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">8df218d9b8bdcd52678878bfc6494ce7105069a12588c93016d4b0842a388451</sum>
        </package>
        <package name="fence-agents-ipdu" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-ipdu-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">8e96c590ff3bec7c128d30b2a742ebc905fde34d72530059e442dd0439114f05</sum>
        </package>
        <package name="fence-agents-ibmblade" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-ibmblade-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">95743dbfe5d1953328fc15f9c6d20e7fe545ceacebb7cf34a8ad45a4778632cb</sum>
        </package>
        <package name="fence-agents-lpar" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-lpar-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">96fa29ed84454cf8893ad5e8cac410b06dcfa7da3c90090bed35699c2a3697dd</sum>
        </package>
        <package name="fence-agents-common" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-common-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">9a6dc8d5181105c05bcf2dc253dbd6dc49adfedbde1abc8f306f077b98f68ee8</sum>
        </package>
        <package name="fence-agents-vmware-soap" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-vmware-soap-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">a199176879cca766a135eb3113304e226d044b9940676bb938dd23201f4c9bbd</sum>
        </package>
        <package name="fence-agents-rsb" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-rsb-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">a4657f8f291e0f481114d64a671c0baf3c13b6b6a0410d648da7f5bee60c2f13</sum>
        </package>
        <package name="fence-agents-heuristics-ping" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-heuristics-ping-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">a84dedffc4540b1c94dbdd85c7afb4ac1da762c220feb76a1bd9c962fe62a347</sum>
        </package>
        <package name="fence-agents-drac5" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-drac5-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">ae1c31131cd2f88bb02ea03ce6e6fc4667187b9a4932c6b6b35dda4ceeb9e11f</sum>
        </package>
        <package name="fence-agents-ilo-moonshot" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-ilo-moonshot-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">b1c17fa82bda6c9b33d4779568b9e9b525a20bed87df8defbefdc97598222ebb</sum>
        </package>
        <package name="fence-agents-ibm-vpc" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-ibm-vpc-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">bacb95f02cc89304d17db93d776136867a4c2ebb0dabb54e0f5973a4f849918e</sum>
        </package>
        <package name="fence-agents-eaton-snmp" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-eaton-snmp-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">bb1c273e5d066c7635b389b6e823b7aa8b9b901cb8d3cdf16e4ca76c1e19d15b</sum>
        </package>
        <package name="fence-agents-all" version="4.2.1" release="129.el8_10.25" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-all-4.2.1-129.el8_10.25.s390x.rpm</filename>
          <sum type="sha256">ca77b94502c882bcd24a7f0c50ce6fcf4215fd92c941456ee3473a5db5fa8219</sum>
        </package>
        <package name="fence-agents-ilo-mp" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-ilo-mp-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">d0cbc9a0b949cf091304d1358f426b9cb45267ecf9d9a0d00de780080ba5d43d</sum>
        </package>
        <package name="fence-agents-intelmodular" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-intelmodular-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">d55e750532dc7114717a9b12cbc9ad8ff851468c71158f3071b6e8bbe9aa2ac2</sum>
        </package>
        <package name="fence-agents-rsa" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-rsa-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">d5cca8405b232134fc19203a7ac993ccffe598e6c948817fc21ca5e8103a1617</sum>
        </package>
        <package name="fence-agents-brocade" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-brocade-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">d7fce423a5c8c6e024dff3f30c1f533e19aa649fe254c6c6a2fc04b31f4b1f1d</sum>
        </package>
        <package name="fence-agents-sbd" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-sbd-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">ddd32e7834590d531671563e99c00b15e2b969f13d3f369a9ea086f83f94d416</sum>
        </package>
        <package name="fence-agents-ilo-ssh" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-ilo-ssh-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">de41d8c013a1e770a738196b379fd82fe244268f8304bc962563b017b1a6ea27</sum>
        </package>
        <package name="fence-agents-apc-snmp" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-apc-snmp-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">fd6b2273fee765e065c680025643606ca073ccbd4de9be8d12b081461058eac3</sum>
        </package>
        <package name="fence-agents-rhevm" version="4.2.1" release="129.el8_10.25" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.25.src.rpm">
          <filename>fence-agents-rhevm-4.2.1-129.el8_10.25.noarch.rpm</filename>
          <sum type="sha256">fdc9bffa9e6482329542d602560e1d9ce238ff542966f26335d2a81dae7da9b8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1224</id>
    <title>Important: python3.11-urllib3 security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-01-27 08:28:50"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11-urllib3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)
  * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471)
  * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1224" id="RHSA-2026:1224" type="rhsa" title="RHSA-2026:1224"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66418" id="CVE-2025-66418" type="cve" title="CVE-2025-66418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66471" id="CVE-2025-66471" type="cve" title="CVE-2025-66471"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21441" id="CVE-2026-21441" type="cve" title="CVE-2026-21441"/>
      <reference href="https://bugzilla.redhat.com/2419455" id="2419455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419467" id="2419467" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2427726" id="2427726" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-1224.html" id="ALSA-2026:1224" type="self" title="ALSA-2026:1224"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.11-urllib3" version="1.26.12" release="6.el8_10" epoch="0" arch="noarch" src="python3.11-urllib3-1.26.12-6.el8_10.src.rpm">
          <filename>python3.11-urllib3-1.26.12-6.el8_10.noarch.rpm</filename>
          <sum type="sha256">b58c5f46d7a5826d1a7f3675ec87f8a21fca47384d3e09be1116bfed980609cd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1226</id>
    <title>Important: python3.12-urllib3 security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-01-27 08:21:23"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12-urllib3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)
  * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471)
  * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1226" id="RHSA-2026:1226" type="rhsa" title="RHSA-2026:1226"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66418" id="CVE-2025-66418" type="cve" title="CVE-2025-66418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66471" id="CVE-2025-66471" type="cve" title="CVE-2025-66471"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21441" id="CVE-2026-21441" type="cve" title="CVE-2026-21441"/>
      <reference href="https://bugzilla.redhat.com/2419455" id="2419455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419467" id="2419467" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2427726" id="2427726" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-1226.html" id="ALSA-2026:1226" type="self" title="ALSA-2026:1226"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.12-urllib3" version="1.26.19" release="2.el8_10" epoch="0" arch="noarch" src="python3.12-urllib3-1.26.19-2.el8_10.src.rpm">
          <filename>python3.12-urllib3-1.26.19-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">838edf1d585eeeac3348882f1741fb72de194d84b92fedc11f334f0a76b0d768</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1240</id>
    <title>Important: fence-agents security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-04-15 07:16:57"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.   

Security Fix(es):  

  * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)
  * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471)
  * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1240" id="RHSA-2026:1240" type="rhsa" title="RHSA-2026:1240"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66418" id="CVE-2025-66418" type="cve" title="CVE-2025-66418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66471" id="CVE-2025-66471" type="cve" title="CVE-2025-66471"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21441" id="CVE-2026-21441" type="cve" title="CVE-2026-21441"/>
      <reference href="https://bugzilla.redhat.com/2419455" id="2419455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419467" id="2419467" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2427726" id="2427726" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-1240.html" id="ALSA-2026:1240" type="self" title="ALSA-2026:1240"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="fence-agents-mpath" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-mpath-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">00987ce63afbc68a2de369f84124defdb42edeb43c0c595023a1f56da774b617</sum>
        </package>
        <package name="fence-agents-redfish" version="4.2.1" release="129.el8_10.20" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-redfish-4.2.1-129.el8_10.20.s390x.rpm</filename>
          <sum type="sha256">02aa9e5e6a17734604c9d38a79012ef2ec6d3ffd5679ffbf89918cc80ce1f266</sum>
        </package>
        <package name="fence-agents-compute" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-compute-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">076576889f1b39d03b29b941b04d67a5d4ff27925634f182665ba3322a12f7fb</sum>
        </package>
        <package name="fence-agents-cisco-mds" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-cisco-mds-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">07a8903b1b64c2a21c3bc245b8b33220c4e4d230a723f55bef5cf42932583102</sum>
        </package>
        <package name="fence-agents-ilo-mp" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-ilo-mp-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">097b3d63e9831f5dfaf173e5f8bfb35b1b164e6db917a4813a39b38ba9f77cb7</sum>
        </package>
        <package name="fence-agents-kubevirt" version="4.2.1" release="129.el8_10.20" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-kubevirt-4.2.1-129.el8_10.20.s390x.rpm</filename>
          <sum type="sha256">0a34228c1c1c94d07b8c9609e071ef3e5324766acabd2a15735719f5e93f4ce9</sum>
        </package>
        <package name="fence-agents-rhevm" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-rhevm-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">1e55b2491a428ababa58d7650dfb1b3016c4698647d35de2cc7a768f366afe45</sum>
        </package>
        <package name="fence-agents-virsh" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-virsh-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">374dbb95276b611bb92faaea4877e93df0cad08ce61d88022fecd851fa842e83</sum>
        </package>
        <package name="fence-agents-ibm-powervs" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-ibm-powervs-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">3769bbfc3d489e8a7640410f296f8c1ee7ef355921170e15c723277f6043d239</sum>
        </package>
        <package name="fence-agents-sbd" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-sbd-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">3da5f2c0b9a01619e295fa1a920eae7bd81478ef14c3e1a4b24aa520558192ad</sum>
        </package>
        <package name="fence-agents-apc" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-apc-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">3f63abb73bcf647d0aa0c3f2df04b21ea570545300d40c62b394a66bbd6fccd8</sum>
        </package>
        <package name="fence-agents-zvm" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-zvm-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">5712d7d502090923f6f8fd42a790eb186d64015fdffbb19d69ec088925f80421</sum>
        </package>
        <package name="fence-agents-rsb" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-rsb-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">583f5211015b7fee7f0c33e7b6429980fb4d19fb27349e90f06caa8b67ebd326</sum>
        </package>
        <package name="fence-agents-rsa" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-rsa-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">767de26a57d0f4a07ebe2fd39d63a929dd27d5f239ce9532cb4155f21f6344cb</sum>
        </package>
        <package name="fence-agents-bladecenter" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-bladecenter-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">7818e15b610d943bcaaef10da333cfc8e94b657f7a4f16facde09b76f03264ad</sum>
        </package>
        <package name="fence-agents-all" version="4.2.1" release="129.el8_10.20" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-all-4.2.1-129.el8_10.20.s390x.rpm</filename>
          <sum type="sha256">797bd5127df6d522ea9e63375e784a2ce3902590a4f2ac9c73bd30367a8276d6</sum>
        </package>
        <package name="fence-agents-vmware-soap" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-vmware-soap-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">829f39933e799bf3d273d2bcb6912e1bee2316c9025a26ba0a692fcd7f800489</sum>
        </package>
        <package name="fence-agents-brocade" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-brocade-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">86e063cb9eb80ace53c28b6d0b1861660a02bc65bad4ae5cc1e90d13a1408d67</sum>
        </package>
        <package name="fence-agents-kdump" version="4.2.1" release="129.el8_10.20" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-kdump-4.2.1-129.el8_10.20.s390x.rpm</filename>
          <sum type="sha256">88dde6b8cac4dfa99e79328106beb29a355d4c96df6e9f433767c7385e1dd147</sum>
        </package>
        <package name="fence-agents-amt-ws" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-amt-ws-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">898f2787eb89b2031bd7c028983dcf8ef61818f918d9e8261b1580a89202c478</sum>
        </package>
        <package name="fence-agents-lpar" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-lpar-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">89d1df470e9bd0d8617a347d07a73ef9373b0e6e14f55b978d1d591f03575667</sum>
        </package>
        <package name="fence-agents-drac5" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-drac5-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">8f195d63e622af19e05e8265f88d3dcfa0edf7e21341288c2129e4fb30365071</sum>
        </package>
        <package name="fence-agents-eps" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-eps-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">9d82c3578a0c3d98c1c9373d24f0c48b202bab24c2e038e09eb632804b2bf240</sum>
        </package>
        <package name="fence-agents-intelmodular" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-intelmodular-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">ac7003783eb6fdc798b59df23d2a56e8748a0eb9b99b703fe01646d3ec61adeb</sum>
        </package>
        <package name="fence-agents-hpblade" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-hpblade-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">b1c3b7d8b225ab13b340b30cb9ece700f1b50d85b45dc71c5d45473bb05f60ad</sum>
        </package>
        <package name="fence-agents-ipmilan" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-ipmilan-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">be3bc18ecf485af454d20ff87fe552ab959c356482eb395fe0259ccb47f4142d</sum>
        </package>
        <package name="fence-agents-ipdu" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-ipdu-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">c87f10d281eecdf92a6e33618cf016baef672f175c8256bd7324fa06f59b83f5</sum>
        </package>
        <package name="fence-agents-apc-snmp" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-apc-snmp-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">d189acd8489cd3da30f4d702be60e0c595ff2b8901e642d48d1573b981b43a10</sum>
        </package>
        <package name="fence-agents-emerson" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-emerson-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">d2c404245904ac62ac9d5669aee49ab239200374185bc6cda6855aa49678d64e</sum>
        </package>
        <package name="fence-agents-wti" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-wti-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">d4975459b9ad793f2952ced97c1cd32eb11f5a0d247f4de23efbaa9fb5447bb3</sum>
        </package>
        <package name="fence-agents-ilo-moonshot" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-ilo-moonshot-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">d52a80091adea5b360566b9c98b28bb4d2964fcee9ee8832fa05683add6cafc7</sum>
        </package>
        <package name="fence-agents-ibm-vpc" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-ibm-vpc-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">d7391e4967e1ee70726c71b7f05896094bcb9604cfc0ed46edc78a18df1d6dcc</sum>
        </package>
        <package name="fence-agents-ibmblade" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-ibmblade-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">d7af029b03b465c697dc377869c7b593303640195e3e07030b87c9e3769b49bc</sum>
        </package>
        <package name="fence-agents-ifmib" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-ifmib-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">da7ee3c803906fcccd12dd3a05cd6b07cef369911fd7cea0b4356011cf3a4a52</sum>
        </package>
        <package name="fence-agents-heuristics-ping" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-heuristics-ping-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">dd606e70ff6b5423c4c9c4d993dacd569a6fa86c87c63eeed365d029f145c55f</sum>
        </package>
        <package name="fence-agents-ilo-ssh" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-ilo-ssh-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">ddab8dd4d70c3be34adf77f055de1f36ac64bca29d793fe854c32668037bc9cd</sum>
        </package>
        <package name="fence-agents-scsi" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-scsi-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">df85b709134194eda672c242f5cf5a41b404e4746f85fa358651d2343900377f</sum>
        </package>
        <package name="fence-agents-cisco-ucs" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-cisco-ucs-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">e53875e45a01856da408c1868d0dae5981c81272bccb1765de6bfc1b670c40c2</sum>
        </package>
        <package name="fence-agents-vmware-rest" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-vmware-rest-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">ec72a8123330dc13f432dbcc2d4314bab10add19e8cbf140cc095f1d096b3353</sum>
        </package>
        <package name="fence-agents-ilo2" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-ilo2-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">ef9c5b73638c5120bb02f855f5539641dece98351e7023400d92b7701e9471b5</sum>
        </package>
        <package name="fence-agents-eaton-snmp" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-eaton-snmp-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">fb33923c9adb2d3929a166f2223c4427ebf32497010cc4cce198f238e6aae39f</sum>
        </package>
        <package name="fence-agents-common" version="4.2.1" release="129.el8_10.20" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.20.src.rpm">
          <filename>fence-agents-common-4.2.1-129.el8_10.20.noarch.rpm</filename>
          <sum type="sha256">fdaf98aa02e48560ccdb49e66cf37d9655b56410bcb1406362c3bbfc839c2bce</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:13383</id>
    <title>Important: openssh security update</title>
    <issued date="2026-05-04 00:00:00"/>
    <updated date="2026-05-04 20:49:16"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openssh security update</summary>
    <description>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.  

Security Fix(es):  

  * OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385)
  * OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option (CVE-2026-35414)
  * OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage (CVE-2026-35387)
  * OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions (CVE-2026-35388)
  * OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username (CVE-2026-35386)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:13383" id="RHSA-2026:13383" type="rhsa" title="RHSA-2026:13383"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35385" id="CVE-2026-35385" type="cve" title="CVE-2026-35385"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35386" id="CVE-2026-35386" type="cve" title="CVE-2026-35386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35387" id="CVE-2026-35387" type="cve" title="CVE-2026-35387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35388" id="CVE-2026-35388" type="cve" title="CVE-2026-35388"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35414" id="CVE-2026-35414" type="cve" title="CVE-2026-35414"/>
      <reference href="https://bugzilla.redhat.com/2454469" id="2454469" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2454490" id="2454490" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2454494" id="2454494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2454500" id="2454500" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2454506" id="2454506" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-13383.html" id="ALSA-2026:13383" type="self" title="ALSA-2026:13383"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="openssh-askpass" version="8.0p1" release="29.el8_10" epoch="0" arch="s390x" src="openssh-8.0p1-29.el8_10.src.rpm">
          <filename>openssh-askpass-8.0p1-29.el8_10.s390x.rpm</filename>
          <sum type="sha256">ddf25cdebd4b0b3c7cf5bbaca55c92eafd2509806dddfe93edaa313a946cf955</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:13414</id>
    <title>Important: tigervnc security update</title>
    <issued date="2026-05-04 00:00:00"/>
    <updated date="2026-05-05 10:37:05"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.  

Security Fix(es):  

  * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999)
  * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001)
  * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003)
  * TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions (CVE-2026-34352)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:13414" id="RHSA-2026:13414" type="rhsa" title="RHSA-2026:13414"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33999" id="CVE-2026-33999" type="cve" title="CVE-2026-33999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34001" id="CVE-2026-34001" type="cve" title="CVE-2026-34001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34003" id="CVE-2026-34003" type="cve" title="CVE-2026-34003"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34352" id="CVE-2026-34352" type="cve" title="CVE-2026-34352"/>
      <reference href="https://bugzilla.redhat.com/2451106" id="2451106" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451109" id="2451109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451113" id="2451113" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452022" id="2452022" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-13414.html" id="ALSA-2026:13414" type="self" title="ALSA-2026:13414"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="tigervnc-icons" version="1.15.0" release="9.el8_10" epoch="0" arch="noarch" src="tigervnc-1.15.0-9.el8_10.src.rpm">
          <filename>tigervnc-icons-1.15.0-9.el8_10.noarch.rpm</filename>
          <sum type="sha256">3c7a7652b00f3d8f0e919a47ae43b43f81a372b1cf89bf9023e3c201ecd1f0e0</sum>
        </package>
        <package name="tigervnc-server-module" version="1.15.0" release="9.el8_10" epoch="0" arch="s390x" src="tigervnc-1.15.0-9.el8_10.src.rpm">
          <filename>tigervnc-server-module-1.15.0-9.el8_10.s390x.rpm</filename>
          <sum type="sha256">6d0e89225744f0b6cf9da94b53e591d74bd386d276d3c0a3a4198b60a9249c21</sum>
        </package>
        <package name="tigervnc" version="1.15.0" release="9.el8_10" epoch="0" arch="s390x" src="tigervnc-1.15.0-9.el8_10.src.rpm">
          <filename>tigervnc-1.15.0-9.el8_10.s390x.rpm</filename>
          <sum type="sha256">6ee89fe932f282535a873e43169505bd9811c0f3fb4af17eb9f1c45815d3a08f</sum>
        </package>
        <package name="tigervnc-server-minimal" version="1.15.0" release="9.el8_10" epoch="0" arch="s390x" src="tigervnc-1.15.0-9.el8_10.src.rpm">
          <filename>tigervnc-server-minimal-1.15.0-9.el8_10.s390x.rpm</filename>
          <sum type="sha256">8e0f8700640eb2f8d427639f46b28342d7105b7d1dd4779d764d5be6d6e8a26c</sum>
        </package>
        <package name="tigervnc-server" version="1.15.0" release="9.el8_10" epoch="0" arch="s390x" src="tigervnc-1.15.0-9.el8_10.src.rpm">
          <filename>tigervnc-server-1.15.0-9.el8_10.s390x.rpm</filename>
          <sum type="sha256">97793e332f56a0a93a17ecf133a5e2b0a972b8adc9a73e2c40e4a124f21454ab</sum>
        </package>
        <package name="tigervnc-license" version="1.15.0" release="9.el8_10" epoch="0" arch="noarch" src="tigervnc-1.15.0-9.el8_10.src.rpm">
          <filename>tigervnc-license-1.15.0-9.el8_10.noarch.rpm</filename>
          <sum type="sha256">a807611d455e1ca06032cf8a4cb08a50db55134c697da0566a24cb7d5590fd93</sum>
        </package>
        <package name="tigervnc-selinux" version="1.15.0" release="9.el8_10" epoch="0" arch="noarch" src="tigervnc-1.15.0-9.el8_10.src.rpm">
          <filename>tigervnc-selinux-1.15.0-9.el8_10.noarch.rpm</filename>
          <sum type="sha256">c66ad0c347e2a979e8f9ea4a7c4660a10a84281b65d4a1ab8fd230e02233ef04</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1344</id>
    <title>Important: grafana security update</title>
    <issued date="2026-01-27 00:00:00"/>
    <updated date="2026-01-29 12:12:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.   

Security Fix(es):  

  * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1344" id="RHSA-2026:1344" type="rhsa" title="RHSA-2026:1344"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61729" id="CVE-2025-61729" type="cve" title="CVE-2025-61729"/>
      <reference href="https://bugzilla.redhat.com/2418462" id="2418462" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-1344.html" id="ALSA-2026:1344" type="self" title="ALSA-2026:1344"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="grafana-selinux" version="9.2.10" release="27.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-27.el8_10.src.rpm">
          <filename>grafana-selinux-9.2.10-27.el8_10.s390x.rpm</filename>
          <sum type="sha256">1c48d82774969bbd3486542527958e491f8ae2c177ebea980064edccd2ca8f9d</sum>
        </package>
        <package name="grafana" version="9.2.10" release="27.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-27.el8_10.src.rpm">
          <filename>grafana-9.2.10-27.el8_10.s390x.rpm</filename>
          <sum type="sha256">1f698a33b217fe634bb8562fcaa318dac9cf4f699814b40a9395b9a9d0373396</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:13537</id>
    <title>Important: thunderbird security update</title>
    <issued date="2026-05-04 00:00:00"/>
    <updated date="2026-05-05 10:39:20"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772)
  * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-6754)
  * firefox: thunderbird: Spoofing issue in the DOM: Core &amp; HTML component (CVE-2026-6762)
  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6752)
  * firefox: thunderbird: Other issue in the Storage: IndexedDB component (CVE-2026-6770)
  * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-6757)
  * firefox: thunderbird: Other issue in the Libraries component in NSS (CVE-2026-6767)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6786)
  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-6753)
  * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-6759)
  * firefox: thunderbird: Use-after-free in the WebRTC component (CVE-2026-6747)
  * firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component (CVE-2026-6749)
  * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6766)
  * firefox: thunderbird: Privilege escalation in the Networking component (CVE-2026-6761)
  * firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-6763)
  * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-6750)
  * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6748)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150 (CVE-2026-6785)
  * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-6771)
  * firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component (CVE-2026-6764)
  * firefox: thunderbird: Information disclosure in the Form Autofill component (CVE-2026-6765)
  * firefox: thunderbird: Privilege escalation in the Debugger component (CVE-2026-6769)
  * firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component (CVE-2026-6751)
  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-6776)
  * firefox: thunderbird: Use-after-free in the DOM: Core &amp; HTML component (CVE-2026-6746)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:13537" id="RHSA-2026:13537" type="rhsa" title="RHSA-2026:13537"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6746" id="CVE-2026-6746" type="cve" title="CVE-2026-6746"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6747" id="CVE-2026-6747" type="cve" title="CVE-2026-6747"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6748" id="CVE-2026-6748" type="cve" title="CVE-2026-6748"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6749" id="CVE-2026-6749" type="cve" title="CVE-2026-6749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6750" id="CVE-2026-6750" type="cve" title="CVE-2026-6750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6751" id="CVE-2026-6751" type="cve" title="CVE-2026-6751"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6752" id="CVE-2026-6752" type="cve" title="CVE-2026-6752"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6753" id="CVE-2026-6753" type="cve" title="CVE-2026-6753"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6754" id="CVE-2026-6754" type="cve" title="CVE-2026-6754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6757" id="CVE-2026-6757" type="cve" title="CVE-2026-6757"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6759" id="CVE-2026-6759" type="cve" title="CVE-2026-6759"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6761" id="CVE-2026-6761" type="cve" title="CVE-2026-6761"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6762" id="CVE-2026-6762" type="cve" title="CVE-2026-6762"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6763" id="CVE-2026-6763" type="cve" title="CVE-2026-6763"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6764" id="CVE-2026-6764" type="cve" title="CVE-2026-6764"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6765" id="CVE-2026-6765" type="cve" title="CVE-2026-6765"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6766" id="CVE-2026-6766" type="cve" title="CVE-2026-6766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6767" id="CVE-2026-6767" type="cve" title="CVE-2026-6767"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6769" id="CVE-2026-6769" type="cve" title="CVE-2026-6769"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6770" id="CVE-2026-6770" type="cve" title="CVE-2026-6770"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6771" id="CVE-2026-6771" type="cve" title="CVE-2026-6771"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6772" id="CVE-2026-6772" type="cve" title="CVE-2026-6772"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6776" id="CVE-2026-6776" type="cve" title="CVE-2026-6776"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6785" id="CVE-2026-6785" type="cve" title="CVE-2026-6785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6786" id="CVE-2026-6786" type="cve" title="CVE-2026-6786"/>
      <reference href="https://bugzilla.redhat.com/2460074" id="2460074" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460075" id="2460075" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460076" id="2460076" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460078" id="2460078" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460079" id="2460079" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460085" id="2460085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460086" id="2460086" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460088" id="2460088" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460092" id="2460092" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460094" id="2460094" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460095" id="2460095" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460096" id="2460096" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460097" id="2460097" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460099" id="2460099" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460101" id="2460101" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460102" id="2460102" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460103" id="2460103" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460104" id="2460104" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460105" id="2460105" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460106" id="2460106" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460107" id="2460107" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460108" id="2460108" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460109" id="2460109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460110" id="2460110" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460112" id="2460112" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-13537.html" id="ALSA-2026:13537" type="self" title="ALSA-2026:13537"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="140.10.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-140.10.0-1.el8_10.alma.1.src.rpm">
          <filename>thunderbird-140.10.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">70b9cb9a9930ccbb0d8c4769299f4a7be33e5cb0ff595d679c3286f22e74f8a6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:13657</id>
    <title>Moderate: corosync security update</title>
    <issued date="2026-05-05 00:00:00"/>
    <updated date="2026-05-06 08:44:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>corosync security update</summary>
    <description>The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software.  

Security Fix(es):  

  * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)
  * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:13657" id="RHSA-2026:13657" type="rhsa" title="RHSA-2026:13657"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35091" id="CVE-2026-35091" type="cve" title="CVE-2026-35091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35092" id="CVE-2026-35092" type="cve" title="CVE-2026-35092"/>
      <reference href="https://bugzilla.redhat.com/2453813" id="2453813" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453814" id="2453814" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-13657.html" id="ALSA-2026:13657" type="self" title="ALSA-2026:13657"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="corosynclib" version="3.1.8" release="1.el8_10.1" epoch="0" arch="s390x" src="corosync-3.1.8-1.el8_10.1.src.rpm">
          <filename>corosynclib-3.1.8-1.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">860421915c3b0d9bce15924c2d06e008a051f7608b8bbeb65f8bac1707fd935a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1374</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2026-01-27 00:00:00"/>
    <updated date="2026-01-29 12:10:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Excessive read buffering DoS in http.client (CVE-2025-13836)
  * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1374" id="RHSA-2026:1374" type="rhsa" title="RHSA-2026:1374"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12084" id="CVE-2025-12084" type="cve" title="CVE-2025-12084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13836" id="CVE-2025-13836" type="cve" title="CVE-2025-13836"/>
      <reference href="https://bugzilla.redhat.com/2418078" id="2418078" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418655" id="2418655" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-1374.html" id="ALSA-2026:1374" type="self" title="ALSA-2026:1374"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.11-devel" version="3.11.13" release="4.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-4.el8_10.src.rpm">
          <filename>python3.11-devel-3.11.13-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">0cb5e98b1dccaf530c5f0771213072bc4eee74612b5f96cf09a85249b90f6004</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.13" release="4.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-4.el8_10.src.rpm">
          <filename>python3.11-tkinter-3.11.13-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">539094349e06fc52d964f864a603ae321ae15d99351a0e00d703ae29ff939efc</sum>
        </package>
        <package name="python3.11-libs" version="3.11.13" release="4.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-4.el8_10.src.rpm">
          <filename>python3.11-libs-3.11.13-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">b7c7f1c1d71f7bd3f6742dd1827c0c388e34b870c02bad00263d8b914e53e838</sum>
        </package>
        <package name="python3.11-rpm-macros" version="3.11.13" release="4.el8_10" epoch="0" arch="noarch" src="python3.11-3.11.13-4.el8_10.src.rpm">
          <filename>python3.11-rpm-macros-3.11.13-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">d428d3374d243ed91a7060aa9f057e63495df88678e746f4fc22e6e465be467d</sum>
        </package>
        <package name="python3.11" version="3.11.13" release="4.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-4.el8_10.src.rpm">
          <filename>python3.11-3.11.13-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">e62e3a288ebf9c84a76b140cd45572a33b9057ff0a7b4d57d73f6e73f2d39ee9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1380</id>
    <title>Moderate: osbuild-composer security update</title>
    <issued date="2026-01-27 00:00:00"/>
    <updated date="2026-01-29 12:07:35"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>osbuild-composer security update</summary>
    <description>A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients.  

Security Fix(es):  

  * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1380" id="RHSA-2026:1380" type="rhsa" title="RHSA-2026:1380"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58183" id="CVE-2025-58183" type="cve" title="CVE-2025-58183"/>
      <reference href="https://bugzilla.redhat.com/2407258" id="2407258" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-1380.html" id="ALSA-2026:1380" type="self" title="ALSA-2026:1380"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="osbuild-composer" version="101.4" release="2.el8_10.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101.4-2.el8_10.alma.1.src.rpm">
          <filename>osbuild-composer-101.4-2.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">20bdc625a2a251ac8273b09ed1d0d8b31f53173ca16b0ea3e55a6130ffaa16f5</sum>
        </package>
        <package name="osbuild-composer-worker" version="101.4" release="2.el8_10.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101.4-2.el8_10.alma.1.src.rpm">
          <filename>osbuild-composer-worker-101.4-2.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">410b7312eb5685e48b71f780107d35f1741ed6c2a13f6924221a10e591bb125a</sum>
        </package>
        <package name="osbuild-composer-core" version="101.4" release="2.el8_10.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101.4-2.el8_10.alma.1.src.rpm">
          <filename>osbuild-composer-core-101.4-2.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">58849c9be3549efa60a050f8ee89b6df92d7fc92963887a75d5fa302f0e5ef5e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:13830</id>
    <title>Important: dovecot security update</title>
    <issued date="2026-05-05 00:00:00"/>
    <updated date="2026-05-05 19:20:58"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dovecot security update</summary>
    <description>Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages.   

Security Fix(es):  

  * dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (CVE-2025-59032)
  * dovecot: denial of service via crafted message before authentication (CVE-2026-27858)
  * dovecot: denial of service via specially crafted NOOP command (CVE-2026-27857)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:13830" id="RHSA-2026:13830" type="rhsa" title="RHSA-2026:13830"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59032" id="CVE-2025-59032" type="cve" title="CVE-2025-59032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27857" id="CVE-2026-27857" type="cve" title="CVE-2026-27857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27858" id="CVE-2026-27858" type="cve" title="CVE-2026-27858"/>
      <reference href="https://bugzilla.redhat.com/2452172" id="2452172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452175" id="2452175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452179" id="2452179" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-13830.html" id="ALSA-2026:13830" type="self" title="ALSA-2026:13830"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="dovecot-pigeonhole" version="2.3.16" release="7.el8_10" epoch="1" arch="s390x" src="dovecot-2.3.16-7.el8_10.src.rpm">
          <filename>dovecot-pigeonhole-2.3.16-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">707c42d5cd48c0d9a6246000359d1c58dbb16d3e10c88b902c762f57f3f78690</sum>
        </package>
        <package name="dovecot-mysql" version="2.3.16" release="7.el8_10" epoch="1" arch="s390x" src="dovecot-2.3.16-7.el8_10.src.rpm">
          <filename>dovecot-mysql-2.3.16-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">cfb8b833c12b71103a221411a7b403cae79cf81f5842aaccc2202a14d9f0fbf3</sum>
        </package>
        <package name="dovecot-pgsql" version="2.3.16" release="7.el8_10" epoch="1" arch="s390x" src="dovecot-2.3.16-7.el8_10.src.rpm">
          <filename>dovecot-pgsql-2.3.16-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">e8ba1daf69c842b357ea12e23ca5f01107ac13136ff01d338fe1e75ab9c9b52b</sum>
        </package>
        <package name="dovecot" version="2.3.16" release="7.el8_10" epoch="1" arch="s390x" src="dovecot-2.3.16-7.el8_10.src.rpm">
          <filename>dovecot-2.3.16-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">ea36f76f08640ced1768ffb9d9a77f1f13de382f15d9a00ee82e028304268c36</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:14087</id>
    <title>Moderate: libsoup security update</title>
    <issued date="2026-05-06 00:00:00"/>
    <updated date="2026-05-07 11:43:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libsoup security update</summary>
    <description>The libsoup packages provide an HTTP client and server library for GNOME.  

Security Fix(es):  

  * libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment (CVE-2026-5119)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:14087" id="RHSA-2026:14087" type="rhsa" title="RHSA-2026:14087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5119" id="CVE-2026-5119" type="cve" title="CVE-2026-5119"/>
      <reference href="https://bugzilla.redhat.com/2452932" id="2452932" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-14087.html" id="ALSA-2026:14087" type="self" title="ALSA-2026:14087"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libsoup-devel" version="2.62.3" release="14.el8_10" epoch="0" arch="s390x" src="libsoup-2.62.3-14.el8_10.src.rpm">
          <filename>libsoup-devel-2.62.3-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">afc1ade0441fbb5a95724a33c4a932ba42282afc5666807147e71d6a23f02e81</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1412</id>
    <title>Important: php:8.2 security update</title>
    <issued date="2026-01-27 00:00:00"/>
    <updated date="2026-02-02 11:16:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>php:8.2 security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  

Security Fix(es):  

  * php: pgsql extension does not check for errors during escaping (CVE-2025-1735)
  * php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix (CVE-2025-6491)
  * php: PHP Hostname Null Character Vulnerability (CVE-2025-1220)
  * php: heap-based buffer overflow in array_merge() (CVE-2025-14178)
  * php: PHP: Information disclosure via getimagesize() function when reading multi-chunk images (CVE-2025-14177)
  * php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement (CVE-2025-14180)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1412" id="RHSA-2026:1412" type="rhsa" title="RHSA-2026:1412"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1220" id="CVE-2025-1220" type="cve" title="CVE-2025-1220"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14177" id="CVE-2025-14177" type="cve" title="CVE-2025-14177"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14178" id="CVE-2025-14178" type="cve" title="CVE-2025-14178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14180" id="CVE-2025-14180" type="cve" title="CVE-2025-14180"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1735" id="CVE-2025-1735" type="cve" title="CVE-2025-1735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6491" id="CVE-2025-6491" type="cve" title="CVE-2025-6491"/>
      <reference href="https://bugzilla.redhat.com/2378689" id="2378689" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2378690" id="2378690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379792" id="2379792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2425625" id="2425625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2425626" id="2425626" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2425627" id="2425627" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-1412.html" id="ALSA-2026:1412" type="self" title="ALSA-2026:1412"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="php" stream="8.2" version="8100020240411103139" context="eb0869e2" arch="s390x"/>
        <package name="php-xml" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-xml-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">03582f7a1e7dc9f84ebdf0a194ed3711b21336de4576c717448741ac780e7bf8</sum>
        </package>
        <package name="php-soap" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-soap-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">0846c30bd22a562ffd3b39ea09a3f3cf145bc0fac6f4449b8ede8842f5bb5085</sum>
        </package>
        <package name="php-pecl-rrd" version="2.0.3" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="php-pecl-rrd-2.0.3-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pecl-rrd-2.0.3-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">093a9af91b3963aeb6939d457d8552f7939985a934a7d29fc26882787160c0a4</sum>
        </package>
        <package name="php-mbstring" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-mbstring-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">0bc2fb2696d226001c3ce03d24ce9747d474dfadeff41ab2fd0e694a9cd30f3b</sum>
        </package>
        <package name="php-pdo" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-pdo-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">0f7efda543766df5bb3049d397b197711a4b5a81c1ca0c477110a956b95c39c7</sum>
        </package>
        <package name="php-cli" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-cli-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">13604bda8f7f7cf9973ff72d31a87b51cfc2b0eb6752f108084a7fa32874f51a</sum>
        </package>
        <package name="php-devel" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-devel-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">14bf5c68bbf01f59a5fcb5abc6ddf7323f0103140506d4c271e60797a5f59983</sum>
        </package>
        <package name="php-common" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-common-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">1c943cd9ec84783ea6b4cc087f04554a62359a0fce9312d252bae4e5f2336535</sum>
        </package>
        <package name="apcu-panel" version="5.1.23" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="noarch" src="php-pecl-apcu-5.1.23-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>apcu-panel-5.1.23-1.module_el8.10.0+3796+30ed3ef7.noarch.rpm</filename>
          <sum type="sha256">1deada493d8257042f0097d5ac685473d9995b4500854e4c6a0e2ac9a175fa04</sum>
        </package>
        <package name="php-pecl-apcu-devel" version="5.1.23" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.23-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pecl-apcu-devel-5.1.23-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">2b18052e97292f4a7381dcbb7589c87b1e6fb49d93c19c334bcf52bb6ed3b955</sum>
        </package>
        <package name="php-gmp" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-gmp-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">2b301ef0f90227a84e48ac093e34cbad4f48bea155a13b005234221409bb9580</sum>
        </package>
        <package name="php-fpm" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-fpm-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">38b6fa700b413c9ac4534441e83f96880a07d868ef69036fe2b5aa2857bb48ea</sum>
        </package>
        <package name="php-process" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-process-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">491d70133a8ab1bdaa45778229547705193b43cc99c1c6e0fa556ab18e99070a</sum>
        </package>
        <package name="php-dbg" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-dbg-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">4e735ec1a47a3d22803c8c75a426435d4e24b85ac8408302d54f60968c50fe36</sum>
        </package>
        <package name="php-gd" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-gd-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">50c89e638d1e3c1971f973a66c920bead7bd1044b572424c62869ec2eb67e007</sum>
        </package>
        <package name="libzip-devel" version="1.7.3" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="libzip-1.7.3-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>libzip-devel-1.7.3-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">5ea1e67460a84c07adc7d61cca9fc45bb50b3184cc7d063c4fc9658971b6f8d1</sum>
        </package>
        <package name="php-ffi" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-ffi-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">65622a3442af341d621fb381e5f14f4bc2fded3cb91ad2578d739f04771838d2</sum>
        </package>
        <package name="php-opcache" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-opcache-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">6b19d9ea36c418e8c0ff34f36d1cfc0d06111a2ce089e1347ea1811e52aaa55f</sum>
        </package>
        <package name="libzip-tools" version="1.7.3" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="libzip-1.7.3-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>libzip-tools-1.7.3-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">7374f8cbd2e20ece40e87c7aae7e84b9843a986a938e16d51ec180333d948002</sum>
        </package>
        <package name="php-enchant" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-enchant-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">7539de4c9aedf5f5de3fd7b55c27db87527dba35ce9d8d118c7498f0464ee3c2</sum>
        </package>
        <package name="php-odbc" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-odbc-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">7dacbc348afd429b38719b314dc2894215a498d6ca1f7dd5ecdd7aeefddc5507</sum>
        </package>
        <package name="php-pecl-xdebug3" version="3.2.2" release="2.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="php-pecl-xdebug3-3.2.2-2.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pecl-xdebug3-3.2.2-2.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">80da4e7cbeb2b5e3b6bf6e9dacd2e33e570fecdd8646fcd94fbfb2573e17a172</sum>
        </package>
        <package name="php-dba" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-dba-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">a9a6804e268aafdb2ab1e10dd93b1b44ff6b5be86dff1af32c814e643048775b</sum>
        </package>
        <package name="php" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">b2f2c5847aa0ee2be9bcb809f7222bbe4c33a79f98eb96c27dd291cb8ceae89a</sum>
        </package>
        <package name="php-pgsql" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-pgsql-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">b3590f70bfcf84fe0117cbeaad1e9014e99e03a371fa04bb3b186ac44ed37b25</sum>
        </package>
        <package name="php-pear" version="1.10.14" release="1.module_el8.10.0+3796+30ed3ef7" epoch="1" arch="noarch" src="php-pear-1.10.14-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pear-1.10.14-1.module_el8.10.0+3796+30ed3ef7.noarch.rpm</filename>
          <sum type="sha256">b77d08e8c3d38704e98139a7653cc3657d21f49aed4c245f85193ad875e74825</sum>
        </package>
        <package name="php-bcmath" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-bcmath-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">c2a26e6212474a1384b127c86722695cf3f54b30e1583024f7f01fc690d13e35</sum>
        </package>
        <package name="php-pecl-apcu" version="5.1.23" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.23-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pecl-apcu-5.1.23-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">c4d4948fd8c0bbfed5894ae768adbe43b853cd5bed8c3abc67142f6731c57e79</sum>
        </package>
        <package name="libzip" version="1.7.3" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="libzip-1.7.3-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>libzip-1.7.3-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">cff9d04f58fcb8d7545231b9d9ec3e446a7db9b61ccdb40778c605e752aa4bb2</sum>
        </package>
        <package name="php-ldap" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-ldap-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">d33fce9c5bac8f3858a0b41155c3e15ba5cbeffd45e25a5fed695dce5eeab011</sum>
        </package>
        <package name="php-intl" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-intl-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">dd5879dec57e2c33c4208c88e691638ccaaa8368180c1a54de50b380610d1d9d</sum>
        </package>
        <package name="php-mysqlnd" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-mysqlnd-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">e48442c6b46efe8e962e3aa75a5c8009da4bc670a530bb913cd07068c92d9633</sum>
        </package>
        <package name="php-snmp" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-snmp-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">e5d8e1b5cd5aebdc9720d72ea0d9bd4e410e51e3ab10ee0c282ba941f336c1ee</sum>
        </package>
        <package name="php-pecl-zip" version="1.22.3" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="php-pecl-zip-1.22.3-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pecl-zip-1.22.3-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">e9fc70bd5243e8627c19553ca909b059905ce54432be8d736d1a7f39e1e0a41b</sum>
        </package>
        <package name="php-embedded" version="8.2.30" release="1.module_el8.10.0+4108+cff35472" epoch="0" arch="s390x" src="php-8.2.30-1.module_el8.10.0+4108+cff35472.src.rpm">
          <filename>php-embedded-8.2.30-1.module_el8.10.0+4108+cff35472.s390x.rpm</filename>
          <sum type="sha256">ffb53be504b847251e36f802232054b7f6474007e2ff9841d9e9817a8e40dfd2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1518</id>
    <title>Important: grafana-pcp security update</title>
    <issued date="2026-01-28 00:00:00"/>
    <updated date="2026-01-29 12:32:40"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana-pcp security update</summary>
    <description>The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.  

Security Fix(es):  

  * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1518" id="RHSA-2026:1518" type="rhsa" title="RHSA-2026:1518"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61729" id="CVE-2025-61729" type="cve" title="CVE-2025-61729"/>
      <reference href="https://bugzilla.redhat.com/2418462" id="2418462" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-1518.html" id="ALSA-2026:1518" type="self" title="ALSA-2026:1518"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="grafana-pcp" version="5.1.1" release="11.el8_10" epoch="0" arch="s390x" src="grafana-pcp-5.1.1-11.el8_10.src.rpm">
          <filename>grafana-pcp-5.1.1-11.el8_10.s390x.rpm</filename>
          <sum type="sha256">19e004dd1fc377c6c7c04b273001b980692452d6309829176ef096c85933c1bc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1574</id>
    <title>Important: gimp:2.8 security update</title>
    <issued date="2026-01-29 00:00:00"/>
    <updated date="2026-01-29 14:07:35"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gimp:2.8 security update</summary>
    <description>The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.  

Security Fix(es):  

  * gimp: GIMP: Remote Code Execution via PNM file parsing integer overflow (CVE-2025-14422)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1574" id="RHSA-2026:1574" type="rhsa" title="RHSA-2026:1574"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14422" id="CVE-2025-14422" type="cve" title="CVE-2025-14422"/>
      <reference href="https://bugzilla.redhat.com/2424766" id="2424766" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-1574.html" id="ALSA-2026:1574" type="self" title="ALSA-2026:1574"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="gimp" stream="2.8" version="8100020250128092246" context="77fc8825" arch="s390x"/>
        <package name="pygobject2-codegen" version="2.28.7" release="5.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>pygobject2-codegen-2.28.7-5.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">1a42f4acacfe6991c3ea72ee10bdbe8bb963fe6e94e725c0c6cc5162d35f2e55</sum>
        </package>
        <package name="gimp-devel" version="2.8.22" release="26.module_el8.10.0+4109+804f132c.4" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+4109+804f132c.4.src.rpm">
          <filename>gimp-devel-2.8.22-26.module_el8.10.0+4109+804f132c.4.s390x.rpm</filename>
          <sum type="sha256">3d2ca07d4ee2127752595f4604beab6d512702788500fb3121bee4ec47936105</sum>
        </package>
        <package name="pygtk2-devel" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="s390x" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-devel-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">42ea8b58abfff83cebc7a09a7f6f264b168a95782decbb03b4fcfef37fd7c062</sum>
        </package>
        <package name="pygtk2" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="s390x" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">43c790ef899908821a64cfad4af33097d1a9d9351a75d63d45e4363e0d91eec8</sum>
        </package>
        <package name="gimp-devel-tools" version="2.8.22" release="26.module_el8.10.0+4109+804f132c.4" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+4109+804f132c.4.src.rpm">
          <filename>gimp-devel-tools-2.8.22-26.module_el8.10.0+4109+804f132c.4.s390x.rpm</filename>
          <sum type="sha256">45595c63f6f5a279ba4786311f735f19ccb8942e1420daa869d973de2cffa78d</sum>
        </package>
        <package name="pygobject2-doc" version="2.28.7" release="5.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>pygobject2-doc-2.28.7-5.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">5104a2191c14aaf70d6f3d9ebf6374c054a182a2a7b0f63f32c1adc918ad4111</sum>
        </package>
        <package name="pygobject2-devel" version="2.28.7" release="5.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>pygobject2-devel-2.28.7-5.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">753e845a487e2072a62bfa272332266761c207df3360102c42900695a0fe3d32</sum>
        </package>
        <package name="pygtk2-codegen" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="s390x" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-codegen-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">91402fea22feef9d15400358a93ae5d2ff0b95b332edfbae2245ac5846848476</sum>
        </package>
        <package name="gimp" version="2.8.22" release="26.module_el8.10.0+4109+804f132c.4" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+4109+804f132c.4.src.rpm">
          <filename>gimp-2.8.22-26.module_el8.10.0+4109+804f132c.4.s390x.rpm</filename>
          <sum type="sha256">b98e5a9ec97ca936c5cec92d9c8f50071e3ddd8dd8debdc683607705842a6527</sum>
        </package>
        <package name="gimp-libs" version="2.8.22" release="26.module_el8.10.0+4109+804f132c.4" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+4109+804f132c.4.src.rpm">
          <filename>gimp-libs-2.8.22-26.module_el8.10.0+4109+804f132c.4.s390x.rpm</filename>
          <sum type="sha256">b99bf4e6b1dbb729471c5d422fb57af022c0aa765ffeb9ef391e29bbc0429230</sum>
        </package>
        <package name="pygtk2-doc" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="noarch" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-doc-2.24.0-25.module_el8.9.0+3725+d1441900.noarch.rpm</filename>
          <sum type="sha256">bec32577bca5233d67a34af1ef0ae0d1ca15f8896607b22d94cc18d8d4c93d70</sum>
        </package>
        <package name="pygobject2" version="2.28.7" release="5.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">d9c541afe98fa2f9c4fb770991f7c15dae66b0b36616ff2b94ae7c824b1b0e84</sum>
        </package>
        <package name="python2-cairo" version="1.16.3" release="7.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="python2-pycairo-1.16.3-7.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>python2-cairo-1.16.3-7.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">e015ce54a4c31a35c21aa3d77fd6d10674ff10a9058f1dd194a9167328d8a0d9</sum>
        </package>
        <package name="python2-cairo-devel" version="1.16.3" release="7.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="python2-pycairo-1.16.3-7.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>python2-cairo-devel-1.16.3-7.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">ecc0dda98450cefa8281d354f444d8e91876cc91f2cf6c8fd8ecf460a4dbdc8b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1592</id>
    <title>Moderate: iperf3 security update</title>
    <issued date="2026-01-29 00:00:00"/>
    <updated date="2026-02-02 11:56:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>iperf3 security update</summary>
    <description>Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.  

Security Fix(es):  

  * iperf3: iperf Heap Buffer Overflow (CVE-2025-54349)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1592" id="RHSA-2026:1592" type="rhsa" title="RHSA-2026:1592"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-54349" id="CVE-2025-54349" type="cve" title="CVE-2025-54349"/>
      <reference href="https://bugzilla.redhat.com/2386151" id="2386151" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-1592.html" id="ALSA-2026:1592" type="self" title="ALSA-2026:1592"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="iperf3" version="3.5" release="12.el8_10" epoch="0" arch="s390x" src="iperf3-3.5-12.el8_10.src.rpm">
          <filename>iperf3-3.5-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">a6fce104490084bd33e14c800d8e169f7ddb5189bd61ee5170f313ce95dd7af8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:16019</id>
    <title>Moderate: freerdp security update</title>
    <issued date="2026-05-11 00:00:00"/>
    <updated date="2026-05-11 18:08:25"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP: Denial of service due to use-after-free vulnerability (CVE-2026-25952)
  * freerdp: FreeRDP: Denial of Service via double free vulnerability during disconnect (CVE-2026-26986)
  * freerdp: FreeRDP: Denial of Service via endless blocking loop in Stream_EnsureCapacity (CVE-2026-27951)
  * freerdp: FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId (CVE-2026-29775)
  * freerdp: FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks (CVE-2026-31885)
  * freerdp: FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0 (CVE-2026-31884)
  * freerdp: FreeRDP: Denial of Service via crafted audio data in RDP (CVE-2026-31883)
  * FreeRDP: FreeRDP: Information disclosure via heap memory out of bounds read (CVE-2026-33985)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:16019" id="RHSA-2026:16019" type="rhsa" title="RHSA-2026:16019"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25952" id="CVE-2026-25952" type="cve" title="CVE-2026-25952"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26986" id="CVE-2026-26986" type="cve" title="CVE-2026-26986"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27951" id="CVE-2026-27951" type="cve" title="CVE-2026-27951"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-29775" id="CVE-2026-29775" type="cve" title="CVE-2026-29775"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31883" id="CVE-2026-31883" type="cve" title="CVE-2026-31883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31884" id="CVE-2026-31884" type="cve" title="CVE-2026-31884"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31885" id="CVE-2026-31885" type="cve" title="CVE-2026-31885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33985" id="CVE-2026-33985" type="cve" title="CVE-2026-33985"/>
      <reference href="https://bugzilla.redhat.com/2442768" id="2442768" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442782" id="2442782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442783" id="2442783" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447379" id="2447379" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447383" id="2447383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447385" id="2447385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447386" id="2447386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453217" id="2453217" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-16019.html" id="ALSA-2026:16019" type="self" title="ALSA-2026:16019"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="freerdp-libs" version="2.11.7" release="9.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-9.el8_10.src.rpm">
          <filename>freerdp-libs-2.11.7-9.el8_10.s390x.rpm</filename>
          <sum type="sha256">34c5b5a9711c699c60a10632c4b9b99a8872886a2e537f72b12c62fb3e8f9d0c</sum>
        </package>
        <package name="libwinpr" version="2.11.7" release="9.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-9.el8_10.src.rpm">
          <filename>libwinpr-2.11.7-9.el8_10.s390x.rpm</filename>
          <sum type="sha256">4aefe20ee1a285bd12997dc6ad9b58ca15154433157ce981ea8bd524fe449e81</sum>
        </package>
        <package name="freerdp" version="2.11.7" release="9.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-9.el8_10.src.rpm">
          <filename>freerdp-2.11.7-9.el8_10.s390x.rpm</filename>
          <sum type="sha256">5ad314cc3b9f7bc5c3799a31ab0002afe683d4e1bfc706aa6182469b50254e94</sum>
        </package>
        <package name="libwinpr-devel" version="2.11.7" release="9.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-9.el8_10.src.rpm">
          <filename>libwinpr-devel-2.11.7-9.el8_10.s390x.rpm</filename>
          <sum type="sha256">91086844717d5f177c00067beec1b292d2c0234cc08e115a8e7196b309b72e53</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:16055</id>
    <title>Important: libtiff security update</title>
    <issued date="2026-05-11 00:00:00"/>
    <updated date="2026-05-12 08:34:30"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:16055" id="RHSA-2026:16055" type="rhsa" title="RHSA-2026:16055"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4775" id="CVE-2026-4775" type="cve" title="CVE-2026-4775"/>
      <reference href="https://bugzilla.redhat.com/2450768" id="2450768" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-16055.html" id="ALSA-2026:16055" type="self" title="ALSA-2026:16055"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libtiff" version="4.0.9" release="37.el8_10" epoch="0" arch="s390x" src="libtiff-4.0.9-37.el8_10.src.rpm">
          <filename>libtiff-4.0.9-37.el8_10.s390x.rpm</filename>
          <sum type="sha256">1f132c44fcd89bda168f7617d76f773f954a8b8974249cd80bd52bcc6ac9d532</sum>
        </package>
        <package name="libtiff-devel" version="4.0.9" release="37.el8_10" epoch="0" arch="s390x" src="libtiff-4.0.9-37.el8_10.src.rpm">
          <filename>libtiff-devel-4.0.9-37.el8_10.s390x.rpm</filename>
          <sum type="sha256">f6c02ca3459f23a23c77c8a15ac9007531b741c5cbe8c5088fa4f82aca9a1218</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:16252</id>
    <title>Important: jq security update</title>
    <issued date="2026-05-12 00:00:00"/>
    <updated date="2026-05-13 08:31:07"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>jq security update</summary>
    <description>jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text.  

Security Fix(es):  

  * jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers (CVE-2026-39979)
  * jq: jq: Denial of Service via crafted JSON object causing hash collisions (CVE-2026-40164)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:16252" id="RHSA-2026:16252" type="rhsa" title="RHSA-2026:16252"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-39979" id="CVE-2026-39979" type="cve" title="CVE-2026-39979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40164" id="CVE-2026-40164" type="cve" title="CVE-2026-40164"/>
      <reference href="https://bugzilla.redhat.com/2458077" id="2458077" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458084" id="2458084" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-16252.html" id="ALSA-2026:16252" type="self" title="ALSA-2026:16252"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="jq" version="1.6" release="12.el8_10" epoch="0" arch="s390x" src="jq-1.6-12.el8_10.src.rpm">
          <filename>jq-1.6-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">1737ed6d8d40a4305892468366d1e5c12b7af96f6826cb63c04016e949f8560f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1631</id>
    <title>Moderate: python3 security update</title>
    <issued date="2026-02-02 00:00:00"/>
    <updated date="2026-02-02 12:08:16"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1631" id="RHSA-2026:1631" type="rhsa" title="RHSA-2026:1631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12084" id="CVE-2025-12084" type="cve" title="CVE-2025-12084"/>
      <reference href="https://bugzilla.redhat.com/2418655" id="2418655" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-1631.html" id="ALSA-2026:1631" type="self" title="ALSA-2026:1631"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="platform-python-devel" version="3.6.8" release="72.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-72.el8_10.alma.1.src.rpm">
          <filename>platform-python-devel-3.6.8-72.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">0a753e0bccb8f4230e904d18a5e31c2bbdfe954a52fe0c9c5c3060183a2553d1</sum>
        </package>
        <package name="python3-tkinter" version="3.6.8" release="72.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-72.el8_10.alma.1.src.rpm">
          <filename>python3-tkinter-3.6.8-72.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">11466167f56c84d1c3167a8e4ea572ce9c6d38d58c56166d2b78085b6beb2c60</sum>
        </package>
        <package name="platform-python-debug" version="3.6.8" release="72.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-72.el8_10.alma.1.src.rpm">
          <filename>platform-python-debug-3.6.8-72.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">7b3144db2964554df5074034532a67682c4b5f43b737d00c26a9998965513ccd</sum>
        </package>
        <package name="python3-idle" version="3.6.8" release="72.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-72.el8_10.alma.1.src.rpm">
          <filename>python3-idle-3.6.8-72.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">95ada6f8b80763d17977944917b04bd85364f68d368f47074130e3e1aa096944</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:16875</id>
    <title>Important: git-lfs security update</title>
    <issued date="2026-05-13 00:00:00"/>
    <updated date="2026-05-13 09:18:42"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git-lfs security update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.  

Security Fix(es):  

  * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
  * golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282)
  * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
  * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:16875" id="RHSA-2026:16875" type="rhsa" title="RHSA-2026:16875"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25679" id="CVE-2026-25679" type="cve" title="CVE-2026-25679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32280" id="CVE-2026-32280" type="cve" title="CVE-2026-32280"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32282" id="CVE-2026-32282" type="cve" title="CVE-2026-32282"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32283" id="CVE-2026-32283" type="cve" title="CVE-2026-32283"/>
      <reference href="https://bugzilla.redhat.com/2445356" id="2445356" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2456336" id="2456336" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2456338" id="2456338" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2456339" id="2456339" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-16875.html" id="ALSA-2026:16875" type="self" title="ALSA-2026:16875"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="git-lfs" version="3.4.1" release="10.el8_10" epoch="0" arch="s390x" src="git-lfs-3.4.1-10.el8_10.src.rpm">
          <filename>git-lfs-3.4.1-10.el8_10.s390x.rpm</filename>
          <sum type="sha256">ea823ae08d389d197771aac180143e0c492d710e6714cc190c788bc26441967c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:17533</id>
    <title>Important: gimp:2.8 security update</title>
    <issued date="2026-05-14 00:00:00"/>
    <updated date="2026-05-15 13:18:04"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gimp:2.8 security update</summary>
    <description>The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.  

Security Fix(es):  

  * gimp: GIMP:Memory disclosure and denial of service via specially crafted PCX image (CVE-2026-4887)
  * gimp: GIMP: Remote Code Execution via XPM File Parsing Integer Overflow (CVE-2026-4154)
  * GIMP: GIMP: Arbitrary code execution via specially crafted PSD file (CVE-2026-4150)
  * gimp: GIMP: Remote Code Execution via PSP file parsing (CVE-2026-4153)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:17533" id="RHSA-2026:17533" type="rhsa" title="RHSA-2026:17533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4150" id="CVE-2026-4150" type="cve" title="CVE-2026-4150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4153" id="CVE-2026-4153" type="cve" title="CVE-2026-4153"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4154" id="CVE-2026-4154" type="cve" title="CVE-2026-4154"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4887" id="CVE-2026-4887" type="cve" title="CVE-2026-4887"/>
      <reference href="https://bugzilla.redhat.com/2451669" id="2451669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457530" id="2457530" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457535" id="2457535" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457536" id="2457536" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-17533.html" id="ALSA-2026:17533" type="self" title="ALSA-2026:17533"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="gimp" stream="2.8" version="8100020260514124118" context="77fc8825" arch="s390x"/>
        <package name="pygtk2-devel" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="s390x" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-devel-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">42ea8b58abfff83cebc7a09a7f6f264b168a95782decbb03b4fcfef37fd7c062</sum>
        </package>
        <package name="pygtk2" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="s390x" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">43c790ef899908821a64cfad4af33097d1a9d9351a75d63d45e4363e0d91eec8</sum>
        </package>
        <package name="pygobject2-devel" version="2.28.7" release="5.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>pygobject2-devel-2.28.7-5.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">753e845a487e2072a62bfa272332266761c207df3360102c42900695a0fe3d32</sum>
        </package>
        <package name="pygtk2-codegen" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="s390x" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-codegen-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">91402fea22feef9d15400358a93ae5d2ff0b95b332edfbae2245ac5846848476</sum>
        </package>
        <package name="gimp" version="2.8.22" release="26.module_el8.10.0+4175+c208a0bf.6" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+4175+c208a0bf.6.src.rpm">
          <filename>gimp-2.8.22-26.module_el8.10.0+4175+c208a0bf.6.s390x.rpm</filename>
          <sum type="sha256">aa8f04ad3557ae2f4769a95dd9c33a5bc171b3d9bc5a91fcc9bfb13d0f55c7e9</sum>
        </package>
        <package name="pygtk2-doc" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="noarch" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-doc-2.24.0-25.module_el8.9.0+3725+d1441900.noarch.rpm</filename>
          <sum type="sha256">bec32577bca5233d67a34af1ef0ae0d1ca15f8896607b22d94cc18d8d4c93d70</sum>
        </package>
        <package name="gimp-devel" version="2.8.22" release="26.module_el8.10.0+4175+c208a0bf.6" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+4175+c208a0bf.6.src.rpm">
          <filename>gimp-devel-2.8.22-26.module_el8.10.0+4175+c208a0bf.6.s390x.rpm</filename>
          <sum type="sha256">bee561d96dccde19cdaa31bf470b460472ebf90dcaab645ec47d2f4005624500</sum>
        </package>
        <package name="python2-cairo-devel" version="1.16.3" release="7.module_el8.10.0+4175+c208a0bf" epoch="0" arch="s390x" src="python2-pycairo-1.16.3-7.module_el8.10.0+4175+c208a0bf.src.rpm">
          <filename>python2-cairo-devel-1.16.3-7.module_el8.10.0+4175+c208a0bf.s390x.rpm</filename>
          <sum type="sha256">c03aa58a0606447844f42ce6aab06400156abb5a6686f9b9ebedbd6ef07d087e</sum>
        </package>
        <package name="pygobject2" version="2.28.7" release="5.module_el8.10.0+4175+c208a0bf" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+4175+c208a0bf.src.rpm">
          <filename>pygobject2-2.28.7-5.module_el8.10.0+4175+c208a0bf.s390x.rpm</filename>
          <sum type="sha256">c665ed009b7063ee08c77f4dd724e2ecbbd853d4a860fd1bd168a4a48a1f2652</sum>
        </package>
        <package name="gimp-devel-tools" version="2.8.22" release="26.module_el8.10.0+4175+c208a0bf.6" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+4175+c208a0bf.6.src.rpm">
          <filename>gimp-devel-tools-2.8.22-26.module_el8.10.0+4175+c208a0bf.6.s390x.rpm</filename>
          <sum type="sha256">ceb5350b47ea66bc7b60a95d3e24a4e76b7906f026294bb813f2126fa14206f0</sum>
        </package>
        <package name="gimp-libs" version="2.8.22" release="26.module_el8.10.0+4175+c208a0bf.6" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+4175+c208a0bf.6.src.rpm">
          <filename>gimp-libs-2.8.22-26.module_el8.10.0+4175+c208a0bf.6.s390x.rpm</filename>
          <sum type="sha256">d535420d97ec82a1349ae34cdb3e3f57c46ead955ec6a7e7f5816e336011c871</sum>
        </package>
        <package name="pygobject2-codegen" version="2.28.7" release="5.module_el8.10.0+4137+2d0d25cf" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+4137+2d0d25cf.src.rpm">
          <filename>pygobject2-codegen-2.28.7-5.module_el8.10.0+4137+2d0d25cf.s390x.rpm</filename>
          <sum type="sha256">d8941833e5dc0c9e073b3e170c25253fc75cf9b8d1a086f0be5a8d90fbf63885</sum>
        </package>
        <package name="python2-cairo" version="1.16.3" release="7.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="python2-pycairo-1.16.3-7.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>python2-cairo-1.16.3-7.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">e015ce54a4c31a35c21aa3d77fd6d10674ff10a9058f1dd194a9167328d8a0d9</sum>
        </package>
        <package name="pygobject2-doc" version="2.28.7" release="5.module_el8.10.0+4175+c208a0bf" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+4175+c208a0bf.src.rpm">
          <filename>pygobject2-doc-2.28.7-5.module_el8.10.0+4175+c208a0bf.s390x.rpm</filename>
          <sum type="sha256">e5682c3c20339845350bc9683198a75526c4d80d841d5c59bd21ad4cc9fe35cc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:18041</id>
    <title>Critical: nginx:1.24 security update</title>
    <issued date="2026-05-18 00:00:00"/>
    <updated date="2026-05-19 14:32:34"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>nginx:1.24 security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:18041" id="RHSA-2026:18041" type="rhsa" title="RHSA-2026:18041"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42945" id="CVE-2026-42945" type="cve" title="CVE-2026-42945"/>
      <reference href="https://bugzilla.redhat.com/2477116" id="2477116" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-18041.html" id="ALSA-2026:18041" type="self" title="ALSA-2026:18041"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="nginx" stream="1.24" version="8100020260519092035" context="9edba152" arch="s390x"/>
        <package name="nginx-mod-http-image-filter" version="1.24.0" release="3.module_el8.10.0+4182+ca797750.1.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1.src.rpm">
          <filename>nginx-mod-http-image-filter-1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">24f6984c0ae83c95535caa3880364c5c9cf2f2edf967ad12f6c9e40f9b1432f2</sum>
        </package>
        <package name="nginx-mod-devel" version="1.24.0" release="3.module_el8.10.0+4182+ca797750.1.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1.src.rpm">
          <filename>nginx-mod-devel-1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">469027a874ccf48b8bda37e6c7690f85928a3dd8057e9e6b483d786b449b35fe</sum>
        </package>
        <package name="nginx-mod-http-xslt-filter" version="1.24.0" release="3.module_el8.10.0+4182+ca797750.1.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1.src.rpm">
          <filename>nginx-mod-http-xslt-filter-1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">49471f25f79f7f1c00ce31fd2eeb9439b0051a0cc1d82250e1a58a3dbdf0ebef</sum>
        </package>
        <package name="nginx-filesystem" version="1.24.0" release="3.module_el8.10.0+4182+ca797750.1.alma.1" epoch="1" arch="noarch" src="nginx-1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1.src.rpm">
          <filename>nginx-filesystem-1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">645940aa745e17b7bd3e81088c8191b7b6ddb231d0730f88a689f76057fd7ddd</sum>
        </package>
        <package name="nginx" version="1.24.0" release="3.module_el8.10.0+4182+ca797750.1.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1.src.rpm">
          <filename>nginx-1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">a30e2580660c63ba8e883896f043eada488e949b857906afc846256e65b2f7bb</sum>
        </package>
        <package name="nginx-mod-http-perl" version="1.24.0" release="3.module_el8.10.0+4182+ca797750.1.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1.src.rpm">
          <filename>nginx-mod-http-perl-1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">b145707c2903ffa8e824125938dbecc90bcadb0637077c17f45fb15b5e890b13</sum>
        </package>
        <package name="nginx-mod-mail" version="1.24.0" release="3.module_el8.10.0+4182+ca797750.1.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1.src.rpm">
          <filename>nginx-mod-mail-1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">bc190592c8d842ea2d0539ce3b963f7067fff34dc28ca50befe5fa7c3c3f7f2a</sum>
        </package>
        <package name="nginx-mod-stream" version="1.24.0" release="3.module_el8.10.0+4182+ca797750.1.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1.src.rpm">
          <filename>nginx-mod-stream-1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">d8eff99e1667ef577f25416876f8b8380c2a5cc8ae9380f53ec752647bd30637</sum>
        </package>
        <package name="nginx-all-modules" version="1.24.0" release="3.module_el8.10.0+4182+ca797750.1.alma.1" epoch="1" arch="noarch" src="nginx-1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1.src.rpm">
          <filename>nginx-all-modules-1.24.0-3.module_el8.10.0+4182+ca797750.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">efcd17aef1f04c56c13d62c8805d09c907c698e19e9414f2e3bb5b8f3a547457</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1852</id>
    <title>Moderate: util-linux security update</title>
    <issued date="2026-02-03 00:00:00"/>
    <updated date="2026-02-10 08:33:36"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>util-linux security update</summary>
    <description>The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program.  

Security Fix(es):  

  * util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames (CVE-2025-14104)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1852" id="RHSA-2026:1852" type="rhsa" title="RHSA-2026:1852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14104" id="CVE-2025-14104" type="cve" title="CVE-2025-14104"/>
      <reference href="https://bugzilla.redhat.com/2419369" id="2419369" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-1852.html" id="ALSA-2026:1852" type="self" title="ALSA-2026:1852"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3-libmount" version="2.32.1" release="48.el8_10" epoch="0" arch="s390x" src="util-linux-2.32.1-48.el8_10.src.rpm">
          <filename>python3-libmount-2.32.1-48.el8_10.s390x.rpm</filename>
          <sum type="sha256">649cc9d186127ad83ad5f51c6bb395fff4dc5f215180ca3b3f56faf39ad398f6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1906</id>
    <title>Important: fence-agents security update</title>
    <issued date="2026-02-04 00:00:00"/>
    <updated date="2026-02-10 08:07:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.   

Security Fix(es):  

  * pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1906" id="RHSA-2026:1906" type="rhsa" title="RHSA-2026:1906"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23490" id="CVE-2026-23490" type="cve" title="CVE-2026-23490"/>
      <reference href="https://bugzilla.redhat.com/2430472" id="2430472" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-1906.html" id="ALSA-2026:1906" type="self" title="ALSA-2026:1906"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="fence-agents-ibm-powervs" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-ibm-powervs-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">0160f6251d23a8db36dac45ea5dbbebaa6ee547d27ac9c52960933b72a83935b</sum>
        </package>
        <package name="fence-agents-vmware-soap" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-vmware-soap-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">03cbde979686b6f47656d7d98bd3b6041f2971a6bc8bf724bb1119a42d200522</sum>
        </package>
        <package name="fence-agents-hpblade" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-hpblade-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">0dc84477b71a9cb174353faec7daa723ad300b37ffeeb60d1e4ad1213f8047bf</sum>
        </package>
        <package name="fence-agents-emerson" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-emerson-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">0fce721cbdfaea0fa4c9429deccfedb6dcb59d3d81b35c4415cf4e130b59a3ca</sum>
        </package>
        <package name="fence-agents-common" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-common-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">2fca2b909931dfbbcf356b8b32ff84aadbc041b19db4e7e1db05e520768d022f</sum>
        </package>
        <package name="fence-agents-mpath" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-mpath-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">36db5f69c80ad4f3a3a715ae38cc155e31915e1da5ea94e1011baac594275ae9</sum>
        </package>
        <package name="fence-agents-kdump" version="4.2.1" release="129.el8_10.21" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-kdump-4.2.1-129.el8_10.21.s390x.rpm</filename>
          <sum type="sha256">38a6d14a9386bb4df7e964436630eb57ae742b6996d94fd021ffd4b0bab770c4</sum>
        </package>
        <package name="fence-agents-eps" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-eps-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">3d96bf1b044e723575936d7766ddd9669801214d167564fa80974aae71ee8b40</sum>
        </package>
        <package name="fence-agents-intelmodular" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-intelmodular-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">430300d3fd8f1d2c75bba205c0480972216f30bd310c29cc35c86fb90c4d897d</sum>
        </package>
        <package name="fence-agents-apc-snmp" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-apc-snmp-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">4c52f001edb9896dfe66597678f0be775a584e405b8d3214e7b9a2ec6110c146</sum>
        </package>
        <package name="fence-agents-redfish" version="4.2.1" release="129.el8_10.21" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-redfish-4.2.1-129.el8_10.21.s390x.rpm</filename>
          <sum type="sha256">55be3777f0f97b10e05ca188e0cb342502b685d0e219692487186080703e493d</sum>
        </package>
        <package name="fence-agents-cisco-mds" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-cisco-mds-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">62703ba68c1a33e2b8dce9b3abfaa0ea5fd9a148a63eeccb6c9f661fb6a8fdb9</sum>
        </package>
        <package name="fence-agents-wti" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-wti-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">75eb490507772d68ca19a9306c99bbfc2e05c1139d82165c06eff435a02bae35</sum>
        </package>
        <package name="fence-agents-ibm-vpc" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-ibm-vpc-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">7607bee9c5932b84fd5b2085dad3fd44332e81deed8c98487de1a4558283e57e</sum>
        </package>
        <package name="fence-agents-apc" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-apc-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">7c727719b8c526a8a03e87647c7611f66d64ca1d709c91121d5b97a55f10c592</sum>
        </package>
        <package name="fence-agents-lpar" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-lpar-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">82ff0a54f86548a9ed0130b782db7d26b3d7e2c2bde8196135cfab174ad7791e</sum>
        </package>
        <package name="fence-agents-eaton-snmp" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-eaton-snmp-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">830a564d9860af06f2a91e70254851c9f0d8a2d116845c659c74c983cbceed5a</sum>
        </package>
        <package name="fence-agents-rsb" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-rsb-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">8b50f689b34ac8b50417d219b020144e3972850435c19bc03622d79025e72cb1</sum>
        </package>
        <package name="fence-agents-ipdu" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-ipdu-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">980b67aa3bf7ea8022c090ca14ecd1893902107cc9d8c052584ea7a43d8905d9</sum>
        </package>
        <package name="fence-agents-bladecenter" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-bladecenter-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">9e9cec833c3f967e9d2a38ca7e66b90084979c0785ac1d919b2c6a85ee62d657</sum>
        </package>
        <package name="fence-agents-ifmib" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-ifmib-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">a3e9048e8806bd9498c3953bf67ab6da5862db9719aafba2ab1dd09ca2d44d09</sum>
        </package>
        <package name="fence-agents-rhevm" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-rhevm-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">a7272e319e195b28aa1c3061bec3f9452561f7f12850df4156f61b8d7ea3d7a1</sum>
        </package>
        <package name="fence-agents-zvm" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-zvm-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">aa33e42af193ded809e5aef77034d1f1e84bd6c08a6b972a67754b742f1b8957</sum>
        </package>
        <package name="fence-agents-brocade" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-brocade-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">b12a8b25ee020a70efc598719b463c58ee810e585ec16c0862a0c302f017e042</sum>
        </package>
        <package name="fence-agents-virsh" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-virsh-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">b94316961009a61a48d643c974d61ff10118272e0c3fd394dd24ee30aa412e4a</sum>
        </package>
        <package name="fence-agents-ilo-ssh" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-ilo-ssh-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">bc5a37d19642bf70b1ac0d7d3a75af5c8d7ba67c28d36f59799298bcc72a1a02</sum>
        </package>
        <package name="fence-agents-kubevirt" version="4.2.1" release="129.el8_10.21" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-kubevirt-4.2.1-129.el8_10.21.s390x.rpm</filename>
          <sum type="sha256">c1d5d0f77747032c6f682388c713fee376de6e1f174cdbd1a1a6717a5a46d9ff</sum>
        </package>
        <package name="fence-agents-drac5" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-drac5-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">c6f1f5c85d05fd9fe7962dcf05f2bf846d87d4a6eaf1ca14d38de0d0c9cb524a</sum>
        </package>
        <package name="fence-agents-sbd" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-sbd-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">cbe06f77e267fc190913a2e6870927da18807f4b9fb94922ecd611bca6378a07</sum>
        </package>
        <package name="fence-agents-cisco-ucs" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-cisco-ucs-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">cf35315bf6abc41b4acf95f5d740df8e570e6243c227a508c5ead53d95b50406</sum>
        </package>
        <package name="fence-agents-all" version="4.2.1" release="129.el8_10.21" epoch="0" arch="s390x" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-all-4.2.1-129.el8_10.21.s390x.rpm</filename>
          <sum type="sha256">d2d61bc61f4186053dd78458143fc883618f4cf89f224f0f81f589269225b6e8</sum>
        </package>
        <package name="fence-agents-vmware-rest" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-vmware-rest-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">d511984c8afe48eeb035ce77c15c1350b3b1df3c32c72ecb5d703e37d3411bb6</sum>
        </package>
        <package name="fence-agents-ilo2" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-ilo2-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">d6a400c0e105228f020322bc30f2b57214b85403857f9ee29749c51f578915fa</sum>
        </package>
        <package name="fence-agents-ilo-mp" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-ilo-mp-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">ddc49a2474223c5db13cc28ee5128943d5b85b84f12271d74d2665c9d9445079</sum>
        </package>
        <package name="fence-agents-scsi" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-scsi-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">e841768744342ac70f172643e4616002ad90a1d33a21eff0d09909054dd09df1</sum>
        </package>
        <package name="fence-agents-rsa" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-rsa-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">e9054c9cc37f6d24b1dcc88b385bc985c325fd75d37634724501bbfc6f3c6132</sum>
        </package>
        <package name="fence-agents-amt-ws" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-amt-ws-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">e95f7bf583bde4c1a0ecea2ea55c817ee70d3401ef824882fed2916228fda1c0</sum>
        </package>
        <package name="fence-agents-ilo-moonshot" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-ilo-moonshot-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">ed508a7b127a221971fb023ebc98de3c789ce6fe55db9fbac3265157776540e3</sum>
        </package>
        <package name="fence-agents-ibmblade" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-ibmblade-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">f6f9b01c6e2ea9e3ec70911b5187cafcd7fa81219e66766caf118915876d399d</sum>
        </package>
        <package name="fence-agents-heuristics-ping" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-heuristics-ping-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">f9882b0c3ffa7b8a43d6d13639a25d16b270137b9e3d71c2eeaec13b55222e79</sum>
        </package>
        <package name="fence-agents-ipmilan" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-ipmilan-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">ff110cbac5d665f5526de98e9ff170e80b312ef0ac0a6f86e003d6fc711e8c6b</sum>
        </package>
        <package name="fence-agents-compute" version="4.2.1" release="129.el8_10.21" epoch="0" arch="noarch" src="fence-agents-4.2.1-129.el8_10.21.src.rpm">
          <filename>fence-agents-compute-4.2.1-129.el8_10.21.noarch.rpm</filename>
          <sum type="sha256">ff27a1ec326874368d13409bacd77be0f01723b2f9c48a6d8c4857c4a4501e22</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19559</id>
    <title>Important: libsndfile security update</title>
    <issued date="2026-05-20 00:00:00"/>
    <updated date="2026-05-20 12:25:26"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsndfile security update</summary>
    <description>libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.   

Security Fix(es):  

  * libsndfile: integer overflow in ima_reader_init() (CVE-2026-37555)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19559" id="RHSA-2026:19559" type="rhsa" title="RHSA-2026:19559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-37555" id="CVE-2026-37555" type="cve" title="CVE-2026-37555"/>
      <reference href="https://bugzilla.redhat.com/2463856" id="2463856" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-19559.html" id="ALSA-2026:19559" type="self" title="ALSA-2026:19559"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libsndfile" version="1.0.28" release="17.el8_10" epoch="0" arch="s390x" src="libsndfile-1.0.28-17.el8_10.src.rpm">
          <filename>libsndfile-1.0.28-17.el8_10.s390x.rpm</filename>
          <sum type="sha256">06cb7b953514f488eee74dcd08d198b8c9e6ab383219a2f2df6525e6fe46e742</sum>
        </package>
        <package name="libsndfile-utils" version="1.0.28" release="17.el8_10" epoch="0" arch="s390x" src="libsndfile-1.0.28-17.el8_10.src.rpm">
          <filename>libsndfile-utils-1.0.28-17.el8_10.s390x.rpm</filename>
          <sum type="sha256">7095a3916591762f54db1c116fb1ae4429940d66a3ea1413b4c98be1a061586b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19588</id>
    <title>Important: firefox security update</title>
    <issued date="2026-05-20 00:00:00"/>
    <updated date="2026-05-21 13:26:43"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323)
  * firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component (CVE-2026-7320)
  * firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 (CVE-2026-7322)
  * firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-7321)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19588" id="RHSA-2026:19588" type="rhsa" title="RHSA-2026:19588"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-7320" id="CVE-2026-7320" type="cve" title="CVE-2026-7320"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-7321" id="CVE-2026-7321" type="cve" title="CVE-2026-7321"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-7322" id="CVE-2026-7322" type="cve" title="CVE-2026-7322"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-7323" id="CVE-2026-7323" type="cve" title="CVE-2026-7323"/>
      <reference href="https://bugzilla.redhat.com/2463481" id="2463481" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2463483" id="2463483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2463484" id="2463484" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2463485" id="2463485" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-19588.html" id="ALSA-2026:19588" type="self" title="ALSA-2026:19588"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="140.10.1" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-140.10.1-1.el8_10.alma.1.src.rpm">
          <filename>firefox-140.10.1-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">a91a0957df813c308cc1d63d5c1dac0517e66e3f9d9e666b4e2818a8d5c681dc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:20566</id>
    <title>Important: firefox security update</title>
    <issued date="2026-05-26 00:00:00"/>
    <updated date="2026-05-27 11:27:16"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: Other issue in the WebRTC component (CVE-2026-8094)
  * firefox: Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR 140.10.2 and Firefox 150.0.2 (CVE-2026-8092)
  * firefox: Use-after-free in the DOM: Networking component (CVE-2026-8090)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:20566" id="RHSA-2026:20566" type="rhsa" title="RHSA-2026:20566"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8090" id="CVE-2026-8090" type="cve" title="CVE-2026-8090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8092" id="CVE-2026-8092" type="cve" title="CVE-2026-8092"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8094" id="CVE-2026-8094" type="cve" title="CVE-2026-8094"/>
      <reference href="https://bugzilla.redhat.com/2467706" id="2467706" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467708" id="2467708" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467709" id="2467709" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-20566.html" id="ALSA-2026:20566" type="self" title="ALSA-2026:20566"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="140.10.2" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-140.10.2-1.el8_10.alma.1.src.rpm">
          <filename>firefox-140.10.2-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">24d9a59e758b9706bc1a336fcbfeba9e6129e34383aa6d3b4d16d491de219507</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:20585</id>
    <title>Important: compat-libtiff3 security update</title>
    <issued date="2026-05-26 00:00:00"/>
    <updated date="2026-05-26 10:05:38"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>compat-libtiff3 security update</summary>
    <description>The libtiff3 package provides libtiff 3, an older version of libtiff library for manipulating TIFF (Tagged Image File Format) image format files. This version should be used only if you are unable to use the current version of libtiff.  

Security Fix(es):  

  * libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:20585" id="RHSA-2026:20585" type="rhsa" title="RHSA-2026:20585"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4775" id="CVE-2026-4775" type="cve" title="CVE-2026-4775"/>
      <reference href="https://bugzilla.redhat.com/2450768" id="2450768" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-20585.html" id="ALSA-2026:20585" type="self" title="ALSA-2026:20585"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="compat-libtiff3" version="3.9.4" release="15.el8_10" epoch="0" arch="s390x" src="compat-libtiff3-3.9.4-15.el8_10.src.rpm">
          <filename>compat-libtiff3-3.9.4-15.el8_10.s390x.rpm</filename>
          <sum type="sha256">4b896c0a8f03a483519fcca76a9ac210fd4f13ff1ecfa1ec697f74e4864c5002</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:20586</id>
    <title>Important: thunderbird security update</title>
    <issued date="2026-05-26 00:00:00"/>
    <updated date="2026-05-26 08:27:20"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323)
  * firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component (CVE-2026-7320)
  * firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 (CVE-2026-7322)
  * firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-7321)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:20586" id="RHSA-2026:20586" type="rhsa" title="RHSA-2026:20586"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-7320" id="CVE-2026-7320" type="cve" title="CVE-2026-7320"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-7321" id="CVE-2026-7321" type="cve" title="CVE-2026-7321"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-7322" id="CVE-2026-7322" type="cve" title="CVE-2026-7322"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-7323" id="CVE-2026-7323" type="cve" title="CVE-2026-7323"/>
      <reference href="https://bugzilla.redhat.com/2463481" id="2463481" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2463483" id="2463483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2463484" id="2463484" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2463485" id="2463485" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-20586.html" id="ALSA-2026:20586" type="self" title="ALSA-2026:20586"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="140.10.1" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-140.10.1-1.el8_10.alma.1.src.rpm">
          <filename>thunderbird-140.10.1-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">f17cce01ea54bce826298a14efc33b3a5ddab93a14b77172bf780b1853e952eb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:20587</id>
    <title>Moderate: glibc security update</title>
    <issued date="2026-05-26 00:00:00"/>
    <updated date="2026-05-27 11:39:15"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: glibc: Denial of Service via iconv() function with specific character sets (CVE-2026-4046)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:20587" id="RHSA-2026:20587" type="rhsa" title="RHSA-2026:20587"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4046" id="CVE-2026-4046" type="cve" title="CVE-2026-4046"/>
      <reference href="https://bugzilla.redhat.com/2453117" id="2453117" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-20587.html" id="ALSA-2026:20587" type="self" title="ALSA-2026:20587"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="glibc-utils" version="2.28" release="251.el8_10.37" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.37.src.rpm">
          <filename>glibc-utils-2.28-251.el8_10.37.s390x.rpm</filename>
          <sum type="sha256">013e496c57ee2b57fa6b8b069c663955513a57fbf189d2970466dd6132e291fa</sum>
        </package>
        <package name="compat-libpthread-nonshared" version="2.28" release="251.el8_10.37" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.37.src.rpm">
          <filename>compat-libpthread-nonshared-2.28-251.el8_10.37.s390x.rpm</filename>
          <sum type="sha256">586022b6cc2dd83ddaa162c6fc058d8ed82cdbcf90bf3ea2beeceeda1ac4e5f1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:20589</id>
    <title>Important: dnsmasq security update</title>
    <issued date="2026-05-26 00:00:00"/>
    <updated date="2026-05-26 10:05:46"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dnsmasq security update</summary>
    <description>The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.  

Security Fix(es):  

  * dnsmasq: dnsmasq: heap buffer overflow in cache via NAME_ESCAPE expansion (CVE-2026-2291)
  * dnsmasq: NSEC bitmap parsing infinite loop (CVE-2026-4890)
  * dnsmasq: RRSIG rdlen underflow leading to heap OOB read (CVE-2026-4891)
  * dnsmasq: DHCPv6 CLID buffer overflow in helper process (CVE-2026-4892)
  * dnsmasq: Broken ECS source validation bypass (CVE-2026-4893)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:20589" id="RHSA-2026:20589" type="rhsa" title="RHSA-2026:20589"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2291" id="CVE-2026-2291" type="cve" title="CVE-2026-2291"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4890" id="CVE-2026-4890" type="cve" title="CVE-2026-4890"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4891" id="CVE-2026-4891" type="cve" title="CVE-2026-4891"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4892" id="CVE-2026-4892" type="cve" title="CVE-2026-4892"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4893" id="CVE-2026-4893" type="cve" title="CVE-2026-4893"/>
      <reference href="https://bugzilla.redhat.com/2439088" id="2439088" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458516" id="2458516" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458517" id="2458517" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458518" id="2458518" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458519" id="2458519" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-20589.html" id="ALSA-2026:20589" type="self" title="ALSA-2026:20589"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="dnsmasq-utils" version="2.79" release="36.el8_10" epoch="0" arch="s390x" src="dnsmasq-2.79-36.el8_10.src.rpm">
          <filename>dnsmasq-utils-2.79-36.el8_10.s390x.rpm</filename>
          <sum type="sha256">38f3371bb3f4acab605f2bdf9aadaaeb31578a36692af3df21e64e833ec96c2a</sum>
        </package>
        <package name="dnsmasq" version="2.79" release="36.el8_10" epoch="0" arch="s390x" src="dnsmasq-2.79-36.el8_10.src.rpm">
          <filename>dnsmasq-2.79-36.el8_10.s390x.rpm</filename>
          <sum type="sha256">4793aef1a9ac593a4e6116fa1c2287117030d110079c920b345b5aa712bc76f5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:20611</id>
    <title>Important: gnutls security update</title>
    <issued date="2026-05-26 00:00:00"/>
    <updated date="2026-05-27 11:27:43"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gnutls security update</summary>
    <description>Please update the gnutls packages to provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.  

Security Fix(es):  

  * gnutls: Add more checks to DTLS reassembly (CVE-2026-33846)
  * gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)
  * gnutls: Fix crashing on an underflow with a DTLS datagram (CVE-2026-33845)
  * gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)
  * gnutls: Fix case-sensitivity of domain name comparison in name constraints (CVE-2026-3833)
  * gnutls: Fix intersecting empty constraints (CVE-2026-42011)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:20611" id="RHSA-2026:20611" type="rhsa" title="RHSA-2026:20611"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33845" id="CVE-2026-33845" type="cve" title="CVE-2026-33845"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33846" id="CVE-2026-33846" type="cve" title="CVE-2026-33846"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3833" id="CVE-2026-3833" type="cve" title="CVE-2026-3833"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42009" id="CVE-2026-42009" type="cve" title="CVE-2026-42009"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42010" id="CVE-2026-42010" type="cve" title="CVE-2026-42010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42011" id="CVE-2026-42011" type="cve" title="CVE-2026-42011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42012" id="CVE-2026-42012" type="cve" title="CVE-2026-42012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42013" id="CVE-2026-42013" type="cve" title="CVE-2026-42013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42014" id="CVE-2026-42014" type="cve" title="CVE-2026-42014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42015" id="CVE-2026-42015" type="cve" title="CVE-2026-42015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5260" id="CVE-2026-5260" type="cve" title="CVE-2026-5260"/>
      <reference href="https://bugzilla.redhat.com/2445763" id="2445763" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450624" id="2450624" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450625" id="2450625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467279" id="2467279" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467289" id="2467289" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467437" id="2467437" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-20611.html" id="ALSA-2026:20611" type="self" title="ALSA-2026:20611"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="gnutls-devel" version="3.6.16" release="8.el8_10.6" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_10.6.src.rpm">
          <filename>gnutls-devel-3.6.16-8.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">353d4f33116054ff978cad997548bb9c3349ff1f96bd8f8032f22e8e56371331</sum>
        </package>
        <package name="gnutls-dane" version="3.6.16" release="8.el8_10.6" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_10.6.src.rpm">
          <filename>gnutls-dane-3.6.16-8.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">38d7886dc1bbdb8d4a2d03f7f38df42458670166347a5dcd9918f2ac38626719</sum>
        </package>
        <package name="gnutls-utils" version="3.6.16" release="8.el8_10.6" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_10.6.src.rpm">
          <filename>gnutls-utils-3.6.16-8.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">6881c8a9eb3ee86269c7a74bd41fdcbe16cc6995a8c9afef123afbbfc634b2a5</sum>
        </package>
        <package name="gnutls-c++" version="3.6.16" release="8.el8_10.6" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_10.6.src.rpm">
          <filename>gnutls-c++-3.6.16-8.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">fdd82fa1f0cd7c706820b97c16ed677b64df178dbdd8d9db4f71b0de591ab9d8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:20614</id>
    <title>Important: ruby:3.3 security update</title>
    <issued date="2026-05-26 00:00:00"/>
    <updated date="2026-05-27 11:37:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ruby:3.3 security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  

Security Fix(es):  

  * erb: ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:20614" id="RHSA-2026:20614" type="rhsa" title="RHSA-2026:20614"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-41316" id="CVE-2026-41316" type="cve" title="CVE-2026-41316"/>
      <reference href="https://bugzilla.redhat.com/2461369" id="2461369" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-20614.html" id="ALSA-2026:20614" type="self" title="ALSA-2026:20614"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="ruby" stream="3.3" version="8100020260526101822" context="9edba152" arch="s390x"/>
        <package name="rubygem-mysql2" version="0.5.5" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="s390x" src="rubygem-mysql2-0.5.5-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-mysql2-0.5.5-1.module_el8.10.0+3799+191214cc.s390x.rpm</filename>
          <sum type="sha256">0212e4bd0a248fdb4c10424d90e73d4c0400b209c24f90e3a5fac26348adcdc3</sum>
        </package>
        <package name="rubygem-bigdecimal" version="3.1.5" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="s390x" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>rubygem-bigdecimal-3.1.5-6.module_el8.10.0+4183+69a3c42f.s390x.rpm</filename>
          <sum type="sha256">0aad4b39935fa96e9aa47239a7b36fde71304d0d18124821d5d5550030ddeeab</sum>
        </package>
        <package name="rubygem-irb" version="1.13.1" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="noarch" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>rubygem-irb-1.13.1-6.module_el8.10.0+4183+69a3c42f.noarch.rpm</filename>
          <sum type="sha256">0b1df99934b1060b46235debc4473225e7b8f8d927b091beb58e634d54585480</sum>
        </package>
        <package name="rubygem-racc" version="1.7.3" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="s390x" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>rubygem-racc-1.7.3-6.module_el8.10.0+4183+69a3c42f.s390x.rpm</filename>
          <sum type="sha256">11ebf483b6d951001e9990b0f0d994e36dd4e5db9b2c47c763e2b42cfb3b3605</sum>
        </package>
        <package name="rubygem-psych" version="5.1.2" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="s390x" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>rubygem-psych-5.1.2-6.module_el8.10.0+4183+69a3c42f.s390x.rpm</filename>
          <sum type="sha256">2799218e3f477d61c8a80a58f58a9eae30c19af8dbb87a45c257fe0aa2b98c9a</sum>
        </package>
        <package name="rubygem-rss" version="0.3.1" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="noarch" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>rubygem-rss-0.3.1-6.module_el8.10.0+4183+69a3c42f.noarch.rpm</filename>
          <sum type="sha256">377022eff1c48f02bbad6048fd8cee7d1bdfc58b64d79da98f18560066b3b99d</sum>
        </package>
        <package name="rubygem-bundler" version="2.5.22" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="noarch" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>rubygem-bundler-2.5.22-6.module_el8.10.0+4183+69a3c42f.noarch.rpm</filename>
          <sum type="sha256">461aa1bea49d7100a45fc048d0d39a0717e5e9fac5560fcdaa38074588d322cb</sum>
        </package>
        <package name="rubygem-rexml" version="3.4.4" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="noarch" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>rubygem-rexml-3.4.4-6.module_el8.10.0+4183+69a3c42f.noarch.rpm</filename>
          <sum type="sha256">5a4f559c4a63328cd0faeaa0f45350d3bafb439088e7cad9b027f0f739f5642a</sum>
        </package>
        <package name="rubygem-rake" version="13.1.0" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="noarch" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>rubygem-rake-13.1.0-6.module_el8.10.0+4183+69a3c42f.noarch.rpm</filename>
          <sum type="sha256">60efa026688b1237db30e6e8f9543a6fb648eeb8da1a36f943b1ddaffaa88be6</sum>
        </package>
        <package name="ruby-libs" version="3.3.10" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="s390x" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>ruby-libs-3.3.10-6.module_el8.10.0+4183+69a3c42f.s390x.rpm</filename>
          <sum type="sha256">6a0a08e0b2ef0599fbcfa01fc26fa8878f01889ab87b886ff02ef3834c9a7f0f</sum>
        </package>
        <package name="rubygem-io-console" version="0.7.1" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="s390x" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>rubygem-io-console-0.7.1-6.module_el8.10.0+4183+69a3c42f.s390x.rpm</filename>
          <sum type="sha256">733c40553d662c86a6b2e0120d4832d8447c28f12491def18d3378360cdd4a1c</sum>
        </package>
        <package name="rubygem-test-unit" version="3.6.1" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="noarch" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>rubygem-test-unit-3.6.1-6.module_el8.10.0+4183+69a3c42f.noarch.rpm</filename>
          <sum type="sha256">7f1e38fe7936a0d7387b0a73aa596428ab35a86586af5a04a1bd98555bf0984f</sum>
        </package>
        <package name="rubygem-typeprof" version="0.21.9" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="noarch" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>rubygem-typeprof-0.21.9-6.module_el8.10.0+4183+69a3c42f.noarch.rpm</filename>
          <sum type="sha256">80ee40135cb954a9bd9677fb349bb5838740eefc7033083119aad81c87b9e311</sum>
        </package>
        <package name="ruby" version="3.3.10" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="s390x" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.s390x.rpm</filename>
          <sum type="sha256">8502a46141423f41c95c5943066174875d1640462bc4cfffa01d4c6564c95c2b</sum>
        </package>
        <package name="rubygem-minitest" version="5.20.0" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="noarch" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>rubygem-minitest-5.20.0-6.module_el8.10.0+4183+69a3c42f.noarch.rpm</filename>
          <sum type="sha256">905a338ad2aa522e1f5451e521da6ec2e2189b53bffb98ac36a4413e5cfe4402</sum>
        </package>
        <package name="rubygems" version="3.5.22" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="noarch" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>rubygems-3.5.22-6.module_el8.10.0+4183+69a3c42f.noarch.rpm</filename>
          <sum type="sha256">9984aa76b517e4e3b225816b007aecb1fb3eb485d48b00d26126d17e92cc361b</sum>
        </package>
        <package name="ruby-doc" version="3.3.10" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="noarch" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>ruby-doc-3.3.10-6.module_el8.10.0+4183+69a3c42f.noarch.rpm</filename>
          <sum type="sha256">9d639da55e21f3724e7b35a0c71d6a412fabc0a0f26fd36dc222aafb418ee318</sum>
        </package>
        <package name="rubygem-mysql2-doc" version="0.5.5" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-mysql2-0.5.5-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-mysql2-doc-0.5.5-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">a1e84a63a7afd9043eb9ee27d2b4a2784de6e4790859efeb6e29353b8922b91f</sum>
        </package>
        <package name="rubygems-devel" version="3.5.22" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="noarch" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>rubygems-devel-3.5.22-6.module_el8.10.0+4183+69a3c42f.noarch.rpm</filename>
          <sum type="sha256">a46320bbf3fb4be8ceee259af92720c9dd5c8b8dfe04e4147544d407480ae168</sum>
        </package>
        <package name="ruby-devel" version="3.3.10" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="s390x" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>ruby-devel-3.3.10-6.module_el8.10.0+4183+69a3c42f.s390x.rpm</filename>
          <sum type="sha256">ad1c4f3f6d08d965c63c2b136826873a9ab1c9e52ef9f802daa7aa1e786629b9</sum>
        </package>
        <package name="rubygem-pg" version="1.5.4" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="s390x" src="rubygem-pg-1.5.4-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-pg-1.5.4-1.module_el8.10.0+3799+191214cc.s390x.rpm</filename>
          <sum type="sha256">b17f6e9ce3697902b5d1a0a00f804510913440b751583002e5226f0f1bafcfad</sum>
        </package>
        <package name="rubygem-pg-doc" version="1.5.4" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-pg-1.5.4-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-pg-doc-1.5.4-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">b8da427ba088e5a263b5c71d592a6515861cf12932be7ac5577f51afc1c68900</sum>
        </package>
        <package name="rubygem-rbs" version="3.4.0" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="s390x" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>rubygem-rbs-3.4.0-6.module_el8.10.0+4183+69a3c42f.s390x.rpm</filename>
          <sum type="sha256">bd7467b2155a9a698116c2b41389936b86f2024fd9ee79f075f4ba5db462a150</sum>
        </package>
        <package name="rubygem-power_assert" version="2.0.3" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="noarch" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>rubygem-power_assert-2.0.3-6.module_el8.10.0+4183+69a3c42f.noarch.rpm</filename>
          <sum type="sha256">c61eb049aa087da45ba95a69ef59dbe89e91751c0c2a2c343f1f543aea39d68a</sum>
        </package>
        <package name="rubygem-abrt-doc" version="0.4.0" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-abrt-0.4.0-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-abrt-doc-0.4.0-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">c7018cb7e3cfdd28f00117935672e78df8eddf81f308a36b9be1dd8a3fec2afe</sum>
        </package>
        <package name="ruby-bundled-gems" version="3.3.10" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="s390x" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>ruby-bundled-gems-3.3.10-6.module_el8.10.0+4183+69a3c42f.s390x.rpm</filename>
          <sum type="sha256">c8b2d70fffd8396e92e000428702b592807b28fb5eb3340f2646e361279ba013</sum>
        </package>
        <package name="ruby-default-gems" version="3.3.10" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="noarch" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>ruby-default-gems-3.3.10-6.module_el8.10.0+4183+69a3c42f.noarch.rpm</filename>
          <sum type="sha256">d11cf54d232357bfe4744ba2021e8f052d1b1f7859cc7f9fd25c575244c7fb1f</sum>
        </package>
        <package name="rubygem-json" version="2.7.2" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="s390x" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>rubygem-json-2.7.2-6.module_el8.10.0+4183+69a3c42f.s390x.rpm</filename>
          <sum type="sha256">d6d43b30c4a8c86b9d37e3dc5914348f830d75d32893dcbafa2e0b6ad7ff8bb7</sum>
        </package>
        <package name="rubygem-abrt" version="0.4.0" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-abrt-0.4.0-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-abrt-0.4.0-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">eb0f7cad4d0f103b5e53f11647208a780406db8c8cd8c9556e219bec8e1d9893</sum>
        </package>
        <package name="rubygem-rdoc" version="6.6.3.1" release="6.module_el8.10.0+4183+69a3c42f" epoch="0" arch="noarch" src="ruby-3.3.10-6.module_el8.10.0+4183+69a3c42f.src.rpm">
          <filename>rubygem-rdoc-6.6.3.1-6.module_el8.10.0+4183+69a3c42f.noarch.rpm</filename>
          <sum type="sha256">fcb0aff30da845a76aaab4a749ff617524530b4d58ce3fb9e368ec0a0dc2152d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2081</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-02-05 00:00:00"/>
    <updated date="2026-02-06 08:53:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a malicious server. (CVE-2026-23530)
  * freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability (CVE-2026-23884)
  * freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server (CVE-2026-23883)
  * freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution (CVE-2026-23533)
  * freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and potential code execution. (CVE-2026-23531)
  * freerdp: FreeRDP: Arbitrary code execution and denial of service via client-side heap buffer overflow (CVE-2026-23534)
  * freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow (CVE-2026-23532)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2081" id="RHSA-2026:2081" type="rhsa" title="RHSA-2026:2081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23530" id="CVE-2026-23530" type="cve" title="CVE-2026-23530"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23531" id="CVE-2026-23531" type="cve" title="CVE-2026-23531"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23532" id="CVE-2026-23532" type="cve" title="CVE-2026-23532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23533" id="CVE-2026-23533" type="cve" title="CVE-2026-23533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23534" id="CVE-2026-23534" type="cve" title="CVE-2026-23534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23883" id="CVE-2026-23883" type="cve" title="CVE-2026-23883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23884" id="CVE-2026-23884" type="cve" title="CVE-2026-23884"/>
      <reference href="https://bugzilla.redhat.com/2430877" id="2430877" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430880" id="2430880" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430885" id="2430885" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430886" id="2430886" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430887" id="2430887" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430888" id="2430888" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430891" id="2430891" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2081.html" id="ALSA-2026:2081" type="self" title="ALSA-2026:2081"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="freerdp-libs" version="2.11.7" release="2.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-2.el8_10.src.rpm">
          <filename>freerdp-libs-2.11.7-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">59daa77e7d7edd0add31a55cfb199f5bfb58b442ad8b68257891d27d6291372e</sum>
        </package>
        <package name="libwinpr-devel" version="2.11.7" release="2.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-2.el8_10.src.rpm">
          <filename>libwinpr-devel-2.11.7-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">9c20d8e56be931dfe57876b439cdca510e7fcd6ac8797cb572b6d6ce6b73834f</sum>
        </package>
        <package name="freerdp" version="2.11.7" release="2.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-2.el8_10.src.rpm">
          <filename>freerdp-2.11.7-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">ae3c8f51f1bbb2489f7470294427d2fff070ce5f2fbf4058477dfabd41e2419f</sum>
        </package>
        <package name="libwinpr" version="2.11.7" release="2.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-2.el8_10.src.rpm">
          <filename>libwinpr-2.11.7-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">d0c0167fdecd4b0c374b3634cffbe38d4ffbb8e69a6e244d37e22f3376ada040</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2090</id>
    <title>Important: python3.12-wheel security update</title>
    <issued date="2026-02-05 00:00:00"/>
    <updated date="2026-02-06 08:49:15"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12-wheel security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking (CVE-2026-24049)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2090" id="RHSA-2026:2090" type="rhsa" title="RHSA-2026:2090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24049" id="CVE-2026-24049" type="cve" title="CVE-2026-24049"/>
      <reference href="https://bugzilla.redhat.com/2431959" id="2431959" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2090.html" id="ALSA-2026:2090" type="self" title="ALSA-2026:2090"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.12-wheel" version="0.41.2" release="4.el8_10" epoch="0" arch="noarch" src="python3.12-wheel-0.41.2-4.el8_10.src.rpm">
          <filename>python3.12-wheel-0.41.2-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">e78509ead3db181a47bfbe44566212ffb1cf989ae20e2a1212788b1384fbceea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:20929</id>
    <title>Moderate: libexif security update</title>
    <issued date="2026-05-26 00:00:00"/>
    <updated date="2026-05-27 11:44:51"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libexif security update</summary>
    <description>The libexif packages provide a library for extracting extra information from image files.  

Security Fix(es):  

  * libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling (CVE-2026-40385)
  * libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:20929" id="RHSA-2026:20929" type="rhsa" title="RHSA-2026:20929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40385" id="CVE-2026-40385" type="cve" title="CVE-2026-40385"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40386" id="CVE-2026-40386" type="cve" title="CVE-2026-40386"/>
      <reference href="https://bugzilla.redhat.com/2457687" id="2457687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457689" id="2457689" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-20929.html" id="ALSA-2026:20929" type="self" title="ALSA-2026:20929"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libexif" version="0.6.22" release="6.el8_10" epoch="0" arch="s390x" src="libexif-0.6.22-6.el8_10.src.rpm">
          <filename>libexif-0.6.22-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">314a277e3b860ca08bc255441fc229db94cd6800c6162a4b137412b390330dc5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2124</id>
    <title>Important: osbuild-composer security update</title>
    <issued date="2026-02-05 00:00:00"/>
    <updated date="2026-02-09 11:33:23"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>osbuild-composer security update</summary>
    <description>A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients.  

Security Fix(es):  

  * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2124" id="RHSA-2026:2124" type="rhsa" title="RHSA-2026:2124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61729" id="CVE-2025-61729" type="cve" title="CVE-2025-61729"/>
      <reference href="https://bugzilla.redhat.com/2418462" id="2418462" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2124.html" id="ALSA-2026:2124" type="self" title="ALSA-2026:2124"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="osbuild-composer-core" version="101.4" release="3.el8_10.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101.4-3.el8_10.alma.1.src.rpm">
          <filename>osbuild-composer-core-101.4-3.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">2cf7edc20d7a07fdca4d761245ac24e724237945c7efaa1105ff38588a3ef289</sum>
        </package>
        <package name="osbuild-composer" version="101.4" release="3.el8_10.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101.4-3.el8_10.alma.1.src.rpm">
          <filename>osbuild-composer-101.4-3.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">74f48f3399752cfa277b1c1d846ce4a0e200af9ca6ff7068245c2aea74f1fcbc</sum>
        </package>
        <package name="osbuild-composer-worker" version="101.4" release="3.el8_10.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101.4-3.el8_10.alma.1.src.rpm">
          <filename>osbuild-composer-worker-101.4-3.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">d26591cfc2fb97876dbfc748011e69de2da83562f8cf342737231b3f965606da</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2128</id>
    <title>Moderate: python3 security update</title>
    <issued date="2026-02-05 00:00:00"/>
    <updated date="2026-02-06 08:39:01"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: wsgiref.headers.Headers allows header newline injection in Python (CVE-2026-0865)
  * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366)
  * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367)
  * cpython: email header injection due to unquoted newlines (CVE-2026-1299)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2128" id="RHSA-2026:2128" type="rhsa" title="RHSA-2026:2128"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15366" id="CVE-2025-15366" type="cve" title="CVE-2025-15366"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15367" id="CVE-2025-15367" type="cve" title="CVE-2025-15367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0865" id="CVE-2026-0865" type="cve" title="CVE-2026-0865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1299" id="CVE-2026-1299" type="cve" title="CVE-2026-1299"/>
      <reference href="https://bugzilla.redhat.com/2431367" id="2431367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431368" id="2431368" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431373" id="2431373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432437" id="2432437" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2128.html" id="ALSA-2026:2128" type="self" title="ALSA-2026:2128"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="platform-python-devel" version="3.6.8" release="73.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-73.el8_10.alma.1.src.rpm">
          <filename>platform-python-devel-3.6.8-73.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">92b8c77dcbde60e541476a3ac87edad737fdfbe38cdaf5e8416ac992394c6bc9</sum>
        </package>
        <package name="python3-idle" version="3.6.8" release="73.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-73.el8_10.alma.1.src.rpm">
          <filename>python3-idle-3.6.8-73.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">a7fae4db149c8ece924642c8b35348c934e83e651dc5787f6da32f531cdf47f3</sum>
        </package>
        <package name="python3-tkinter" version="3.6.8" release="73.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-73.el8_10.alma.1.src.rpm">
          <filename>python3-tkinter-3.6.8-73.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">c68297a34fcdcbc464273d671b06143eca39c40f4d8bfc2eba04cfc2ffdd2c44</sum>
        </package>
        <package name="platform-python-debug" version="3.6.8" release="73.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-73.el8_10.alma.1.src.rpm">
          <filename>platform-python-debug-3.6.8-73.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">e8135f650d13ae9e2c9dcb9b6c17ed82eb4caf67bad418e57d62683e795d0288</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:21291</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2026-05-27 00:00:00"/>
    <updated date="2026-05-28 12:39:19"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.127 and .NET Runtime 8.0.27.Security Fix(es):  

  * serialize-javascript: serialize-javascript: Denial of Service via specially crafted array-like object serialization (CVE-2026-34043)
  * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:21291" id="RHSA-2026:21291" type="rhsa" title="RHSA-2026:21291"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34043" id="CVE-2026-34043" type="cve" title="CVE-2026-34043"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42899" id="CVE-2026-42899" type="cve" title="CVE-2026-42899"/>
      <reference href="https://bugzilla.redhat.com/2453284" id="2453284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2476605" id="2476605" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-21291.html" id="ALSA-2026:21291" type="self" title="ALSA-2026:21291"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.27" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.127-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.27-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">1540a631ca2d1841c0b8c2e473afb1ebd2a68bb4ce70c3a01281bd4bd56ff6bd</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.27" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.127-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.27-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">30b0de932a79419370d828d64df8e473ff95b251ca89114647667cff918ef830</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.27" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.127-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.27-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">369209d7e2c3c33241260e27d98149a42b2197f94c2adeec80e4be1116ed18e0</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.27" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.127-1.el8_10.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.27-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">42df96f2b878c5d8e78278ab245c968eab82b1528a6d40987fb79a0e3045bb5f</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.27" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.127-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.27-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5ab96fa3ee069c039091bff34bf56fba3837ce256779b39274bdf3826e090f64</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.27" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.127-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.27-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">65f4e0bd56488ad7fcd046b245ad7e2cf0da3fe528cc4edac2c7f7b35292dc9c</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.127" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.127-1.el8_10.src.rpm">
          <filename>dotnet-templates-8.0-8.0.127-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">697ca5e7e1f7a2b1d31ab88414881aaff2d18834354f110d238c1fb099690bfc</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.27" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.127-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.27-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">806ffdd84e33ba1d9d8e95c01e97372c1dc3e467789b13751cfe231a6751c291</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.127" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.127-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.127-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b6271bf1d5dcc71608b93e3af068cb41dba8299f6cbe1b1fa1bcee00fe422240</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.127" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.127-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.127-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">bd64e90c342ac5138209be8c763a123bf5ccf2ca3db086cab8759bde29094b5a</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.27" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.127-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.27-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">ec90da88e121dad4849f04a056ec19c797cfceeac8e7840626d121e2cc1983e2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:21294</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2026-05-27 00:00:00"/>
    <updated date="2026-05-29 09:45:11"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.117 and .NET Runtime 9.0.16.Security Fix(es):  

  * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:21294" id="RHSA-2026:21294" type="rhsa" title="RHSA-2026:21294"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42899" id="CVE-2026-42899" type="cve" title="CVE-2026-42899"/>
      <reference href="https://bugzilla.redhat.com/2476605" id="2476605" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-21294.html" id="ALSA-2026:21294" type="self" title="ALSA-2026:21294"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="dotnet-templates-9.0" version="9.0.117" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.117-1.el8_10.src.rpm">
          <filename>dotnet-templates-9.0-9.0.117-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">04172620afe1a88dc8f9fa7ccff3b952b46cf2f10f4dec2c7127be5354f6693b</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="9.0.117" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.117-1.el8_10.src.rpm">
          <filename>netstandard-targeting-pack-2.1-9.0.117-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">201302347e4be38063528a1137ca48f76f81ba4252d6bac60cbf3534bd3e73f6</sum>
        </package>
        <package name="dotnet-runtime-dbg-9.0" version="9.0.16" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.117-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-9.0-9.0.16-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">4ead79526b3764f40767d54d32b6825bb9a45689a580dbf3ed050a2ae3c7400a</sum>
        </package>
        <package name="dotnet-sdk-9.0" version="9.0.117" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.117-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-9.0.117-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">4f4009039dabe2200541dcfd461380274ff1f5e7a01b92744b0d20450db7f876</sum>
        </package>
        <package name="aspnetcore-targeting-pack-9.0" version="9.0.16" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.117-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-9.0-9.0.16-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5ac9225d3f5e2108a60be2bb6a03c9050b858f13e8931c85861713a67b480577</sum>
        </package>
        <package name="aspnetcore-runtime-9.0" version="9.0.16" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.117-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-9.0-9.0.16-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">655e6a1a6e31d2efba2c74309354505b23bd52a1418f86a9eaf95e8c07aea592</sum>
        </package>
        <package name="dotnet-sdk-dbg-9.0" version="9.0.117" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.117-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-9.0-9.0.117-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">6d1abd4e74acd5b9e51a047fc548b7c101b5dac6ffdd9787f40ab2ac767c6c59</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-9.0" version="9.0.16" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.117-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-9.0-9.0.16-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">8504c021ca2839011a5240a426630f171e1a24a250898723dc8a515d256edd41</sum>
        </package>
        <package name="dotnet-apphost-pack-9.0" version="9.0.16" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.117-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-9.0-9.0.16-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b11528c478d0a618c6f786681f6869c7c6fab36f4c3cd115630cb931eae73697</sum>
        </package>
        <package name="dotnet-targeting-pack-9.0" version="9.0.16" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.117-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-9.0-9.0.16-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b5d1177c08a75195baef87968c8727c6db3f713b404557f6c996e4b75ab618dc</sum>
        </package>
        <package name="dotnet-runtime-9.0" version="9.0.16" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.117-1.el8_10.src.rpm">
          <filename>dotnet-runtime-9.0-9.0.16-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">cf7317aad7412d951b908fa71b4fa33a319a9d97786aab26208ab6e06f6130f1</sum>
        </package>
        <package name="dotnet-hostfxr-9.0" version="9.0.16" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.117-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-9.0-9.0.16-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">e527c5863a9cb9c563dc88d38c2469f9061d2d81a1ebcc6715c6eedc51b87eea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:21295</id>
    <title>Important: .NET 10.0 security update</title>
    <issued date="2026-05-27 00:00:00"/>
    <updated date="2026-05-29 09:45:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.108 and .NET Runtime 10.0.8.Security Fix(es):  

  * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:21295" id="RHSA-2026:21295" type="rhsa" title="RHSA-2026:21295"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42899" id="CVE-2026-42899" type="cve" title="CVE-2026-42899"/>
      <reference href="https://bugzilla.redhat.com/2476605" id="2476605" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-21295.html" id="ALSA-2026:21295" type="self" title="ALSA-2026:21295"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="dotnet-hostfxr-10.0" version="10.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-10.0-10.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0421cdfc1df383dd0b414a0428578bf972c0c9352a4b63c743833d78ee049270</sum>
        </package>
        <package name="dotnet-host" version="10.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>dotnet-host-10.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">08c8de5dffd5463fbf95736c34c1468c05b4defbdfac4d4f011863b32f9df4b5</sum>
        </package>
        <package name="dotnet-templates-10.0" version="10.0.108" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>dotnet-templates-10.0-10.0.108-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">1533570dece26204bc4daf6c8f6cc6c314fce00cf65721c4b43e8290202e8536</sum>
        </package>
        <package name="dotnet-apphost-pack-10.0" version="10.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-10.0-10.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">1e5166e59f2e19672932e7abfaad3c5b430c120f84581ff85a0c09b10cd36b59</sum>
        </package>
        <package name="aspnetcore-runtime-10.0" version="10.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-10.0-10.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">1f5ab3c3addd5b3e75c1a17efba22bd7b9b62710e5133dad02393ad3454a7c31</sum>
        </package>
        <package name="dotnet-targeting-pack-10.0" version="10.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-10.0-10.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">4915f3f9c91761ed78bdc9e02ab71e2f26a23da1a769de92f8a9d2ee7190b735</sum>
        </package>
        <package name="dotnet-runtime-dbg-10.0" version="10.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-10.0-10.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">7aad884456d433728d3f96ba8d68271aa465e79770509f50283260ef97d8025c</sum>
        </package>
        <package name="dotnet-sdk-dbg-10.0" version="10.0.108" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-10.0-10.0.108-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">804ea1c4a4b9e0cbb2ab423fe541e82c2e8792f9f764729289f7b036322af8f0</sum>
        </package>
        <package name="dotnet-sdk-10.0" version="10.0.108" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>dotnet-sdk-10.0-10.0.108-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">8aebb10fd04ff06e8244e286f66a751eef26612080c4ff94df1ae69e191b03c7</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-10.0" version="10.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-10.0-10.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">d7a15c76cfb5ec46bb7a69b4284fea6aa63adf43748b7f38811f8ea419ac4136</sum>
        </package>
        <package name="dotnet" version="10.0.108" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>dotnet-10.0.108-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">eb559d7f395d911396eda63235f03ad68381723b131f0dd2d5d66e9b20a12ff8</sum>
        </package>
        <package name="aspnetcore-targeting-pack-10.0" version="10.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-10.0-10.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">fde210efe5820e5d6cf2c2ea36326e5eb26fa8bc9fe9567e7a8e610eb10931f1</sum>
        </package>
        <package name="dotnet-runtime-10.0" version="10.0.8" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>dotnet-runtime-10.0-10.0.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">ff7e3ad86bf2c0152c9fcf377fa718c130500e68ce0e1c0212ccc3eb594e0d27</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:21382</id>
    <title>Important: firefox security update</title>
    <issued date="2026-05-27 00:00:00"/>
    <updated date="2026-05-29 12:37:43"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component (CVE-2026-8388)
  * firefox: Other issue in the JavaScript Engine component (CVE-2026-8391)
  * firefox: Sandbox escape in the Profile Backup component (CVE-2026-8401)
  * firefox: Integer overflow in the Networking: JAR component (CVE-2026-8956)
  * firefox: Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR 140.11 and Firefox 151 (CVE-2026-8975)
  * firefox: Privilege escalation in the DOM: Workers component (CVE-2026-8955)
  * firefox: Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component (CVE-2026-8968)
  * firefox: Incorrect boundary conditions, integer overflow in the Audio/Video component (CVE-2026-8954)
  * firefox: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-8958)
  * firefox: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-8946)
  * firefox: Privilege escalation in the Security component (CVE-2026-8970)
  * firefox: Same-origin policy bypass in the Networking: HTTP component (CVE-2026-8950)
  * firefox: Memory safety bugs fixed in Firefox ESR 140.11 and Firefox 151 (CVE-2026-8974)
  * firefox: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-8953)
  * firefox: Spoofing issue in the Form Autofill component (CVE-2026-8961)
  * firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-8947)
  * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-8962)
  * firefox: Privilege escalation in the Enterprise Policies component (CVE-2026-8957)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:21382" id="RHSA-2026:21382" type="rhsa" title="RHSA-2026:21382"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8388" id="CVE-2026-8388" type="cve" title="CVE-2026-8388"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8391" id="CVE-2026-8391" type="cve" title="CVE-2026-8391"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8401" id="CVE-2026-8401" type="cve" title="CVE-2026-8401"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8946" id="CVE-2026-8946" type="cve" title="CVE-2026-8946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8947" id="CVE-2026-8947" type="cve" title="CVE-2026-8947"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8950" id="CVE-2026-8950" type="cve" title="CVE-2026-8950"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8953" id="CVE-2026-8953" type="cve" title="CVE-2026-8953"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8954" id="CVE-2026-8954" type="cve" title="CVE-2026-8954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8955" id="CVE-2026-8955" type="cve" title="CVE-2026-8955"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8956" id="CVE-2026-8956" type="cve" title="CVE-2026-8956"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8957" id="CVE-2026-8957" type="cve" title="CVE-2026-8957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8958" id="CVE-2026-8958" type="cve" title="CVE-2026-8958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8961" id="CVE-2026-8961" type="cve" title="CVE-2026-8961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8962" id="CVE-2026-8962" type="cve" title="CVE-2026-8962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8968" id="CVE-2026-8968" type="cve" title="CVE-2026-8968"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8970" id="CVE-2026-8970" type="cve" title="CVE-2026-8970"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8974" id="CVE-2026-8974" type="cve" title="CVE-2026-8974"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8975" id="CVE-2026-8975" type="cve" title="CVE-2026-8975"/>
      <reference href="https://bugzilla.redhat.com/2476469" id="2476469" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2476475" id="2476475" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2476492" id="2476492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479839" id="2479839" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479840" id="2479840" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479842" id="2479842" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479846" id="2479846" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479847" id="2479847" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479848" id="2479848" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479849" id="2479849" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479852" id="2479852" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479853" id="2479853" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479855" id="2479855" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479860" id="2479860" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479871" id="2479871" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479873" id="2479873" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479876" id="2479876" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479880" id="2479880" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-21382.html" id="ALSA-2026:21382" type="self" title="ALSA-2026:21382"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="140.11.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-140.11.0-1.el8_10.alma.1.src.rpm">
          <filename>firefox-140.11.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">cb6aa24a6e394079b41e4f840f8cc3c709bf2446afc04eab8548f512f8113a5e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:21756</id>
    <title>Important: flatpak security update</title>
    <issued date="2026-05-28 00:00:00"/>
    <updated date="2026-05-28 19:30:41"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>flatpak security update</summary>
    <description>Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.  

Security Fix(es):  

  * flatpak: Flatpak: Arbitrary code execution via crafted symlinks in sandbox-expose options (CVE-2026-34078)
  * flatpak: Flatpak: Arbitrary file deletion on host via improper cache file path validation (CVE-2026-34079)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:21756" id="RHSA-2026:21756" type="rhsa" title="RHSA-2026:21756"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34078" id="CVE-2026-34078" type="cve" title="CVE-2026-34078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34079" id="CVE-2026-34079" type="cve" title="CVE-2026-34079"/>
      <reference href="https://bugzilla.redhat.com/2456276" id="2456276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2456284" id="2456284" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-21756.html" id="ALSA-2026:21756" type="self" title="ALSA-2026:21756"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="flatpak" version="1.12.9" release="4.el8_10" epoch="0" arch="s390x" src="flatpak-1.12.9-4.el8_10.src.rpm">
          <filename>flatpak-1.12.9-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">43d74f136750e13a253c4c8999141f87e91047441a859e285145ad8bda20e338</sum>
        </package>
        <package name="flatpak-selinux" version="1.12.9" release="4.el8_10" epoch="0" arch="noarch" src="flatpak-1.12.9-4.el8_10.src.rpm">
          <filename>flatpak-selinux-1.12.9-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">4b8bb7d1e0af244fd94e08b4d37869a856106e8ec57caba97dc6bbbbd27c3274</sum>
        </package>
        <package name="flatpak-session-helper" version="1.12.9" release="4.el8_10" epoch="0" arch="s390x" src="flatpak-1.12.9-4.el8_10.src.rpm">
          <filename>flatpak-session-helper-1.12.9-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">ede8537c098116375e49fd2a4315b13b36cf5a50b42cc608a231640a4e0c8c11</sum>
        </package>
        <package name="flatpak-libs" version="1.12.9" release="4.el8_10" epoch="0" arch="s390x" src="flatpak-1.12.9-4.el8_10.src.rpm">
          <filename>flatpak-libs-1.12.9-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">f32df5061b69b2af7728a4a08f22e6f339fba754e9aa411a6c040511b3b2d360</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:22140</id>
    <title>Important: httpd:2.4 security update</title>
    <issued date="2026-06-01 00:00:00"/>
    <updated date="2026-06-03 08:00:01"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>httpd:2.4 security update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.  

Security Fix(es):  

  * httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase (CVE-2025-53020)
  * httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059)
  * httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032)
  * httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857)
  * httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash (CVE-2026-33007)
  * Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:22140" id="RHSA-2026:22140" type="rhsa" title="RHSA-2026:22140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53020" id="CVE-2025-53020" type="cve" title="CVE-2025-53020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28780" id="CVE-2026-28780" type="cve" title="CVE-2026-28780"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33007" id="CVE-2026-33007" type="cve" title="CVE-2026-33007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33857" id="CVE-2026-33857" type="cve" title="CVE-2026-33857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34032" id="CVE-2026-34032" type="cve" title="CVE-2026-34032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34059" id="CVE-2026-34059" type="cve" title="CVE-2026-34059"/>
      <reference href="https://bugzilla.redhat.com/2379343" id="2379343" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464940" id="2464940" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464952" id="2464952" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464953" id="2464953" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2465299" id="2465299" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2466913" id="2466913" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-22140.html" id="ALSA-2026:22140" type="self" title="ALSA-2026:22140"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="httpd" stream="2.4" version="8100020260601035450" context="9edba152" arch="s390x"/>
        <package name="httpd-devel" version="2.4.37" release="65.module_el8.10.0+4185+0955a0d7.8" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.src.rpm">
          <filename>httpd-devel-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.s390x.rpm</filename>
          <sum type="sha256">3b4d209ed4f225bf591ded9dc0066865dee37e4b12b1a24766220f539d019fe3</sum>
        </package>
        <package name="mod_ssl" version="2.4.37" release="65.module_el8.10.0+4185+0955a0d7.8" epoch="1" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.src.rpm">
          <filename>mod_ssl-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.s390x.rpm</filename>
          <sum type="sha256">51cb1c6f0c43bbcd8187e7edbb96f22e0cab947773dfd803bfcf529ecd0c62a4</sum>
        </package>
        <package name="mod_md" version="2.0.8" release="8.module_el8.10.0+4088+57f011c1.2" epoch="1" arch="s390x" src="mod_md-2.0.8-8.module_el8.10.0+4088+57f011c1.2.src.rpm">
          <filename>mod_md-2.0.8-8.module_el8.10.0+4088+57f011c1.2.s390x.rpm</filename>
          <sum type="sha256">51f08f5a2c2c9925c2d8acf5069e109f519302af55ab044dba7de03782591748</sum>
        </package>
        <package name="mod_http2" version="1.15.7" release="10.module_el8.10.0+4185+0955a0d7.5" epoch="0" arch="s390x" src="mod_http2-1.15.7-10.module_el8.10.0+4185+0955a0d7.5.src.rpm">
          <filename>mod_http2-1.15.7-10.module_el8.10.0+4185+0955a0d7.5.s390x.rpm</filename>
          <sum type="sha256">55464cd75f23961160efeddab5913526d94bf29f7cc936646347ac784ce438f9</sum>
        </package>
        <package name="httpd-filesystem" version="2.4.37" release="65.module_el8.10.0+4185+0955a0d7.8" epoch="0" arch="noarch" src="httpd-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.src.rpm">
          <filename>httpd-filesystem-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.noarch.rpm</filename>
          <sum type="sha256">63c091aa5ee7062f5e72f3231ae53c1ca12ed29e6a4c6cc66389bc77e3941451</sum>
        </package>
        <package name="mod_proxy_html" version="2.4.37" release="65.module_el8.10.0+4185+0955a0d7.8" epoch="1" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.src.rpm">
          <filename>mod_proxy_html-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.s390x.rpm</filename>
          <sum type="sha256">6adc6434a89ccfa89f334e15455786a73a2b0c708fb24528a8c6ee7aaa5cbda0</sum>
        </package>
        <package name="httpd-tools" version="2.4.37" release="65.module_el8.10.0+4185+0955a0d7.8" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.src.rpm">
          <filename>httpd-tools-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.s390x.rpm</filename>
          <sum type="sha256">76c8ef271a4522a536053e702e49fd9c0ceb10f02fae92fbc2e3466038941595</sum>
        </package>
        <package name="mod_ldap" version="2.4.37" release="65.module_el8.10.0+4185+0955a0d7.8" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.src.rpm">
          <filename>mod_ldap-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.s390x.rpm</filename>
          <sum type="sha256">c282deb0935dfcd4ce2c2d3604483855e0f24c24822c720a583a258a5b77f9f6</sum>
        </package>
        <package name="httpd" version="2.4.37" release="65.module_el8.10.0+4185+0955a0d7.8" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.src.rpm">
          <filename>httpd-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.s390x.rpm</filename>
          <sum type="sha256">ca5d236d85f12ded3db89992cca466cdc583a20207fe035e72ae810d7a599e87</sum>
        </package>
        <package name="httpd-manual" version="2.4.37" release="65.module_el8.10.0+4185+0955a0d7.8" epoch="0" arch="noarch" src="httpd-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.src.rpm">
          <filename>httpd-manual-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.noarch.rpm</filename>
          <sum type="sha256">dfa8302abbbc38b9c262b97766ca86a2f91da5996375978f6b8726c34a892728</sum>
        </package>
        <package name="mod_session" version="2.4.37" release="65.module_el8.10.0+4185+0955a0d7.8" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.src.rpm">
          <filename>mod_session-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.s390x.rpm</filename>
          <sum type="sha256">efc8d69ee706597d51028a0152eb0ffe5de3016b8be8cf80e57767f5b317988e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2220</id>
    <title>Important: thunderbird security update</title>
    <issued date="2026-02-09 00:00:00"/>
    <updated date="2026-02-10 07:45:12"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: Spoofing issue in the Downloads Panel component (CVE-2025-14327)
  * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-0885)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147 (CVE-2026-0891)
  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-0878)
  * firefox: Use-after-free in the IPC component (CVE-2026-0882)
  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-0884)
  * firefox: Information disclosure in the Networking component (CVE-2026-0883)
  * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-0877)
  * firefox: Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop component (CVE-2026-0890)
  * firefox: Clickjacking issue, information disclosure in the PDF Viewer component (CVE-2026-0887)
  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-0879)
  * firefox: Sandbox escape due to integer overflow in the Graphics component (CVE-2026-0880)
  * firefox: Incorrect boundary conditions in the Graphics component (CVE-2026-0886)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2220" id="RHSA-2026:2220" type="rhsa" title="RHSA-2026:2220"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14327" id="CVE-2025-14327" type="cve" title="CVE-2025-14327"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0877" id="CVE-2026-0877" type="cve" title="CVE-2026-0877"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0878" id="CVE-2026-0878" type="cve" title="CVE-2026-0878"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0879" id="CVE-2026-0879" type="cve" title="CVE-2026-0879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0880" id="CVE-2026-0880" type="cve" title="CVE-2026-0880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0882" id="CVE-2026-0882" type="cve" title="CVE-2026-0882"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0883" id="CVE-2026-0883" type="cve" title="CVE-2026-0883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0884" id="CVE-2026-0884" type="cve" title="CVE-2026-0884"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0885" id="CVE-2026-0885" type="cve" title="CVE-2026-0885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0886" id="CVE-2026-0886" type="cve" title="CVE-2026-0886"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0887" id="CVE-2026-0887" type="cve" title="CVE-2026-0887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0890" id="CVE-2026-0890" type="cve" title="CVE-2026-0890"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0891" id="CVE-2026-0891" type="cve" title="CVE-2026-0891"/>
      <reference href="https://bugzilla.redhat.com/2420507" id="2420507" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428961" id="2428961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428963" id="2428963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428965" id="2428965" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428966" id="2428966" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428967" id="2428967" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428968" id="2428968" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428969" id="2428969" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428971" id="2428971" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428972" id="2428972" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428973" id="2428973" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428975" id="2428975" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428978" id="2428978" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2220.html" id="ALSA-2026:2220" type="self" title="ALSA-2026:2220"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="140.7.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-140.7.0-1.el8_10.alma.1.src.rpm">
          <filename>thunderbird-140.7.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">7c6681ced57d9e032610300056a76d1d0cf0c15c40f057796974fb6e364ebead</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:22305</id>
    <title>Important: php:8.2 security update</title>
    <issued date="2026-06-01 00:00:00"/>
    <updated date="2026-06-01 13:00:05"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>php:8.2 security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  

Security Fix(es):  

  * PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions (CVE-2026-7258)
  * PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation (CVE-2026-6735)
  * php: NULL pointer dereference in SOAP apache:Map decoder with missing &lt;value&gt; (CVE-2026-7262)
  * php: signed integer overflow in metaphone() (CVE-2026-7568)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:22305" id="RHSA-2026:22305" type="rhsa" title="RHSA-2026:22305"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6735" id="CVE-2026-6735" type="cve" title="CVE-2026-6735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-7258" id="CVE-2026-7258" type="cve" title="CVE-2026-7258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-7262" id="CVE-2026-7262" type="cve" title="CVE-2026-7262"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-7568" id="CVE-2026-7568" type="cve" title="CVE-2026-7568"/>
      <reference href="https://bugzilla.redhat.com/2468561" id="2468561" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468562" id="2468562" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468565" id="2468565" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468566" id="2468566" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-22305.html" id="ALSA-2026:22305" type="self" title="ALSA-2026:22305"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="php" stream="8.2" version="8100020240411103139" context="eb0869e2" arch="s390x"/>
        <package name="php-pecl-rrd" version="2.0.3" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="php-pecl-rrd-2.0.3-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pecl-rrd-2.0.3-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">093a9af91b3963aeb6939d457d8552f7939985a934a7d29fc26882787160c0a4</sum>
        </package>
        <package name="php-snmp" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-snmp-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">0d688a5b6057320693710439d7fe1474a12b42c5209108fa2628ed3e8e72eaf6</sum>
        </package>
        <package name="php-devel" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-devel-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">160cefb10c417ce5260e760ec187c3eebd7a249833b085b5b5ec7f535bf3afa7</sum>
        </package>
        <package name="php-mysqlnd" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-mysqlnd-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">1c03ca3c74d99d2360f3540b767765bbb8cf28a980f46b0062c3309b687a4e04</sum>
        </package>
        <package name="apcu-panel" version="5.1.23" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="noarch" src="php-pecl-apcu-5.1.23-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>apcu-panel-5.1.23-1.module_el8.10.0+3796+30ed3ef7.noarch.rpm</filename>
          <sum type="sha256">1deada493d8257042f0097d5ac685473d9995b4500854e4c6a0e2ac9a175fa04</sum>
        </package>
        <package name="php-pecl-apcu-devel" version="5.1.23" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.23-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pecl-apcu-devel-5.1.23-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">2b18052e97292f4a7381dcbb7589c87b1e6fb49d93c19c334bcf52bb6ed3b955</sum>
        </package>
        <package name="php-intl" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-intl-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">35ad2f9a3457b0606d07120335e3e96fea8822606ed92ce52278b80efd8fcc96</sum>
        </package>
        <package name="php-gmp" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-gmp-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">43824d39633713ee5251e1331cbe21a13a1d59a4061a7a60dcc4a45d76045131</sum>
        </package>
        <package name="php-pdo" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-pdo-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">53c3ce3725520a336fd8deed6e8e802c7e53f4e65d25785e4b6f478a1651fab2</sum>
        </package>
        <package name="php-xml" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-xml-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">53c7f47a08fe560544b5cc30429de47de72b99a16ea693fb4045340c7e9529d7</sum>
        </package>
        <package name="php-dbg" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-dbg-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">56500af657fb2ad2acae3d2318515249a1163f280cac5ed976981b41b8f607b0</sum>
        </package>
        <package name="libzip-devel" version="1.7.3" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="libzip-1.7.3-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>libzip-devel-1.7.3-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">5ea1e67460a84c07adc7d61cca9fc45bb50b3184cc7d063c4fc9658971b6f8d1</sum>
        </package>
        <package name="libzip-tools" version="1.7.3" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="libzip-1.7.3-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>libzip-tools-1.7.3-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">7374f8cbd2e20ece40e87c7aae7e84b9843a986a938e16d51ec180333d948002</sum>
        </package>
        <package name="php-ffi" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-ffi-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">76baebab96c8b0390930e7fa5953ff0463e26cf3385282aebbd27b1ef61de118</sum>
        </package>
        <package name="php-bcmath" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-bcmath-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">795d4d7a7a21c4430e2b7bc7111fcb46e864d0b8df95da8ec6d09b273ef22932</sum>
        </package>
        <package name="php-pecl-xdebug3" version="3.2.2" release="2.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="php-pecl-xdebug3-3.2.2-2.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pecl-xdebug3-3.2.2-2.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">80da4e7cbeb2b5e3b6bf6e9dacd2e33e570fecdd8646fcd94fbfb2573e17a172</sum>
        </package>
        <package name="php-enchant" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-enchant-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">87981d649e5ff712044aae6c9039fe48377a1fc7fa1d1a55244ed036d9ce9645</sum>
        </package>
        <package name="php-pgsql" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-pgsql-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">89434a7e23a148c8ba8701d0e6be78171774b0847def1808534aa49b49fd2ecf</sum>
        </package>
        <package name="php" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">8a8a8c4a58a443754c797b343c45c05ac41e9eb49dc728e6516b2e1c6aded312</sum>
        </package>
        <package name="php-mbstring" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-mbstring-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">9978cabb7fb0d867948f00c6a38158db60f4fb41e9bddb6f741c56fd13b76618</sum>
        </package>
        <package name="php-gd" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-gd-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">9f5144a8d9402aae77e142acb30dccf7d4ce355823528b8aaefd17f7f97ee808</sum>
        </package>
        <package name="php-soap" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-soap-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">a37091d4aaeea88daf35ca5305c4a9f1a6b4ae101175b80a9cf80b2bb1a73e81</sum>
        </package>
        <package name="php-dba" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-dba-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">a731408d85795e27cb4c2185d40f16c5ef9e45c77cf2c2acabeaef5c7a5f3232</sum>
        </package>
        <package name="php-process" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-process-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">a8a5b197faf60ae09ca876c3e649913d5d5d6c44cd27412c843cb3dd9c6ae3da</sum>
        </package>
        <package name="php-cli" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-cli-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">b5f92aeefd4f4a86347f053420f02f4ef23052a875342f7459a6c2cbec32992c</sum>
        </package>
        <package name="php-pear" version="1.10.14" release="1.module_el8.10.0+3796+30ed3ef7" epoch="1" arch="noarch" src="php-pear-1.10.14-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pear-1.10.14-1.module_el8.10.0+3796+30ed3ef7.noarch.rpm</filename>
          <sum type="sha256">b77d08e8c3d38704e98139a7653cc3657d21f49aed4c245f85193ad875e74825</sum>
        </package>
        <package name="php-fpm" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-fpm-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">be63bf2ebb976fe5e2e32788e5eb312c2171acd2067148cd22b737ce1ff904a3</sum>
        </package>
        <package name="php-pecl-apcu" version="5.1.23" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.23-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pecl-apcu-5.1.23-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">c4d4948fd8c0bbfed5894ae768adbe43b853cd5bed8c3abc67142f6731c57e79</sum>
        </package>
        <package name="php-ldap" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-ldap-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">cc555a49da31595fc2d36d11531cbcc2593da18fd9aa7c9c4bf918179626cfbf</sum>
        </package>
        <package name="libzip" version="1.7.3" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="libzip-1.7.3-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>libzip-1.7.3-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">cff9d04f58fcb8d7545231b9d9ec3e446a7db9b61ccdb40778c605e752aa4bb2</sum>
        </package>
        <package name="php-opcache" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-opcache-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">d2fc1b36af496281618f4385c43d65dc84e55292ab8aa025d273a3a9ede3a4aa</sum>
        </package>
        <package name="php-odbc" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-odbc-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">d46131afdd16e66067218815d4461b3ea789cabb49dd1a05a113280fc40699e6</sum>
        </package>
        <package name="php-embedded" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-embedded-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">d7fc3d0860e97a1fab6af64e00fd8c7c90fadaef63c19b4fb6d2e425a460b983</sum>
        </package>
        <package name="php-pecl-zip" version="1.22.3" release="1.module_el8.10.0+3796+30ed3ef7" epoch="0" arch="s390x" src="php-pecl-zip-1.22.3-1.module_el8.10.0+3796+30ed3ef7.src.rpm">
          <filename>php-pecl-zip-1.22.3-1.module_el8.10.0+3796+30ed3ef7.s390x.rpm</filename>
          <sum type="sha256">e9fc70bd5243e8627c19553ca909b059905ce54432be8d736d1a7f39e1e0a41b</sum>
        </package>
        <package name="php-common" version="8.2.31" release="1.module_el8.10.0+4189+0784d4cc" epoch="0" arch="s390x" src="php-8.2.31-1.module_el8.10.0+4189+0784d4cc.src.rpm">
          <filename>php-common-8.2.31-1.module_el8.10.0+4189+0784d4cc.s390x.rpm</filename>
          <sum type="sha256">fd4e36c6ff8cd952255a1937c5a6da0b7f1da5932af36c7e694f79da5342f254</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:22315</id>
    <title>Moderate: compat-openssl10 security update</title>
    <issued date="2026-06-01 00:00:00"/>
    <updated date="2026-06-03 07:57:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>compat-openssl10 security update</summary>
    <description>The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries and is provided for compatibility with previous releases and software that does not support compilation with OpenSSL-1.1.  

Security Fix(es):  

  * openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing (CVE-2026-28390)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:22315" id="RHSA-2026:22315" type="rhsa" title="RHSA-2026:22315"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28390" id="CVE-2026-28390" type="cve" title="CVE-2026-28390"/>
      <reference href="https://bugzilla.redhat.com/2456314" id="2456314" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-22315.html" id="ALSA-2026:22315" type="self" title="ALSA-2026:22315"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="compat-openssl10" version="1.0.2o" release="4.el8_10.2" epoch="1" arch="s390x" src="compat-openssl10-1.0.2o-4.el8_10.2.src.rpm">
          <filename>compat-openssl10-1.0.2o-4.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">b788b93c7f1167766382f9d140e5fab2a2e56bf26ef36a02eb7b22c60014d042</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:22643</id>
    <title>Important: thunderbird security update</title>
    <issued date="2026-06-02 00:00:00"/>
    <updated date="2026-06-03 07:57:07"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component (CVE-2026-8388)
  * firefox: Other issue in the JavaScript Engine component (CVE-2026-8391)
  * firefox: Sandbox escape in the Profile Backup component (CVE-2026-8401)
  * firefox: Integer overflow in the Networking: JAR component (CVE-2026-8956)
  * firefox: Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR 140.11 and Firefox 151 (CVE-2026-8975)
  * firefox: Privilege escalation in the DOM: Workers component (CVE-2026-8955)
  * firefox: Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component (CVE-2026-8968)
  * firefox: Incorrect boundary conditions, integer overflow in the Audio/Video component (CVE-2026-8954)
  * firefox: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-8958)
  * firefox: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-8946)
  * firefox: Privilege escalation in the Security component (CVE-2026-8970)
  * firefox: Same-origin policy bypass in the Networking: HTTP component (CVE-2026-8950)
  * firefox: Memory safety bugs fixed in Firefox ESR 140.11 and Firefox 151 (CVE-2026-8974)
  * firefox: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-8953)
  * firefox: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component (CVE-2026-8959)
  * firefox: Spoofing issue in the Form Autofill component (CVE-2026-8961)
  * firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-8947)
  * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-8962)
  * firefox: Privilege escalation in the Enterprise Policies component (CVE-2026-8957)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:22643" id="RHSA-2026:22643" type="rhsa" title="RHSA-2026:22643"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8388" id="CVE-2026-8388" type="cve" title="CVE-2026-8388"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8391" id="CVE-2026-8391" type="cve" title="CVE-2026-8391"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8401" id="CVE-2026-8401" type="cve" title="CVE-2026-8401"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8946" id="CVE-2026-8946" type="cve" title="CVE-2026-8946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8947" id="CVE-2026-8947" type="cve" title="CVE-2026-8947"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8950" id="CVE-2026-8950" type="cve" title="CVE-2026-8950"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8953" id="CVE-2026-8953" type="cve" title="CVE-2026-8953"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8954" id="CVE-2026-8954" type="cve" title="CVE-2026-8954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8955" id="CVE-2026-8955" type="cve" title="CVE-2026-8955"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8956" id="CVE-2026-8956" type="cve" title="CVE-2026-8956"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8957" id="CVE-2026-8957" type="cve" title="CVE-2026-8957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8958" id="CVE-2026-8958" type="cve" title="CVE-2026-8958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8959" id="CVE-2026-8959" type="cve" title="CVE-2026-8959"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8961" id="CVE-2026-8961" type="cve" title="CVE-2026-8961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8962" id="CVE-2026-8962" type="cve" title="CVE-2026-8962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8968" id="CVE-2026-8968" type="cve" title="CVE-2026-8968"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8970" id="CVE-2026-8970" type="cve" title="CVE-2026-8970"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8974" id="CVE-2026-8974" type="cve" title="CVE-2026-8974"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8975" id="CVE-2026-8975" type="cve" title="CVE-2026-8975"/>
      <reference href="https://bugzilla.redhat.com/2476469" id="2476469" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2476475" id="2476475" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2476492" id="2476492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479839" id="2479839" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479840" id="2479840" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479842" id="2479842" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479846" id="2479846" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479847" id="2479847" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479848" id="2479848" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479849" id="2479849" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479852" id="2479852" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479853" id="2479853" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479855" id="2479855" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479860" id="2479860" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479861" id="2479861" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479871" id="2479871" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479873" id="2479873" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479876" id="2479876" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479880" id="2479880" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-22643.html" id="ALSA-2026:22643" type="self" title="ALSA-2026:22643"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="140.11.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-140.11.0-1.el8_10.alma.1.src.rpm">
          <filename>thunderbird-140.11.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">40d0012798cd8c5e38b39e7b5a7eb2f6e806389c616fd947666b5edd20f76be4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:22644</id>
    <title>Important: samba security update</title>
    <issued date="2026-06-02 00:00:00"/>
    <updated date="2026-06-03 12:02:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>samba security update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.  

Security Fix(es):  

  * samba: group policy certificate enrollment uses &lt;http://&gt; without validation (CVE-2026-3012)
  * samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)
  * samba: Remote Code Execution in SAMR (CVE-2026-4408)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:22644" id="RHSA-2026:22644" type="rhsa" title="RHSA-2026:22644"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3012" id="CVE-2026-3012" type="cve" title="CVE-2026-3012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4408" id="CVE-2026-4408" type="cve" title="CVE-2026-4408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4480" id="CVE-2026-4480" type="cve" title="CVE-2026-4480"/>
      <reference href="https://bugzilla.redhat.com/2447319" id="2447319" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452232" id="2452232" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479762" id="2479762" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-22644.html" id="ALSA-2026:22644" type="self" title="ALSA-2026:22644"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="samba-vfs-iouring" version="4.19.4" release="16.el8_10" epoch="0" arch="s390x" src="samba-4.19.4-16.el8_10.src.rpm">
          <filename>samba-vfs-iouring-4.19.4-16.el8_10.s390x.rpm</filename>
          <sum type="sha256">d3cdcc4febd5a4f612c292dbf1dc56c45af7039736c2f05ac2a0c7495b2a84ad</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:22730</id>
    <title>Moderate: vim security update</title>
    <issued date="2026-06-03 00:00:00"/>
    <updated date="2026-06-04 08:59:25"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass (CVE-2026-35177)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:22730" id="RHSA-2026:22730" type="rhsa" title="RHSA-2026:22730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35177" id="CVE-2026-35177" type="cve" title="CVE-2026-35177"/>
      <reference href="https://bugzilla.redhat.com/2455542" id="2455542" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-22730.html" id="ALSA-2026:22730" type="self" title="ALSA-2026:22730"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="vim-filesystem" version="8.0.1763" release="23.el8_10" epoch="2" arch="noarch" src="vim-8.0.1763-23.el8_10.src.rpm">
          <filename>vim-filesystem-8.0.1763-23.el8_10.noarch.rpm</filename>
          <sum type="sha256">5b2a76eb84aa5280d57f2c580d62d66980a2f026252a6c6882f0759cf9b9c8f1</sum>
        </package>
        <package name="vim-enhanced" version="8.0.1763" release="23.el8_10" epoch="2" arch="s390x" src="vim-8.0.1763-23.el8_10.src.rpm">
          <filename>vim-enhanced-8.0.1763-23.el8_10.s390x.rpm</filename>
          <sum type="sha256">9c338ce0aafe51dff91061e405ed077efd5e6f00f0a35646a7bd1b2ccbdf1593</sum>
        </package>
        <package name="vim-X11" version="8.0.1763" release="23.el8_10" epoch="2" arch="s390x" src="vim-8.0.1763-23.el8_10.src.rpm">
          <filename>vim-X11-8.0.1763-23.el8_10.s390x.rpm</filename>
          <sum type="sha256">a1bfbe23b3b8716574912ac9de2c5f5bbe692dd3164320023c2ec747ad8c6780</sum>
        </package>
        <package name="vim-common" version="8.0.1763" release="23.el8_10" epoch="2" arch="s390x" src="vim-8.0.1763-23.el8_10.src.rpm">
          <filename>vim-common-8.0.1763-23.el8_10.s390x.rpm</filename>
          <sum type="sha256">b8d0de34ef1d9a0314017cdefcca255b6d1356cc1f533fac6b6b61e6bebaeea6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2323</id>
    <title>Important: git-lfs security update</title>
    <issued date="2026-02-09 00:00:00"/>
    <updated date="2026-02-11 11:02:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git-lfs security update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.  

Security Fix(es):  

  * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2323" id="RHSA-2026:2323" type="rhsa" title="RHSA-2026:2323"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61729" id="CVE-2025-61729" type="cve" title="CVE-2025-61729"/>
      <reference href="https://bugzilla.redhat.com/2418462" id="2418462" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2323.html" id="ALSA-2026:2323" type="self" title="ALSA-2026:2323"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="git-lfs" version="3.4.1" release="7.el8_10" epoch="0" arch="s390x" src="git-lfs-3.4.1-7.el8_10.src.rpm">
          <filename>git-lfs-3.4.1-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">486d80cbf287503f08287c4a8cccfa448a03f0f342c047e22da6179e1596b31f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:23360</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2026-06-04 00:00:00"/>
    <updated date="2026-06-05 10:26:06"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)
  * bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:23360" id="RHSA-2026:23360" type="rhsa" title="RHSA-2026:23360"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3039" id="CVE-2026-3039" type="cve" title="CVE-2026-3039"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5946" id="CVE-2026-5946" type="cve" title="CVE-2026-5946"/>
      <reference href="https://bugzilla.redhat.com/2479767" id="2479767" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479771" id="2479771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-23360.html" id="ALSA-2026:23360" type="self" title="ALSA-2026:23360"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="bind9.16-chroot" version="9.16.23" release="0.22.el8_10.6" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.6.src.rpm">
          <filename>bind9.16-chroot-9.16.23-0.22.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">15626e400a9a01abe3f302923b9e5805b3f1ba2576b017d62b098a02c5474978</sum>
        </package>
        <package name="bind9.16-libs" version="9.16.23" release="0.22.el8_10.6" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.6.src.rpm">
          <filename>bind9.16-libs-9.16.23-0.22.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">2c39c1af8796818f65704c4a46f7c0f56b14de95355e731c51424f46509cc897</sum>
        </package>
        <package name="bind9.16-utils" version="9.16.23" release="0.22.el8_10.6" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.6.src.rpm">
          <filename>bind9.16-utils-9.16.23-0.22.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">34aeed5a3c5e3dda762423189e85cc7e859c5763cd0920c55eb8b88adebeddb0</sum>
        </package>
        <package name="python3-bind9.16" version="9.16.23" release="0.22.el8_10.6" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.22.el8_10.6.src.rpm">
          <filename>python3-bind9.16-9.16.23-0.22.el8_10.6.noarch.rpm</filename>
          <sum type="sha256">43716c3356b30da94bbda5e31aa6f9606b98a70c913fe4f50f8e74b8a25dcafb</sum>
        </package>
        <package name="bind9.16-dnssec-utils" version="9.16.23" release="0.22.el8_10.6" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.6.src.rpm">
          <filename>bind9.16-dnssec-utils-9.16.23-0.22.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">7d8efea2cdc13edab917f84967fe30b48550619b9b641342c776018ab307b95d</sum>
        </package>
        <package name="bind9.16" version="9.16.23" release="0.22.el8_10.6" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.6.src.rpm">
          <filename>bind9.16-9.16.23-0.22.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">b2c37c275d301d9f631184685cb112b8af3631e646d82f790fb3798f00783848</sum>
        </package>
        <package name="bind9.16-license" version="9.16.23" release="0.22.el8_10.6" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.22.el8_10.6.src.rpm">
          <filename>bind9.16-license-9.16.23-0.22.el8_10.6.noarch.rpm</filename>
          <sum type="sha256">ea1d1f3219bd263cd4e31e3d27a7aee35bd5725353c1fd3f5d0cc3e61722d7c1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2389</id>
    <title>Important: brotli security update</title>
    <issued date="2026-02-10 00:00:00"/>
    <updated date="2026-02-11 11:06:48"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>brotli security update</summary>
    <description>Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression.   

Security Fix(es):  

  * Scrapy: python-scrapy: brotli: Python brotli decompression bomb DoS (CVE-2025-6176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2389" id="RHSA-2026:2389" type="rhsa" title="RHSA-2026:2389"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6176" id="CVE-2025-6176" type="cve" title="CVE-2025-6176"/>
      <reference href="https://bugzilla.redhat.com/2408762" id="2408762" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2389.html" id="ALSA-2026:2389" type="self" title="ALSA-2026:2389"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3-brotli" version="1.0.6" release="4.el8_10" epoch="0" arch="s390x" src="brotli-1.0.6-4.el8_10.src.rpm">
          <filename>python3-brotli-1.0.6-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">9185e6498fe7615012fd12bb0242cb772d88809f084b68cc84a82d567ebbc170</sum>
        </package>
        <package name="brotli-devel" version="1.0.6" release="4.el8_10" epoch="0" arch="s390x" src="brotli-1.0.6-4.el8_10.src.rpm">
          <filename>brotli-devel-1.0.6-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">bcda24d7e1716e221b40369cc54a38600c22a0fae82dcada9d2af7dfb0763a25</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2419</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2026-02-10 00:00:00"/>
    <updated date="2026-02-11 15:30:14"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Excessive read buffering DoS in http.client (CVE-2025-13836)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2419" id="RHSA-2026:2419" type="rhsa" title="RHSA-2026:2419"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13836" id="CVE-2025-13836" type="cve" title="CVE-2025-13836"/>
      <reference href="https://bugzilla.redhat.com/2418078" id="2418078" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2419.html" id="ALSA-2026:2419" type="self" title="ALSA-2026:2419"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.12-rpm-macros" version="3.12.12" release="2.el8_10" epoch="0" arch="noarch" src="python3.12-3.12.12-2.el8_10.src.rpm">
          <filename>python3.12-rpm-macros-3.12.12-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">65bd36d43c1a7da916b8fdf4fd6887571267cb49c216412789dd9e14b1d24ca1</sum>
        </package>
        <package name="python3.12-devel" version="3.12.12" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-2.el8_10.src.rpm">
          <filename>python3.12-devel-3.12.12-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">7300bcadc581ad093bd936d371bdf25d263c51315b0206dfbc2af8dbd74dbc76</sum>
        </package>
        <package name="python3.12-libs" version="3.12.12" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-2.el8_10.src.rpm">
          <filename>python3.12-libs-3.12.12-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">ae943cc4610ac7bf354c5d14a5c8e0de365c38dc718fcafaf8a474ae06879085</sum>
        </package>
        <package name="python3.12" version="3.12.12" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-2.el8_10.src.rpm">
          <filename>python3.12-3.12.12-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">c36dfe9650f813a026ef7f43f6c62b78576f6084508e22f7c5e9fb85a017031c</sum>
        </package>
        <package name="python3.12-tkinter" version="3.12.12" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-2.el8_10.src.rpm">
          <filename>python3.12-tkinter-3.12.12-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">dec5a30cfd1eaaf85f18c409db83cec2d8033651f273164d353d103dc748677c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2420</id>
    <title>Important: nodejs:24 security update</title>
    <issued date="2026-02-10 00:00:00"/>
    <updated date="2026-02-12 10:19:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:24 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * nodejs: Nodejs filesystem permissions bypass (CVE-2025-55132)
  * nodejs: Nodejs denial of service (CVE-2026-21637)
  * nodejs: Nodejs denial of service (CVE-2025-59466)
  * nodejs: Nodejs denial of service (CVE-2025-59465)
  * nodejs: Nodejs uninitialized memory exposure (CVE-2025-55131)
  * nodejs: Nodejs file permissions bypass (CVE-2025-55130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2420" id="RHSA-2026:2420" type="rhsa" title="RHSA-2026:2420"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55130" id="CVE-2025-55130" type="cve" title="CVE-2025-55130"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55131" id="CVE-2025-55131" type="cve" title="CVE-2025-55131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55132" id="CVE-2025-55132" type="cve" title="CVE-2025-55132"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59465" id="CVE-2025-59465" type="cve" title="CVE-2025-59465"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59466" id="CVE-2025-59466" type="cve" title="CVE-2025-59466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21637" id="CVE-2026-21637" type="cve" title="CVE-2026-21637"/>
      <reference href="https://bugzilla.redhat.com/2431338" id="2431338" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431340" id="2431340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431343" id="2431343" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431349" id="2431349" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431350" id="2431350" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431352" id="2431352" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2420.html" id="ALSA-2026:2420" type="self" title="ALSA-2026:2420"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="nodejs" stream="24" version="8100020260211100935" context="9c84b808" arch="s390x"/>
        <package name="nodejs-docs" version="24.13.0" release="0.module_el8.10.0+4113+bc863bc2" epoch="1" arch="noarch" src="nodejs-24.13.0-0.module_el8.10.0+4113+bc863bc2.src.rpm">
          <filename>nodejs-docs-24.13.0-0.module_el8.10.0+4113+bc863bc2.noarch.rpm</filename>
          <sum type="sha256">05a865e1bf5fe3112ba2f96c802ee859ae64ce4ca3820e16ae175c5a9fd428a0</sum>
        </package>
        <package name="nodejs-devel" version="24.13.0" release="0.module_el8.10.0+4113+bc863bc2" epoch="1" arch="s390x" src="nodejs-24.13.0-0.module_el8.10.0+4113+bc863bc2.src.rpm">
          <filename>nodejs-devel-24.13.0-0.module_el8.10.0+4113+bc863bc2.s390x.rpm</filename>
          <sum type="sha256">2addde1ead5155d599f19116bf833ec48b7698488096cebb9b4c740d48bcc063</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="6.module_el8.10.0+4086+70facd4a" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-6.module_el8.10.0+4086+70facd4a.src.rpm">
          <filename>nodejs-packaging-2021.06-6.module_el8.10.0+4086+70facd4a.noarch.rpm</filename>
          <sum type="sha256">318c493f93f2190506361306b5759e5e65eee18e3a8d85b195c800d8b7064bc0</sum>
        </package>
        <package name="nodejs-full-i18n" version="24.13.0" release="0.module_el8.10.0+4113+bc863bc2" epoch="1" arch="s390x" src="nodejs-24.13.0-0.module_el8.10.0+4113+bc863bc2.src.rpm">
          <filename>nodejs-full-i18n-24.13.0-0.module_el8.10.0+4113+bc863bc2.s390x.rpm</filename>
          <sum type="sha256">47810ee0c43f3980fc54fa863ecfe21dc811fb075880e49743175efaaf434f52</sum>
        </package>
        <package name="nodejs-libs" version="24.13.0" release="0.module_el8.10.0+4113+bc863bc2" epoch="1" arch="s390x" src="nodejs-24.13.0-0.module_el8.10.0+4113+bc863bc2.src.rpm">
          <filename>nodejs-libs-24.13.0-0.module_el8.10.0+4113+bc863bc2.s390x.rpm</filename>
          <sum type="sha256">484e1e66982c8a6ee9a7c39acb0b6dc85e04ec8842fc61f5435576d6a1a53311</sum>
        </package>
        <package name="npm" version="11.6.2" release="1.24.13.0.0.module_el8.10.0+4113+bc863bc2" epoch="1" arch="noarch" src="nodejs-24.13.0-0.module_el8.10.0+4113+bc863bc2.src.rpm">
          <filename>npm-11.6.2-1.24.13.0.0.module_el8.10.0+4113+bc863bc2.noarch.rpm</filename>
          <sum type="sha256">9919ff306026467e4310bd20ef03654cc7483478f47f4ce9bc95b9c25217bcdd</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.3" release="1.module_el8.10.0+4061+f8ceeab9" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.3-1.module_el8.10.0+4061+f8ceeab9.src.rpm">
          <filename>nodejs-nodemon-3.0.3-1.module_el8.10.0+4061+f8ceeab9.noarch.rpm</filename>
          <sum type="sha256">9a38ec0d35f9d0671cb0343c1270c1a85bf1b2250b40fe3facedbd919eee2b91</sum>
        </package>
        <package name="nodejs" version="24.13.0" release="0.module_el8.10.0+4113+bc863bc2" epoch="1" arch="s390x" src="nodejs-24.13.0-0.module_el8.10.0+4113+bc863bc2.src.rpm">
          <filename>nodejs-24.13.0-0.module_el8.10.0+4113+bc863bc2.s390x.rpm</filename>
          <sum type="sha256">cff241d19a61a55b6e7e846e52a99c586e3ee8a89eba7d6820ada3cdd5312220</sum>
        </package>
        <package name="v8-13.6-devel" version="13.6.233.17" release="1.24.13.0.0.module_el8.10.0+4113+bc863bc2" epoch="3" arch="s390x" src="nodejs-24.13.0-0.module_el8.10.0+4113+bc863bc2.src.rpm">
          <filename>v8-13.6-devel-13.6.233.17-1.24.13.0.0.module_el8.10.0+4113+bc863bc2.s390x.rpm</filename>
          <sum type="sha256">dfaa47b2b05446403e239521145762950fbc86db7189d6ba4069c89742e3edad</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="6.module_el8.10.0+4086+70facd4a" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-6.module_el8.10.0+4086+70facd4a.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-6.module_el8.10.0+4086+70facd4a.noarch.rpm</filename>
          <sum type="sha256">f4b4a25dc07327deb51619715aae6bd35d22e29ccfc97141c0b61de3a1995eee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2421</id>
    <title>Important: nodejs:22 security update</title>
    <issued date="2026-02-10 00:00:00"/>
    <updated date="2026-02-13 10:53:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:22 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * nodejs: Nodejs filesystem permissions bypass (CVE-2025-55132)
  * nodejs: Nodejs denial of service (CVE-2026-21637)
  * nodejs: Nodejs denial of service (CVE-2025-59466)
  * nodejs: Nodejs denial of service (CVE-2025-59465)
  * nodejs: Nodejs uninitialized memory exposure (CVE-2025-55131)
  * nodejs: Nodejs file permissions bypass (CVE-2025-55130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2421" id="RHSA-2026:2421" type="rhsa" title="RHSA-2026:2421"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55130" id="CVE-2025-55130" type="cve" title="CVE-2025-55130"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55131" id="CVE-2025-55131" type="cve" title="CVE-2025-55131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55132" id="CVE-2025-55132" type="cve" title="CVE-2025-55132"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59465" id="CVE-2025-59465" type="cve" title="CVE-2025-59465"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59466" id="CVE-2025-59466" type="cve" title="CVE-2025-59466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21637" id="CVE-2026-21637" type="cve" title="CVE-2026-21637"/>
      <reference href="https://bugzilla.redhat.com/2431338" id="2431338" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431340" id="2431340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431343" id="2431343" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431349" id="2431349" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431350" id="2431350" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431352" id="2431352" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2421.html" id="ALSA-2026:2421" type="self" title="ALSA-2026:2421"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="nodejs" stream="22" version="8100020260211100221" context="9c84b808" arch="s390x"/>
        <package name="v8-12.4-devel" version="12.4.254.21" release="1.22.22.0.1.module_el8.10.0+4112+db1af44b" epoch="3" arch="s390x" src="nodejs-22.22.0-1.module_el8.10.0+4112+db1af44b.src.rpm">
          <filename>v8-12.4-devel-12.4.254.21-1.22.22.0.1.module_el8.10.0+4112+db1af44b.s390x.rpm</filename>
          <sum type="sha256">01bc52d7683ec844a7b97280ee8b5ad907e269274f3401677a7d0908596a2ea5</sum>
        </package>
        <package name="npm" version="10.9.4" release="1.22.22.0.1.module_el8.10.0+4112+db1af44b" epoch="1" arch="s390x" src="nodejs-22.22.0-1.module_el8.10.0+4112+db1af44b.src.rpm">
          <filename>npm-10.9.4-1.22.22.0.1.module_el8.10.0+4112+db1af44b.s390x.rpm</filename>
          <sum type="sha256">0788172a8b29a83be94eb1561e97afb6ba0ba3c72d814ca33902a84690612560</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.10.0+4006+3c416519" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.10.0+4006+3c416519.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.10.0+4006+3c416519.noarch.rpm</filename>
          <sum type="sha256">1b6e11aaa8d9bdb9162feb0d449e70ce58986cd57aeed33595bc13516352a9e6</sum>
        </package>
        <package name="nodejs-full-i18n" version="22.22.0" release="1.module_el8.10.0+4112+db1af44b" epoch="1" arch="s390x" src="nodejs-22.22.0-1.module_el8.10.0+4112+db1af44b.src.rpm">
          <filename>nodejs-full-i18n-22.22.0-1.module_el8.10.0+4112+db1af44b.s390x.rpm</filename>
          <sum type="sha256">304f31de5cea415e78c73cba7e90f6b301501cee5d36d4d4cb501b41a4b1fc3d</sum>
        </package>
        <package name="nodejs" version="22.22.0" release="1.module_el8.10.0+4112+db1af44b" epoch="1" arch="s390x" src="nodejs-22.22.0-1.module_el8.10.0+4112+db1af44b.src.rpm">
          <filename>nodejs-22.22.0-1.module_el8.10.0+4112+db1af44b.s390x.rpm</filename>
          <sum type="sha256">33adf2fe043f6d90af8dd9fb80c825dbb17dc854006928990b2ad02df09bb84e</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="5.module_el8.10.0+4085+6f807d30" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-5.module_el8.10.0+4085+6f807d30.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-5.module_el8.10.0+4085+6f807d30.noarch.rpm</filename>
          <sum type="sha256">44fc7050dda327626d4c812ac0f2a255569e9771f6b63f485507940c2b8c2f5f</sum>
        </package>
        <package name="nodejs-libs" version="22.22.0" release="1.module_el8.10.0+4112+db1af44b" epoch="1" arch="s390x" src="nodejs-22.22.0-1.module_el8.10.0+4112+db1af44b.src.rpm">
          <filename>nodejs-libs-22.22.0-1.module_el8.10.0+4112+db1af44b.s390x.rpm</filename>
          <sum type="sha256">838c94704a82397fc075f989ab03380ff941f8e8eae119b6e16d252a22f4824f</sum>
        </package>
        <package name="nodejs-devel" version="22.22.0" release="1.module_el8.10.0+4112+db1af44b" epoch="1" arch="s390x" src="nodejs-22.22.0-1.module_el8.10.0+4112+db1af44b.src.rpm">
          <filename>nodejs-devel-22.22.0-1.module_el8.10.0+4112+db1af44b.s390x.rpm</filename>
          <sum type="sha256">8fd7edabcbe95f715ba4a5ef2132c7806f03a336794fcf90c3977f41e8ebcb42</sum>
        </package>
        <package name="nodejs-docs" version="22.22.0" release="1.module_el8.10.0+4112+db1af44b" epoch="1" arch="noarch" src="nodejs-22.22.0-1.module_el8.10.0+4112+db1af44b.src.rpm">
          <filename>nodejs-docs-22.22.0-1.module_el8.10.0+4112+db1af44b.noarch.rpm</filename>
          <sum type="sha256">95640166e715d55c3141ba355100fc81425a98e17da9548b782b0a4a1d46afef</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="5.module_el8.10.0+4085+6f807d30" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-5.module_el8.10.0+4085+6f807d30.src.rpm">
          <filename>nodejs-packaging-2021.06-5.module_el8.10.0+4085+6f807d30.noarch.rpm</filename>
          <sum type="sha256">ac23c47b101a1951f2b6653e6e582eb293925dd3f3b4d00c2d22e27547f3d94e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2422</id>
    <title>Important: nodejs:20 security update</title>
    <issued date="2026-02-10 00:00:00"/>
    <updated date="2026-02-12 10:15:50"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:20 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * nodejs: Nodejs filesystem permissions bypass (CVE-2025-55132)
  * nodejs: Nodejs denial of service (CVE-2026-21637)
  * nodejs: Nodejs denial of service (CVE-2025-59466)
  * nodejs: Nodejs denial of service (CVE-2025-59465)
  * nodejs: Nodejs uninitialized memory exposure (CVE-2025-55131)
  * nodejs: Nodejs file permissions bypass (CVE-2025-55130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2422" id="RHSA-2026:2422" type="rhsa" title="RHSA-2026:2422"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55130" id="CVE-2025-55130" type="cve" title="CVE-2025-55130"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55131" id="CVE-2025-55131" type="cve" title="CVE-2025-55131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55132" id="CVE-2025-55132" type="cve" title="CVE-2025-55132"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59465" id="CVE-2025-59465" type="cve" title="CVE-2025-59465"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59466" id="CVE-2025-59466" type="cve" title="CVE-2025-59466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21637" id="CVE-2026-21637" type="cve" title="CVE-2026-21637"/>
      <reference href="https://bugzilla.redhat.com/2431338" id="2431338" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431340" id="2431340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431343" id="2431343" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431349" id="2431349" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431350" id="2431350" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431352" id="2431352" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2422.html" id="ALSA-2026:2422" type="self" title="ALSA-2026:2422"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="nodejs" stream="20" version="8100020250422084904" context="9edba152" arch="s390x"/>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.10.0+3982+85c136aa" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.10.0+3982+85c136aa.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.10.0+3982+85c136aa.noarch.rpm</filename>
          <sum type="sha256">2a3ac075981f56758aac0aa08cc55d71f2ca6610e6bc965f306dd6b9a8db442a</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="5.module_el8.10.0+4084+7c0af990" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-5.module_el8.10.0+4084+7c0af990.src.rpm">
          <filename>nodejs-packaging-2021.06-5.module_el8.10.0+4084+7c0af990.noarch.rpm</filename>
          <sum type="sha256">8b89ad41d4e66986f706fbb4d183a2d0d819eeaf18d6f1503e41a8affbf4af31</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="5.module_el8.10.0+4084+7c0af990" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-5.module_el8.10.0+4084+7c0af990.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-5.module_el8.10.0+4084+7c0af990.noarch.rpm</filename>
          <sum type="sha256">8bd79cf5922c24722b1536d007b4ab588d061e645ed37dcbe896dbcdb8cb1b36</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:24339</id>
    <title>Important: bind security update</title>
    <issued date="2026-06-08 00:00:00"/>
    <updated date="2026-06-09 09:05:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)
  * bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:24339" id="RHSA-2026:24339" type="rhsa" title="RHSA-2026:24339"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3039" id="CVE-2026-3039" type="cve" title="CVE-2026-3039"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5946" id="CVE-2026-5946" type="cve" title="CVE-2026-5946"/>
      <reference href="https://bugzilla.redhat.com/2479767" id="2479767" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479771" id="2479771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-24339.html" id="ALSA-2026:24339" type="self" title="ALSA-2026:24339"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="bind-utils" version="9.11.36" release="16.el8_10.8" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.8.src.rpm">
          <filename>bind-utils-9.11.36-16.el8_10.8.s390x.rpm</filename>
          <sum type="sha256">0070b3524ab84f7100353995be1b6a5e1d929c8d8536e49ba6eed556b69601b7</sum>
        </package>
        <package name="bind-lite-devel" version="9.11.36" release="16.el8_10.8" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.8.src.rpm">
          <filename>bind-lite-devel-9.11.36-16.el8_10.8.s390x.rpm</filename>
          <sum type="sha256">050e3d3219bc793f84fb5c8f30d4b68614d653e8ece77ab4caec173e53be9089</sum>
        </package>
        <package name="bind-chroot" version="9.11.36" release="16.el8_10.8" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.8.src.rpm">
          <filename>bind-chroot-9.11.36-16.el8_10.8.s390x.rpm</filename>
          <sum type="sha256">1d9801495955d4f04d8ec8f1732a5694b7f3c61d159dabc371895676c7712f68</sum>
        </package>
        <package name="bind-pkcs11-utils" version="9.11.36" release="16.el8_10.8" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.8.src.rpm">
          <filename>bind-pkcs11-utils-9.11.36-16.el8_10.8.s390x.rpm</filename>
          <sum type="sha256">26557016bd4a3a71a9392abb3752c1f0ad9f72a69beb2b307f07fbef99d1ce7a</sum>
        </package>
        <package name="bind" version="9.11.36" release="16.el8_10.8" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.8.src.rpm">
          <filename>bind-9.11.36-16.el8_10.8.s390x.rpm</filename>
          <sum type="sha256">39227d6079afdcbb40a42393f358312a5472cd282a8f5056bbf25c1aa5d9b796</sum>
        </package>
        <package name="bind-pkcs11" version="9.11.36" release="16.el8_10.8" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.8.src.rpm">
          <filename>bind-pkcs11-9.11.36-16.el8_10.8.s390x.rpm</filename>
          <sum type="sha256">3ee3a106abda9b484b1fdc5d4fcd9a60b0bcb70bef23379e8407a9bb98fd821d</sum>
        </package>
        <package name="bind-license" version="9.11.36" release="16.el8_10.8" epoch="32" arch="noarch" src="bind-9.11.36-16.el8_10.8.src.rpm">
          <filename>bind-license-9.11.36-16.el8_10.8.noarch.rpm</filename>
          <sum type="sha256">6a7fc6642366747c33c753c5334ed02a40daac114e87124f76d5431a682fd11d</sum>
        </package>
        <package name="bind-libs-lite" version="9.11.36" release="16.el8_10.8" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.8.src.rpm">
          <filename>bind-libs-lite-9.11.36-16.el8_10.8.s390x.rpm</filename>
          <sum type="sha256">6cfa5df0f97d3240651f7332d89d19b063106cd41a74f3c7a4f3d8ffafcd010c</sum>
        </package>
        <package name="bind-libs" version="9.11.36" release="16.el8_10.8" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.8.src.rpm">
          <filename>bind-libs-9.11.36-16.el8_10.8.s390x.rpm</filename>
          <sum type="sha256">8056e648f11997c2271ed37d48ed131ce9626b4175090cbccae64216f3a778de</sum>
        </package>
        <package name="python3-bind" version="9.11.36" release="16.el8_10.8" epoch="32" arch="noarch" src="bind-9.11.36-16.el8_10.8.src.rpm">
          <filename>python3-bind-9.11.36-16.el8_10.8.noarch.rpm</filename>
          <sum type="sha256">a4e59f07d54b741f1cdf9d0e6b813434d0d722d2f7360cf8cd8185b4e564dd03</sum>
        </package>
        <package name="bind-devel" version="9.11.36" release="16.el8_10.8" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.8.src.rpm">
          <filename>bind-devel-9.11.36-16.el8_10.8.s390x.rpm</filename>
          <sum type="sha256">be43b0b3a3252daa2ef7914b6cdf18d9f13caba9887252f5dbbee7e32f63ef0d</sum>
        </package>
        <package name="bind-pkcs11-libs" version="9.11.36" release="16.el8_10.8" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.8.src.rpm">
          <filename>bind-pkcs11-libs-9.11.36-16.el8_10.8.s390x.rpm</filename>
          <sum type="sha256">d1ad70f910300f0dc66c68c917d520b5ba498f253aacfa2ede646e4967664d5d</sum>
        </package>
        <package name="bind-sdb-chroot" version="9.11.36" release="16.el8_10.8" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.8.src.rpm">
          <filename>bind-sdb-chroot-9.11.36-16.el8_10.8.s390x.rpm</filename>
          <sum type="sha256">dec64ad4da2e01ae3f35ed5b8771a50e75a617f616a6e6678c3a05ef9ba2431d</sum>
        </package>
        <package name="bind-pkcs11-devel" version="9.11.36" release="16.el8_10.8" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.8.src.rpm">
          <filename>bind-pkcs11-devel-9.11.36-16.el8_10.8.s390x.rpm</filename>
          <sum type="sha256">f079435a60516c2d220d785cf2cbcc8caece991f21b9e0aab182970828158b19</sum>
        </package>
        <package name="bind-sdb" version="9.11.36" release="16.el8_10.8" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.8.src.rpm">
          <filename>bind-sdb-9.11.36-16.el8_10.8.s390x.rpm</filename>
          <sum type="sha256">f8f120a810e4e3d2d847b1e3ac2ac961a415b068b75605ca5885882dd5bafcc0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:24340</id>
    <title>Important: frr security update</title>
    <issued date="2026-06-08 00:00:00"/>
    <updated date="2026-06-08 08:30:39"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>frr security update</summary>
    <description>FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD.   

Security Fix(es):  

  * frr: denial of service via crafted FlowSpec component (CVE-2026-37457)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:24340" id="RHSA-2026:24340" type="rhsa" title="RHSA-2026:24340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-37457" id="CVE-2026-37457" type="cve" title="CVE-2026-37457"/>
      <reference href="https://bugzilla.redhat.com/2464548" id="2464548" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-24340.html" id="ALSA-2026:24340" type="self" title="ALSA-2026:24340"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="frr" version="7.5.1" release="24.el8_10" epoch="0" arch="s390x" src="frr-7.5.1-24.el8_10.src.rpm">
          <filename>frr-7.5.1-24.el8_10.s390x.rpm</filename>
          <sum type="sha256">0336623543e4c3c48d31c96bf0d1841e3f4a932923702dd7343afbbd0cd31b85</sum>
        </package>
        <package name="frr-selinux" version="7.5.1" release="24.el8_10" epoch="0" arch="noarch" src="frr-7.5.1-24.el8_10.src.rpm">
          <filename>frr-selinux-7.5.1-24.el8_10.noarch.rpm</filename>
          <sum type="sha256">93a41927cfad61e44a3b107fe0facb9aa366cb9112522c90fa9d22186ed9ebab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:24365</id>
    <title>Important: unbound security update</title>
    <issued date="2026-06-08 00:00:00"/>
    <updated date="2026-06-08 10:15:20"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.   

Security Fix(es):  

  * unbound: Heap overflow and crash with multiple nsid, cookie, padding EDNS options (CVE-2026-42944)
  * unbound: Unbound DNSSEC Validator Denial of Service via Incorrect Write Offset Counter in Chase-Reply Messages (CVE-2026-42959)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:24365" id="RHSA-2026:24365" type="rhsa" title="RHSA-2026:24365"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42944" id="CVE-2026-42944" type="cve" title="CVE-2026-42944"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42959" id="CVE-2026-42959" type="cve" title="CVE-2026-42959"/>
      <reference href="https://bugzilla.redhat.com/2479774" id="2479774" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479806" id="2479806" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-24365.html" id="ALSA-2026:24365" type="self" title="ALSA-2026:24365"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="unbound-devel" version="1.16.2" release="5.11.el8_10" epoch="0" arch="s390x" src="unbound-1.16.2-5.11.el8_10.src.rpm">
          <filename>unbound-devel-1.16.2-5.11.el8_10.s390x.rpm</filename>
          <sum type="sha256">0972ea80e9fce9a63ced3963c46e8ec7d66dd3f7903fbded8b1eb0d6288704f4</sum>
        </package>
        <package name="python3-unbound" version="1.16.2" release="5.11.el8_10" epoch="0" arch="s390x" src="unbound-1.16.2-5.11.el8_10.src.rpm">
          <filename>python3-unbound-1.16.2-5.11.el8_10.s390x.rpm</filename>
          <sum type="sha256">0d4f77af05f29d6197e95f51d0258a7dca4315f0cb84b2efde4911dcaaaa7419</sum>
        </package>
        <package name="unbound-libs" version="1.16.2" release="5.11.el8_10" epoch="0" arch="s390x" src="unbound-1.16.2-5.11.el8_10.src.rpm">
          <filename>unbound-libs-1.16.2-5.11.el8_10.s390x.rpm</filename>
          <sum type="sha256">2bf6c7091938ef562ba1b9b7d3462f6d617e44a00dd68e2a9223d58da6932fcb</sum>
        </package>
        <package name="unbound" version="1.16.2" release="5.11.el8_10" epoch="0" arch="s390x" src="unbound-1.16.2-5.11.el8_10.src.rpm">
          <filename>unbound-1.16.2-5.11.el8_10.s390x.rpm</filename>
          <sum type="sha256">7c112a4c00b953ec8b2ed14443706c48904085a3b9268a0484d6962c5862fb4a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:24545</id>
    <title>Important: libyang security update</title>
    <issued date="2026-06-08 00:00:00"/>
    <updated date="2026-06-09 09:03:59"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libyang security update</summary>
    <description>Libyang is YANG data modeling language parser and toolkit written (and providing API) in C.  

Security Fix(es):  

  * libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob (CVE-2026-44673)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:24545" id="RHSA-2026:24545" type="rhsa" title="RHSA-2026:24545"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-44673" id="CVE-2026-44673" type="cve" title="CVE-2026-44673"/>
      <reference href="https://bugzilla.redhat.com/2477617" id="2477617" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-24545.html" id="ALSA-2026:24545" type="self" title="ALSA-2026:24545"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libyang" version="1.0.184" release="2.el8_10" epoch="0" arch="s390x" src="libyang-1.0.184-2.el8_10.src.rpm">
          <filename>libyang-1.0.184-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">3e2625117d8f44caecf245aeb5b4b95184873b9079cbb8aef4290f550119bd78</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2470</id>
    <title>Moderate: php:7.4 security update</title>
    <issued date="2026-02-10 00:00:00"/>
    <updated date="2026-02-12 10:10:19"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>php:7.4 security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  

Security Fix(es):  

  * php: Leak partial content of the heap through heap buffer over-read in mysqlnd (CVE-2024-8929)
  * php: Single byte overread with convert.quoted-printable-decode filter (CVE-2024-11233)
  * php: Configuring a proxy in a stream context might allow for CRLF injection in URIs (CVE-2024-11234)
  * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217)
  * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736)
  * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734)
  * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219)
  * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861)
  * php: pgsql extension does not check for errors during escaping (CVE-2025-1735)
  * php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix (CVE-2025-6491)
  * php: PHP Hostname Null Character Vulnerability (CVE-2025-1220)
  * php: heap-based buffer overflow in array_merge() (CVE-2025-14178)
  * php: PHP: Information disclosure via getimagesize() function when reading multi-chunk images (CVE-2025-14177)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2470" id="RHSA-2026:2470" type="rhsa" title="RHSA-2026:2470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11233" id="CVE-2024-11233" type="cve" title="CVE-2024-11233"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11234" id="CVE-2024-11234" type="cve" title="CVE-2024-11234"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8929" id="CVE-2024-8929" type="cve" title="CVE-2024-8929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1217" id="CVE-2025-1217" type="cve" title="CVE-2025-1217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1219" id="CVE-2025-1219" type="cve" title="CVE-2025-1219"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1220" id="CVE-2025-1220" type="cve" title="CVE-2025-1220"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14177" id="CVE-2025-14177" type="cve" title="CVE-2025-14177"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14178" id="CVE-2025-14178" type="cve" title="CVE-2025-14178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1734" id="CVE-2025-1734" type="cve" title="CVE-2025-1734"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1735" id="CVE-2025-1735" type="cve" title="CVE-2025-1735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1736" id="CVE-2025-1736" type="cve" title="CVE-2025-1736"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1861" id="CVE-2025-1861" type="cve" title="CVE-2025-1861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6491" id="CVE-2025-6491" type="cve" title="CVE-2025-6491"/>
      <reference href="https://bugzilla.redhat.com/2327960" id="2327960" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328521" id="2328521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2328523" id="2328523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2355917" id="2355917" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356041" id="2356041" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356042" id="2356042" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356043" id="2356043" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356046" id="2356046" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2378689" id="2378689" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2378690" id="2378690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379792" id="2379792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2425625" id="2425625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2425626" id="2425626" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2470.html" id="ALSA-2026:2470" type="self" title="ALSA-2026:2470"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="php" stream="7.4" version="8100020260211101444" context="eb0869e2" arch="s390x"/>
        <package name="php-common" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-common-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">02f68ecbe57cb4c9b3bf63094ff2965691ba71dac9d6c611723adaca56818a0a</sum>
        </package>
        <package name="php" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">035b1f1e2286e47ccea6c58d72a6ef1f4b3b8d2870af09bcf33d324818082fc7</sum>
        </package>
        <package name="php-odbc" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-odbc-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">051055d8d9e4541797f279778e4ce243e48a97d2f2d7dc78b24ef9f913991149</sum>
        </package>
        <package name="php-pecl-apcu" version="5.1.18" release="1.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.18-1.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-pecl-apcu-5.1.18-1.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">28cdbec1cbb142c4f90886ef9e321757a16102af0d64e1554101885e86b3bde6</sum>
        </package>
        <package name="php-pear" version="1.10.13" release="1.module_el8.10.0+3935+28808425" epoch="1" arch="noarch" src="php-pear-1.10.13-1.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-pear-1.10.13-1.module_el8.10.0+3935+28808425.noarch.rpm</filename>
          <sum type="sha256">45f620cfb1bf36fd848dfcfdd35a9fdf7051aa38bf1cf8f748e7da7342e08af1</sum>
        </package>
        <package name="php-xmlrpc" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-xmlrpc-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">4cd443b3c4f65a490cdf0874f43cea99ca2f382f275790348718e834b318f625</sum>
        </package>
        <package name="libzip-tools" version="1.6.1" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>libzip-tools-1.6.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">4dcd7aacc8eb606c28a6d4707bf2d928045c38a99d7f40e5818bdfd63931d7c0</sum>
        </package>
        <package name="php-embedded" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-embedded-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">51cc8631574fd7500c439433a00bb13855c8537ff1f68a0ccb400358d6b9cc1a</sum>
        </package>
        <package name="php-enchant" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-enchant-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">543e7472d9d321a134b74768365b2a607940d71b0d6cdf12a92278cebbfebd2a</sum>
        </package>
        <package name="php-gd" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-gd-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">551b8825c89a104b937331e05db0fb589afc79b20220fedcd3ab0eabe1424f3d</sum>
        </package>
        <package name="php-pecl-rrd" version="2.0.1" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-pecl-rrd-2.0.1-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pecl-rrd-2.0.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">5e91b3f33f42fdf8f7e58dc4a81af0f2cf8a51cb967a3803f55a275bb7a2b1f1</sum>
        </package>
        <package name="php-ffi" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-ffi-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">68b8d2e57ae77d6eca4ae11f92805175c0a85ef7fd0bc6f0c7a29643cd9b8af1</sum>
        </package>
        <package name="php-bcmath" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-bcmath-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">752a9e11d745d4ab8eb4bc3aee4ca037becc7cd83beae4256adbea0cfb3e7e99</sum>
        </package>
        <package name="php-pgsql" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-pgsql-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">76047799001782e9972e66146c1165ba53ed24637011ee63c1fe84ef868635b3</sum>
        </package>
        <package name="php-pecl-zip" version="1.18.2" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-pecl-zip-1.18.2-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pecl-zip-1.18.2-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">801fd66e96d056487f697bb442ce1eba14196571735ca21d7c3e4d5a722c4006</sum>
        </package>
        <package name="php-pecl-xdebug" version="2.9.5" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-pecl-xdebug-2.9.5-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pecl-xdebug-2.9.5-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">864cae889833ed12fd18cf7183adf90631fed1cf2cfe6eb1cbc4e31f2ae6ebee</sum>
        </package>
        <package name="php-dbg" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-dbg-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">89ec49605eab2e9b0b3875dfd562f97fc9a131320bb24f39c11f089d4b0fb402</sum>
        </package>
        <package name="libzip" version="1.6.1" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">9a9e43a839757a5b4aea25cc7ffbca0524546f9b9177562674854f7d3c042ed1</sum>
        </package>
        <package name="php-opcache" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-opcache-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">9c5bd2ef3f0cc296c0a7bdda7415489853c2f1d6898517de10cfd44a2b5f3de4</sum>
        </package>
        <package name="php-cli" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-cli-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">9cc3593ee0674d50e1ef67b80f178fdc1ea9863e1ff65420bdd5556b03d101ad</sum>
        </package>
        <package name="php-ldap" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-ldap-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">9edd0ab9426e92a9933a1d0fda167d801ee36bf7f32b9cb0bc3103af40969088</sum>
        </package>
        <package name="php-process" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-process-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">a36acd5d307694a7b1629ebd49e78465cbda7cbf38b871fd9512b858c50e27ea</sum>
        </package>
        <package name="libzip-devel" version="1.6.1" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>libzip-devel-1.6.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">a3859fbd79933d7d04d80ad2041fa602d3f20b3cefd633660c5dee5365df1f35</sum>
        </package>
        <package name="php-mbstring" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-mbstring-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">a63faa50f1d62c975f42e645fc1d14582be0c6bca0445186f0d9b1766a1ac540</sum>
        </package>
        <package name="php-mysqlnd" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-mysqlnd-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">a93b3b34d7dac35e106b29c673f91b4e40c6c2fb0fd87cba8b4d08d8f3955d97</sum>
        </package>
        <package name="php-pdo" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-pdo-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">b4b3447c0a84f4645e57935619d2b459b0dbcf73ffd1bfa15d9d045eef41c00f</sum>
        </package>
        <package name="php-snmp" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-snmp-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">b5fe4d6560dda8cd7270ecca363e12a6451ca22ef522feb94b4104369d277f32</sum>
        </package>
        <package name="php-gmp" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-gmp-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">c05da28435ebd33d841af70bce30effa1436ba0c06f46b35e3befae5ee505435</sum>
        </package>
        <package name="php-pecl-apcu-devel" version="5.1.18" release="1.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.18-1.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-pecl-apcu-devel-5.1.18-1.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">c100fd4a0db09a4ab7955eceb70da5c39dc77c633908c171f7ee629b45ea9b9a</sum>
        </package>
        <package name="php-fpm" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-fpm-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">c8f9986efc59b1799269179e33786fb1a90ca1683654f6a67aa1412c6de35dfa</sum>
        </package>
        <package name="php-intl" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-intl-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">ce25938d120bb5cd59b9dfca5d6f23cef9e185d33c4c9fb097cee90bcc2b3aa9</sum>
        </package>
        <package name="php-dba" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-dba-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">d1ca070a178794a3d34c24151fb9fb0a101805934576d7047bc89014066d585b</sum>
        </package>
        <package name="php-soap" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-soap-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">d3a6f32b9fb30e8d0e80fe5668280ddeb5b3c0deb71cb6bc2649d7fb7983cd06</sum>
        </package>
        <package name="php-json" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-json-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">e774e2bf34ceb959f3dd3150618c5001f481b34f351bed8a056db9143cc3ca61</sum>
        </package>
        <package name="php-devel" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-devel-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">f472dad77f0323cd60ae51b7aa694b0aac80d87fb55a6e783b892cbe59ac587f</sum>
        </package>
        <package name="php-xml" version="7.4.33" release="3.module_el8.10.0+4114+3b36c618" epoch="0" arch="s390x" src="php-7.4.33-3.module_el8.10.0+4114+3b36c618.src.rpm">
          <filename>php-xml-7.4.33-3.module_el8.10.0+4114+3b36c618.s390x.rpm</filename>
          <sum type="sha256">fb840b6ab67f4100e5c389e81e28fa3064c156d205f5f13b320ff5b1c167f620</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:24984</id>
    <title>Important: poppler security update</title>
    <issued date="2026-06-10 00:00:00"/>
    <updated date="2026-06-10 08:21:02"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>poppler security update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.  

Security Fix(es):  

  * poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication (CVE-2026-10118)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:24984" id="RHSA-2026:24984" type="rhsa" title="RHSA-2026:24984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-10118" id="CVE-2026-10118" type="cve" title="CVE-2026-10118"/>
      <reference href="https://bugzilla.redhat.com/2460428" id="2460428" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-24984.html" id="ALSA-2026:24984" type="self" title="ALSA-2026:24984"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="poppler" version="20.11.0" release="14.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-14.el8_10.src.rpm">
          <filename>poppler-20.11.0-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">238e41e35551bc11f47b7b32edea4a3958a3ea291996ae5543bfda829ac4c021</sum>
        </package>
        <package name="poppler-qt5" version="20.11.0" release="14.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-14.el8_10.src.rpm">
          <filename>poppler-qt5-20.11.0-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">777bd3739e31de8d2c84a9fc56c47993616031eebd8722bc81f5d863df61b176</sum>
        </package>
        <package name="poppler-utils" version="20.11.0" release="14.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-14.el8_10.src.rpm">
          <filename>poppler-utils-20.11.0-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">c5becccc3d520e6a964c4877bb38f67c6f4005b9c41ef228a873a955babfd33d</sum>
        </package>
        <package name="poppler-glib" version="20.11.0" release="14.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-14.el8_10.src.rpm">
          <filename>poppler-glib-20.11.0-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">d909ba33d7b9cb0def3ed799b19582a26b7e5bff73fbb60fac4778f0b72103d5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25030</id>
    <title>Important: postgresql-jdbc security update</title>
    <issued date="2026-06-10 00:00:00"/>
    <updated date="2026-06-10 13:11:43"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql-jdbc security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database.  

Security Fix(es):  

  * jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication (CVE-2026-42198)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25030" id="RHSA-2026:25030" type="rhsa" title="RHSA-2026:25030"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42198" id="CVE-2026-42198" type="cve" title="CVE-2026-42198"/>
      <reference href="https://bugzilla.redhat.com/2463857" id="2463857" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-25030.html" id="ALSA-2026:25030" type="self" title="ALSA-2026:25030"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="postgresql-jdbc" version="42.2.14" release="4.el8_10" epoch="0" arch="noarch" src="postgresql-jdbc-42.2.14-4.el8_10.src.rpm">
          <filename>postgresql-jdbc-42.2.14-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">25f171fefe94635c8f4525024c784e864f8bc08ba4932e1951ca7b1d7cfc7bec</sum>
        </package>
        <package name="postgresql-jdbc-javadoc" version="42.2.14" release="4.el8_10" epoch="0" arch="noarch" src="postgresql-jdbc-42.2.14-4.el8_10.src.rpm">
          <filename>postgresql-jdbc-javadoc-42.2.14-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">5df621f52a91e3e51965723d1b4c3ec64b6ad8dacefe1899a5db8a6da98d468b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25090</id>
    <title>Important: httpd:2.4 security update</title>
    <issued date="2026-06-10 00:00:00"/>
    <updated date="2026-06-11 08:49:17"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>httpd:2.4 security update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.  

Security Fix(es):  

  * httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25090" id="RHSA-2026:25090" type="rhsa" title="RHSA-2026:25090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-49975" id="CVE-2026-49975" type="cve" title="CVE-2026-49975"/>
      <reference href="https://bugzilla.redhat.com/2485371" id="2485371" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-25090.html" id="ALSA-2026:25090" type="self" title="ALSA-2026:25090"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="httpd" stream="2.4" version="8100020260601035450" context="9edba152" arch="s390x"/>
        <package name="httpd-devel" version="2.4.37" release="65.module_el8.10.0+4185+0955a0d7.8" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.src.rpm">
          <filename>httpd-devel-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.s390x.rpm</filename>
          <sum type="sha256">3b4d209ed4f225bf591ded9dc0066865dee37e4b12b1a24766220f539d019fe3</sum>
        </package>
        <package name="mod_md" version="2.0.8" release="8.module_el8.10.0+4088+57f011c1.2" epoch="1" arch="s390x" src="mod_md-2.0.8-8.module_el8.10.0+4088+57f011c1.2.src.rpm">
          <filename>mod_md-2.0.8-8.module_el8.10.0+4088+57f011c1.2.s390x.rpm</filename>
          <sum type="sha256">51f08f5a2c2c9925c2d8acf5069e109f519302af55ab044dba7de03782591748</sum>
        </package>
        <package name="httpd-filesystem" version="2.4.37" release="65.module_el8.10.0+4185+0955a0d7.8" epoch="0" arch="noarch" src="httpd-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.src.rpm">
          <filename>httpd-filesystem-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.noarch.rpm</filename>
          <sum type="sha256">63c091aa5ee7062f5e72f3231ae53c1ca12ed29e6a4c6cc66389bc77e3941451</sum>
        </package>
        <package name="mod_proxy_html" version="2.4.37" release="65.module_el8.10.0+4185+0955a0d7.8" epoch="1" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.src.rpm">
          <filename>mod_proxy_html-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.s390x.rpm</filename>
          <sum type="sha256">6adc6434a89ccfa89f334e15455786a73a2b0c708fb24528a8c6ee7aaa5cbda0</sum>
        </package>
        <package name="httpd-tools" version="2.4.37" release="65.module_el8.10.0+4185+0955a0d7.8" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.src.rpm">
          <filename>httpd-tools-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.s390x.rpm</filename>
          <sum type="sha256">76c8ef271a4522a536053e702e49fd9c0ceb10f02fae92fbc2e3466038941595</sum>
        </package>
        <package name="httpd" version="2.4.37" release="65.module_el8.10.0+4190+704ad79b.8" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4190+704ad79b.8.src.rpm">
          <filename>httpd-2.4.37-65.module_el8.10.0+4190+704ad79b.8.s390x.rpm</filename>
          <sum type="sha256">8e863b880b04e4ab5b6a07812eec37620843277a997cdc35b9b06a1a1e5f8c5b</sum>
        </package>
        <package name="mod_ldap" version="2.4.37" release="65.module_el8.10.0+4185+0955a0d7.8" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.src.rpm">
          <filename>mod_ldap-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.s390x.rpm</filename>
          <sum type="sha256">c282deb0935dfcd4ce2c2d3604483855e0f24c24822c720a583a258a5b77f9f6</sum>
        </package>
        <package name="httpd-manual" version="2.4.37" release="65.module_el8.10.0+4185+0955a0d7.8" epoch="0" arch="noarch" src="httpd-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.src.rpm">
          <filename>httpd-manual-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.noarch.rpm</filename>
          <sum type="sha256">dfa8302abbbc38b9c262b97766ca86a2f91da5996375978f6b8726c34a892728</sum>
        </package>
        <package name="mod_http2" version="1.15.7" release="10.module_el8.10.0+4190+704ad79b.6" epoch="0" arch="s390x" src="mod_http2-1.15.7-10.module_el8.10.0+4190+704ad79b.6.src.rpm">
          <filename>mod_http2-1.15.7-10.module_el8.10.0+4190+704ad79b.6.s390x.rpm</filename>
          <sum type="sha256">eaf0d1dcc6a29ce72e62a2612d7e238c4900249f01bf769b00f8ebb8e84a5c3b</sum>
        </package>
        <package name="mod_session" version="2.4.37" release="65.module_el8.10.0+4185+0955a0d7.8" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.src.rpm">
          <filename>mod_session-2.4.37-65.module_el8.10.0+4185+0955a0d7.8.s390x.rpm</filename>
          <sum type="sha256">efc8d69ee706597d51028a0152eb0ffe5de3016b8be8cf80e57767f5b317988e</sum>
        </package>
        <package name="mod_ssl" version="2.4.37" release="65.module_el8.10.0+4190+704ad79b.8" epoch="1" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4190+704ad79b.8.src.rpm">
          <filename>mod_ssl-2.4.37-65.module_el8.10.0+4190+704ad79b.8.s390x.rpm</filename>
          <sum type="sha256">f60bb577e2d48dcf2327ddbbe6d5bd6b8344ba34f964dbd7e4441b667295c864</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25110</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2026-06-10 00:00:00"/>
    <updated date="2026-06-11 08:48:15"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.128 and .NET Runtime 8.0.28.Security Fix(es):  

  * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491)
  * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25110" id="RHSA-2026:25110" type="rhsa" title="RHSA-2026:25110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45491" id="CVE-2026-45491" type="cve" title="CVE-2026-45491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45591" id="CVE-2026-45591" type="cve" title="CVE-2026-45591"/>
      <reference href="https://bugzilla.redhat.com/2487164" id="2487164" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2487224" id="2487224" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-25110.html" id="ALSA-2026:25110" type="self" title="ALSA-2026:25110"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="dotnet-sdk-8.0" version="8.0.128" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.128-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.128-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">079fc8c205e2695383cec0c797dd774b3d86db03d24c8953096b9c5be4ac9874</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.28" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.128-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.28-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">08af0e41a8a24d858001b64958e2d9ac762c2726efd81260fdf569a3f9efd04a</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.28" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.128-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.28-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">1f20d232430c5d935460f9f1f48ebf522c7714c55534045ded5a560425de5b32</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.28" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.128-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.28-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">27b58b5e0d3b26e201ca641fc07114fb88a4fe7635cb8ef9c3bc5b697fae0e59</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.28" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.128-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.28-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">38c9e10a89b7074f0d0b399a9a56bda6abead117a1b73a59ba007f2ac0bee265</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.28" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.128-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.28-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">6f6b65b6218de855cff2ca6d89c182d8c6c2ed6ace5a603c6a14b10e58f578b9</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.128" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.128-1.el8_10.src.rpm">
          <filename>dotnet-templates-8.0-8.0.128-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a6ccfd5cdc55a68d343a672a02c34687b336069cae5ba7747c09758f8a18c6c9</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.28" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.128-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.28-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b70e391b1ade62985728ceb96ca58ab02eba2c5c9bb82501d7bb0d896158712f</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.28" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.128-1.el8_10.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.28-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">dd5d633c7217680a5d6ee993e46b6f610475013e331db83326ddbc33eb864802</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.128" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.128-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.128-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">ee9ad5bbca31480a863940de70957092bc60934562c1f63a5177fa6c36157b1a</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.28" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.128-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.28-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">fa7770fdc6996dde4603ca23b57fead901068355d28fc787458cdc15ac733ccf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25113</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2026-06-10 00:00:00"/>
    <updated date="2026-06-11 08:46:09"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.118 and .NET Runtime 9.0.17.Security Fix(es):  

  * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491)
  * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25113" id="RHSA-2026:25113" type="rhsa" title="RHSA-2026:25113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45491" id="CVE-2026-45491" type="cve" title="CVE-2026-45491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45591" id="CVE-2026-45591" type="cve" title="CVE-2026-45591"/>
      <reference href="https://bugzilla.redhat.com/2487164" id="2487164" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2487224" id="2487224" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-25113.html" id="ALSA-2026:25113" type="self" title="ALSA-2026:25113"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="dotnet-runtime-dbg-9.0" version="9.0.17" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.118-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-9.0-9.0.17-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">32823079074c53faede113c240088d5c69db30b482fafbbbb2dab4a993bb6af8</sum>
        </package>
        <package name="dotnet-apphost-pack-9.0" version="9.0.17" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.118-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-9.0-9.0.17-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">3fc4da596b7d11c4883964b70d43153c5bed77523aa9921f857926e2d195f462</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="9.0.118" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.118-1.el8_10.src.rpm">
          <filename>netstandard-targeting-pack-2.1-9.0.118-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">43c86ffdde67b4e8504207c821c6016ac6c43fdac68ffeac7082855424afa06f</sum>
        </package>
        <package name="dotnet-sdk-9.0" version="9.0.118" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.118-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-9.0.118-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">4820b0333bb9024f68ab7eba8c6560b8f97fe465e9dccc68c06193fa86cef8e3</sum>
        </package>
        <package name="dotnet-targeting-pack-9.0" version="9.0.17" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.118-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-9.0-9.0.17-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">4c5349e91bb55594fbdfcfe8ecf379526fca896c6de29b68ecc9e93c2f88f6b9</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-9.0" version="9.0.17" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.118-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-9.0-9.0.17-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">58d001b7870e0bdbb7e36088074f35a0c20624f34cb7025f9ef552e2b2509d65</sum>
        </package>
        <package name="dotnet-runtime-9.0" version="9.0.17" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.118-1.el8_10.src.rpm">
          <filename>dotnet-runtime-9.0-9.0.17-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">8d7dbae8cdb6221befe107a7e01e7bafa467c398ee23500438fd6a85727ac2f6</sum>
        </package>
        <package name="dotnet-hostfxr-9.0" version="9.0.17" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.118-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-9.0-9.0.17-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">ac8ee5bc528bf2a9324cf78048aaee7baa719d575b759101586b1954fd3b6c99</sum>
        </package>
        <package name="aspnetcore-targeting-pack-9.0" version="9.0.17" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.118-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-9.0-9.0.17-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">d8dd531373b78feb5c001d0c3426ffebf1855f6ed0db67fc5a93862ba6482249</sum>
        </package>
        <package name="dotnet-templates-9.0" version="9.0.118" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.118-1.el8_10.src.rpm">
          <filename>dotnet-templates-9.0-9.0.118-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">dc18800749008fcc2101c71fb0b41311fc91fbdda029ae722e573b4e1a6d1275</sum>
        </package>
        <package name="dotnet-sdk-dbg-9.0" version="9.0.118" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.118-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-9.0-9.0.118-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">f3e8f2a59b22eac8c64c8843598c147e05ae5ec4d6c21c66059bce9167995a17</sum>
        </package>
        <package name="aspnetcore-runtime-9.0" version="9.0.17" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.118-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-9.0-9.0.17-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">f3fb3df47e78812703faa9fd06882a2661ceed03b3e701f725e6363990e0a7b0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25114</id>
    <title>Important: .NET 10.0 security update</title>
    <issued date="2026-06-10 00:00:00"/>
    <updated date="2026-06-11 08:45:35"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.109 and .NET Runtime 10.0.9.Security Fix(es):  

  * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491)
  * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25114" id="RHSA-2026:25114" type="rhsa" title="RHSA-2026:25114"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45491" id="CVE-2026-45491" type="cve" title="CVE-2026-45491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45591" id="CVE-2026-45591" type="cve" title="CVE-2026-45591"/>
      <reference href="https://bugzilla.redhat.com/2487164" id="2487164" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2487224" id="2487224" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-25114.html" id="ALSA-2026:25114" type="self" title="ALSA-2026:25114"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="aspnetcore-runtime-10.0" version="10.0.9" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-10.0-10.0.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">2ebceda4043c8a95e5a0bdbf5d428058eb957ede74f73784b288f3026ee06627</sum>
        </package>
        <package name="dotnet" version="10.0.109" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>dotnet-10.0.109-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">7021ff5a0d4767bc5cd4125c16a91c61f03c0344ff729e8e56aa213a3a21578d</sum>
        </package>
        <package name="dotnet-sdk-dbg-10.0" version="10.0.109" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-10.0-10.0.109-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">7836809e1b5a64f9395b5dcb2b8f6d9a608aff119c90531214fcb148c2a1bf19</sum>
        </package>
        <package name="dotnet-runtime-dbg-10.0" version="10.0.9" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-10.0-10.0.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">8022a1ad601afa6db6adf7bff9c7cf91a72fb632990b7792af3d6c4d190d1825</sum>
        </package>
        <package name="dotnet-templates-10.0" version="10.0.109" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>dotnet-templates-10.0-10.0.109-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">88922fa23d1babc411f93b9c522cde49e1bf6b450f33fd1ca37696562aff9137</sum>
        </package>
        <package name="dotnet-runtime-10.0" version="10.0.9" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>dotnet-runtime-10.0-10.0.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">92558009b50fa9e7ff08aff94a4d49c8f9a27bdc661036fd88c3ab138d04b7fe</sum>
        </package>
        <package name="dotnet-sdk-10.0" version="10.0.109" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>dotnet-sdk-10.0-10.0.109-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">9361218d3c5405285595aa5f74322a8843c4059f1b2c492c07359fbbfb303d22</sum>
        </package>
        <package name="dotnet-targeting-pack-10.0" version="10.0.9" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-10.0-10.0.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a196aea9cf92d77efa0ddd8adc5db9c11739acdc30a1e128b888d223566182c9</sum>
        </package>
        <package name="aspnetcore-targeting-pack-10.0" version="10.0.9" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-10.0-10.0.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a53302137e778d5cc47e941d0f0f16b16a2c2b8b944f74a1829158a585a54d88</sum>
        </package>
        <package name="dotnet-host" version="10.0.9" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>dotnet-host-10.0.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">df82ee8f3a9de0148110e600f9e3f32b04594d8799594f55681e13d5d31097f3</sum>
        </package>
        <package name="dotnet-apphost-pack-10.0" version="10.0.9" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-10.0-10.0.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">e3507ecae1574d3fe0da6bb84a7b3314beabbf38cea699908a0a847e91400647</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-10.0" version="10.0.9" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-10.0-10.0.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">efb8bb308f37710fe0362fe55f5197feb2eb5d4c5a75edd582cb3170d9e3e15a</sum>
        </package>
        <package name="dotnet-hostfxr-10.0" version="10.0.9" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-10.0-10.0.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">f71c6f2292d3f3185b92f478fa130d4e78e9d3e1c36a00c537d16ac83052bdf6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25918</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2026-06-15 00:00:00"/>
    <updated date="2026-06-15 14:30:38"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28946)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28847)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28883)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28901)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28902)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28903)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28904)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28905)
  * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-28907)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28942)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28947)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28953)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-28955)
  * webkitgtk: An app may be able to access sensitive user data (CVE-2026-28958)
  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43658)
  * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2026-43660)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25918" id="RHSA-2026:25918" type="rhsa" title="RHSA-2026:25918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28847" id="CVE-2026-28847" type="cve" title="CVE-2026-28847"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28883" id="CVE-2026-28883" type="cve" title="CVE-2026-28883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28901" id="CVE-2026-28901" type="cve" title="CVE-2026-28901"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28902" id="CVE-2026-28902" type="cve" title="CVE-2026-28902"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28903" id="CVE-2026-28903" type="cve" title="CVE-2026-28903"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28904" id="CVE-2026-28904" type="cve" title="CVE-2026-28904"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28905" id="CVE-2026-28905" type="cve" title="CVE-2026-28905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28907" id="CVE-2026-28907" type="cve" title="CVE-2026-28907"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28942" id="CVE-2026-28942" type="cve" title="CVE-2026-28942"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28946" id="CVE-2026-28946" type="cve" title="CVE-2026-28946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28947" id="CVE-2026-28947" type="cve" title="CVE-2026-28947"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28953" id="CVE-2026-28953" type="cve" title="CVE-2026-28953"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28955" id="CVE-2026-28955" type="cve" title="CVE-2026-28955"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28958" id="CVE-2026-28958" type="cve" title="CVE-2026-28958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43658" id="CVE-2026-43658" type="cve" title="CVE-2026-43658"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43660" id="CVE-2026-43660" type="cve" title="CVE-2026-43660"/>
      <reference href="https://bugzilla.redhat.com/2471790" id="2471790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2483955" id="2483955" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2483956" id="2483956" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2483957" id="2483957" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2483958" id="2483958" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2483959" id="2483959" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2483960" id="2483960" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2483961" id="2483961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2483962" id="2483962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2483963" id="2483963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2483964" id="2483964" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2483965" id="2483965" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2483966" id="2483966" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2483967" id="2483967" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2483968" id="2483968" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2483969" id="2483969" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-25918.html" id="ALSA-2026:25918" type="self" title="ALSA-2026:25918"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="webkit2gtk3-jsc-devel" version="2.52.4" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.52.4-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.52.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">02bb2b999c2304d37d179662b4979fed712a2a8e2dc25b9d96b54d46937257fe</sum>
        </package>
        <package name="webkit2gtk3-devel" version="2.52.4" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.52.4-1.el8_10.src.rpm">
          <filename>webkit2gtk3-devel-2.52.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">161384d163b71c22730920fde6b7ddeda2c2be10f26a423efa3578537c84518a</sum>
        </package>
        <package name="webkit2gtk3" version="2.52.4" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.52.4-1.el8_10.src.rpm">
          <filename>webkit2gtk3-2.52.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">1e65b5a5aba5802938bc8deadb85f02e34ddafc393083ebfa9b8ed97847dd649</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.52.4" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.52.4-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-2.52.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b4c5461ab9358439fc79ea61b9450d697f389f111fab7aa9a8775105de1a6722</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25919</id>
    <title>Moderate: mysql:8.0 security update</title>
    <issued date="2026-06-15 00:00:00"/>
    <updated date="2026-06-15 14:05:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql:8.0 security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  

Security Fix(es):  

  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004)
  * mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001)
  * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238)
  * mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236)
  * mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303)
  * mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-34293)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34267)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-34304)
  * mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22015)
  * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34276)
  * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34270)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34278)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25919" id="RHSA-2026:25919" type="rhsa" title="RHSA-2026:25919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21998" id="CVE-2026-21998" type="cve" title="CVE-2026-21998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22001" id="CVE-2026-22001" type="cve" title="CVE-2026-22001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22002" id="CVE-2026-22002" type="cve" title="CVE-2026-22002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22004" id="CVE-2026-22004" type="cve" title="CVE-2026-22004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22005" id="CVE-2026-22005" type="cve" title="CVE-2026-22005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22009" id="CVE-2026-22009" type="cve" title="CVE-2026-22009"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22015" id="CVE-2026-22015" type="cve" title="CVE-2026-22015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22017" id="CVE-2026-22017" type="cve" title="CVE-2026-22017"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34267" id="CVE-2026-34267" type="cve" title="CVE-2026-34267"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34270" id="CVE-2026-34270" type="cve" title="CVE-2026-34270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34271" id="CVE-2026-34271" type="cve" title="CVE-2026-34271"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34276" id="CVE-2026-34276" type="cve" title="CVE-2026-34276"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34278" id="CVE-2026-34278" type="cve" title="CVE-2026-34278"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34293" id="CVE-2026-34293" type="cve" title="CVE-2026-34293"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34303" id="CVE-2026-34303" type="cve" title="CVE-2026-34303"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34304" id="CVE-2026-34304" type="cve" title="CVE-2026-34304"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34308" id="CVE-2026-34308" type="cve" title="CVE-2026-34308"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35236" id="CVE-2026-35236" type="cve" title="CVE-2026-35236"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35237" id="CVE-2026-35237" type="cve" title="CVE-2026-35237"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35238" id="CVE-2026-35238" type="cve" title="CVE-2026-35238"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35239" id="CVE-2026-35239" type="cve" title="CVE-2026-35239"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35240" id="CVE-2026-35240" type="cve" title="CVE-2026-35240"/>
      <reference href="https://bugzilla.redhat.com/2460274" id="2460274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460275" id="2460275" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460276" id="2460276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460279" id="2460279" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460295" id="2460295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460312" id="2460312" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460315" id="2460315" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460316" id="2460316" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460323" id="2460323" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460324" id="2460324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460325" id="2460325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460326" id="2460326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460329" id="2460329" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460331" id="2460331" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460335" id="2460335" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460340" id="2460340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460342" id="2460342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460344" id="2460344" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460348" id="2460348" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460356" id="2460356" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460358" id="2460358" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460368" id="2460368" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-25919.html" id="ALSA-2026:25919" type="self" title="ALSA-2026:25919"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="mysql" stream="8.0" version="8100020250220075646" context="9edba152" arch="s390x"/>
        <package name="mysql-libs" version="8.0.46" release="1.module_el8.10.0+4192+724bc664" epoch="0" arch="s390x" src="mysql-8.0.46-1.module_el8.10.0+4192+724bc664.src.rpm">
          <filename>mysql-libs-8.0.46-1.module_el8.10.0+4192+724bc664.s390x.rpm</filename>
          <sum type="sha256">2cd2804ee99e3e5aa8c7cf9e28444fb5dd11005e704523a29c45d42b5bd61174</sum>
        </package>
        <package name="mecab" version="0.996" release="2.module_el8.10.0+3965+b415b607" epoch="0" arch="s390x" src="mecab-0.996-2.module_el8.10.0+3965+b415b607.src.rpm">
          <filename>mecab-0.996-2.module_el8.10.0+3965+b415b607.s390x.rpm</filename>
          <sum type="sha256">33b6163fbf1b6b08111e95f3543dbb14bf19fc0ff5086e737fe6343a4443df82</sum>
        </package>
        <package name="mysql-common" version="8.0.46" release="1.module_el8.10.0+4192+724bc664" epoch="0" arch="s390x" src="mysql-8.0.46-1.module_el8.10.0+4192+724bc664.src.rpm">
          <filename>mysql-common-8.0.46-1.module_el8.10.0+4192+724bc664.s390x.rpm</filename>
          <sum type="sha256">3607aece1e11d87f7f098de96dc5daa1e243f23d6f51bf49d5996355a4953218</sum>
        </package>
        <package name="mecab-ipadic-EUCJP" version="2.7.0.20070801" release="17.module_el8.10.0+4142+0b28b031" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+4142+0b28b031.src.rpm">
          <filename>mecab-ipadic-EUCJP-2.7.0.20070801-17.module_el8.10.0+4142+0b28b031.s390x.rpm</filename>
          <sum type="sha256">5c2c4be1b706f2375ebe433520a9df47da83ecb94f399a35bdfa9532a05316de</sum>
        </package>
        <package name="mysql-devel" version="8.0.46" release="1.module_el8.10.0+4192+724bc664" epoch="0" arch="s390x" src="mysql-8.0.46-1.module_el8.10.0+4192+724bc664.src.rpm">
          <filename>mysql-devel-8.0.46-1.module_el8.10.0+4192+724bc664.s390x.rpm</filename>
          <sum type="sha256">94df69441b71ac034075a2e2e09ddb97fef25500721bfe1c0dc2adf926afadd0</sum>
        </package>
        <package name="mecab-devel" version="0.996" release="2.module_el8.6.0+3340+d764b636" epoch="0" arch="s390x" src="mecab-0.996-2.module_el8.6.0+3340+d764b636.src.rpm">
          <filename>mecab-devel-0.996-2.module_el8.6.0+3340+d764b636.s390x.rpm</filename>
          <sum type="sha256">95fbafd6a495d411511dcfabd6b0f0746e44e7a7bcc70330024e0022229ee5d3</sum>
        </package>
        <package name="mysql-server" version="8.0.46" release="1.module_el8.10.0+4192+724bc664" epoch="0" arch="s390x" src="mysql-8.0.46-1.module_el8.10.0+4192+724bc664.src.rpm">
          <filename>mysql-server-8.0.46-1.module_el8.10.0+4192+724bc664.s390x.rpm</filename>
          <sum type="sha256">adb6afa9f5443caeded514d487754d5d0023b5ba51d19f4908eecea12a1bd168</sum>
        </package>
        <package name="mecab-ipadic" version="2.7.0.20070801" release="17.module_el8.10.0+4142+0b28b031" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+4142+0b28b031.src.rpm">
          <filename>mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+4142+0b28b031.s390x.rpm</filename>
          <sum type="sha256">c3a11d45548f782dcdecd4d101438588aa1cd7d52fcecabec45ab2a1d34243dc</sum>
        </package>
        <package name="mysql-errmsg" version="8.0.46" release="1.module_el8.10.0+4192+724bc664" epoch="0" arch="s390x" src="mysql-8.0.46-1.module_el8.10.0+4192+724bc664.src.rpm">
          <filename>mysql-errmsg-8.0.46-1.module_el8.10.0+4192+724bc664.s390x.rpm</filename>
          <sum type="sha256">e33b0d13b56d872829df1070bba9ced2db5ae876dcd8db340764bb36288303a2</sum>
        </package>
        <package name="mysql-test" version="8.0.46" release="1.module_el8.10.0+4192+724bc664" epoch="0" arch="s390x" src="mysql-8.0.46-1.module_el8.10.0+4192+724bc664.src.rpm">
          <filename>mysql-test-8.0.46-1.module_el8.10.0+4192+724bc664.s390x.rpm</filename>
          <sum type="sha256">f1e73f2b63c139e3035bf46361de7923dbec8929ff041549a0371c01baf27df2</sum>
        </package>
        <package name="mysql" version="8.0.46" release="1.module_el8.10.0+4192+724bc664" epoch="0" arch="s390x" src="mysql-8.0.46-1.module_el8.10.0+4192+724bc664.src.rpm">
          <filename>mysql-8.0.46-1.module_el8.10.0+4192+724bc664.s390x.rpm</filename>
          <sum type="sha256">f9f5861d3f17250ad686096818640924b09423eab97716ae7696be2371637fd0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25932</id>
    <title>Important: postfix security update</title>
    <issued date="2026-06-15 00:00:00"/>
    <updated date="2026-06-15 13:04:01"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postfix security update</summary>
    <description>The postfix packages provide a Mail Transport Agent (MTA), which supports protocols like LDAP, SMTP AUTH (SASL), and TLS.  

Security Fix(es):  

  * postfix: buffer over-read via malformed enhanced status code (CVE-2026-43964)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25932" id="RHSA-2026:25932" type="rhsa" title="RHSA-2026:25932"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43964" id="CVE-2026-43964" type="cve" title="CVE-2026-43964"/>
      <reference href="https://bugzilla.redhat.com/2466488" id="2466488" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-25932.html" id="ALSA-2026:25932" type="self" title="ALSA-2026:25932"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="postfix-cdb" version="3.5.8" release="8.el8_10" epoch="2" arch="s390x" src="postfix-3.5.8-8.el8_10.src.rpm">
          <filename>postfix-cdb-3.5.8-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">18b1dd02e70d0794a6bfd775dc1be852239a410fe1d5c9afaed367273dd554b5</sum>
        </package>
        <package name="postfix-perl-scripts" version="3.5.8" release="8.el8_10" epoch="2" arch="s390x" src="postfix-3.5.8-8.el8_10.src.rpm">
          <filename>postfix-perl-scripts-3.5.8-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">50d8e3554e379f00b1410e562a9721f5810ee1d9e9bc08b6c244d49b3e90ed82</sum>
        </package>
        <package name="postfix-pgsql" version="3.5.8" release="8.el8_10" epoch="2" arch="s390x" src="postfix-3.5.8-8.el8_10.src.rpm">
          <filename>postfix-pgsql-3.5.8-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">77515cf46b4b6cbe880af4ab420b2cfb96dde73b325700ef50bb160137a5e14b</sum>
        </package>
        <package name="postfix-sqlite" version="3.5.8" release="8.el8_10" epoch="2" arch="s390x" src="postfix-3.5.8-8.el8_10.src.rpm">
          <filename>postfix-sqlite-3.5.8-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">c3cfd32dd82e2394eac8e89bd92f8ff834f941269d487f7bd3a7b9ad2d0a251a</sum>
        </package>
        <package name="postfix-pcre" version="3.5.8" release="8.el8_10" epoch="2" arch="s390x" src="postfix-3.5.8-8.el8_10.src.rpm">
          <filename>postfix-pcre-3.5.8-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">e4445fe74c30da6c786483d74b21fc19941744fcd3757f0fefa9c209637ffcb2</sum>
        </package>
        <package name="postfix-ldap" version="3.5.8" release="8.el8_10" epoch="2" arch="s390x" src="postfix-3.5.8-8.el8_10.src.rpm">
          <filename>postfix-ldap-3.5.8-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">f80006606ff29635e06ac583165b8e72cdc361ab058ae82230e4ae6ce78a7be7</sum>
        </package>
        <package name="postfix-mysql" version="3.5.8" release="8.el8_10" epoch="2" arch="s390x" src="postfix-3.5.8-8.el8_10.src.rpm">
          <filename>postfix-mysql-3.5.8-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">fea4091ab5cd7f4336371ae73539c5b3693f7a7be0771946fcc2bdab77fd2757</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:26008</id>
    <title>Important: redis:6 security update</title>
    <issued date="2026-06-15 00:00:00"/>
    <updated date="2026-06-23 11:01:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>redis:6 security update</summary>
    <description>Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.  

Security Fix(es):  

  * redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:26008" id="RHSA-2026:26008" type="rhsa" title="RHSA-2026:26008"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25243" id="CVE-2026-25243" type="cve" title="CVE-2026-25243"/>
      <reference href="https://bugzilla.redhat.com/2466828" id="2466828" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-26008.html" id="ALSA-2026:26008" type="self" title="ALSA-2026:26008"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="redis" stream="6" version="8100020260623090845" context="9edba152" arch="s390x"/>
        <package name="redis-doc" version="6.2.22" release="1.module_el8.10.0+4197+3446deec" epoch="0" arch="noarch" src="redis-6.2.22-1.module_el8.10.0+4197+3446deec.src.rpm">
          <filename>redis-doc-6.2.22-1.module_el8.10.0+4197+3446deec.noarch.rpm</filename>
          <sum type="sha256">2ab312578b5a763108ab9b88e755d6bcb85fc5fd13351f94bd10e0c7fc3513a2</sum>
        </package>
        <package name="redis-devel" version="6.2.22" release="1.module_el8.10.0+4197+3446deec" epoch="0" arch="s390x" src="redis-6.2.22-1.module_el8.10.0+4197+3446deec.src.rpm">
          <filename>redis-devel-6.2.22-1.module_el8.10.0+4197+3446deec.s390x.rpm</filename>
          <sum type="sha256">6847c42ac274be48814ae7d427caeefa0ab9ab9a7efcfe3b2313a848c8f00d62</sum>
        </package>
        <package name="redis" version="6.2.22" release="1.module_el8.10.0+4197+3446deec" epoch="0" arch="s390x" src="redis-6.2.22-1.module_el8.10.0+4197+3446deec.src.rpm">
          <filename>redis-6.2.22-1.module_el8.10.0+4197+3446deec.s390x.rpm</filename>
          <sum type="sha256">79a703ac563442eb346bfd39fa9cc76c203dbdec519b9a4e8413f8c145b77be8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:26180</id>
    <title>Moderate: mysql:8.4 security update</title>
    <issued date="2026-06-16 00:00:00"/>
    <updated date="2026-06-16 11:41:29"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql:8.4 security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files.  

Security Fix(es):  

  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004)
  * mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001)
  * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238)
  * mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236)
  * mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-34304)
  * mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22015)
  * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34276)
  * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34270)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:26180" id="RHSA-2026:26180" type="rhsa" title="RHSA-2026:26180"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21998" id="CVE-2026-21998" type="cve" title="CVE-2026-21998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22001" id="CVE-2026-22001" type="cve" title="CVE-2026-22001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22002" id="CVE-2026-22002" type="cve" title="CVE-2026-22002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22004" id="CVE-2026-22004" type="cve" title="CVE-2026-22004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22005" id="CVE-2026-22005" type="cve" title="CVE-2026-22005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22009" id="CVE-2026-22009" type="cve" title="CVE-2026-22009"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22015" id="CVE-2026-22015" type="cve" title="CVE-2026-22015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22017" id="CVE-2026-22017" type="cve" title="CVE-2026-22017"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34270" id="CVE-2026-34270" type="cve" title="CVE-2026-34270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34271" id="CVE-2026-34271" type="cve" title="CVE-2026-34271"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34276" id="CVE-2026-34276" type="cve" title="CVE-2026-34276"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34303" id="CVE-2026-34303" type="cve" title="CVE-2026-34303"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34304" id="CVE-2026-34304" type="cve" title="CVE-2026-34304"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34308" id="CVE-2026-34308" type="cve" title="CVE-2026-34308"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35236" id="CVE-2026-35236" type="cve" title="CVE-2026-35236"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35237" id="CVE-2026-35237" type="cve" title="CVE-2026-35237"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35238" id="CVE-2026-35238" type="cve" title="CVE-2026-35238"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35239" id="CVE-2026-35239" type="cve" title="CVE-2026-35239"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35240" id="CVE-2026-35240" type="cve" title="CVE-2026-35240"/>
      <reference href="https://bugzilla.redhat.com/2460274" id="2460274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460275" id="2460275" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460276" id="2460276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460279" id="2460279" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460295" id="2460295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460312" id="2460312" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460315" id="2460315" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460316" id="2460316" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460323" id="2460323" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460324" id="2460324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460325" id="2460325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460326" id="2460326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460329" id="2460329" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460335" id="2460335" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460342" id="2460342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460344" id="2460344" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460348" id="2460348" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460356" id="2460356" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460358" id="2460358" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-26180.html" id="ALSA-2026:26180" type="self" title="ALSA-2026:26180"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="mysql" stream="8.4" version="8100020251106054439" context="9edba152" arch="s390x"/>
        <package name="mysql-test" version="8.4.9" release="1.module_el8.10.0+4193+cbb8e728" epoch="0" arch="s390x" src="mysql-8.4.9-1.module_el8.10.0+4193+cbb8e728.src.rpm">
          <filename>mysql-test-8.4.9-1.module_el8.10.0+4193+cbb8e728.s390x.rpm</filename>
          <sum type="sha256">0c1fb63fb4fdb16cc859bc12866a9f5ae1f7af17887ae595c73671ec0fe9562c</sum>
        </package>
        <package name="mecab" version="0.996" release="2.module_el8.10.0+4060+d4256e26" epoch="0" arch="s390x" src="mecab-0.996-2.module_el8.10.0+4060+d4256e26.src.rpm">
          <filename>mecab-0.996-2.module_el8.10.0+4060+d4256e26.s390x.rpm</filename>
          <sum type="sha256">18cfaf8b55a7cec65d1d202594207c808c7bc9ecefd417e953be47e61549f4a6</sum>
        </package>
        <package name="mecab-devel" version="0.996" release="2.module_el8.10.0+4060+d4256e26" epoch="0" arch="s390x" src="mecab-0.996-2.module_el8.10.0+4060+d4256e26.src.rpm">
          <filename>mecab-devel-0.996-2.module_el8.10.0+4060+d4256e26.s390x.rpm</filename>
          <sum type="sha256">1ceaffe3718cc738100e80d34513effcff5daf7341a6b23c27f685a533755c35</sum>
        </package>
        <package name="mysql-errmsg" version="8.4.9" release="1.module_el8.10.0+4193+cbb8e728" epoch="0" arch="noarch" src="mysql-8.4.9-1.module_el8.10.0+4193+cbb8e728.src.rpm">
          <filename>mysql-errmsg-8.4.9-1.module_el8.10.0+4193+cbb8e728.noarch.rpm</filename>
          <sum type="sha256">4eaf86685c7be5aa67008e904d67f2cb5247b2498134e2e9bbfa0c52b265ad63</sum>
        </package>
        <package name="mysql-devel" version="8.4.9" release="1.module_el8.10.0+4193+cbb8e728" epoch="0" arch="s390x" src="mysql-8.4.9-1.module_el8.10.0+4193+cbb8e728.src.rpm">
          <filename>mysql-devel-8.4.9-1.module_el8.10.0+4193+cbb8e728.s390x.rpm</filename>
          <sum type="sha256">624fda61ca02efe7ea83d08f4fc4b850d7a669338c0fb4632a1e4bbb9f58c21d</sum>
        </package>
        <package name="mecab-ipadic-EUCJP" version="2.7.0.20070801" release="17.module_el8.10.0+4154+a69a9128" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+4154+a69a9128.src.rpm">
          <filename>mecab-ipadic-EUCJP-2.7.0.20070801-17.module_el8.10.0+4154+a69a9128.s390x.rpm</filename>
          <sum type="sha256">671d7acd59e342e018304b42449a39aceb94a30e47ca6d06b855ff2ae34e1328</sum>
        </package>
        <package name="mecab-ipadic" version="2.7.0.20070801" release="17.module_el8.10.0+4060+d4256e26" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+4060+d4256e26.src.rpm">
          <filename>mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+4060+d4256e26.s390x.rpm</filename>
          <sum type="sha256">699791fde21af136b5be1e5f47f07915fe3dbc68f07cec6e808ef0a6fd38ee92</sum>
        </package>
        <package name="mysql-server" version="8.4.9" release="1.module_el8.10.0+4193+cbb8e728" epoch="0" arch="s390x" src="mysql-8.4.9-1.module_el8.10.0+4193+cbb8e728.src.rpm">
          <filename>mysql-server-8.4.9-1.module_el8.10.0+4193+cbb8e728.s390x.rpm</filename>
          <sum type="sha256">81eb0ef8270c5c299027b05bb62235edc88b40c114e22a555e66454906353a99</sum>
        </package>
        <package name="mysql-libs" version="8.4.9" release="1.module_el8.10.0+4193+cbb8e728" epoch="0" arch="s390x" src="mysql-8.4.9-1.module_el8.10.0+4193+cbb8e728.src.rpm">
          <filename>mysql-libs-8.4.9-1.module_el8.10.0+4193+cbb8e728.s390x.rpm</filename>
          <sum type="sha256">a3d367d2049dfab45318241af623f7ff6ca18e479e99116d6fc62071eba432c2</sum>
        </package>
        <package name="mysql-common" version="8.4.9" release="1.module_el8.10.0+4193+cbb8e728" epoch="0" arch="noarch" src="mysql-8.4.9-1.module_el8.10.0+4193+cbb8e728.src.rpm">
          <filename>mysql-common-8.4.9-1.module_el8.10.0+4193+cbb8e728.noarch.rpm</filename>
          <sum type="sha256">b808f9278368ddaa3426e68bdab0ceba601957a14fcbc404b09c4d6dfafabc3e</sum>
        </package>
        <package name="mysql" version="8.4.9" release="1.module_el8.10.0+4193+cbb8e728" epoch="0" arch="s390x" src="mysql-8.4.9-1.module_el8.10.0+4193+cbb8e728.src.rpm">
          <filename>mysql-8.4.9-1.module_el8.10.0+4193+cbb8e728.s390x.rpm</filename>
          <sum type="sha256">e501d44254b0c182f004d3ca04ca8af8defbc34e6cddbb2eaef7c144dee6c6b2</sum>
        </package>
        <package name="mysql-test-data" version="8.4.9" release="1.module_el8.10.0+4193+cbb8e728" epoch="0" arch="noarch" src="mysql-8.4.9-1.module_el8.10.0+4193+cbb8e728.src.rpm">
          <filename>mysql-test-data-8.4.9-1.module_el8.10.0+4193+cbb8e728.noarch.rpm</filename>
          <sum type="sha256">f059737d89a485a2c6f6be94a49ecdafd4ff1e310913085daeb5b36919474f79</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:26181</id>
    <title>Important: postgresql:15 security update</title>
    <issued date="2026-06-16 00:00:00"/>
    <updated date="2026-06-17 09:41:29"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:15 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478)
  * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:26181" id="RHSA-2026:26181" type="rhsa" title="RHSA-2026:26181"/>
      <reference href="https://bugzilla.redhat.com/2477447" id="2477447" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477448" id="2477448" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-26181.html" id="ALSA-2026:26181" type="self" title="ALSA-2026:26181"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2026-6473.html" id="CVE-2026-6473" type="cve" title="CVE-2026-6473"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2026-6475.html" id="CVE-2026-6475" type="cve" title="CVE-2026-6475"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2026-6477.html" id="CVE-2026-6477" type="cve" title="CVE-2026-6477"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2026-6478.html" id="CVE-2026-6478" type="cve" title="CVE-2026-6478"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="15" version="8100020260616084409" context="9edba152" arch="s390x"/>
        <package name="postgresql-test" version="15.18" release="1.module_el8.10.0+4195+4569d728" epoch="0" arch="s390x" src="postgresql-15.18-1.module_el8.10.0+4195+4569d728.src.rpm">
          <filename>postgresql-test-15.18-1.module_el8.10.0+4195+4569d728.s390x.rpm</filename>
          <sum type="sha256">0d1239afcdfdde8a4d5a5c9c336b970c3c4d59559952ca23354ff33170585b53</sum>
        </package>
        <package name="postgresql-upgrade" version="15.18" release="1.module_el8.10.0+4195+4569d728" epoch="0" arch="s390x" src="postgresql-15.18-1.module_el8.10.0+4195+4569d728.src.rpm">
          <filename>postgresql-upgrade-15.18-1.module_el8.10.0+4195+4569d728.s390x.rpm</filename>
          <sum type="sha256">14df6d5844e19c42a11fdd63b2678e343fca5d9e3968854d471eb7785fcf884b</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="15.18" release="1.module_el8.10.0+4195+4569d728" epoch="0" arch="noarch" src="postgresql-15.18-1.module_el8.10.0+4195+4569d728.src.rpm">
          <filename>postgresql-test-rpm-macros-15.18-1.module_el8.10.0+4195+4569d728.noarch.rpm</filename>
          <sum type="sha256">58f116610094e31dffccfd79564b6fd19b9fd25fe9a68563975be65a18f16b05</sum>
        </package>
        <package name="postgresql-server-devel" version="15.18" release="1.module_el8.10.0+4195+4569d728" epoch="0" arch="s390x" src="postgresql-15.18-1.module_el8.10.0+4195+4569d728.src.rpm">
          <filename>postgresql-server-devel-15.18-1.module_el8.10.0+4195+4569d728.s390x.rpm</filename>
          <sum type="sha256">6c4b5d5ca170a706e9affdec9f3c53293c981372145ac72f96dcfceab466e6b0</sum>
        </package>
        <package name="postgresql-plperl" version="15.18" release="1.module_el8.10.0+4195+4569d728" epoch="0" arch="s390x" src="postgresql-15.18-1.module_el8.10.0+4195+4569d728.src.rpm">
          <filename>postgresql-plperl-15.18-1.module_el8.10.0+4195+4569d728.s390x.rpm</filename>
          <sum type="sha256">72342aca60fd47b25ee86f32bbc9f799c0bcfef9ecd052f70aae253d61e46f93</sum>
        </package>
        <package name="postgresql-pltcl" version="15.18" release="1.module_el8.10.0+4195+4569d728" epoch="0" arch="s390x" src="postgresql-15.18-1.module_el8.10.0+4195+4569d728.src.rpm">
          <filename>postgresql-pltcl-15.18-1.module_el8.10.0+4195+4569d728.s390x.rpm</filename>
          <sum type="sha256">77a2314521d88496b9e4cd59ed095da0908ac9fe67e030e1938244a4a1e649f8</sum>
        </package>
        <package name="postgresql-contrib" version="15.18" release="1.module_el8.10.0+4195+4569d728" epoch="0" arch="s390x" src="postgresql-15.18-1.module_el8.10.0+4195+4569d728.src.rpm">
          <filename>postgresql-contrib-15.18-1.module_el8.10.0+4195+4569d728.s390x.rpm</filename>
          <sum type="sha256">79616696ee8e7a06dc73fa0410ab74a7b06501983eec1c0c144dc56096017ec9</sum>
        </package>
        <package name="postgresql-docs" version="15.18" release="1.module_el8.10.0+4195+4569d728" epoch="0" arch="s390x" src="postgresql-15.18-1.module_el8.10.0+4195+4569d728.src.rpm">
          <filename>postgresql-docs-15.18-1.module_el8.10.0+4195+4569d728.s390x.rpm</filename>
          <sum type="sha256">79c0ccfdd063337d1f26010c13ecb557e59276e070ab1f3830982971099b8af1</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="15.18" release="1.module_el8.10.0+4195+4569d728" epoch="0" arch="s390x" src="postgresql-15.18-1.module_el8.10.0+4195+4569d728.src.rpm">
          <filename>postgresql-upgrade-devel-15.18-1.module_el8.10.0+4195+4569d728.s390x.rpm</filename>
          <sum type="sha256">7d9419e7b78c6b05fc822518970e91aeecdeb608566099e1fed5a2d75f1e145f</sum>
        </package>
        <package name="pg_repack" version="1.4.8" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="pg_repack-1.4.8-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>pg_repack-1.4.8-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">7fbd57e759f737f8bc3c7bc2715300640b00ae84ed9b74d469be03ee537d20b9</sum>
        </package>
        <package name="postgresql-static" version="15.18" release="1.module_el8.10.0+4195+4569d728" epoch="0" arch="s390x" src="postgresql-15.18-1.module_el8.10.0+4195+4569d728.src.rpm">
          <filename>postgresql-static-15.18-1.module_el8.10.0+4195+4569d728.s390x.rpm</filename>
          <sum type="sha256">8f2f1122d60fbec6a9da581cd4421151f6d2959e1405b44786f9190e1b4f8602</sum>
        </package>
        <package name="postgresql-private-devel" version="15.18" release="1.module_el8.10.0+4195+4569d728" epoch="0" arch="s390x" src="postgresql-15.18-1.module_el8.10.0+4195+4569d728.src.rpm">
          <filename>postgresql-private-devel-15.18-1.module_el8.10.0+4195+4569d728.s390x.rpm</filename>
          <sum type="sha256">8f8f7e22226563bcc446cf0e0f1e693e17e23898f6e379d76f62f92b7d2a1c87</sum>
        </package>
        <package name="postgresql" version="15.18" release="1.module_el8.10.0+4195+4569d728" epoch="0" arch="s390x" src="postgresql-15.18-1.module_el8.10.0+4195+4569d728.src.rpm">
          <filename>postgresql-15.18-1.module_el8.10.0+4195+4569d728.s390x.rpm</filename>
          <sum type="sha256">a937f353ee0b1f816a7818632b49ec1453cf73c1f8803a0f339258b5ef67e84e</sum>
        </package>
        <package name="postgresql-private-libs" version="15.18" release="1.module_el8.10.0+4195+4569d728" epoch="0" arch="s390x" src="postgresql-15.18-1.module_el8.10.0+4195+4569d728.src.rpm">
          <filename>postgresql-private-libs-15.18-1.module_el8.10.0+4195+4569d728.s390x.rpm</filename>
          <sum type="sha256">be9204a3d040eb46b912e6494270d17f4a3234ba631b6f0459a583b56d841e34</sum>
        </package>
        <package name="pgaudit" version="1.7.0" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="pgaudit-1.7.0-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>pgaudit-1.7.0-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">bebebc0b85b4d88d466cf43a44e5ae321c851b621377e2c96e1564cf00fd07bd</sum>
        </package>
        <package name="postgresql-server" version="15.18" release="1.module_el8.10.0+4195+4569d728" epoch="0" arch="s390x" src="postgresql-15.18-1.module_el8.10.0+4195+4569d728.src.rpm">
          <filename>postgresql-server-15.18-1.module_el8.10.0+4195+4569d728.s390x.rpm</filename>
          <sum type="sha256">d2bf3fe4745ae65b575b44e5cde395548fdcf253a16faafbe9411fef095dc896</sum>
        </package>
        <package name="postgres-decoderbufs" version="1.9.7" release="1.Final.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="postgres-decoderbufs-1.9.7-1.Final.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>postgres-decoderbufs-1.9.7-1.Final.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">d93f26982b8a0299bb5535e5aed623996c696a2eb2f9157554b4dae3f5cce2ef</sum>
        </package>
        <package name="postgresql-plpython3" version="15.18" release="1.module_el8.10.0+4195+4569d728" epoch="0" arch="s390x" src="postgresql-15.18-1.module_el8.10.0+4195+4569d728.src.rpm">
          <filename>postgresql-plpython3-15.18-1.module_el8.10.0+4195+4569d728.s390x.rpm</filename>
          <sum type="sha256">ddf0c7a3138a6b19217e5bf01110a3faab0b1fc3b11b589035e8b0fbb24e1f96</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2627</id>
    <title>Moderate: gcc-toolset-14-binutils security update</title>
    <issued date="2026-02-12 00:00:00"/>
    <updated date="2026-02-13 08:03:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gcc-toolset-14-binutils security update</summary>
    <description>Binutils is a collection of binary utilities, including ar (for creating, modifying and extracting from archives), as (a family of GNU assemblers), gprof (for displaying call graph profile data), ld (the GNU linker), nm (for listing symbols from object files), objcopy (for copying and translating object files), objdump (for displaying information from object files), ranlib (for generating an index for the contents of an archive), readelf (for displaying detailed information about binary files), size (for listing the section sizes of an object or archive file), strings (for listing printable strings from files), strip (for discarding symbols), and addr2line (for converting addresses to file and line).  

Security Fix(es):  

  * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11083)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2627" id="RHSA-2026:2627" type="rhsa" title="RHSA-2026:2627"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11083" id="CVE-2025-11083" type="cve" title="CVE-2025-11083"/>
      <reference href="https://bugzilla.redhat.com/2399948" id="2399948" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2627.html" id="ALSA-2026:2627" type="self" title="ALSA-2026:2627"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="gcc-toolset-14-binutils-gold" version="2.41" release="4.el8_10.1" epoch="0" arch="s390x" src="gcc-toolset-14-binutils-2.41-4.el8_10.1.src.rpm">
          <filename>gcc-toolset-14-binutils-gold-2.41-4.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">2b27ae515744fb4f41b4060394825af4c1a8e7f7cb0f62a99c7e89a545ff5d9f</sum>
        </package>
        <package name="gcc-toolset-14-binutils-devel" version="2.41" release="4.el8_10.1" epoch="0" arch="s390x" src="gcc-toolset-14-binutils-2.41-4.el8_10.1.src.rpm">
          <filename>gcc-toolset-14-binutils-devel-2.41-4.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">38a6e36121ae6dd68f4ad0c692f3307e09f532208ba7d27971f212529aa9755f</sum>
        </package>
        <package name="gcc-toolset-14-binutils" version="2.41" release="4.el8_10.1" epoch="0" arch="s390x" src="gcc-toolset-14-binutils-2.41-4.el8_10.1.src.rpm">
          <filename>gcc-toolset-14-binutils-2.41-4.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">93cb973f5df939af050777957ae6e833c7764445376f43afb6b39d10a9a9f0aa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:26335</id>
    <title>Important: hplip security update</title>
    <issued date="2026-06-16 00:00:00"/>
    <updated date="2026-06-17 09:39:48"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>hplip security update</summary>
    <description>The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.  

Security Fix(es):  

  * HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection (CVE-2026-8632)
  * HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups (CVE-2026-8631)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:26335" id="RHSA-2026:26335" type="rhsa" title="RHSA-2026:26335"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8631" id="CVE-2026-8631" type="cve" title="CVE-2026-8631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8632" id="CVE-2026-8632" type="cve" title="CVE-2026-8632"/>
      <reference href="https://bugzilla.redhat.com/2480297" id="2480297" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2480300" id="2480300" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-26335.html" id="ALSA-2026:26335" type="self" title="ALSA-2026:26335"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="hplip" version="3.18.4" release="13.el8_10.alma.1" epoch="0" arch="s390x" src="hplip-3.18.4-13.el8_10.alma.1.src.rpm">
          <filename>hplip-3.18.4-13.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">123366219c88102d255bf63056c10c300990fc1cf788c31d13c7604a2686f400</sum>
        </package>
        <package name="libsane-hpaio" version="3.18.4" release="13.el8_10.alma.1" epoch="0" arch="s390x" src="hplip-3.18.4-13.el8_10.alma.1.src.rpm">
          <filename>libsane-hpaio-3.18.4-13.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">5ffb680879bd9b65c50d02417df65c83b9633c4e673a6187638f241ffbf2ff3b</sum>
        </package>
        <package name="hplip-libs" version="3.18.4" release="13.el8_10.alma.1" epoch="0" arch="s390x" src="hplip-3.18.4-13.el8_10.alma.1.src.rpm">
          <filename>hplip-libs-3.18.4-13.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">7893a32c661a67e88c3c16cd3ea59f60036c2a4fc70b31a0614dced491b91f55</sum>
        </package>
        <package name="hplip-common" version="3.18.4" release="13.el8_10.alma.1" epoch="0" arch="s390x" src="hplip-3.18.4-13.el8_10.alma.1.src.rpm">
          <filename>hplip-common-3.18.4-13.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">a8e98c2b807c918233ac56df53f11b93b6848c36097783b92b114cfc5924a48a</sum>
        </package>
        <package name="hplip-gui" version="3.18.4" release="13.el8_10.alma.1" epoch="0" arch="s390x" src="hplip-3.18.4-13.el8_10.alma.1.src.rpm">
          <filename>hplip-gui-3.18.4-13.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">d4623d40af0408ce65f27f9f18d60a2bec7c84c738bd514fabc3aef532de94f0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:26347</id>
    <title>Moderate: libpng15 security update</title>
    <issued date="2026-06-16 00:00:00"/>
    <updated date="2026-06-17 09:39:30"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libpng15 security update</summary>
    <description>The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG (Portable Network Graphics) image format files. This version should be used only if you are unable to use the current version of libpng.  

Security Fix(es):  

  * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:26347" id="RHSA-2026:26347" type="rhsa" title="RHSA-2026:26347"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33416" id="CVE-2026-33416" type="cve" title="CVE-2026-33416"/>
      <reference href="https://bugzilla.redhat.com/2451805" id="2451805" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-26347.html" id="ALSA-2026:26347" type="self" title="ALSA-2026:26347"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libpng15" version="1.5.30" release="9.el8_10" epoch="0" arch="s390x" src="libpng15-1.5.30-9.el8_10.src.rpm">
          <filename>libpng15-1.5.30-9.el8_10.s390x.rpm</filename>
          <sum type="sha256">0f462bde4f55a5737daa72e08bd80d6ad36268366331982891a42ad6c5f85218</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:26348</id>
    <title>Moderate: libpng12 security update</title>
    <issued date="2026-06-16 00:00:00"/>
    <updated date="2026-06-17 09:39:30"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libpng12 security update</summary>
    <description>The libpng12 package provides libpng 1.2, which is the previous version of the libpng library for manipulating PNG (Portable Network Graphics) image format files. This version should be used in case that it is not possible to use the current version of libpng.  

Security Fix(es):  

  * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:26348" id="RHSA-2026:26348" type="rhsa" title="RHSA-2026:26348"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33416" id="CVE-2026-33416" type="cve" title="CVE-2026-33416"/>
      <reference href="https://bugzilla.redhat.com/2451805" id="2451805" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-26348.html" id="ALSA-2026:26348" type="self" title="ALSA-2026:26348"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libpng12" version="1.2.57" release="7.el8_10" epoch="0" arch="s390x" src="libpng12-1.2.57-7.el8_10.src.rpm">
          <filename>libpng12-1.2.57-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">562196e0b9ed03f47ae802f8cb3d4c2622a1346741dca84c90861350ec81de8f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:26354</id>
    <title>Low: libxml2 security update</title>
    <issued date="2026-06-16 00:00:00"/>
    <updated date="2026-06-17 09:39:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c (CVE-2024-34459)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:26354" id="RHSA-2026:26354" type="rhsa" title="RHSA-2026:26354"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34459" id="CVE-2024-34459" type="cve" title="CVE-2024-34459"/>
      <reference href="https://bugzilla.redhat.com/2280532" id="2280532" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-26354.html" id="ALSA-2026:26354" type="self" title="ALSA-2026:26354"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libxml2-devel" version="2.9.7" release="21.el8_10.5" epoch="0" arch="s390x" src="libxml2-2.9.7-21.el8_10.5.src.rpm">
          <filename>libxml2-devel-2.9.7-21.el8_10.5.s390x.rpm</filename>
          <sum type="sha256">ba9a7d90d7b8a8578691b8ff52287f392c611101fd349443ae8a4087752749c6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:26355</id>
    <title>Moderate: libxslt security update</title>
    <issued date="2026-06-16 00:00:00"/>
    <updated date="2026-06-17 09:39:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libxslt security update</summary>
    <description>libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.   

Security Fix(es):  

  * libxslt: use-after-free with key data stored cross-RVT (CVE-2025-10911)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:26355" id="RHSA-2026:26355" type="rhsa" title="RHSA-2026:26355"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10911" id="CVE-2025-10911" type="cve" title="CVE-2025-10911"/>
      <reference href="https://bugzilla.redhat.com/2397838" id="2397838" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-26355.html" id="ALSA-2026:26355" type="self" title="ALSA-2026:26355"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libxslt-devel" version="1.1.32" release="6.4.el8_10" epoch="0" arch="s390x" src="libxslt-1.1.32-6.4.el8_10.src.rpm">
          <filename>libxslt-devel-1.1.32-6.4.el8_10.s390x.rpm</filename>
          <sum type="sha256">b3b1c02b42387db7a2994bba8022aad26939008f9423c740e33668b7ff487cf1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:26459</id>
    <title>Important: 389-ds:1.4 security update</title>
    <issued date="2026-06-17 00:00:00"/>
    <updated date="2026-06-22 09:02:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>389-ds:1.4 security update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.   

Security Fix(es):  

  * 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) (CVE-2026-9064)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:26459" id="RHSA-2026:26459" type="rhsa" title="RHSA-2026:26459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-9064" id="CVE-2026-9064" type="cve" title="CVE-2026-9064"/>
      <reference href="https://bugzilla.redhat.com/2480093" id="2480093" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-26459.html" id="ALSA-2026:26459" type="self" title="ALSA-2026:26459"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="389-ds" stream="1.4" version="8100020260618190822" context="17499975" arch="s390x"/>
        <package name="389-ds-base" version="1.4.3.39" release="24.module_el8.10.0+4196+be88fbc7" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-24.module_el8.10.0+4196+be88fbc7.src.rpm">
          <filename>389-ds-base-1.4.3.39-24.module_el8.10.0+4196+be88fbc7.s390x.rpm</filename>
          <sum type="sha256">035dfc1b4edef788a2447e9142ff4400d5b3b878b53ecce319683f0fc09d54cf</sum>
        </package>
        <package name="389-ds-base-snmp" version="1.4.3.39" release="24.module_el8.10.0+4196+be88fbc7" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-24.module_el8.10.0+4196+be88fbc7.src.rpm">
          <filename>389-ds-base-snmp-1.4.3.39-24.module_el8.10.0+4196+be88fbc7.s390x.rpm</filename>
          <sum type="sha256">15af13d1fc49cd761d1253c3c4b51d09927c4242d5b21c46d38d84730d8fadf0</sum>
        </package>
        <package name="389-ds-base-legacy-tools" version="1.4.3.39" release="24.module_el8.10.0+4196+be88fbc7" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-24.module_el8.10.0+4196+be88fbc7.src.rpm">
          <filename>389-ds-base-legacy-tools-1.4.3.39-24.module_el8.10.0+4196+be88fbc7.s390x.rpm</filename>
          <sum type="sha256">8e31d655295e03d46eb0b61a4291d58fa3c59102a1504e6101dd52a1b0d0c469</sum>
        </package>
        <package name="python3-lib389" version="1.4.3.39" release="24.module_el8.10.0+4196+be88fbc7" epoch="0" arch="noarch" src="389-ds-base-1.4.3.39-24.module_el8.10.0+4196+be88fbc7.src.rpm">
          <filename>python3-lib389-1.4.3.39-24.module_el8.10.0+4196+be88fbc7.noarch.rpm</filename>
          <sum type="sha256">b6fd5339ee66bac7e5e21573630fa29b8073187072e49d92c63126afb01fcae6</sum>
        </package>
        <package name="389-ds-base-devel" version="1.4.3.39" release="24.module_el8.10.0+4196+be88fbc7" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-24.module_el8.10.0+4196+be88fbc7.src.rpm">
          <filename>389-ds-base-devel-1.4.3.39-24.module_el8.10.0+4196+be88fbc7.s390x.rpm</filename>
          <sum type="sha256">d47bca006b3d8a7bfe380432579dedce5a4b9181879ac4a169042e9204aa9f5b</sum>
        </package>
        <package name="389-ds-base-libs" version="1.4.3.39" release="24.module_el8.10.0+4196+be88fbc7" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-24.module_el8.10.0+4196+be88fbc7.src.rpm">
          <filename>389-ds-base-libs-1.4.3.39-24.module_el8.10.0+4196+be88fbc7.s390x.rpm</filename>
          <sum type="sha256">e6672c6f717c728ace7cddd4cf7e26ce0ced2eaf18c7e044448a3234cf6aad2e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:26562</id>
    <title>Important: xorg-x11-server-Xwayland security, bug fix, and enhancement update</title>
    <issued date="2026-06-17 00:00:00"/>
    <updated date="2026-06-17 13:03:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server-Xwayland security, bug fix, and enhancement update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.  

Security Fix(es):  

  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264)


Bug Fix(es) and Enhancement(s):  

  * [xwayland] Backport other security fixes without a CVE assigned [almalinux-8.10.z] (JIRA:AlmaLinux-184293)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:26562" id="RHSA-2026:26562" type="rhsa" title="RHSA-2026:26562"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50256" id="CVE-2026-50256" type="cve" title="CVE-2026-50256"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50257" id="CVE-2026-50257" type="cve" title="CVE-2026-50257"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50258" id="CVE-2026-50258" type="cve" title="CVE-2026-50258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50259" id="CVE-2026-50259" type="cve" title="CVE-2026-50259"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50260" id="CVE-2026-50260" type="cve" title="CVE-2026-50260"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50261" id="CVE-2026-50261" type="cve" title="CVE-2026-50261"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50262" id="CVE-2026-50262" type="cve" title="CVE-2026-50262"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50263" id="CVE-2026-50263" type="cve" title="CVE-2026-50263"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50264" id="CVE-2026-50264" type="cve" title="CVE-2026-50264"/>
      <reference href="https://bugzilla.redhat.com/2485380" id="2485380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485382" id="2485382" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485383" id="2485383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485384" id="2485384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485385" id="2485385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485386" id="2485386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485387" id="2485387" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485388" id="2485388" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485389" id="2485389" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-26562.html" id="ALSA-2026:26562" type="self" title="ALSA-2026:26562"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="xorg-x11-server-Xwayland" version="21.1.3" release="20.el8_10.2" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-21.1.3-20.el8_10.2.src.rpm">
          <filename>xorg-x11-server-Xwayland-21.1.3-20.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">cb5275b6886b33f422ffb982b2a79912ead661608e8519c15844979169ebedec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:26709</id>
    <title>Important: xorg-x11-server security, bug fix, and enhancement update</title>
    <issued date="2026-06-17 00:00:00"/>
    <updated date="2026-06-18 08:54:21"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server security, bug fix, and enhancement update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264)


Bug Fix(es) and Enhancement(s):  

  * [xserver] Backport other security fixes without a CVE assigned [almalinux-8.10.z] (JIRA:AlmaLinux-184289)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:26709" id="RHSA-2026:26709" type="rhsa" title="RHSA-2026:26709"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50256" id="CVE-2026-50256" type="cve" title="CVE-2026-50256"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50257" id="CVE-2026-50257" type="cve" title="CVE-2026-50257"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50258" id="CVE-2026-50258" type="cve" title="CVE-2026-50258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50259" id="CVE-2026-50259" type="cve" title="CVE-2026-50259"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50260" id="CVE-2026-50260" type="cve" title="CVE-2026-50260"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50261" id="CVE-2026-50261" type="cve" title="CVE-2026-50261"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50262" id="CVE-2026-50262" type="cve" title="CVE-2026-50262"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50263" id="CVE-2026-50263" type="cve" title="CVE-2026-50263"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50264" id="CVE-2026-50264" type="cve" title="CVE-2026-50264"/>
      <reference href="https://bugzilla.redhat.com/2485380" id="2485380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485382" id="2485382" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485383" id="2485383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485384" id="2485384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485385" id="2485385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485386" id="2485386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485387" id="2485387" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485388" id="2485388" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485389" id="2485389" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-26709.html" id="ALSA-2026:26709" type="self" title="ALSA-2026:26709"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="xorg-x11-server-Xdmx" version="1.20.11" release="28.el8_10.2" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el8_10.2.src.rpm">
          <filename>xorg-x11-server-Xdmx-1.20.11-28.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">3ab6375980d4a8de068a18bdb89e8571e1bec86d3016965f24ad7bbc0d649175</sum>
        </package>
        <package name="xorg-x11-server-common" version="1.20.11" release="28.el8_10.2" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el8_10.2.src.rpm">
          <filename>xorg-x11-server-common-1.20.11-28.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">6c8768732b4ed8c869f2e24712470b1660f508ac997bd3e9ea5b50b5284db7d3</sum>
        </package>
        <package name="xorg-x11-server-Xnest" version="1.20.11" release="28.el8_10.2" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el8_10.2.src.rpm">
          <filename>xorg-x11-server-Xnest-1.20.11-28.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">9198a5c8fc4e923335b866efc4ec86447fdf3426451a48084f9052f0df4e7d9f</sum>
        </package>
        <package name="xorg-x11-server-Xvfb" version="1.20.11" release="28.el8_10.2" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el8_10.2.src.rpm">
          <filename>xorg-x11-server-Xvfb-1.20.11-28.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">b40df727cd9bdce5ff1ac24c6bf32a662c2653e5a3a975ad8c971651548f91ff</sum>
        </package>
        <package name="xorg-x11-server-Xephyr" version="1.20.11" release="28.el8_10.2" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el8_10.2.src.rpm">
          <filename>xorg-x11-server-Xephyr-1.20.11-28.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">c55804599c967d4b7ccedefcc1a566698c4e605508e4eac5634e8452459542ac</sum>
        </package>
        <package name="xorg-x11-server-Xorg" version="1.20.11" release="28.el8_10.2" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el8_10.2.src.rpm">
          <filename>xorg-x11-server-Xorg-1.20.11-28.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">f992a11925756956575854e604acae7e7061a4adc37ef13881c510130989b5f1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2708</id>
    <title>Important: go-toolset:rhel8 security update</title>
    <issued date="2026-02-16 00:00:00"/>
    <updated date="2026-02-16 14:22:53"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>go-toolset:rhel8 security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.   

Security Fix(es):  

  * golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728)
  * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
  * cmd/cgo: Potential code smuggling via doc comments in cmd/cgo (CVE-2025-61732)
  * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2708" id="RHSA-2026:2708" type="rhsa" title="RHSA-2026:2708"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61726" id="CVE-2025-61726" type="cve" title="CVE-2025-61726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61728" id="CVE-2025-61728" type="cve" title="CVE-2025-61728"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61732" id="CVE-2025-61732" type="cve" title="CVE-2025-61732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68121" id="CVE-2025-68121" type="cve" title="CVE-2025-68121"/>
      <reference href="https://bugzilla.redhat.com/2434431" id="2434431" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2434432" id="2434432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2437016" id="2437016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2437111" id="2437111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2708.html" id="ALSA-2026:2708" type="self" title="ALSA-2026:2708"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="go-toolset" stream="rhel8" version="8100020260216132104" context="9edba152" arch="s390x"/>
        <package name="golang-src" version="1.25.7" release="1.module_el8.10.0+4117+b694c6c9" epoch="0" arch="noarch" src="golang-1.25.7-1.module_el8.10.0+4117+b694c6c9.src.rpm">
          <filename>golang-src-1.25.7-1.module_el8.10.0+4117+b694c6c9.noarch.rpm</filename>
          <sum type="sha256">203f0c26c079561bf9bd584b13ce802549ed10a989eec635d3f16c084fb75bd1</sum>
        </package>
        <package name="go-toolset" version="1.25.7" release="1.module_el8.10.0+4117+b694c6c9" epoch="0" arch="s390x" src="golang-1.25.7-1.module_el8.10.0+4117+b694c6c9.src.rpm">
          <filename>go-toolset-1.25.7-1.module_el8.10.0+4117+b694c6c9.s390x.rpm</filename>
          <sum type="sha256">242e9f6b3c8bb92d62e0d12e367eedd976ee787ef0cf18271dc510d38ea6acd0</sum>
        </package>
        <package name="golang-tests" version="1.25.7" release="1.module_el8.10.0+4117+b694c6c9" epoch="0" arch="noarch" src="golang-1.25.7-1.module_el8.10.0+4117+b694c6c9.src.rpm">
          <filename>golang-tests-1.25.7-1.module_el8.10.0+4117+b694c6c9.noarch.rpm</filename>
          <sum type="sha256">68f584dfd43c96fe257ae22e9287a08f29b5bb9dd4bb9cbe3f943381b64734dc</sum>
        </package>
        <package name="golang-bin" version="1.25.7" release="1.module_el8.10.0+4117+b694c6c9" epoch="0" arch="s390x" src="golang-1.25.7-1.module_el8.10.0+4117+b694c6c9.src.rpm">
          <filename>golang-bin-1.25.7-1.module_el8.10.0+4117+b694c6c9.s390x.rpm</filename>
          <sum type="sha256">8bde083f490f0f31c999f4ac1806e549253c4fc3944f33e8a420af9d77fa3853</sum>
        </package>
        <package name="golang-misc" version="1.25.7" release="1.module_el8.10.0+4117+b694c6c9" epoch="0" arch="noarch" src="golang-1.25.7-1.module_el8.10.0+4117+b694c6c9.src.rpm">
          <filename>golang-misc-1.25.7-1.module_el8.10.0+4117+b694c6c9.noarch.rpm</filename>
          <sum type="sha256">908f38fb83350f5314f3babb90ef7fa51fe51044dc2bf19dd21d27ce169821d6</sum>
        </package>
        <package name="golang-docs" version="1.25.7" release="1.module_el8.10.0+4117+b694c6c9" epoch="0" arch="noarch" src="golang-1.25.7-1.module_el8.10.0+4117+b694c6c9.src.rpm">
          <filename>golang-docs-1.25.7-1.module_el8.10.0+4117+b694c6c9.noarch.rpm</filename>
          <sum type="sha256">e51893669a4e2e844f540ef638eaeb1c49cc5f5733d3618cca74906eb21a46af</sum>
        </package>
        <package name="golang-race" version="1.25.7" release="1.module_el8.10.0+4117+b694c6c9" epoch="0" arch="s390x" src="golang-1.25.7-1.module_el8.10.0+4117+b694c6c9.src.rpm">
          <filename>golang-race-1.25.7-1.module_el8.10.0+4117+b694c6c9.s390x.rpm</filename>
          <sum type="sha256">ee84a5686b48891f4320d770bbbe07dc47e3f658db494083999438ae85a87475</sum>
        </package>
        <package name="golang" version="1.25.7" release="1.module_el8.10.0+4117+b694c6c9" epoch="0" arch="s390x" src="golang-1.25.7-1.module_el8.10.0+4117+b694c6c9.src.rpm">
          <filename>golang-1.25.7-1.module_el8.10.0+4117+b694c6c9.s390x.rpm</filename>
          <sum type="sha256">f2488cba9371ab35ca188541468a65a0ad954398fe1b73582f0d2a0f6a3d9dc0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:27717</id>
    <title>Important: firefox security update</title>
    <issued date="2026-06-22 00:00:00"/>
    <updated date="2026-06-23 11:52:20"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: Sandbox escape in the DOM: Workers component (CVE-2026-12294)
  * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12313)
  * firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-12311)
  * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12290)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12327)
  * firefox: thunderbird: JIT miscompilation in the DOM: Core &amp; HTML component (CVE-2026-12299)
  * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12329)
  * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12312)
  * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12302)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (CVE-2026-12328)
  * firefox: thunderbird: Incorrect boundary conditions in the Internationalization component (CVE-2026-12330)
  * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12314)
  * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12309)
  * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12310)
  * firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component (CVE-2026-12325)
  * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-12295)
  * firefox: thunderbird: Privilege escalation in the Graphics: WebRender component (CVE-2026-12289)
  * firefox: thunderbird: Mitigation bypass in the DOM: Security component (CVE-2026-12315)
  * firefox: thunderbird: Sandbox escape in the Security: Process Sandboxing component (CVE-2026-12296)
  * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12306)
  * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12307)
  * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component (CVE-2026-12297)
  * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12305)
  * firefox: thunderbird: Incorrect boundary conditions in the Web Audio component (CVE-2026-12292)
  * firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 (CVE-2026-12308)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-12324)
  * firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component (CVE-2026-12304)
  * firefox: thunderbird: Use-after-free in the Networking: HTTP component (CVE-2026-12291)
  * firefox: thunderbird: Memory safety bug fixed in Firefox ESR 140.12 (CVE-2026-12298)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:27717" id="RHSA-2026:27717" type="rhsa" title="RHSA-2026:27717"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12289" id="CVE-2026-12289" type="cve" title="CVE-2026-12289"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12290" id="CVE-2026-12290" type="cve" title="CVE-2026-12290"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12291" id="CVE-2026-12291" type="cve" title="CVE-2026-12291"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12292" id="CVE-2026-12292" type="cve" title="CVE-2026-12292"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12294" id="CVE-2026-12294" type="cve" title="CVE-2026-12294"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12295" id="CVE-2026-12295" type="cve" title="CVE-2026-12295"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12296" id="CVE-2026-12296" type="cve" title="CVE-2026-12296"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12297" id="CVE-2026-12297" type="cve" title="CVE-2026-12297"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12298" id="CVE-2026-12298" type="cve" title="CVE-2026-12298"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12299" id="CVE-2026-12299" type="cve" title="CVE-2026-12299"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12302" id="CVE-2026-12302" type="cve" title="CVE-2026-12302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12304" id="CVE-2026-12304" type="cve" title="CVE-2026-12304"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12305" id="CVE-2026-12305" type="cve" title="CVE-2026-12305"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12306" id="CVE-2026-12306" type="cve" title="CVE-2026-12306"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12307" id="CVE-2026-12307" type="cve" title="CVE-2026-12307"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12308" id="CVE-2026-12308" type="cve" title="CVE-2026-12308"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12309" id="CVE-2026-12309" type="cve" title="CVE-2026-12309"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12310" id="CVE-2026-12310" type="cve" title="CVE-2026-12310"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12311" id="CVE-2026-12311" type="cve" title="CVE-2026-12311"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12312" id="CVE-2026-12312" type="cve" title="CVE-2026-12312"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12313" id="CVE-2026-12313" type="cve" title="CVE-2026-12313"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12314" id="CVE-2026-12314" type="cve" title="CVE-2026-12314"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12315" id="CVE-2026-12315" type="cve" title="CVE-2026-12315"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12324" id="CVE-2026-12324" type="cve" title="CVE-2026-12324"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12325" id="CVE-2026-12325" type="cve" title="CVE-2026-12325"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12327" id="CVE-2026-12327" type="cve" title="CVE-2026-12327"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12328" id="CVE-2026-12328" type="cve" title="CVE-2026-12328"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12329" id="CVE-2026-12329" type="cve" title="CVE-2026-12329"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12330" id="CVE-2026-12330" type="cve" title="CVE-2026-12330"/>
      <reference href="https://bugzilla.redhat.com/2489207" id="2489207" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489208" id="2489208" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489209" id="2489209" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489210" id="2489210" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489211" id="2489211" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489212" id="2489212" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489214" id="2489214" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489215" id="2489215" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489217" id="2489217" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489218" id="2489218" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489220" id="2489220" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489221" id="2489221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489223" id="2489223" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489224" id="2489224" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489225" id="2489225" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489226" id="2489226" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489229" id="2489229" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489231" id="2489231" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489232" id="2489232" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489233" id="2489233" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489234" id="2489234" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489235" id="2489235" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489236" id="2489236" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489237" id="2489237" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489239" id="2489239" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489240" id="2489240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489243" id="2489243" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489244" id="2489244" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489248" id="2489248" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-27717.html" id="ALSA-2026:27717" type="self" title="ALSA-2026:27717"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="140.12.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-140.12.0-1.el8_10.alma.1.src.rpm">
          <filename>firefox-140.12.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">e37f9e541a594abad5516e2adcaea732e76f7994b2ff31ac5539b59899ae4ae6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:27738</id>
    <title>Important: libpq security update</title>
    <issued date="2026-06-22 00:00:00"/>
    <updated date="2026-06-23 10:15:46"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libpq security update</summary>
    <description>The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers.   

Security Fix(es):  

  * postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475)
  * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477)
  * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478)
  * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:27738" id="RHSA-2026:27738" type="rhsa" title="RHSA-2026:27738"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6473" id="CVE-2026-6473" type="cve" title="CVE-2026-6473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6475" id="CVE-2026-6475" type="cve" title="CVE-2026-6475"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6477" id="CVE-2026-6477" type="cve" title="CVE-2026-6477"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6478" id="CVE-2026-6478" type="cve" title="CVE-2026-6478"/>
      <reference href="https://bugzilla.redhat.com/2477439" id="2477439" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477442" id="2477442" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477447" id="2477447" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477448" id="2477448" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-27738.html" id="ALSA-2026:27738" type="self" title="ALSA-2026:27738"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libpq" version="13.23" release="2.el8_10" epoch="0" arch="s390x" src="libpq-13.23-2.el8_10.src.rpm">
          <filename>libpq-13.23-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">a67222d436d0d42722dbd36a1fbabb9e163fa961393347c73d2c1554008cc8f5</sum>
        </package>
        <package name="libpq-devel" version="13.23" release="2.el8_10" epoch="0" arch="s390x" src="libpq-13.23-2.el8_10.src.rpm">
          <filename>libpq-devel-13.23-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">fc9c946f4c268d4543ecfaef9a267219210068a36a0f4f421eccf0de1ba7d98e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:28143</id>
    <title>Important: postgresql:16 security update</title>
    <issued date="2026-06-23 00:00:00"/>
    <updated date="2026-06-24 09:29:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:16 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478)
  * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:28143" id="RHSA-2026:28143" type="rhsa" title="RHSA-2026:28143"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6473" id="CVE-2026-6473" type="cve" title="CVE-2026-6473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6478" id="CVE-2026-6478" type="cve" title="CVE-2026-6478"/>
      <reference href="https://bugzilla.redhat.com/2477447" id="2477447" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477448" id="2477448" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-28143.html" id="ALSA-2026:28143" type="self" title="ALSA-2026:28143"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="16" version="8100020260623230854" context="9edba152" arch="s390x"/>
        <package name="postgresql-plpython3" version="16.14" release="1.module_el8.10.0+4199+bf03c564" epoch="0" arch="s390x" src="postgresql-16.14-1.module_el8.10.0+4199+bf03c564.src.rpm">
          <filename>postgresql-plpython3-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm</filename>
          <sum type="sha256">132abe6a8a8b062ed0c3905aa3d117568420bb48d9933a20f367a3281da01274</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="16.14" release="1.module_el8.10.0+4199+bf03c564" epoch="0" arch="noarch" src="postgresql-16.14-1.module_el8.10.0+4199+bf03c564.src.rpm">
          <filename>postgresql-test-rpm-macros-16.14-1.module_el8.10.0+4199+bf03c564.noarch.rpm</filename>
          <sum type="sha256">16163fc3be3f42d11f2e2387fdc46504bd16539e5c644b1255491ea5ce213813</sum>
        </package>
        <package name="pg_repack" version="1.5.1" release="1.module_el8.10.0+4199+bf03c564" epoch="0" arch="s390x" src="pg_repack-1.5.1-1.module_el8.10.0+4199+bf03c564.src.rpm">
          <filename>pg_repack-1.5.1-1.module_el8.10.0+4199+bf03c564.s390x.rpm</filename>
          <sum type="sha256">1e4687b63ebe2c432f70a91c9a780179906d6c1257b19fce8e40e2c0ac67ff3a</sum>
        </package>
        <package name="postgresql-private-libs" version="16.14" release="1.module_el8.10.0+4199+bf03c564" epoch="0" arch="s390x" src="postgresql-16.14-1.module_el8.10.0+4199+bf03c564.src.rpm">
          <filename>postgresql-private-libs-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm</filename>
          <sum type="sha256">2cd011ca4f55943147a497eace6cbeed47d6d1941fc3fefcfaf0748a1a7bf21d</sum>
        </package>
        <package name="postgresql-server-devel" version="16.14" release="1.module_el8.10.0+4199+bf03c564" epoch="0" arch="s390x" src="postgresql-16.14-1.module_el8.10.0+4199+bf03c564.src.rpm">
          <filename>postgresql-server-devel-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm</filename>
          <sum type="sha256">2ea44f2d81fa36a7938de89e94d7b2a4be5bf226d5f3e039cd5e09fbdc8fbec3</sum>
        </package>
        <package name="postgresql-test" version="16.14" release="1.module_el8.10.0+4199+bf03c564" epoch="0" arch="s390x" src="postgresql-16.14-1.module_el8.10.0+4199+bf03c564.src.rpm">
          <filename>postgresql-test-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm</filename>
          <sum type="sha256">386ec5960dfa7607435035b5cfb9aa579cf5e6e2a2b3e325a460c07242285682</sum>
        </package>
        <package name="postgresql-private-devel" version="16.14" release="1.module_el8.10.0+4199+bf03c564" epoch="0" arch="s390x" src="postgresql-16.14-1.module_el8.10.0+4199+bf03c564.src.rpm">
          <filename>postgresql-private-devel-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm</filename>
          <sum type="sha256">6153f62832064cd2f4e8eb45602ee5db851da992ca438e05529b4cacf676b74e</sum>
        </package>
        <package name="postgresql-docs" version="16.14" release="1.module_el8.10.0+4199+bf03c564" epoch="0" arch="s390x" src="postgresql-16.14-1.module_el8.10.0+4199+bf03c564.src.rpm">
          <filename>postgresql-docs-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm</filename>
          <sum type="sha256">71c32af3ce2751b656870913d877c2a6d7585a4d14b3473e906dc5310e1708ef</sum>
        </package>
        <package name="postgresql-server" version="16.14" release="1.module_el8.10.0+4199+bf03c564" epoch="0" arch="s390x" src="postgresql-16.14-1.module_el8.10.0+4199+bf03c564.src.rpm">
          <filename>postgresql-server-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm</filename>
          <sum type="sha256">88e03340fd0b2c53d9e9342d38e87f08ee5cf43e77253799461dc7632e8a95fa</sum>
        </package>
        <package name="postgresql-plperl" version="16.14" release="1.module_el8.10.0+4199+bf03c564" epoch="0" arch="s390x" src="postgresql-16.14-1.module_el8.10.0+4199+bf03c564.src.rpm">
          <filename>postgresql-plperl-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm</filename>
          <sum type="sha256">941ac5667bed9c67223a037e2ca69d713b458c5f250bef5f89db75fb23dcae64</sum>
        </package>
        <package name="postgresql-pltcl" version="16.14" release="1.module_el8.10.0+4199+bf03c564" epoch="0" arch="s390x" src="postgresql-16.14-1.module_el8.10.0+4199+bf03c564.src.rpm">
          <filename>postgresql-pltcl-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm</filename>
          <sum type="sha256">a5ca11cb6f9e556d309fc37cc250fb03887f2e305cefcf6cc5ca96540d7f632c</sum>
        </package>
        <package name="postgres-decoderbufs" version="2.4.0" release="1.Final.module_el8.10.0+3798+606ebb9f" epoch="0" arch="s390x" src="postgres-decoderbufs-2.4.0-1.Final.module_el8.10.0+3798+606ebb9f.src.rpm">
          <filename>postgres-decoderbufs-2.4.0-1.Final.module_el8.10.0+3798+606ebb9f.s390x.rpm</filename>
          <sum type="sha256">b4ab4ce80d621ce9e80cef82edec35ef1ab32c9448d690e668db0bb17bd1a90a</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="16.14" release="1.module_el8.10.0+4199+bf03c564" epoch="0" arch="s390x" src="postgresql-16.14-1.module_el8.10.0+4199+bf03c564.src.rpm">
          <filename>postgresql-upgrade-devel-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm</filename>
          <sum type="sha256">b4b2ef9301a33d666cb496fcb048e94a62093ab206df4401c56f22464c70d724</sum>
        </package>
        <package name="postgresql-upgrade" version="16.14" release="1.module_el8.10.0+4199+bf03c564" epoch="0" arch="s390x" src="postgresql-16.14-1.module_el8.10.0+4199+bf03c564.src.rpm">
          <filename>postgresql-upgrade-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm</filename>
          <sum type="sha256">b96063358400a3bb45516111e7484320a4cd87e035c2df5065a2f92b0ec6453c</sum>
        </package>
        <package name="postgresql-contrib" version="16.14" release="1.module_el8.10.0+4199+bf03c564" epoch="0" arch="s390x" src="postgresql-16.14-1.module_el8.10.0+4199+bf03c564.src.rpm">
          <filename>postgresql-contrib-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm</filename>
          <sum type="sha256">c010c34caff439ba543de8c8f612ecddb597f5040d76af52c2932ab7a1d07e14</sum>
        </package>
        <package name="postgresql" version="16.14" release="1.module_el8.10.0+4199+bf03c564" epoch="0" arch="s390x" src="postgresql-16.14-1.module_el8.10.0+4199+bf03c564.src.rpm">
          <filename>postgresql-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm</filename>
          <sum type="sha256">cab32516c1be8499a6e01b3b68d6ed7638ddd0a9082b071df3edee7df77709f6</sum>
        </package>
        <package name="postgresql-static" version="16.14" release="1.module_el8.10.0+4199+bf03c564" epoch="0" arch="s390x" src="postgresql-16.14-1.module_el8.10.0+4199+bf03c564.src.rpm">
          <filename>postgresql-static-16.14-1.module_el8.10.0+4199+bf03c564.s390x.rpm</filename>
          <sum type="sha256">d4e7bbc9d5333aea2d2da724c2abca34819ce24eefbaf043fe86d407bede47ef</sum>
        </package>
        <package name="pgaudit" version="16.0" release="1.module_el8.10.0+3798+606ebb9f" epoch="0" arch="s390x" src="pgaudit-16.0-1.module_el8.10.0+3798+606ebb9f.src.rpm">
          <filename>pgaudit-16.0-1.module_el8.10.0+3798+606ebb9f.s390x.rpm</filename>
          <sum type="sha256">e1395e420ef0b455c809e9fbbc50b5a27410be72d91603805a4907b86ca95cce</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:28208</id>
    <title>Important: postgresql:13 security update</title>
    <issued date="2026-06-23 00:00:00"/>
    <updated date="2026-06-24 09:28:11"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:13 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:28208" id="RHSA-2026:28208" type="rhsa" title="RHSA-2026:28208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6478" id="CVE-2026-6478" type="cve" title="CVE-2026-6478"/>
      <reference href="https://bugzilla.redhat.com/2477447" id="2477447" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-28208.html" id="ALSA-2026:28208" type="self" title="ALSA-2026:28208"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="13" version="8100020260623140848" context="9edba152" arch="s390x"/>
        <package name="postgresql-server-devel" version="13.23" release="3.module_el8.10.0+4198+7a62a2ce" epoch="0" arch="s390x" src="postgresql-13.23-3.module_el8.10.0+4198+7a62a2ce.src.rpm">
          <filename>postgresql-server-devel-13.23-3.module_el8.10.0+4198+7a62a2ce.s390x.rpm</filename>
          <sum type="sha256">01f80654867332c4cf1a99e6c8d223894fdafbd45c35e3e44207bae7cc97b329</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.23" release="3.module_el8.10.0+4198+7a62a2ce" epoch="0" arch="s390x" src="postgresql-13.23-3.module_el8.10.0+4198+7a62a2ce.src.rpm">
          <filename>postgresql-upgrade-devel-13.23-3.module_el8.10.0+4198+7a62a2ce.s390x.rpm</filename>
          <sum type="sha256">0ef778124a7e745d9b35e7386a9c9a6f8cc74d6dc8dcc45fad9ab671eff251eb</sum>
        </package>
        <package name="postgresql-contrib" version="13.23" release="3.module_el8.10.0+4198+7a62a2ce" epoch="0" arch="s390x" src="postgresql-13.23-3.module_el8.10.0+4198+7a62a2ce.src.rpm">
          <filename>postgresql-contrib-13.23-3.module_el8.10.0+4198+7a62a2ce.s390x.rpm</filename>
          <sum type="sha256">23f380f6eeb94e71523e04873ba2b8a8e35a58c6b64c389f45bd2797416205dd</sum>
        </package>
        <package name="postgresql-plperl" version="13.23" release="3.module_el8.10.0+4198+7a62a2ce" epoch="0" arch="s390x" src="postgresql-13.23-3.module_el8.10.0+4198+7a62a2ce.src.rpm">
          <filename>postgresql-plperl-13.23-3.module_el8.10.0+4198+7a62a2ce.s390x.rpm</filename>
          <sum type="sha256">3eef63d6c5c2513f9e180c1bc44b954b3a01b588622d6a83f204dd2ba9ba7a19</sum>
        </package>
        <package name="postgresql-static" version="13.23" release="3.module_el8.10.0+4198+7a62a2ce" epoch="0" arch="s390x" src="postgresql-13.23-3.module_el8.10.0+4198+7a62a2ce.src.rpm">
          <filename>postgresql-static-13.23-3.module_el8.10.0+4198+7a62a2ce.s390x.rpm</filename>
          <sum type="sha256">4eff9046ba34f4304a9df97520fb8b97cfdae100c74677a65d633bf40ef56462</sum>
        </package>
        <package name="postgresql-server" version="13.23" release="3.module_el8.10.0+4198+7a62a2ce" epoch="0" arch="s390x" src="postgresql-13.23-3.module_el8.10.0+4198+7a62a2ce.src.rpm">
          <filename>postgresql-server-13.23-3.module_el8.10.0+4198+7a62a2ce.s390x.rpm</filename>
          <sum type="sha256">58cb77c68213fde012837378ff7a2d27081fdea212b84b70f2289e4797685356</sum>
        </package>
        <package name="postgresql-pltcl" version="13.23" release="3.module_el8.10.0+4198+7a62a2ce" epoch="0" arch="s390x" src="postgresql-13.23-3.module_el8.10.0+4198+7a62a2ce.src.rpm">
          <filename>postgresql-pltcl-13.23-3.module_el8.10.0+4198+7a62a2ce.s390x.rpm</filename>
          <sum type="sha256">6e3c8cff94091e7f70cdcc88f23dd2cf8b69f857a3b9a3016dda81c20e8002ea</sum>
        </package>
        <package name="postgresql-test" version="13.23" release="3.module_el8.10.0+4198+7a62a2ce" epoch="0" arch="s390x" src="postgresql-13.23-3.module_el8.10.0+4198+7a62a2ce.src.rpm">
          <filename>postgresql-test-13.23-3.module_el8.10.0+4198+7a62a2ce.s390x.rpm</filename>
          <sum type="sha256">7fb41ead5434bc565d0deafaa4b0e1c73b1ef106f8ab0cb9a8a4eece6532b742</sum>
        </package>
        <package name="postgresql-upgrade" version="13.23" release="3.module_el8.10.0+4198+7a62a2ce" epoch="0" arch="s390x" src="postgresql-13.23-3.module_el8.10.0+4198+7a62a2ce.src.rpm">
          <filename>postgresql-upgrade-13.23-3.module_el8.10.0+4198+7a62a2ce.s390x.rpm</filename>
          <sum type="sha256">870e73170268d3a7180181ea73b58d114b285c2fdd8a037900803b7ec2ddab17</sum>
        </package>
        <package name="postgresql-plpython3" version="13.23" release="3.module_el8.10.0+4198+7a62a2ce" epoch="0" arch="s390x" src="postgresql-13.23-3.module_el8.10.0+4198+7a62a2ce.src.rpm">
          <filename>postgresql-plpython3-13.23-3.module_el8.10.0+4198+7a62a2ce.s390x.rpm</filename>
          <sum type="sha256">93159e28ff7dc8788f5049284779af5e869ed38508364898dbf9fcfecfbdefe9</sum>
        </package>
        <package name="pgaudit" version="1.5.0" release="1.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="pgaudit-1.5.0-1.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>pgaudit-1.5.0-1.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">a29cba50326b3c78b1cff9ad076eff7837022e71f02d7ec9e918aed69a9c3f35</sum>
        </package>
        <package name="postgres-decoderbufs" version="0.10.0" release="2.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">b11226898b888f8213eefe941cece0f636a08ccce2ceaa8bee2a38e6058ed4f3</sum>
        </package>
        <package name="pg_repack" version="1.4.6" release="3.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="pg_repack-1.4.6-3.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>pg_repack-1.4.6-3.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">c1b386540b304a4de3ff8d840ec35dc9d67ecd1827aa06cd695f06060e8d2ea7</sum>
        </package>
        <package name="postgresql" version="13.23" release="3.module_el8.10.0+4198+7a62a2ce" epoch="0" arch="s390x" src="postgresql-13.23-3.module_el8.10.0+4198+7a62a2ce.src.rpm">
          <filename>postgresql-13.23-3.module_el8.10.0+4198+7a62a2ce.s390x.rpm</filename>
          <sum type="sha256">c580feab758b64a0b5dd483d3b8639c21c1c222fc4fdda0064ad5cb889ee199b</sum>
        </package>
        <package name="postgresql-docs" version="13.23" release="3.module_el8.10.0+4198+7a62a2ce" epoch="0" arch="s390x" src="postgresql-13.23-3.module_el8.10.0+4198+7a62a2ce.src.rpm">
          <filename>postgresql-docs-13.23-3.module_el8.10.0+4198+7a62a2ce.s390x.rpm</filename>
          <sum type="sha256">cf8c8fc5fa14c2089d54e2f5fde5ffa692f769e619becf057fcce375c067dfb8</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="13.23" release="3.module_el8.10.0+4198+7a62a2ce" epoch="0" arch="noarch" src="postgresql-13.23-3.module_el8.10.0+4198+7a62a2ce.src.rpm">
          <filename>postgresql-test-rpm-macros-13.23-3.module_el8.10.0+4198+7a62a2ce.noarch.rpm</filename>
          <sum type="sha256">d2f1168dd5d0ad57043876ec792a0c09f1fa0c15736c0b27580e7d6038d3f4d1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:28553</id>
    <title>Moderate: vim security update</title>
    <issued date="2026-06-23 00:00:00"/>
    <updated date="2026-06-24 09:23:20"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: Vim: Command injection allows arbitrary code execution via malicious tag files (CVE-2026-41411)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:28553" id="RHSA-2026:28553" type="rhsa" title="RHSA-2026:28553"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-41411" id="CVE-2026-41411" type="cve" title="CVE-2026-41411"/>
      <reference href="https://bugzilla.redhat.com/2461614" id="2461614" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-28553.html" id="ALSA-2026:28553" type="self" title="ALSA-2026:28553"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="vim-X11" version="8.0.1763" release="24.el8_10" epoch="2" arch="s390x" src="vim-8.0.1763-24.el8_10.src.rpm">
          <filename>vim-X11-8.0.1763-24.el8_10.s390x.rpm</filename>
          <sum type="sha256">0623bbced35c5e0f0f66b852c296d258194eb9ea733e0fb891cf6c55acf7c732</sum>
        </package>
        <package name="vim-enhanced" version="8.0.1763" release="24.el8_10" epoch="2" arch="s390x" src="vim-8.0.1763-24.el8_10.src.rpm">
          <filename>vim-enhanced-8.0.1763-24.el8_10.s390x.rpm</filename>
          <sum type="sha256">392b4fd97f175bda28ea8e30d47c679540862165db405608828af6631396c570</sum>
        </package>
        <package name="vim-filesystem" version="8.0.1763" release="24.el8_10" epoch="2" arch="noarch" src="vim-8.0.1763-24.el8_10.src.rpm">
          <filename>vim-filesystem-8.0.1763-24.el8_10.noarch.rpm</filename>
          <sum type="sha256">865f99ff48af4568b49a8a70536acf7dd7976c2b7f9319a15cd4b3b310fd30b2</sum>
        </package>
        <package name="vim-common" version="8.0.1763" release="24.el8_10" epoch="2" arch="s390x" src="vim-8.0.1763-24.el8_10.src.rpm">
          <filename>vim-common-8.0.1763-24.el8_10.s390x.rpm</filename>
          <sum type="sha256">c65f1826f3b9e027e96c588d2430251b47baea87bffc0b10dcdfc695ed4e8b04</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:28921</id>
    <title>Important: nginx:1.24 security update</title>
    <issued date="2026-06-24 00:00:00"/>
    <updated date="2026-06-25 10:13:05"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nginx:1.24 security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:28921" id="RHSA-2026:28921" type="rhsa" title="RHSA-2026:28921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-9256" id="CVE-2026-9256" type="cve" title="CVE-2026-9256"/>
      <reference href="https://bugzilla.redhat.com/2480746" id="2480746" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-28921.html" id="ALSA-2026:28921" type="self" title="ALSA-2026:28921"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="nginx" stream="1.24" version="8100020260625074437" context="9edba152" arch="s390x"/>
        <package name="nginx-mod-mail" version="1.24.0" release="3.module_el8.10.0+4200+fea3b4c7.2.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1.src.rpm">
          <filename>nginx-mod-mail-1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">3b764c738803ca1c7bf5f4040d03a97eabe3272a6e4abba0ad7192c214318807</sum>
        </package>
        <package name="nginx-mod-stream" version="1.24.0" release="3.module_el8.10.0+4200+fea3b4c7.2.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1.src.rpm">
          <filename>nginx-mod-stream-1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">4491f6a08d05c4cc33911378a0420481bb2507597d06aa91d589e9cd850e5d52</sum>
        </package>
        <package name="nginx-mod-devel" version="1.24.0" release="3.module_el8.10.0+4200+fea3b4c7.2.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1.src.rpm">
          <filename>nginx-mod-devel-1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">ac22d14975d3a6e1e1deb06ba584e8ee82485eebe377406c8e903039abb7d16a</sum>
        </package>
        <package name="nginx-all-modules" version="1.24.0" release="3.module_el8.10.0+4200+fea3b4c7.2.alma.1" epoch="1" arch="noarch" src="nginx-1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1.src.rpm">
          <filename>nginx-all-modules-1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">be796fe38691ab8f20263d8d1f49de734620e03ab9b8db840976dab64a5cfbfc</sum>
        </package>
        <package name="nginx" version="1.24.0" release="3.module_el8.10.0+4200+fea3b4c7.2.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1.src.rpm">
          <filename>nginx-1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">cece1e993e2a1dc421ae8d9b8665ec74d83e42aa97f8681393ada953a321dd33</sum>
        </package>
        <package name="nginx-mod-http-perl" version="1.24.0" release="3.module_el8.10.0+4200+fea3b4c7.2.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1.src.rpm">
          <filename>nginx-mod-http-perl-1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">f47ac622cba3b6e3fd50fa7d2116d41801c66e679104f97c27a551faa6e2cc24</sum>
        </package>
        <package name="nginx-filesystem" version="1.24.0" release="3.module_el8.10.0+4200+fea3b4c7.2.alma.1" epoch="1" arch="noarch" src="nginx-1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1.src.rpm">
          <filename>nginx-filesystem-1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">fa81e407ebcc13449d9dadcc18765745ad7e12f5fe350fa30bf2fa54e70ee011</sum>
        </package>
        <package name="nginx-mod-http-image-filter" version="1.24.0" release="3.module_el8.10.0+4200+fea3b4c7.2.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1.src.rpm">
          <filename>nginx-mod-http-image-filter-1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">fcb535a1b1b7c4970d8ff2279a5b203036e52f05b312e98c6ac222d40c944604</sum>
        </package>
        <package name="nginx-mod-http-xslt-filter" version="1.24.0" release="3.module_el8.10.0+4200+fea3b4c7.2.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1.src.rpm">
          <filename>nginx-mod-http-xslt-filter-1.24.0-3.module_el8.10.0+4200+fea3b4c7.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">fe56c9fa5abd12a0a09890a8b09a6d4fc7f79900a5478f623f46a19740249a2a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:28922</id>
    <title>Moderate: libreoffice security update</title>
    <issued date="2026-06-24 00:00:00"/>
    <updated date="2026-06-25 10:20:19"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libreoffice security update</summary>
    <description>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.  

Security Fix(es):  

  * LibreOffice: LibreOffice: Denial of Service via crafted OOXML documents (CVE-2026-4430)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:28922" id="RHSA-2026:28922" type="rhsa" title="RHSA-2026:28922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4430" id="CVE-2026-4430" type="cve" title="CVE-2026-4430"/>
      <reference href="https://bugzilla.redhat.com/2467657" id="2467657" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-28922.html" id="ALSA-2026:28922" type="self" title="ALSA-2026:28922"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="autocorr-ro" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-ro-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">021207845f81907c96f13bbf37d1b6260cefeadbef36bde6d6cfab45030f7c01</sum>
        </package>
        <package name="libreoffice-impress" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>libreoffice-impress-6.4.7.2-20.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">027bfe575847184d46fe29ad1b7e7de284d760f4268ded94f3f343aa13bc8662</sum>
        </package>
        <package name="autocorr-mn" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-mn-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">151b763c5e09d5c6b15cd3986cb0eedf946184b559f4f33398c5ad584e73c879</sum>
        </package>
        <package name="autocorr-ko" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-ko-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">19eb82c5d0e12145af518d9af85af647bc4da18efd98bf08f7335aea1bee9f08</sum>
        </package>
        <package name="libreoffice-data" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>libreoffice-data-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">25303db1b9a45e7426870d93e78b1b139ede2c6199a767f1d70fb805223e2a42</sum>
        </package>
        <package name="autocorr-ga" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-ga-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">25a3d4ede3dd7461ddae6f10c1a7239f2434fa769d5bf8c7d263524827b51d2a</sum>
        </package>
        <package name="autocorr-pt" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-pt-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">3ff4246f6f9d22fb58fa46a6c8b79dbd2c236a358ec2816ba0b28c35da4b3f3b</sum>
        </package>
        <package name="autocorr-lb" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-lb-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">429802c77400b52fe03b9b463847214d30141947db15ee6563b33c9df090ed72</sum>
        </package>
        <package name="autocorr-sk" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-sk-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">445927555071a6e8dcb28e70354014bd51811d0ef46892c32ab5b07f1c5e450c</sum>
        </package>
        <package name="autocorr-af" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-af-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">4d17ab26a623fb8fec4cbf49fc8a7a1434e1a343ddc056be608b4eb186a47360</sum>
        </package>
        <package name="libreoffice-pyuno" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>libreoffice-pyuno-6.4.7.2-20.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">5039d9aa5bc2cbab696c34469785834b69671eb5a81fe17f9208f3a30b741c00</sum>
        </package>
        <package name="autocorr-fi" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-fi-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">50b62b9ec7ff7706d3851cc7eb33c0f4a673d43f0af4767959c59deccc3b9d5f</sum>
        </package>
        <package name="autocorr-hu" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-hu-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">5425bc53f6524b37fa87f9012e7bf4d235d2afa3adb5bdd9baa26843d8cd80ba</sum>
        </package>
        <package name="autocorr-vi" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-vi-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">5b36121b2a9987d558da11db10bbd867e388abe94c13f3473dee897c6bcac2d5</sum>
        </package>
        <package name="libreoffice-help-en" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>libreoffice-help-en-6.4.7.2-20.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">61cb346913cac7f3891ea55b87b360752406fe6c9944036d175ff349b9bbd37a</sum>
        </package>
        <package name="libreoffice-langpack-en" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>libreoffice-langpack-en-6.4.7.2-20.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">64d9e42b279d85833907a60d2d941400a495a8ade296314195298c36e4398694</sum>
        </package>
        <package name="autocorr-tr" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-tr-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">6615ce8864921bca7ef13b6edd665e4ad4af3a970330f8fe1fad64621612509d</sum>
        </package>
        <package name="autocorr-da" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-da-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">687fa03c8963f1ef285f2ede97945e1841e3160e49095646775b765d338534aa</sum>
        </package>
        <package name="autocorr-de" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-de-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">6bfd5f76b448f48254f973a189246bf4a6637b1c9a589fbb4146edeca244ff59</sum>
        </package>
        <package name="autocorr-ja" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-ja-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">72d7e76a501516b106e4e6095fcb2a4aaa71f0abe3b6c5dc8a6c0885f7c38163</sum>
        </package>
        <package name="libreoffice-core" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>libreoffice-core-6.4.7.2-20.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">75b0b51682a9ae27817959d9428f1b6f51f3e24660b6ec8ecfc9a12bdc666e6d</sum>
        </package>
        <package name="autocorr-pl" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-pl-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">780ebe8062a23ddffc1338771e0612e284286378c792870d7d676afa9f5e44b5</sum>
        </package>
        <package name="autocorr-fa" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-fa-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">7ac172fd710c31666a764e8b36213d14cdbcec40c0358749b414dd443e6ce0a4</sum>
        </package>
        <package name="autocorr-cs" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-cs-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">8320103cbb61a8c1a7cb19e35a274e40ca70a4380d56a2634ddac16cb3c3db82</sum>
        </package>
        <package name="autocorr-sl" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-sl-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">8b0180e838ea005bdcb876df7a2785893dab9da6d6ddc83e47b308861a374791</sum>
        </package>
        <package name="autocorr-lt" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-lt-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">8f85f761b89880a392f2cf362c49b7502d4d8496b59766a29c41140c4a62db2e</sum>
        </package>
        <package name="libreoffice-opensymbol-fonts" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>libreoffice-opensymbol-fonts-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">96719fb514d4a76c2c7f1abd473e7aabd77d6009bbde6cc4896d8401159a818f</sum>
        </package>
        <package name="autocorr-is" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-is-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">978383b1eb9cca8673bd403ed3dee86d2706b13023cc8291531f99cce5b00314</sum>
        </package>
        <package name="autocorr-fr" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-fr-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">9b209782c35b5e783c989f194f22f96fff321a0f5703693966f8c926296e2edc</sum>
        </package>
        <package name="autocorr-es" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-es-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">9d73a1e623311dd39f736f66ad37d6bbb1249ec7ac4d740eccb26c96c1e4b0b3</sum>
        </package>
        <package name="libreoffice-pdfimport" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>libreoffice-pdfimport-6.4.7.2-20.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">a27b63a5a6acae881daecbbff8eb30509ec8ea29baaba33b1a38c7aaa0f227fa</sum>
        </package>
        <package name="autocorr-sr" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-sr-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">a6ab731ec4e9b28ae3ae07c68b61ff9129c3b199f4b6bc41004a6e2dac0441aa</sum>
        </package>
        <package name="libreoffice-ure" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>libreoffice-ure-6.4.7.2-20.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">a84616c1a7820917c1dbabc24d143ce62db270b640dc22241b890e891f0fbacc</sum>
        </package>
        <package name="autocorr-nl" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-nl-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">af862cb251355366785e064f3c2d5f31b183f10c925c9cfa948f6742f27de540</sum>
        </package>
        <package name="libreoffice-writer" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>libreoffice-writer-6.4.7.2-20.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">b14643cdbbf0b82bb7c7635a922005b3aebdb7376014aefc125cbbbc2dda30cd</sum>
        </package>
        <package name="libreoffice-ogltrans" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>libreoffice-ogltrans-6.4.7.2-20.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">bbb7eaef4b9c4b10943a03e10ce003c259c537464720ec396bcd6fb118bb9de2</sum>
        </package>
        <package name="autocorr-hr" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-hr-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">bd3d6b868b2c34a3b643bbc0b2639a65164569d43bad6bd6ef06b6eedf85c54f</sum>
        </package>
        <package name="autocorr-it" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-it-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">bed38dc5b71402533c92af925911f622f64f074726194d9ede02ece5af598de0</sum>
        </package>
        <package name="autocorr-en" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-en-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">c168cac843bec9212cbf1eba8aa956966827f9ad30af30382c788ce01f913ab0</sum>
        </package>
        <package name="libreoffice-calc" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>libreoffice-calc-6.4.7.2-20.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">c41cc68eab906c02cb705e6d30afd351d25da24aedf98762fa5f232dabb6a88c</sum>
        </package>
        <package name="libreoffice-ure-common" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>libreoffice-ure-common-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">d2e240eaf95e73dc94bf429b616cd7ee5f33fb422498fb5c6781ca02dc9c023d</sum>
        </package>
        <package name="autocorr-zh" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-zh-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">d3d1318d41fab5708eb22bde8bf23ba2c222b00b50071181a732af41fc25489b</sum>
        </package>
        <package name="autocorr-sv" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-sv-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">d4ea9d87df6bfa051e9cbdff7a26b42149ca3bfcee6ed6d77bcb4b292b174320</sum>
        </package>
        <package name="autocorr-ru" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-ru-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">efa7918852a88f36c855878525792dc526ebd32c59e7218ddaa5702dfb22bbab</sum>
        </package>
        <package name="autocorr-ca" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-ca-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">f611543cb088a75d99aaf44b5f8abaa5d930e718b465fe39f213fd2411d7be18</sum>
        </package>
        <package name="autocorr-bg" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>autocorr-bg-6.4.7.2-20.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">fddcdb5d2b586b9deccb893d9cc477658a0cf694313072ddee6cec9fe7944cd0</sum>
        </package>
        <package name="libreoffice-graphicfilter" version="6.4.7.2" release="20.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-20.el8_10.alma.1.src.rpm">
          <filename>libreoffice-graphicfilter-6.4.7.2-20.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">ff04844c75a642d76c5bc35285aff43d4d19a3cbbbaa2c5eb0d7190bcac00eeb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:28923</id>
    <title>Important: tigervnc security update</title>
    <issued date="2026-06-24 00:00:00"/>
    <updated date="2026-06-24 14:34:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tigervnc security update</summary>
    <description>Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.  

Security Fix(es):  

  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:28923" id="RHSA-2026:28923" type="rhsa" title="RHSA-2026:28923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50256" id="CVE-2026-50256" type="cve" title="CVE-2026-50256"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50257" id="CVE-2026-50257" type="cve" title="CVE-2026-50257"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50258" id="CVE-2026-50258" type="cve" title="CVE-2026-50258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50259" id="CVE-2026-50259" type="cve" title="CVE-2026-50259"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50260" id="CVE-2026-50260" type="cve" title="CVE-2026-50260"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50261" id="CVE-2026-50261" type="cve" title="CVE-2026-50261"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50262" id="CVE-2026-50262" type="cve" title="CVE-2026-50262"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50263" id="CVE-2026-50263" type="cve" title="CVE-2026-50263"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50264" id="CVE-2026-50264" type="cve" title="CVE-2026-50264"/>
      <reference href="https://bugzilla.redhat.com/2485380" id="2485380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485382" id="2485382" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485383" id="2485383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485384" id="2485384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485385" id="2485385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485386" id="2485386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485387" id="2485387" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485388" id="2485388" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485389" id="2485389" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-28923.html" id="ALSA-2026:28923" type="self" title="ALSA-2026:28923"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="tigervnc-server-module" version="1.15.0" release="10.el8_10" epoch="0" arch="s390x" src="tigervnc-1.15.0-10.el8_10.src.rpm">
          <filename>tigervnc-server-module-1.15.0-10.el8_10.s390x.rpm</filename>
          <sum type="sha256">1a138923a672925319936c6b3dc5632cc90bdab0e858e5684b4afa637b05b78c</sum>
        </package>
        <package name="tigervnc-icons" version="1.15.0" release="10.el8_10" epoch="0" arch="noarch" src="tigervnc-1.15.0-10.el8_10.src.rpm">
          <filename>tigervnc-icons-1.15.0-10.el8_10.noarch.rpm</filename>
          <sum type="sha256">670a469020a0662409e186753b0f1b0b0ea765f23a05a77bbbb5a37c3b8c9fbd</sum>
        </package>
        <package name="tigervnc-server-minimal" version="1.15.0" release="10.el8_10" epoch="0" arch="s390x" src="tigervnc-1.15.0-10.el8_10.src.rpm">
          <filename>tigervnc-server-minimal-1.15.0-10.el8_10.s390x.rpm</filename>
          <sum type="sha256">7dab2f9d9c0df5792215af144802b6869fcd71033eb604e617516dde861a4009</sum>
        </package>
        <package name="tigervnc-license" version="1.15.0" release="10.el8_10" epoch="0" arch="noarch" src="tigervnc-1.15.0-10.el8_10.src.rpm">
          <filename>tigervnc-license-1.15.0-10.el8_10.noarch.rpm</filename>
          <sum type="sha256">9a2316474e285857b7133f601b237b893cf07be97eb65b805dc6a8eb1cc7aeaa</sum>
        </package>
        <package name="tigervnc-selinux" version="1.15.0" release="10.el8_10" epoch="0" arch="noarch" src="tigervnc-1.15.0-10.el8_10.src.rpm">
          <filename>tigervnc-selinux-1.15.0-10.el8_10.noarch.rpm</filename>
          <sum type="sha256">a447ec7939b8a9167aa6cd24e942134c89d0cbe9f2ca65e006c019d643dc2136</sum>
        </package>
        <package name="tigervnc-server" version="1.15.0" release="10.el8_10" epoch="0" arch="s390x" src="tigervnc-1.15.0-10.el8_10.src.rpm">
          <filename>tigervnc-server-1.15.0-10.el8_10.s390x.rpm</filename>
          <sum type="sha256">b8aa40688458b403a25524fc621f5c6a9769356d5cc430d09433ac9670fb0751</sum>
        </package>
        <package name="tigervnc" version="1.15.0" release="10.el8_10" epoch="0" arch="s390x" src="tigervnc-1.15.0-10.el8_10.src.rpm">
          <filename>tigervnc-1.15.0-10.el8_10.s390x.rpm</filename>
          <sum type="sha256">fe3fbe6a6b7318e1a3fa0dad1bb285a462f2c364ab1818111e1d8e64bb6fafb0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:28998</id>
    <title>Important: evince security update</title>
    <issued date="2026-06-24 00:00:00"/>
    <updated date="2026-06-24 14:35:29"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>evince security update</summary>
    <description>The evince packages provide a simple multi-page document viewer for Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS) files, and, with additional back-ends, also the Device Independent File format (DVI) files.  

Security Fix(es):  

  * atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen (CVE-2026-46529)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:28998" id="RHSA-2026:28998" type="rhsa" title="RHSA-2026:28998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46529" id="CVE-2026-46529" type="cve" title="CVE-2026-46529"/>
      <reference href="https://bugzilla.redhat.com/2487669" id="2487669" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-28998.html" id="ALSA-2026:28998" type="self" title="ALSA-2026:28998"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="evince-nautilus" version="3.28.4" release="17.el8_10" epoch="0" arch="s390x" src="evince-3.28.4-17.el8_10.src.rpm">
          <filename>evince-nautilus-3.28.4-17.el8_10.s390x.rpm</filename>
          <sum type="sha256">2878ec92cc7d94d5d72bf81a16404c5c44c68675258cf54287e5bf676c3353ce</sum>
        </package>
        <package name="evince-browser-plugin" version="3.28.4" release="17.el8_10" epoch="0" arch="s390x" src="evince-3.28.4-17.el8_10.src.rpm">
          <filename>evince-browser-plugin-3.28.4-17.el8_10.s390x.rpm</filename>
          <sum type="sha256">4005e60f8c5855a206a83927be8a49e3c287cb9cd15920087131de2e33949805</sum>
        </package>
        <package name="evince-libs" version="3.28.4" release="17.el8_10" epoch="0" arch="s390x" src="evince-3.28.4-17.el8_10.src.rpm">
          <filename>evince-libs-3.28.4-17.el8_10.s390x.rpm</filename>
          <sum type="sha256">959e0c615afffc913bd629d414fa187cb6879178d976404c291420c5e9d726c7</sum>
        </package>
        <package name="evince" version="3.28.4" release="17.el8_10" epoch="0" arch="s390x" src="evince-3.28.4-17.el8_10.src.rpm">
          <filename>evince-3.28.4-17.el8_10.s390x.rpm</filename>
          <sum type="sha256">af8108430c2505fc0f9154d4b0ac72231e5637fa923a6de6b7401bfe34a66524</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:28999</id>
    <title>Important: postgresql:12 security update</title>
    <issued date="2026-06-24 00:00:00"/>
    <updated date="2026-06-24 14:33:53"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:12 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478)
  * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:28999" id="RHSA-2026:28999" type="rhsa" title="RHSA-2026:28999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6473" id="CVE-2026-6473" type="cve" title="CVE-2026-6473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6478" id="CVE-2026-6478" type="cve" title="CVE-2026-6478"/>
      <reference href="https://bugzilla.redhat.com/2477447" id="2477447" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477448" id="2477448" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-28999.html" id="ALSA-2026:28999" type="self" title="ALSA-2026:28999"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="12" version="8090020240227082527" context="9edba152" arch="s390x"/>
        <package name="pgaudit" version="1.4.0" release="7.module_el8.9.0+3740+0e74851f.alma.1" epoch="0" arch="s390x" src="pgaudit-1.4.0-7.module_el8.9.0+3740+0e74851f.alma.1.src.rpm">
          <filename>pgaudit-1.4.0-7.module_el8.9.0+3740+0e74851f.alma.1.s390x.rpm</filename>
          <sum type="sha256">05a6d09d675776fb9ab998aa9fb52890d6c4ecc40957331844fd2c42f555ebca</sum>
        </package>
        <package name="pg_repack" version="1.4.6" release="3.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="pg_repack-1.4.6-3.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>pg_repack-1.4.6-3.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">14fdf29fe5dd7075aaf956b75aec2c5028f78ea8c06a19b461fa970284284047</sum>
        </package>
        <package name="postgres-decoderbufs" version="0.10.0" release="2.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="postgres-decoderbufs-0.10.0-2.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>postgres-decoderbufs-0.10.0-2.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">8cd16a1e3af9b7e12bf6df8db5735aeeb762e32913e95ec5dabcb05c6ac34f39</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3032</id>
    <title>Important: munge security update</title>
    <issued date="2026-02-23 00:00:00"/>
    <updated date="2026-02-23 14:44:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>munge security update</summary>
    <description>MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials. It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having common users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients within this security realm can create and validate credentials without the use of root privileges, reserved ports, or platform-specific methods.  

Security Fix(es):  

  * MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery (CVE-2026-25506)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3032" id="RHSA-2026:3032" type="rhsa" title="RHSA-2026:3032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25506" id="CVE-2026-25506" type="cve" title="CVE-2026-25506"/>
      <reference href="https://bugzilla.redhat.com/2438715" id="2438715" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-3032.html" id="ALSA-2026:3032" type="self" title="ALSA-2026:3032"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="munge" version="0.5.13" release="3.el8_10" epoch="0" arch="s390x" src="munge-0.5.13-3.el8_10.src.rpm">
          <filename>munge-0.5.13-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">7d8e814ba362aab6518aa091fcf7dce6159ea20249a40219fd38e9521729d891</sum>
        </package>
        <package name="munge-libs" version="0.5.13" release="3.el8_10" epoch="0" arch="s390x" src="munge-0.5.13-3.el8_10.src.rpm">
          <filename>munge-libs-0.5.13-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">b565a8e3297f9ef62e669c7cebea3163fd753e4f2fffbd2f516c43e9eaf8298e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:30851</id>
    <title>Important: perl:5.32 security update</title>
    <issued date="2026-06-29 00:00:00"/>
    <updated date="2026-06-30 11:06:27"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>perl:5.32 security update</summary>
    <description>Perl is a high-level programming language that is commonly used for system administration utilities and web programming.  

Security Fix(es):  

  * perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access (CVE-2026-42496)
  * perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob (CVE-2026-48962)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:30851" id="RHSA-2026:30851" type="rhsa" title="RHSA-2026:30851"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42496" id="CVE-2026-42496" type="cve" title="CVE-2026-42496"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48962" id="CVE-2026-48962" type="cve" title="CVE-2026-48962"/>
      <reference href="https://bugzilla.redhat.com/2481314" id="2481314" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481767" id="2481767" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-30851.html" id="ALSA-2026:30851" type="self" title="ALSA-2026:30851"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="perl" stream="5.32" version="8100020260629123440" context="9edba152" arch="s390x"/>
        <package name="perl" version="5.32.1" release="474.module_el8.10.0+4162+0aac7c4c" epoch="4" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">011f43983089a48816e7957a86d1cf72a12ed4f335a50a827b1606c4a848988d</sum>
        </package>
        <package name="perl-Math-BigInt-FastCalc" version="0.500.900" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Math-BigInt-FastCalc-0.500.900-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Math-BigInt-FastCalc-0.500.900-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">02e26e19077af269cd397729470bc4fa338a1f4e076f9fa75dd7efc440debcff</sum>
        </package>
        <package name="perl-open" version="1.12" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-open-1.12-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">03e4688e8b380831a8cd4b5e2ef64816d8d855b0e51671a2adc52941b59da2f8</sum>
        </package>
        <package name="perl-Sys-Syslog" version="0.36" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Sys-Syslog-0.36-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Sys-Syslog-0.36-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">079b49645d07c209be167587ab587837e44e45fdaeadafa9b8b82e00b338b6bc</sum>
        </package>
        <package name="perl-AutoLoader" version="5.74" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-AutoLoader-5.74-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">0a24102ccd6a576a30826423eb8d25ca6de172288c34f39d413a52453f53d25c</sum>
        </package>
        <package name="perl-Encode" version="3.08" release="461.module_el8.6.0+3181+91434291" epoch="4" arch="s390x" src="perl-Encode-3.08-461.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Encode-3.08-461.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">0aa9678c2c64442ff6a3d5b1089e78550d762a2a5d3b984c64f786b76da7cf01</sum>
        </package>
        <package name="perl-Encode-devel" version="3.08" release="461.module_el8.6.0+3181+91434291" epoch="4" arch="s390x" src="perl-Encode-3.08-461.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Encode-devel-3.08-461.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">0ba7613843dc6a78fe7ba65103ac4915962b045bed0f95f738d64dec0269ae25</sum>
        </package>
        <package name="perl-Time-Piece" version="1.3401" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Time-Piece-1.3401-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">0bb0c24bb0a61f3fedac5424b8d929623790353aeb9ac823a2dbee38b20fd279</sum>
        </package>
        <package name="perl-Opcode" version="1.48" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Opcode-1.48-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">14ea15b836b87474bd2ef0ce046d52de465da3ca48b897753b6e70d733193cb9</sum>
        </package>
        <package name="perl-Safe" version="2.41" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Safe-2.41-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">16c6df130f68d0dc6845e6aa76d8a8325a54604e834f35994dc41b70e2af88e3</sum>
        </package>
        <package name="perl-overloading" version="0.02" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-overloading-0.02-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">18d6e80d91e36730a85bab2650cd98e9a11d665c9c30b8902e821ff1316db78e</sum>
        </package>
        <package name="perl-Errno" version="1.30" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Errno-1.30-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">18e5013689e6fbf773e56722e19b7e3da3497d51d9893a140c954aa2357071f9</sum>
        </package>
        <package name="perl-Net-Ping" version="2.72" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Net-Ping-2.72-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">1e040c34de1fd7c98d3cf2bb9eb1c31d6d7112c69421bbb4a58e179b4f68b2f0</sum>
        </package>
        <package name="perl-utils" version="5.32.1" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-utils-5.32.1-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">1e5fca94372196aab8d793465364c2f51650da017a119bc8f9294b54c6f3bec0</sum>
        </package>
        <package name="perl-lib" version="0.65" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-lib-0.65-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">228430700526e44abe17a4ba163c3d69ece77aa46fa6b89cc3be9f03214e2b4e</sum>
        </package>
        <package name="perl-Devel-PPPort" version="3.62" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Devel-PPPort-3.62-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Devel-PPPort-3.62-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">22b89b06807891168f339c873c1df71c09ea6279b58a053c1c3fa7756e5d9cfe</sum>
        </package>
        <package name="perl-DirHandle" version="1.05" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-DirHandle-1.05-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">24507dc82b28a622a38431dc2f0402493169f20072a24e1a9bb67aa84446d355</sum>
        </package>
        <package name="perl-overload" version="1.31" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-overload-1.31-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">2462af6ffc76c24b170d6a0bba512e9e085e6262f3026cae16370e40bace68d7</sum>
        </package>
        <package name="perl-libs" version="5.32.1" release="474.module_el8.10.0+4162+0aac7c4c" epoch="4" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-libs-5.32.1-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">248f346de4c283c1f102ad1a484b11e93d264eeada414c8af9baa2e59a77b71c</sum>
        </package>
        <package name="perl-Compress-Bzip2" version="2.28" release="2.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Compress-Bzip2-2.28-2.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Compress-Bzip2-2.28-2.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">24e9c4b296bff779ccafb1cce82029a1d0d7610c20f719e87338eecf5e28250d</sum>
        </package>
        <package name="perl-Symbol" version="1.08" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Symbol-1.08-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">297ee1e0a0a12f4cba0ad73f12644ca3ee2792789774408af4f78585ca72bde3</sum>
        </package>
        <package name="perl-I18N-Collate" version="1.02" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-I18N-Collate-1.02-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">2b3c90dffe1c8c5f416770a496b036f2f9912fdd94f25e278c6c9dc5299d1179</sum>
        </package>
        <package name="perl-Data-Dumper" version="2.174" release="440.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Data-Dumper-2.174-440.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Data-Dumper-2.174-440.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">2dbd08fb1974f13cdc2e12a54c2ac7974ebdc5ae17ee700b3e207e8068462c84</sum>
        </package>
        <package name="perl-NEXT" version="0.67" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-NEXT-0.67-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">2df0ff882f2056e512c4611805b10910279840caeadbd5f2d9f2a029828d45f6</sum>
        </package>
        <package name="perl-mro" version="1.23" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-mro-1.23-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">306880f68ef87d19519ea94dbf39c7262ccc0c9280bf7365e4afe2759d344f88</sum>
        </package>
        <package name="perl-Term-ReadLine" version="1.17" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Term-ReadLine-1.17-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">30e2b5389b8e1a6c71f67cf28cc213f1c773a3b1b557e769504866e569e0831d</sum>
        </package>
        <package name="perl-Pod-Functions" version="1.13" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Pod-Functions-1.13-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">322321aeaca24474b03e8d66aa8c5518ff3ff32c4330cea3bb5b61864dc6d4f1</sum>
        </package>
        <package name="perl-Time-HiRes" version="1.9764" release="459.module_el8.6.0+3181+91434291" epoch="4" arch="s390x" src="perl-Time-HiRes-1.9764-459.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Time-HiRes-1.9764-459.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">32d0137f5adc6c485c423ed080898c9d2d389d99c3414bc8183aefd23ff5fa20</sum>
        </package>
        <package name="perl-base" version="2.27" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-base-2.27-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">3356b4d0d4bc84df4d637a0bfb22d865f62cae5978d2dd0e377767331c3182ef</sum>
        </package>
        <package name="perl-vmsish" version="1.04" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-vmsish-1.04-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">340a07edf39df977632c2b0e180dfa1136430d5551dfff733a27cf07a6063e11</sum>
        </package>
        <package name="perl-subs" version="1.03" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-subs-1.03-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">34c8a6a85f2bae3439230444834e07af79aeda0518859f7ab32a97565b7ac752</sum>
        </package>
        <package name="perl-ODBM_File" version="1.16" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-ODBM_File-1.16-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">37739678cae5d48ea2704de738fad87f4ee50d5e62481d70d921215b514b360d</sum>
        </package>
        <package name="perl-Compress-Raw-Lzma" version="2.096" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Compress-Raw-Lzma-2.096-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Compress-Raw-Lzma-2.096-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">37cddb8cb6f7b081513d9ba73cde6b5a7af92dd45d761ed456a2131a0c2ba250</sum>
        </package>
        <package name="perl-Pod-Html" version="1.25" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Pod-Html-1.25-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">3869433f708b636aa4f69c76aa24b9d59892c3c31c0f09e62260adc60ecb41a8</sum>
        </package>
        <package name="perl-File-Compare" version="1.100.600" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-File-Compare-1.100.600-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">39464ea41c8a8860caa5631c73ea6c0634f0d8a26691265e2de31378f46ab14c</sum>
        </package>
        <package name="perl-Devel-Peek" version="1.28" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Devel-Peek-1.28-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">3a9e546ccee1f7fe7d447969fd81910da9b337147673c7df3030c37363d2e4f2</sum>
        </package>
        <package name="perl-Storable" version="3.21" release="457.module_el8.6.0+3181+91434291" epoch="1" arch="s390x" src="perl-Storable-3.21-457.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Storable-3.21-457.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">3ab4014c6090c63ddc06db649dc4f6861695fde6509d5fa1a3fa0dddbe517f1b</sum>
        </package>
        <package name="perl-File-DosGlob" version="1.12" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-File-DosGlob-1.12-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">43dc501826b9a9c80b3d27dddf9748a40bb71c27702e3e8fc57c0c050653fa30</sum>
        </package>
        <package name="perl-diagnostics" version="1.37" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-diagnostics-1.37-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">44476bf570d4106694d3e975b620d4bffab509e44067726b3f2096fd6f9bc422</sum>
        </package>
        <package name="perl-Tie-Memoize" version="1.1" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Tie-Memoize-1.1-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">45d0e2889588d6d524b69e06e6e0fff1f9aa6a9ff76dac646a7d25dcacc738c8</sum>
        </package>
        <package name="perl-Thread" version="3.05" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Thread-3.05-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">48e865ff853b2ad5d4ac85f2aa9d0edd11fe7edbaa0b0407e48092107f13d59f</sum>
        </package>
        <package name="perl-Digest-MD5" version="2.58" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Digest-MD5-2.58-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Digest-MD5-2.58-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">4c58a697799d53381b8811353807bc5b41e30181cad4af65d0b9023ee409a623</sum>
        </package>
        <package name="perl-Benchmark" version="1.23" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Benchmark-1.23-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">4f1eb233860039478ebb9b7578f39b5e506f10ace7cf2fc73665dc19db580f26</sum>
        </package>
        <package name="perl-IPC-SysV" version="2.09" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-IPC-SysV-2.09-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-IPC-SysV-2.09-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">508355af60ff76844cc9f5c2f57aeeba6cf7a9e88d14d942f52bd8717b021bff</sum>
        </package>
        <package name="perl-version" version="0.99.29" release="1.module_el8.6.0+3181+91434291" epoch="7" arch="s390x" src="perl-version-0.99.29-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-version-0.99.29-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">51208c4995fd02f53e0cfa0778654ddac6c8c19f2899ef672ec59e99248ae04f</sum>
        </package>
        <package name="perl-if" version="0.60.800" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-if-0.60.800-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">52816decf0c54675cd54fe86d467f496a4465fe593f6c431baca39c88485ab5d</sum>
        </package>
        <package name="perl-User-pwent" version="1.03" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-User-pwent-1.03-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">54541cf20e0cf6f13b2d5669d043227a488225867c2ad82e0d7d0757751de370</sum>
        </package>
        <package name="perl-NDBM_File" version="1.15" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-NDBM_File-1.15-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">5464ae876ff64b8dd16aff51e9124eb20eefe2a58cbbc7a382e41d5b92a284df</sum>
        </package>
        <package name="perl-encoding-warnings" version="0.13" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-encoding-warnings-0.13-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">55aaa46676dddd382ee565e3b5e8168025e7b047a1d51cb650c665f730a24e3b</sum>
        </package>
        <package name="perl-macros" version="5.32.1" release="474.module_el8.10.0+4162+0aac7c4c" epoch="4" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-macros-5.32.1-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">56d268b0449493ee59ba0cc8c7b51f30439f86df3b5a0486e5f0d46872a89200</sum>
        </package>
        <package name="perl-debugger" version="1.56" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-debugger-1.56-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">5c879e73bebf86d4e4a5b4519007a9e911e3866a9b9e5a3934318b7d81b51697</sum>
        </package>
        <package name="perl-IO-Zlib" version="1.10" release="474.module_el8.10.0+4162+0aac7c4c" epoch="1" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-IO-Zlib-1.10-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">5da0b77f7c45abdca856d19049375473ec90773c481e2bc35fb52ea208317c05</sum>
        </package>
        <package name="perl-autouse" version="1.11" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-autouse-1.11-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">5fe6a12eb756257e1343b27425439a8fb247230928e7b7c0146a9d3d0ec76bac</sum>
        </package>
        <package name="perl-Getopt-Std" version="1.12" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Getopt-Std-1.12-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">618ce69e8b571e0cedd7e9d11f763ece2c0612b85678bf1bfcc4793a2e688a31</sum>
        </package>
        <package name="perl-FileCache" version="1.10" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-FileCache-1.10-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">62ffed34381f172e1157921e3d94b52d8e2489d4eeac1897554bea9b5ffcb180</sum>
        </package>
        <package name="perl-Hash-Util-FieldHash" version="1.20" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Hash-Util-FieldHash-1.20-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">63fd01ec1b43060a3982c409fc05540bb3b39d06dfb14cdcdac1b9f852d4e6e8</sum>
        </package>
        <package name="perl-encoding" version="3.00" release="461.module_el8.6.0+3181+91434291" epoch="4" arch="s390x" src="perl-Encode-3.08-461.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-encoding-3.00-461.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">65c2e2390a32ae4d3401554d2671fa5da05b1266275b57b93945f620c8954b13</sum>
        </package>
        <package name="perl-deprecate" version="0.04" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-deprecate-0.04-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">67e5d76ad3710d202941d083f8c87fe7ab9a1557ad54f01cb9f786fe3aee50c1</sum>
        </package>
        <package name="perl-Tie" version="4.6" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Tie-4.6-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">68a4e93ec04023880bd7492ccd6e0cef3e991be543604baa8a06d7c72de33b34</sum>
        </package>
        <package name="perl-GDBM_File" version="1.18" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-GDBM_File-1.18-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">6aa51509c2d4b0698641fd680cd8bff3bd1bc6832a37a5233d399c22f2a84065</sum>
        </package>
        <package name="perl-I18N-Langinfo" version="0.19" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-I18N-Langinfo-0.19-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">6ad02449bad9e78823bc2c5144aa240eb748c0864593427807c033f3eca07a26</sum>
        </package>
        <package name="perl-Socket" version="2.031" release="1.module_el8.6.0+3181+91434291" epoch="4" arch="s390x" src="perl-Socket-2.031-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Socket-2.031-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">6cd39b199d77bc5ec945e2c8eaed29fd6313b543871371963960bd6ee4f09f97</sum>
        </package>
        <package name="perl-DB_File" version="1.855" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-DB_File-1.855-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-DB_File-1.855-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">6d3754e954e347b8733ea7bcfeb33a9276f3b228e187ad504cf1cf7b6656ea3b</sum>
        </package>
        <package name="perl-threads-shared" version="1.61" release="457.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-threads-shared-1.61-457.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-threads-shared-1.61-457.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">754868e4271ca419c6d78e0277d8f3bc08a056bb9dc302cefb2bbce83895671d</sum>
        </package>
        <package name="perl-Tie-RefHash" version="1.39" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Tie-RefHash-1.39-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">75502fcd89ceb061cdeaf69eb5094f59220989c3ebc2c05c9a940db24662f6c3</sum>
        </package>
        <package name="perl-Devel-Size" version="0.83" release="3.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Devel-Size-0.83-3.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Devel-Size-0.83-3.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">75c534ebd6e8c18903f47c0cf7b67b280a2797f5f808209654ce89983791b321</sum>
        </package>
        <package name="perl-sigtrap" version="1.09" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-sigtrap-1.09-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">75e1d788990d37d7cd3eb39ac3be61971898984b320fe09600bd54f7371e9367</sum>
        </package>
        <package name="perl-FindBin" version="1.51" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-FindBin-1.51-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">7601501c700593b0a22ae664ea431789e30bf4cc80ba0ce93ba3bd4a53b091c7</sum>
        </package>
        <package name="perl-MIME-Base64" version="3.15" release="1001.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-MIME-Base64-3.15-1001.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-MIME-Base64-3.15-1001.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">771a93948be3a3bbc985dd4bb28f433bb49093c00addd2cb45f2fd3451677537</sum>
        </package>
        <package name="perl-interpreter" version="5.32.1" release="474.module_el8.10.0+4162+0aac7c4c" epoch="4" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-interpreter-5.32.1-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">7735463757d3062f5d70e950e773c85f2e53a5805abf2e29ec6e6f576409d39b</sum>
        </package>
        <package name="perl-Fcntl" version="1.13" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Fcntl-1.13-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">78e06612e595b187fe4abda7a662444fff9b8757220bb3ba1edb922ecfe62223</sum>
        </package>
        <package name="perl-I18N-LangTags" version="0.44" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-I18N-LangTags-0.44-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">7ee1069f3c33a8f6c5f752f2f009e9d2ccbd0c7a0548689c0b8286bc2a1ab70c</sum>
        </package>
        <package name="perl-Unicode-Collate" version="1.29" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Unicode-Collate-1.29-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Unicode-Collate-1.29-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">83aa97c32d943ebd9ca2bbd3d28857b95f786824948a5fa0fa7d66ea9d6afd19</sum>
        </package>
        <package name="perl-ExtUtils-Embed" version="1.35" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-ExtUtils-Embed-1.35-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">858b7c20f41828ba30748ca769e877feb1e6f84538e5c36141169312d6ebc765</sum>
        </package>
        <package name="perl-Module-Loaded" version="0.08" release="474.module_el8.10.0+4162+0aac7c4c" epoch="1" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Module-Loaded-0.08-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">8a09f681899e2416dad0d22165534714bf4e423157da373b2f09bf08753d95e8</sum>
        </package>
        <package name="perl-PathTools" version="3.78" release="439.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-PathTools-3.78-439.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-PathTools-3.78-439.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">8a9e1057a64785f1f6fa2f151bff86e36aa5c0f64ff9fd56c05d2b7c515c9fc2</sum>
        </package>
        <package name="perl-sort" version="2.04" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-sort-2.04-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">8bc2edac44745566a84db78bcb89f926a954bbaae8d9ee9378afc27b47b5f499</sum>
        </package>
        <package name="perl-Math-Complex" version="1.59" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Math-Complex-1.59-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">8bd5b4a342a42dc5a728c9de3ca91fc7fa6a96951ac2da8014505c62997a3a14</sum>
        </package>
        <package name="perl-File-Find" version="1.37" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-File-Find-1.37-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">8dd83bcd0d87ed6379f224140df5525c5fc781ff72613dd9a9117a3496a452a1</sum>
        </package>
        <package name="perl-devel" version="5.32.1" release="474.module_el8.10.0+4162+0aac7c4c" epoch="4" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-devel-5.32.1-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">8e5e5643af525a91842be371bed73a70f7b9aec5a3ac1b62d3d74734748b4b1d</sum>
        </package>
        <package name="perl-B" version="1.80" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-B-1.80-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">97a8bc0edb9008a4ce0f92483b869ea8c63a1283fb7efdcdc57d6c0edbf30253</sum>
        </package>
        <package name="perl-Compress-Raw-Zlib" version="2.096" release="2.module_el8.10.0+3779+d5938d28" epoch="0" arch="s390x" src="perl-Compress-Raw-Zlib-2.096-2.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Compress-Raw-Zlib-2.096-2.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">97f176f0c7cda057fb35604812498a37bcfdeaf71ebfe294d9eaca10867904d9</sum>
        </package>
        <package name="perl-FileHandle" version="2.03" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-FileHandle-2.03-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">990828bc134806e196076d69a4692b1927f30e1380d672a58d6048a58309b96f</sum>
        </package>
        <package name="perl-Tie-File" version="1.06" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Tie-File-1.06-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">9b18b04253a0d54c659f1cb947b6e31fe93ebf60ed289da8d849fc2245a2e3d4</sum>
        </package>
        <package name="perl-Config-Extensions" version="0.03" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Config-Extensions-0.03-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">9f43f7ae0605bef575ff824c6c71ba5198855ff75281108c8ff5038d625a8075</sum>
        </package>
        <package name="perl-Net" version="1.02" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Net-1.02-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">9f6f0ec1037634b5d36029901156a19a57fb580eeaef8cdff3759734401e3830</sum>
        </package>
        <package name="perl-English" version="1.11" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-English-1.11-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">9fd3b3fc400af7ad85552071e07e408fdf1489cd5cda362fa765fc1dacbe2f5b</sum>
        </package>
        <package name="perl-Thread-Semaphore" version="2.13" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Thread-Semaphore-2.13-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">a1749aca69d521576805fe5ad1a203c3d92b7ed9f816e51228349a4c82026d8e</sum>
        </package>
        <package name="perl-Class-Struct" version="0.66" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Class-Struct-0.66-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">a2d25a8fcf02a154b36af5599a3b84b595618b652c6a97b50d7355471bbffeb1</sum>
        </package>
        <package name="perl-ExtUtils-Constant" version="0.25" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-ExtUtils-Constant-0.25-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">ab494774c7a3fa4ffde0733b1159b8ed073853da7143c3ca423e13e7ed1eff2c</sum>
        </package>
        <package name="perl-Text-Abbrev" version="1.02" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Text-Abbrev-1.02-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">ae9546d5fe760028fe982f1215a832e78ced62a8e110ed47392a2e0330a97af5</sum>
        </package>
        <package name="perl-Memoize" version="1.03" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Memoize-1.03-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">b03b16cc5ff02bdd42c91b142ae58e3f733bcbe01ddaab4fdc70b87a444285ea</sum>
        </package>
        <package name="perl-fields" version="2.27" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-fields-2.27-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">b29050d6d9dd0efe7d60d0fe51030f9093cc6bae78ca7329dfbfce3b600b060a</sum>
        </package>
        <package name="perl-filetest" version="1.03" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-filetest-1.03-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">b48850796a036d52290217838038873a5f9c711299d0a9bfb27524c6a9a99425</sum>
        </package>
        <package name="perl-Hash-Util" version="0.23" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Hash-Util-0.23-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">b6e6615a081f5c675c63d0ac58f90de6a0a1d8ba15f6b89afeaa6a735413aeca</sum>
        </package>
        <package name="perl-Term-Complete" version="1.403" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Term-Complete-1.403-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">b74c25d9917fd4057114b761182467087abc929962fb697337b91aecaebf8c0a</sum>
        </package>
        <package name="perl-SelectSaver" version="1.02" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-SelectSaver-1.02-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">b7a13b36400563527cbb8d6701ec05c9ca150f2cfad765ca9700147c359f26b3</sum>
        </package>
        <package name="perl-blib" version="1.07" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-blib-1.07-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">b8ab9e97c1a0ed0f1f75dd6ed7e5526682c6b94963a4a4bf9e11160be181c76f</sum>
        </package>
        <package name="perl-POSIX" version="1.94" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-POSIX-1.94-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">bc8f53fdbeded8e711d4525eccc94b8570a5deaec79d9dea7504e6435ef2d251</sum>
        </package>
        <package name="perl-File-Basename" version="2.85" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-File-Basename-2.85-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">bf5e365dc5faf5f9d632ed3779f5d3bd65bd9ad4fb5b79c49988b226be392c71</sum>
        </package>
        <package name="perl-Dumpvalue" version="2.27" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Dumpvalue-2.27-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">bf9065febf836844999dbbec1cf0b2ae8bdceba423e4ff9f2296399462d6983f</sum>
        </package>
        <package name="perl-Unicode-UCD" version="0.75" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Unicode-UCD-0.75-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">bff3d1951f3d9fd20c036a9bfb77bb4680ec4bdeb00c34b9526c9afe61f979fa</sum>
        </package>
        <package name="perl-IPC-Open3" version="1.21" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-IPC-Open3-1.21-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">c45ba507e702bdddfb11a22ad5f4aaff8047d2f6814812d6fca50bf14a3a0c51</sum>
        </package>
        <package name="perl-Scalar-List-Utils" version="1.55" release="457.module_el8.6.0+3181+91434291" epoch="4" arch="s390x" src="perl-Scalar-List-Utils-1.55-457.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Scalar-List-Utils-1.55-457.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">c6c92b3787b32e6fd71c6e8a74bd56b0438e53e8cc9619293890663e1ebba5b9</sum>
        </package>
        <package name="perl-Time" version="1.03" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Time-1.03-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">c8d4432f7eb9f6ff5a80efd46e1cd84c38d6c6b5397df5ff22ef894497e91357</sum>
        </package>
        <package name="perl-threads" version="2.25" release="457.module_el8.6.0+3181+91434291" epoch="1" arch="s390x" src="perl-threads-2.25-457.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-threads-2.25-457.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">caab48b96be64b8502fedaf6ec636f6bcc011d94eb0c3e8b394af4ec0b586698</sum>
        </package>
        <package name="perl-Devel-SelfStubber" version="1.06" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Devel-SelfStubber-1.06-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">cc31f38e525f969486f4732d712d0cccac43debb5ccf87ad1d004c2564758406</sum>
        </package>
        <package name="perl-Compress-Raw-Bzip2" version="2.096" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Compress-Raw-Bzip2-2.096-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Compress-Raw-Bzip2-2.096-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">ce463984e8d2dafef0907beaa97968fa715a908cd45dd640780443c01a11b046</sum>
        </package>
        <package name="perl-File-Copy" version="2.34" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-File-Copy-2.34-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">ce8ba8adf9834b571bc46cb0842d6e9d66ad748884a9809e49a2f28b949f2000</sum>
        </package>
        <package name="perl-vars" version="1.05" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-vars-1.05-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">cefb78a68b07487e5044c3bb3eee0d9d14902a651e8c59b6835c37ab57298f0c</sum>
        </package>
        <package name="perl-IO-Compress" version="2.096" release="2.module_el8.10.0+4205+6175afda" epoch="0" arch="noarch" src="perl-IO-Compress-2.096-2.module_el8.10.0+4205+6175afda.src.rpm">
          <filename>perl-IO-Compress-2.096-2.module_el8.10.0+4205+6175afda.noarch.rpm</filename>
          <sum type="sha256">d1cbf51f3d9b978678920e0316462f94cf3ccd465b692a7b941674ce0a80ca5c</sum>
        </package>
        <package name="perl-Search-Dict" version="1.07" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Search-Dict-1.07-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">d3044166d2c9ce9b778c5ba31cbe013aa5ec19f003ff38efb9f8feb918e4bd27</sum>
        </package>
        <package name="perl-Attribute-Handlers" version="1.01" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Attribute-Handlers-1.01-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">d52b883a28d934ee46ac01c1dc50489a2b2b667348c369f120bd0a7e98d4f574</sum>
        </package>
        <package name="perl-libnetcfg" version="5.32.1" release="474.module_el8.10.0+4162+0aac7c4c" epoch="4" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-libnetcfg-5.32.1-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">d59ebc2002c4ee2ce05e7545644db563b773d3c48d1a0cb13c8ecdcb86ccf753</sum>
        </package>
        <package name="perl-Archive-Tar" version="2.38" release="4.module_el8.10.0+4205+6175afda" epoch="0" arch="noarch" src="perl-Archive-Tar-2.38-4.module_el8.10.0+4205+6175afda.src.rpm">
          <filename>perl-Archive-Tar-2.38-4.module_el8.10.0+4205+6175afda.noarch.rpm</filename>
          <sum type="sha256">d5d0f7bb761b95289e0654e8a88b09c5a80d9792549d80358ffaee0fd3f7e7ee</sum>
        </package>
        <package name="perl-SelfLoader" version="1.26" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-SelfLoader-1.26-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">d8a439c7b06a430eb3408c3453b7a47a42340d8b151680d6cc05118cdd0747b4</sum>
        </package>
        <package name="perl-Sys-Hostname" version="1.23" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Sys-Hostname-1.23-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">dd2010cc2b5706f6ae51406c07bea4586591c625aa3ec1b9d62c5a27967f803e</sum>
        </package>
        <package name="perl-locale" version="1.09" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-locale-1.09-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">dde8469c97bb9c71b76bae8c352c984fccd7d05be2fc2884a7b74b8b6a600aed</sum>
        </package>
        <package name="perl-IO" version="1.43" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-IO-1.43-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">dde9dc2e2013f8b89daa03b41d507339dd53537f8a38f0cc7a1c9d832f9b8f03</sum>
        </package>
        <package name="perl-meta-notation" version="5.32.1" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-meta-notation-5.32.1-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">e2a65912757f8ecca3414eb2a1becfb878c3a0760bea99c3eb9fad970ea3e4b0</sum>
        </package>
        <package name="perl-doc" version="5.32.1" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-doc-5.32.1-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">e2ade5959784109dcd726d2c1403da39aa1987be4135744a833716b10a824dce</sum>
        </package>
        <package name="perl-DBM_Filter" version="0.06" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-DBM_Filter-0.06-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">e2c27c6dcaa74cecdcd58d2936e38310214a50d1d2709b72d697d7e7ca91549b</sum>
        </package>
        <package name="perl-Filter" version="1.60" release="1.module_el8.6.0+3181+91434291" epoch="2" arch="s390x" src="perl-Filter-1.60-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Filter-1.60-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">e3d0da13159278c7de0407ea3901dcbb6d6c91bec1144f9f58b582e04e2a62fb</sum>
        </package>
        <package name="perl-less" version="0.03" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-less-0.03-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">e77a1d89a16829e6e80704f1e068a8335d4906475e89d33c948f913fe5556843</sum>
        </package>
        <package name="perl-DynaLoader" version="1.47" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-DynaLoader-1.47-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">ecc5e634d0ccbbb2a822bdcfcc4ac55ca2c94704a1f241f1cd872582e0cea7be</sum>
        </package>
        <package name="perl-Digest-SHA" version="6.02" release="2.module_el8.6.0+3181+91434291" epoch="1" arch="s390x" src="perl-Digest-SHA-6.02-2.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Digest-SHA-6.02-2.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">ed84ef9abe04145a64d2994030d066ce6669bf548a106bee087caaf6c64b1e42</sum>
        </package>
        <package name="perl-Params-Util" version="1.102" release="2.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Params-Util-1.102-2.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Params-Util-1.102-2.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">f04d7989fc85d22ae36bd4c70dae2c64a2529074fd2a3bd4123b542d6b0b24f8</sum>
        </package>
        <package name="perl-Test" version="1.31" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Test-1.31-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">f1040b2e2ce8191180f86f65ee0656dfdb5f743b1e79bf7a4dff39bc755dd582</sum>
        </package>
        <package name="perl-Locale-Maketext-Simple" version="0.21" release="474.module_el8.10.0+4162+0aac7c4c" epoch="1" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Locale-Maketext-Simple-0.21-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">f20bde9e5640e88ee75dd4b66d043b538e0608c2f6f3af8c09ff1f17c54030bd</sum>
        </package>
        <package name="perl-Unicode-Normalize" version="1.27" release="458.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Unicode-Normalize-1.27-458.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Unicode-Normalize-1.27-458.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">f3a57fafe97ad72863248270a54c9a6ce1746188ccd854c1bae904b7a90c5be4</sum>
        </package>
        <package name="perl-ph" version="5.32.1" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-ph-5.32.1-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">f58cbeb495cef5e4f32e7d679d5a84bbb2ac1a7ef6cc14d5af75131975e21f36</sum>
        </package>
        <package name="perl-ExtUtils-Miniperl" version="1.09" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-ExtUtils-Miniperl-1.09-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">f7a74c8895da6f75633ef644cee778884b6388d038e709eed0d6f34ddfed95fb</sum>
        </package>
        <package name="perl-File-stat" version="1.09" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-File-stat-1.09-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">fc6ed6eac7c5c362e2e1e8a82f0dccc783e4f54c23cdc366dac9fb68e07e25aa</sum>
        </package>
        <package name="perl-AutoSplit" version="5.74" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-AutoSplit-5.74-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">fcc0e1f43bbb02ac839e2cd8c840cd81e015200f5a06ed65f0e8901308ebafbd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:30853</id>
    <title>Important: git-lfs security update</title>
    <issued date="2026-06-29 00:00:00"/>
    <updated date="2026-06-29 08:31:30"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git-lfs security update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.  

Security Fix(es):  

  * golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:30853" id="RHSA-2026:30853" type="rhsa" title="RHSA-2026:30853"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-39821" id="CVE-2026-39821" type="cve" title="CVE-2026-39821"/>
      <reference href="https://bugzilla.redhat.com/2480756" id="2480756" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-30853.html" id="ALSA-2026:30853" type="self" title="ALSA-2026:30853"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="git-lfs" version="3.4.1" release="11.el8_10" epoch="0" arch="s390x" src="git-lfs-3.4.1-11.el8_10.src.rpm">
          <filename>git-lfs-3.4.1-11.el8_10.s390x.rpm</filename>
          <sum type="sha256">dbe543d1a17f378e6da8a3266beb76f617eaa4483658b25471b214e2bd27e7fa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3187</id>
    <title>Important: grafana-pcp security update</title>
    <issued date="2026-02-24 00:00:00"/>
    <updated date="2026-02-24 17:14:01"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana-pcp security update</summary>
    <description>The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.  

Security Fix(es):  

  * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
  * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3187" id="RHSA-2026:3187" type="rhsa" title="RHSA-2026:3187"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61726" id="CVE-2025-61726" type="cve" title="CVE-2025-61726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68121" id="CVE-2025-68121" type="cve" title="CVE-2025-68121"/>
      <reference href="https://bugzilla.redhat.com/2434432" id="2434432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2437111" id="2437111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-3187.html" id="ALSA-2026:3187" type="self" title="ALSA-2026:3187"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="grafana-pcp" version="5.1.1" release="12.el8_10" epoch="0" arch="s390x" src="grafana-pcp-5.1.1-12.el8_10.src.rpm">
          <filename>grafana-pcp-5.1.1-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">ce6568a354246006e0589715f0e1fe43bf36fbe6a7a86922e3602d121f2e0ae1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3188</id>
    <title>Important: grafana security update</title>
    <issued date="2026-02-24 00:00:00"/>
    <updated date="2026-02-24 17:11:47"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.   

Security Fix(es):  

  * golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728)
  * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
  * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3188" id="RHSA-2026:3188" type="rhsa" title="RHSA-2026:3188"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61726" id="CVE-2025-61726" type="cve" title="CVE-2025-61726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61728" id="CVE-2025-61728" type="cve" title="CVE-2025-61728"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68121" id="CVE-2025-68121" type="cve" title="CVE-2025-68121"/>
      <reference href="https://bugzilla.redhat.com/2434431" id="2434431" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2434432" id="2434432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2437111" id="2437111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-3188.html" id="ALSA-2026:3188" type="self" title="ALSA-2026:3188"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="grafana" version="9.2.10" release="28.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-28.el8_10.src.rpm">
          <filename>grafana-9.2.10-28.el8_10.s390x.rpm</filename>
          <sum type="sha256">4f4c0670509c9485c3d0a51d4706e3d545ee1486beef079a1937ebbee0946d86</sum>
        </package>
        <package name="grafana-selinux" version="9.2.10" release="28.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-28.el8_10.src.rpm">
          <filename>grafana-selinux-9.2.10-28.el8_10.s390x.rpm</filename>
          <sum type="sha256">a43e1ad4621888a63d8531ed7acb0fea4c92cd4745f4fddf8589f7e901d07058</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:32992</id>
    <title>Important: python3.12-urllib3 security update</title>
    <issued date="2026-06-29 00:00:00"/>
    <updated date="2026-06-29 14:47:43"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12-urllib3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * urllib3: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432)
  * urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers (CVE-2026-44431)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:32992" id="RHSA-2026:32992" type="rhsa" title="RHSA-2026:32992"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-44431" id="CVE-2026-44431" type="cve" title="CVE-2026-44431"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-44432" id="CVE-2026-44432" type="cve" title="CVE-2026-44432"/>
      <reference href="https://bugzilla.redhat.com/2477154" id="2477154" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477167" id="2477167" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-32992.html" id="ALSA-2026:32992" type="self" title="ALSA-2026:32992"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.12-urllib3" version="1.26.19" release="3.el8_10" epoch="0" arch="noarch" src="python3.12-urllib3-1.26.19-3.el8_10.src.rpm">
          <filename>python3.12-urllib3-1.26.19-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">084f55870cdb4789d3732d8540de0ad0052c3dcc7d5d14d328482306d6481c6f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:33126</id>
    <title>Moderate: glibc security update</title>
    <issued date="2026-06-29 00:00:00"/>
    <updated date="2026-06-30 10:40:55"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width (CVE-2026-5450)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:33126" id="RHSA-2026:33126" type="rhsa" title="RHSA-2026:33126"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5450" id="CVE-2026-5450" type="cve" title="CVE-2026-5450"/>
      <reference href="https://bugzilla.redhat.com/2459853" id="2459853" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-33126.html" id="ALSA-2026:33126" type="self" title="ALSA-2026:33126"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="compat-libpthread-nonshared" version="2.28" release="251.el8_10.38" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.38.src.rpm">
          <filename>compat-libpthread-nonshared-2.28-251.el8_10.38.s390x.rpm</filename>
          <sum type="sha256">54107e807e9dd1716015d62bf7dd9cbae301ae5f1ccf54358127fd7b0ed44e12</sum>
        </package>
        <package name="glibc-utils" version="2.28" release="251.el8_10.38" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.38.src.rpm">
          <filename>glibc-utils-2.28-251.el8_10.38.s390x.rpm</filename>
          <sum type="sha256">99d60136b20a8caf990f6c0fee0fc81312a638ff02de90848eebfc1a497c3204</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3334</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-02-25 00:00:00"/>
    <updated date="2026-02-26 09:39:12"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855)
  * freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858)
  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3334" id="RHSA-2026:3334" type="rhsa" title="RHSA-2026:3334"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22855" id="CVE-2026-22855" type="cve" title="CVE-2026-22855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22858" id="CVE-2026-22858" type="cve" title="CVE-2026-22858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22859" id="CVE-2026-22859" type="cve" title="CVE-2026-22859"/>
      <reference href="https://bugzilla.redhat.com/2429645" id="2429645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429649" id="2429649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429653" id="2429653" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-3334.html" id="ALSA-2026:3334" type="self" title="ALSA-2026:3334"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="freerdp-libs" version="2.11.7" release="3.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-3.el8_10.src.rpm">
          <filename>freerdp-libs-2.11.7-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">025484d164f402a2bac6121bdc12fb24733f9417c9cfc19d6558d259711c6382</sum>
        </package>
        <package name="libwinpr" version="2.11.7" release="3.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-3.el8_10.src.rpm">
          <filename>libwinpr-2.11.7-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">1ffa40f3c36293db57ba0ff9753d2ae3fc35b71c4a29a4db15b264497bc0601d</sum>
        </package>
        <package name="libwinpr-devel" version="2.11.7" release="3.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-3.el8_10.src.rpm">
          <filename>libwinpr-devel-2.11.7-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">6c1a52259ab6db996811c8b9441eb5c2162e1ef114285331128997b641b30041</sum>
        </package>
        <package name="freerdp" version="2.11.7" release="3.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-3.el8_10.src.rpm">
          <filename>freerdp-2.11.7-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">f52678cae96b7237fdee204c8040e57aa253a1a4d15d53ae37e9455fb3569b66</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3338</id>
    <title>Important: firefox security update</title>
    <issued date="2026-02-25 00:00:00"/>
    <updated date="2026-03-02 12:54:29"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447)
  * firefox: Invalid pointer in the JavaScript Engine component (CVE-2026-2785)
  * firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2793)
  * firefox: Undefined behavior in the DOM: Core &amp; HTML component (CVE-2026-2771)
  * firefox: Integer overflow in the Audio/Video component (CVE-2026-2774)
  * firefox: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software (CVE-2026-2776)
  * firefox: Integer overflow in the Libraries component in NSS (CVE-2026-2781)
  * firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-2766)
  * firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-2769)
  * firefox: Use-after-free in the DOM: Window and Location component (CVE-2026-2787)
  * firefox: Sandbox escape in the Storage: IndexedDB component (CVE-2026-2768)
  * firefox: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-2783)
  * firefox: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-2788)
  * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-2784)
  * firefox: Incorrect boundary conditions in the Graphics: ImageLib component (CVE-2026-2759)
  * firefox: Integer overflow in the JavaScript: Standard Library component (CVE-2026-2762)
  * firefox: Sandbox escape in the Graphics: WebRender component (CVE-2026-2761)
  * firefox: Privilege escalation in the Messaging System component (CVE-2026-2777)
  * firefox: Same-origin policy bypass in the Networking: JAR component (CVE-2026-2790)
  * firefox: Mitigation bypass in the DOM: HTML Parser component (CVE-2026-2775)
  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2763)
  * firefox: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2792)
  * firefox: Incorrect boundary conditions in the Web Audio component (CVE-2026-2773)
  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2786)
  * firefox: Use-after-free in the Graphics: ImageLib component (CVE-2026-2789)
  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component (CVE-2026-2757)
  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-2760)
  * firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-2772)
  * firefox: Incorrect boundary conditions in the Networking: JAR component (CVE-2026-2779)
  * firefox: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-2767)
  * firefox: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component (CVE-2026-2764)
  * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2782)
  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2765)
  * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2780)
  * firefox: Sandbox escape due to incorrect boundary conditions in the DOM: Core &amp; HTML component (CVE-2026-2778)
  * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-2758)
  * firefox: Mitigation bypass in the Networking: Cache component (CVE-2026-2791)
  * firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-2770)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3338" id="RHSA-2026:3338" type="rhsa" title="RHSA-2026:3338"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2447" id="CVE-2026-2447" type="cve" title="CVE-2026-2447"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2757" id="CVE-2026-2757" type="cve" title="CVE-2026-2757"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2758" id="CVE-2026-2758" type="cve" title="CVE-2026-2758"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2759" id="CVE-2026-2759" type="cve" title="CVE-2026-2759"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2760" id="CVE-2026-2760" type="cve" title="CVE-2026-2760"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2761" id="CVE-2026-2761" type="cve" title="CVE-2026-2761"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2762" id="CVE-2026-2762" type="cve" title="CVE-2026-2762"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2763" id="CVE-2026-2763" type="cve" title="CVE-2026-2763"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2764" id="CVE-2026-2764" type="cve" title="CVE-2026-2764"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2765" id="CVE-2026-2765" type="cve" title="CVE-2026-2765"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2766" id="CVE-2026-2766" type="cve" title="CVE-2026-2766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2767" id="CVE-2026-2767" type="cve" title="CVE-2026-2767"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2768" id="CVE-2026-2768" type="cve" title="CVE-2026-2768"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2769" id="CVE-2026-2769" type="cve" title="CVE-2026-2769"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2770" id="CVE-2026-2770" type="cve" title="CVE-2026-2770"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2771" id="CVE-2026-2771" type="cve" title="CVE-2026-2771"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2772" id="CVE-2026-2772" type="cve" title="CVE-2026-2772"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2773" id="CVE-2026-2773" type="cve" title="CVE-2026-2773"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2774" id="CVE-2026-2774" type="cve" title="CVE-2026-2774"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2775" id="CVE-2026-2775" type="cve" title="CVE-2026-2775"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2776" id="CVE-2026-2776" type="cve" title="CVE-2026-2776"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2777" id="CVE-2026-2777" type="cve" title="CVE-2026-2777"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2778" id="CVE-2026-2778" type="cve" title="CVE-2026-2778"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2779" id="CVE-2026-2779" type="cve" title="CVE-2026-2779"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2780" id="CVE-2026-2780" type="cve" title="CVE-2026-2780"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2781" id="CVE-2026-2781" type="cve" title="CVE-2026-2781"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2782" id="CVE-2026-2782" type="cve" title="CVE-2026-2782"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2783" id="CVE-2026-2783" type="cve" title="CVE-2026-2783"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2784" id="CVE-2026-2784" type="cve" title="CVE-2026-2784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2785" id="CVE-2026-2785" type="cve" title="CVE-2026-2785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2786" id="CVE-2026-2786" type="cve" title="CVE-2026-2786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2787" id="CVE-2026-2787" type="cve" title="CVE-2026-2787"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2788" id="CVE-2026-2788" type="cve" title="CVE-2026-2788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2789" id="CVE-2026-2789" type="cve" title="CVE-2026-2789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2790" id="CVE-2026-2790" type="cve" title="CVE-2026-2790"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2791" id="CVE-2026-2791" type="cve" title="CVE-2026-2791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2792" id="CVE-2026-2792" type="cve" title="CVE-2026-2792"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2793" id="CVE-2026-2793" type="cve" title="CVE-2026-2793"/>
      <reference href="https://bugzilla.redhat.com/2440219" id="2440219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442284" id="2442284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442287" id="2442287" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442288" id="2442288" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442290" id="2442290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442291" id="2442291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442292" id="2442292" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442294" id="2442294" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442295" id="2442295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442297" id="2442297" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442298" id="2442298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442300" id="2442300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442302" id="2442302" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442304" id="2442304" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442307" id="2442307" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442308" id="2442308" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442309" id="2442309" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442312" id="2442312" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442313" id="2442313" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442314" id="2442314" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442316" id="2442316" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442318" id="2442318" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442319" id="2442319" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442320" id="2442320" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442322" id="2442322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442324" id="2442324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442325" id="2442325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442326" id="2442326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442327" id="2442327" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442328" id="2442328" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442329" id="2442329" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442331" id="2442331" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442333" id="2442333" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442334" id="2442334" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442335" id="2442335" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442337" id="2442337" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442342" id="2442342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442343" id="2442343" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-3338.html" id="ALSA-2026:3338" type="self" title="ALSA-2026:3338"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="140.8.0" release="2.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-140.8.0-2.el8_10.alma.1.src.rpm">
          <filename>firefox-140.8.0-2.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">3555517b3c16eb3d696f7dfb105d4690bde4c59b59d52bc3036da255baa08d8b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:33464</id>
    <title>Important: mariadb:10.11 security, bug fix, and enhancement update</title>
    <issued date="2026-06-30 00:00:00"/>
    <updated date="2026-07-01 13:43:21"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mariadb:10.11 security, bug fix, and enhancement update</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.   

Security Fix(es):  

  * mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261)


Bug Fix(es) and Enhancement(s):  

  * [AlmaLinux8][tracker] Rebase Galera to 26.4.27 MariaDB:10.11 (JIRA:AlmaLinux-145347)
  * Rebase MariaDB 10.11 to 10.11.18 in AlmaLinux8 (JIRA:AlmaLinux-183088)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:33464" id="RHSA-2026:33464" type="rhsa" title="RHSA-2026:33464"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-49261" id="CVE-2026-49261" type="cve" title="CVE-2026-49261"/>
      <reference href="https://bugzilla.redhat.com/2487957" id="2487957" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-33464.html" id="ALSA-2026:33464" type="self" title="ALSA-2026:33464"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="mariadb" stream="10.11" version="8100020250128105049" context="9edba152" arch="s390x"/>
        <package name="mariadb" version="10.11.18" release="1.module_el8.10.0+4207+a44b0e1e" epoch="3" arch="s390x" src="mariadb-10.11.18-1.module_el8.10.0+4207+a44b0e1e.src.rpm">
          <filename>mariadb-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm</filename>
          <sum type="sha256">00d97f1d33461ee5b60fdcc1dfd9d38379f1eda975f2383bea426bf204b89650</sum>
        </package>
        <package name="galera" version="26.4.27" release="1.module_el8.10.0+4207+a44b0e1e" epoch="0" arch="s390x" src="galera-26.4.27-1.module_el8.10.0+4207+a44b0e1e.src.rpm">
          <filename>galera-26.4.27-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm</filename>
          <sum type="sha256">0dccc0e52e179197100ca9a2e831a90cefdb0a4e7fab29c98f7920048e1e739a</sum>
        </package>
        <package name="mariadb-common" version="10.11.18" release="1.module_el8.10.0+4207+a44b0e1e" epoch="3" arch="s390x" src="mariadb-10.11.18-1.module_el8.10.0+4207+a44b0e1e.src.rpm">
          <filename>mariadb-common-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm</filename>
          <sum type="sha256">0dde2a902fc304c957e54ab25229716c3196b04232158e86f2c8c190555bd22d</sum>
        </package>
        <package name="mariadb-server-utils" version="10.11.18" release="1.module_el8.10.0+4207+a44b0e1e" epoch="3" arch="s390x" src="mariadb-10.11.18-1.module_el8.10.0+4207+a44b0e1e.src.rpm">
          <filename>mariadb-server-utils-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm</filename>
          <sum type="sha256">112c717b813a6ef7be89e9e35f84d619e8d7572884a2073564691b73b996d556</sum>
        </package>
        <package name="mariadb-oqgraph-engine" version="10.11.18" release="1.module_el8.10.0+4207+a44b0e1e" epoch="3" arch="s390x" src="mariadb-10.11.18-1.module_el8.10.0+4207+a44b0e1e.src.rpm">
          <filename>mariadb-oqgraph-engine-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm</filename>
          <sum type="sha256">14904c2eda9ce48c55eb7ea974bbb99dbc03b7634c91e4e0e029ff8238f01109</sum>
        </package>
        <package name="mariadb-embedded" version="10.11.18" release="1.module_el8.10.0+4207+a44b0e1e" epoch="3" arch="s390x" src="mariadb-10.11.18-1.module_el8.10.0+4207+a44b0e1e.src.rpm">
          <filename>mariadb-embedded-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm</filename>
          <sum type="sha256">20ae291ceba495a9ffaee92f1d9dab7da840c1f9fed742616e7b2a788166805e</sum>
        </package>
        <package name="mariadb-embedded-devel" version="10.11.18" release="1.module_el8.10.0+4207+a44b0e1e" epoch="3" arch="s390x" src="mariadb-10.11.18-1.module_el8.10.0+4207+a44b0e1e.src.rpm">
          <filename>mariadb-embedded-devel-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm</filename>
          <sum type="sha256">270d4a72e02cbd1bdb2bfbf18bb05a0952a59d0f3b01cab2a05d5c20e2ad9be0</sum>
        </package>
        <package name="mariadb-test" version="10.11.18" release="1.module_el8.10.0+4207+a44b0e1e" epoch="3" arch="s390x" src="mariadb-10.11.18-1.module_el8.10.0+4207+a44b0e1e.src.rpm">
          <filename>mariadb-test-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm</filename>
          <sum type="sha256">4e812c3bbed68682f9a215e81e73c2cbe33b1d25066ddeee12780a2f4b2b1f42</sum>
        </package>
        <package name="mariadb-devel" version="10.11.18" release="1.module_el8.10.0+4207+a44b0e1e" epoch="3" arch="s390x" src="mariadb-10.11.18-1.module_el8.10.0+4207+a44b0e1e.src.rpm">
          <filename>mariadb-devel-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm</filename>
          <sum type="sha256">78755bc6494a628820f58b100940d7d19b0cc4ff573a8f569aca8a156577ee9f</sum>
        </package>
        <package name="mariadb-server-galera" version="10.11.18" release="1.module_el8.10.0+4207+a44b0e1e" epoch="3" arch="s390x" src="mariadb-10.11.18-1.module_el8.10.0+4207+a44b0e1e.src.rpm">
          <filename>mariadb-server-galera-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm</filename>
          <sum type="sha256">7e27d404374b32cc6703c32165394dfc1a6e675960042041bfbde0698e00dff9</sum>
        </package>
        <package name="mariadb-pam" version="10.11.18" release="1.module_el8.10.0+4207+a44b0e1e" epoch="3" arch="s390x" src="mariadb-10.11.18-1.module_el8.10.0+4207+a44b0e1e.src.rpm">
          <filename>mariadb-pam-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm</filename>
          <sum type="sha256">97d830cdaf36fa6caecb11a84ea7c46c9e220855a802930d5e4da136cae1c591</sum>
        </package>
        <package name="Judy" version="1.0.5" release="18.module_el8.10.0+3955+6534edaf" epoch="0" arch="s390x" src="Judy-1.0.5-18.module_el8.10.0+3955+6534edaf.src.rpm">
          <filename>Judy-1.0.5-18.module_el8.10.0+3955+6534edaf.s390x.rpm</filename>
          <sum type="sha256">99b62cdef6ceaba085de83cc984e6cbf05038bdb656233ab329acb0253ef0e8b</sum>
        </package>
        <package name="mariadb-backup" version="10.11.18" release="1.module_el8.10.0+4207+a44b0e1e" epoch="3" arch="s390x" src="mariadb-10.11.18-1.module_el8.10.0+4207+a44b0e1e.src.rpm">
          <filename>mariadb-backup-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm</filename>
          <sum type="sha256">a1911a5d8a15d10f73ae1e17570199bc62ec592d749608c2e5c47d6c3ace3ef5</sum>
        </package>
        <package name="mariadb-gssapi-server" version="10.11.18" release="1.module_el8.10.0+4207+a44b0e1e" epoch="3" arch="s390x" src="mariadb-10.11.18-1.module_el8.10.0+4207+a44b0e1e.src.rpm">
          <filename>mariadb-gssapi-server-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm</filename>
          <sum type="sha256">a455bd8c0a492bc6cef3de3637553bf0cf77c083d312946249d232c9db012bf2</sum>
        </package>
        <package name="mariadb-errmsg" version="10.11.18" release="1.module_el8.10.0+4207+a44b0e1e" epoch="3" arch="s390x" src="mariadb-10.11.18-1.module_el8.10.0+4207+a44b0e1e.src.rpm">
          <filename>mariadb-errmsg-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm</filename>
          <sum type="sha256">af36b383f7bb929b45acdcaa903ad19794d284729eb90fd3d6b314546fd51f3c</sum>
        </package>
        <package name="mariadb-server" version="10.11.18" release="1.module_el8.10.0+4207+a44b0e1e" epoch="3" arch="s390x" src="mariadb-10.11.18-1.module_el8.10.0+4207+a44b0e1e.src.rpm">
          <filename>mariadb-server-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm</filename>
          <sum type="sha256">bbfb3244f07ef0515ee15f137e440eeada32a86c96f30e7852772fecab37756d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:33503</id>
    <title>Important: giflib security update</title>
    <issued date="2026-06-30 00:00:00"/>
    <updated date="2026-07-01 13:46:47"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>giflib security update</summary>
    <description>giflib is a library for reading and writing gif images.  

Security Fix(es):  

  * giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:33503" id="RHSA-2026:33503" type="rhsa" title="RHSA-2026:33503"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26740" id="CVE-2026-26740" type="cve" title="CVE-2026-26740"/>
      <reference href="https://bugzilla.redhat.com/2448747" id="2448747" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-33503.html" id="ALSA-2026:33503" type="self" title="ALSA-2026:33503"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="giflib" version="5.1.4" release="5.el8_10" epoch="0" arch="s390x" src="giflib-5.1.4-5.el8_10.src.rpm">
          <filename>giflib-5.1.4-5.el8_10.s390x.rpm</filename>
          <sum type="sha256">fe75cc7eaa70719e32ad7a7835ff03073eac3443fc25df9219d7654e1c82ba98</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:33514</id>
    <title>Important: ruby:2.5 security update</title>
    <issued date="2026-06-30 00:00:00"/>
    <updated date="2026-07-03 14:37:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ruby:2.5 security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  

Security Fix(es):  

  * ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258)
  * net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:33514" id="RHSA-2026:33514" type="rhsa" title="RHSA-2026:33514"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42246" id="CVE-2026-42246" type="cve" title="CVE-2026-42246"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42258" id="CVE-2026-42258" type="cve" title="CVE-2026-42258"/>
      <reference href="https://bugzilla.redhat.com/2468498" id="2468498" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468499" id="2468499" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-33514.html" id="ALSA-2026:33514" type="self" title="ALSA-2026:33514"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="ruby" stream="2.5" version="8100020260703103538" context="9edba152" arch="s390x"/>
        <package name="rubygem-bundler" version="1.16.1" release="5.module_el8.10.0+3991+5e651d4e" epoch="0" arch="noarch" src="rubygem-bundler-1.16.1-5.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>rubygem-bundler-1.16.1-5.module_el8.10.0+3991+5e651d4e.noarch.rpm</filename>
          <sum type="sha256">20c5d77a7746caeb6cca2cb1e23267c50fd2cbc14d3869ca824e55b3a36aa3b7</sum>
        </package>
        <package name="rubygem-abrt-doc" version="0.3.0" release="4.module_el8.10.0+3871+342e2c2f" epoch="0" arch="noarch" src="rubygem-abrt-0.3.0-4.module_el8.10.0+3871+342e2c2f.src.rpm">
          <filename>rubygem-abrt-doc-0.3.0-4.module_el8.10.0+3871+342e2c2f.noarch.rpm</filename>
          <sum type="sha256">23f4e5352303fbe382eb4c6194887ff9e2dad8797516dd85ae0efd8eff375c61</sum>
        </package>
        <package name="ruby-libs" version="2.5.9" release="115.module_el8.10.0+4212+150d00eb" epoch="0" arch="s390x" src="ruby-2.5.9-115.module_el8.10.0+4212+150d00eb.src.rpm">
          <filename>ruby-libs-2.5.9-115.module_el8.10.0+4212+150d00eb.s390x.rpm</filename>
          <sum type="sha256">2d312b1b2661b09c6175cf4ca06b9cb41e9333a5d04f05ed4263570aac4de227</sum>
        </package>
        <package name="rubygem-bigdecimal" version="1.3.4" release="115.module_el8.10.0+4212+150d00eb" epoch="0" arch="s390x" src="ruby-2.5.9-115.module_el8.10.0+4212+150d00eb.src.rpm">
          <filename>rubygem-bigdecimal-1.3.4-115.module_el8.10.0+4212+150d00eb.s390x.rpm</filename>
          <sum type="sha256">3288c940b71c152ee1c66a3f924cde8c2649f37c77d86e0d564fe953eb92d693</sum>
        </package>
        <package name="rubygem-json" version="2.1.0" release="115.module_el8.10.0+4212+150d00eb" epoch="0" arch="s390x" src="ruby-2.5.9-115.module_el8.10.0+4212+150d00eb.src.rpm">
          <filename>rubygem-json-2.1.0-115.module_el8.10.0+4212+150d00eb.s390x.rpm</filename>
          <sum type="sha256">3eede169d96216a34b9951efcd5fbcb5f55571392e6534e93d929a5d3cd7b4ab</sum>
        </package>
        <package name="ruby-doc" version="2.5.9" release="115.module_el8.10.0+4212+150d00eb" epoch="0" arch="noarch" src="ruby-2.5.9-115.module_el8.10.0+4212+150d00eb.src.rpm">
          <filename>ruby-doc-2.5.9-115.module_el8.10.0+4212+150d00eb.noarch.rpm</filename>
          <sum type="sha256">41eacaa76c71588901ea60fc0b40b400147716f2b68ee7b16fa6b97ccaab3069</sum>
        </package>
        <package name="rubygem-rdoc" version="6.0.1.1" release="115.module_el8.10.0+4212+150d00eb" epoch="0" arch="noarch" src="ruby-2.5.9-115.module_el8.10.0+4212+150d00eb.src.rpm">
          <filename>rubygem-rdoc-6.0.1.1-115.module_el8.10.0+4212+150d00eb.noarch.rpm</filename>
          <sum type="sha256">46c95d58dd185362325b30f567fa3de74d4e5c82c6e3671785ca20e626f2f525</sum>
        </package>
        <package name="rubygem-did_you_mean" version="1.2.0" release="115.module_el8.10.0+4212+150d00eb" epoch="0" arch="noarch" src="ruby-2.5.9-115.module_el8.10.0+4212+150d00eb.src.rpm">
          <filename>rubygem-did_you_mean-1.2.0-115.module_el8.10.0+4212+150d00eb.noarch.rpm</filename>
          <sum type="sha256">4aeab2222f374b01ce9e3eb0564ec236628e4aa69c54b64e60c853a9bdf57358</sum>
        </package>
        <package name="ruby-irb" version="2.5.9" release="115.module_el8.10.0+4212+150d00eb" epoch="0" arch="noarch" src="ruby-2.5.9-115.module_el8.10.0+4212+150d00eb.src.rpm">
          <filename>ruby-irb-2.5.9-115.module_el8.10.0+4212+150d00eb.noarch.rpm</filename>
          <sum type="sha256">4f19698de5b5a7831227e834339b4db18ecebb52710c694ab97e2aad25b52cd7</sum>
        </package>
        <package name="rubygem-rake" version="12.3.3" release="115.module_el8.10.0+4212+150d00eb" epoch="0" arch="noarch" src="ruby-2.5.9-115.module_el8.10.0+4212+150d00eb.src.rpm">
          <filename>rubygem-rake-12.3.3-115.module_el8.10.0+4212+150d00eb.noarch.rpm</filename>
          <sum type="sha256">557fcb9635ec54440fa959e1ba3c19ffdb2812e03fa7da3dbff6507bcf60afd3</sum>
        </package>
        <package name="rubygem-minitest" version="5.10.3" release="115.module_el8.10.0+4212+150d00eb" epoch="0" arch="noarch" src="ruby-2.5.9-115.module_el8.10.0+4212+150d00eb.src.rpm">
          <filename>rubygem-minitest-5.10.3-115.module_el8.10.0+4212+150d00eb.noarch.rpm</filename>
          <sum type="sha256">597a3b4cf6ef0c8bc4189252eeb82239641615baa213e50b2fe21f05acce667b</sum>
        </package>
        <package name="rubygem-test-unit" version="3.2.7" release="115.module_el8.10.0+4212+150d00eb" epoch="0" arch="noarch" src="ruby-2.5.9-115.module_el8.10.0+4212+150d00eb.src.rpm">
          <filename>rubygem-test-unit-3.2.7-115.module_el8.10.0+4212+150d00eb.noarch.rpm</filename>
          <sum type="sha256">6470c872306401228a2d656550115bbe7d5ef5726c4692e7b48c998fe14455de</sum>
        </package>
        <package name="rubygem-xmlrpc" version="0.3.0" release="115.module_el8.10.0+4212+150d00eb" epoch="0" arch="noarch" src="ruby-2.5.9-115.module_el8.10.0+4212+150d00eb.src.rpm">
          <filename>rubygem-xmlrpc-0.3.0-115.module_el8.10.0+4212+150d00eb.noarch.rpm</filename>
          <sum type="sha256">72bf9120731a2a5a28bd9a0760649039d5e63222cba66914d8b8810c2816aff0</sum>
        </package>
        <package name="rubygem-power_assert" version="1.1.1" release="115.module_el8.10.0+4212+150d00eb" epoch="0" arch="noarch" src="ruby-2.5.9-115.module_el8.10.0+4212+150d00eb.src.rpm">
          <filename>rubygem-power_assert-1.1.1-115.module_el8.10.0+4212+150d00eb.noarch.rpm</filename>
          <sum type="sha256">7c5e1ad3f8779253bf64480733350ba3744aeb1283cf6121329df83c481e462e</sum>
        </package>
        <package name="ruby" version="2.5.9" release="115.module_el8.10.0+4212+150d00eb" epoch="0" arch="s390x" src="ruby-2.5.9-115.module_el8.10.0+4212+150d00eb.src.rpm">
          <filename>ruby-2.5.9-115.module_el8.10.0+4212+150d00eb.s390x.rpm</filename>
          <sum type="sha256">7de177a59122c38003acf1f5cdbb504d109938e62978ed3248955f5e72cb44bd</sum>
        </package>
        <package name="rubygem-bson" version="4.3.0" release="2.module_el8.6.0+3170+4b08f9d4" epoch="0" arch="s390x" src="rubygem-bson-4.3.0-2.module_el8.6.0+3170+4b08f9d4.src.rpm">
          <filename>rubygem-bson-4.3.0-2.module_el8.6.0+3170+4b08f9d4.s390x.rpm</filename>
          <sum type="sha256">871397eff83a497bf29db2e02e81837d1648c1813afa6030e2bab44d3f0db282</sum>
        </package>
        <package name="rubygem-pg-doc" version="1.0.0" release="3.module_el8.9.0+3635+c6f99506" epoch="0" arch="noarch" src="rubygem-pg-1.0.0-3.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygem-pg-doc-1.0.0-3.module_el8.9.0+3635+c6f99506.noarch.rpm</filename>
          <sum type="sha256">8d04b2fdb59f2b51995d4fc57a412831e5d4d1c9d80fea1bcd0a7f5beaa55ab7</sum>
        </package>
        <package name="rubygem-openssl" version="2.1.2" release="115.module_el8.10.0+4212+150d00eb" epoch="0" arch="s390x" src="ruby-2.5.9-115.module_el8.10.0+4212+150d00eb.src.rpm">
          <filename>rubygem-openssl-2.1.2-115.module_el8.10.0+4212+150d00eb.s390x.rpm</filename>
          <sum type="sha256">baa9fa854c4949b30978adf3374673d0cba6fc81e47b4505e6ba1202ba88bc89</sum>
        </package>
        <package name="rubygems-devel" version="2.7.6.3" release="115.module_el8.10.0+4212+150d00eb" epoch="0" arch="noarch" src="ruby-2.5.9-115.module_el8.10.0+4212+150d00eb.src.rpm">
          <filename>rubygems-devel-2.7.6.3-115.module_el8.10.0+4212+150d00eb.noarch.rpm</filename>
          <sum type="sha256">c62446884c2dbadc8eff92861be14120b131a88a593c26c376d37268518defb0</sum>
        </package>
        <package name="rubygem-io-console" version="0.4.6" release="115.module_el8.10.0+4212+150d00eb" epoch="0" arch="s390x" src="ruby-2.5.9-115.module_el8.10.0+4212+150d00eb.src.rpm">
          <filename>rubygem-io-console-0.4.6-115.module_el8.10.0+4212+150d00eb.s390x.rpm</filename>
          <sum type="sha256">cc991f769b8eca4af1ce739e6098b66bf1def3f67f38049608ea15b792b9540a</sum>
        </package>
        <package name="rubygem-pg" version="1.0.0" release="3.module_el8.9.0+3635+c6f99506" epoch="0" arch="s390x" src="rubygem-pg-1.0.0-3.module_el8.9.0+3635+c6f99506.src.rpm">
          <filename>rubygem-pg-1.0.0-3.module_el8.9.0+3635+c6f99506.s390x.rpm</filename>
          <sum type="sha256">d52a51f8cfdbeb3099ce92946748481f426b77c9da23f77737fe3d4fcd1b245c</sum>
        </package>
        <package name="rubygem-bundler-doc" version="1.16.1" release="5.module_el8.10.0+3991+5e651d4e" epoch="0" arch="noarch" src="rubygem-bundler-1.16.1-5.module_el8.10.0+3991+5e651d4e.src.rpm">
          <filename>rubygem-bundler-doc-1.16.1-5.module_el8.10.0+3991+5e651d4e.noarch.rpm</filename>
          <sum type="sha256">e0ac470177072cfa2230683fb44f531a60cabc9ecb486c5b00708f70a84ffc34</sum>
        </package>
        <package name="ruby-devel" version="2.5.9" release="115.module_el8.10.0+4212+150d00eb" epoch="0" arch="s390x" src="ruby-2.5.9-115.module_el8.10.0+4212+150d00eb.src.rpm">
          <filename>ruby-devel-2.5.9-115.module_el8.10.0+4212+150d00eb.s390x.rpm</filename>
          <sum type="sha256">e3ccb11a9d6beb819de20d694e93fa7d8e0b65e4573ae67b578832977438b40a</sum>
        </package>
        <package name="rubygem-mysql2" version="0.4.10" release="4.module_el8.6.0+3170+4b08f9d4" epoch="0" arch="s390x" src="rubygem-mysql2-0.4.10-4.module_el8.6.0+3170+4b08f9d4.src.rpm">
          <filename>rubygem-mysql2-0.4.10-4.module_el8.6.0+3170+4b08f9d4.s390x.rpm</filename>
          <sum type="sha256">e8ee63b6046ba22292c8ac7eb85440ace9fe11b17fef5bf5f590b754f4c7aadb</sum>
        </package>
        <package name="rubygem-net-telnet" version="0.1.1" release="115.module_el8.10.0+4212+150d00eb" epoch="0" arch="noarch" src="ruby-2.5.9-115.module_el8.10.0+4212+150d00eb.src.rpm">
          <filename>rubygem-net-telnet-0.1.1-115.module_el8.10.0+4212+150d00eb.noarch.rpm</filename>
          <sum type="sha256">ec44fecf33c8339902577ec34b7851e9e8aeb9ff83da6568eaff9588e42a0b42</sum>
        </package>
        <package name="rubygem-psych" version="3.0.2" release="115.module_el8.10.0+4212+150d00eb" epoch="0" arch="s390x" src="ruby-2.5.9-115.module_el8.10.0+4212+150d00eb.src.rpm">
          <filename>rubygem-psych-3.0.2-115.module_el8.10.0+4212+150d00eb.s390x.rpm</filename>
          <sum type="sha256">ef5e72b26d3cd1ec1cdbc1a152dd0a789705f36c5c531c624a4b40351b6d9bb0</sum>
        </package>
        <package name="rubygems" version="2.7.6.3" release="115.module_el8.10.0+4212+150d00eb" epoch="0" arch="noarch" src="ruby-2.5.9-115.module_el8.10.0+4212+150d00eb.src.rpm">
          <filename>rubygems-2.7.6.3-115.module_el8.10.0+4212+150d00eb.noarch.rpm</filename>
          <sum type="sha256">f55507e58aeb1a7f80db079c2b5349ba894909fe10dc24a78bd1b24bd9813b29</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:33515</id>
    <title>Important: ruby:3.3 security update</title>
    <issued date="2026-06-30 00:00:00"/>
    <updated date="2026-07-03 14:37:28"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ruby:3.3 security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  

Security Fix(es):  

  * ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses (CVE-2026-42245)
  * ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258)
  * net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:33515" id="RHSA-2026:33515" type="rhsa" title="RHSA-2026:33515"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42245" id="CVE-2026-42245" type="cve" title="CVE-2026-42245"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42246" id="CVE-2026-42246" type="cve" title="CVE-2026-42246"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42258" id="CVE-2026-42258" type="cve" title="CVE-2026-42258"/>
      <reference href="https://bugzilla.redhat.com/2468495" id="2468495" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468498" id="2468498" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468499" id="2468499" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-33515.html" id="ALSA-2026:33515" type="self" title="ALSA-2026:33515"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="ruby" stream="3.3" version="8100020260702195736" context="9edba152" arch="s390x"/>
        <package name="rubygem-mysql2" version="0.5.5" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="s390x" src="rubygem-mysql2-0.5.5-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-mysql2-0.5.5-1.module_el8.10.0+3799+191214cc.s390x.rpm</filename>
          <sum type="sha256">0212e4bd0a248fdb4c10424d90e73d4c0400b209c24f90e3a5fac26348adcdc3</sum>
        </package>
        <package name="rubygem-test-unit" version="3.6.1" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="noarch" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>rubygem-test-unit-3.6.1-7.module_el8.10.0+4210+b037b1ec.noarch.rpm</filename>
          <sum type="sha256">0b85242d5be086af2c5e34ad4514971c63b9fa7433b5a7b1e1915e76aa259817</sum>
        </package>
        <package name="rubygem-rdoc" version="6.6.3.1" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="noarch" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>rubygem-rdoc-6.6.3.1-7.module_el8.10.0+4210+b037b1ec.noarch.rpm</filename>
          <sum type="sha256">16609a745d44377dcc550a7f741a0ef935c40598893026521f52ebbbefd21468</sum>
        </package>
        <package name="rubygem-power_assert" version="2.0.3" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="noarch" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>rubygem-power_assert-2.0.3-7.module_el8.10.0+4210+b037b1ec.noarch.rpm</filename>
          <sum type="sha256">1e1665d5085f3b8ae58b6b871a5a9b1e15322988ff9946d9837f31bff9ea8d2b</sum>
        </package>
        <package name="rubygem-minitest" version="5.20.0" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="noarch" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>rubygem-minitest-5.20.0-7.module_el8.10.0+4210+b037b1ec.noarch.rpm</filename>
          <sum type="sha256">223448eac9e994c83bbaf078bff336038076d5a101cd04e68d5e4185d092df4c</sum>
        </package>
        <package name="rubygem-racc" version="1.7.3" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="s390x" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>rubygem-racc-1.7.3-7.module_el8.10.0+4210+b037b1ec.s390x.rpm</filename>
          <sum type="sha256">3d6e46981b0636e253ce344b731384bdd6938243612e4efef86080784a90887b</sum>
        </package>
        <package name="ruby-doc" version="3.3.10" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="noarch" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>ruby-doc-3.3.10-7.module_el8.10.0+4210+b037b1ec.noarch.rpm</filename>
          <sum type="sha256">562f3f1772fef8532486c24a9339014e24c8135f1a4948045fdc8e2020fe7936</sum>
        </package>
        <package name="ruby-libs" version="3.3.10" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="s390x" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>ruby-libs-3.3.10-7.module_el8.10.0+4210+b037b1ec.s390x.rpm</filename>
          <sum type="sha256">5fc9cd14fb8fe19b933cd3f23fa5da9d8822ea13ee962d1f68c92976f7a8c868</sum>
        </package>
        <package name="ruby" version="3.3.10" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="s390x" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.s390x.rpm</filename>
          <sum type="sha256">6c91d27eed8157d9678e75eceb824fca87111840663c139f95eef840b2a4acc3</sum>
        </package>
        <package name="rubygem-json" version="2.7.2" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="s390x" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>rubygem-json-2.7.2-7.module_el8.10.0+4210+b037b1ec.s390x.rpm</filename>
          <sum type="sha256">78d8c902c9a8efa00b1faeef1b90f9814f2d4752832af3cb647c68cc3166dae8</sum>
        </package>
        <package name="rubygem-rexml" version="3.4.4" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="noarch" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>rubygem-rexml-3.4.4-7.module_el8.10.0+4210+b037b1ec.noarch.rpm</filename>
          <sum type="sha256">7d25cb2690560d839f7e151274d6e2c171a78ea802116d890274d0bbcb0be168</sum>
        </package>
        <package name="rubygem-rake" version="13.1.0" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="noarch" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>rubygem-rake-13.1.0-7.module_el8.10.0+4210+b037b1ec.noarch.rpm</filename>
          <sum type="sha256">80eb9e437a0dd14489e12b6d9cbd9c1c9d6cc657d5bd1c84ca8fe0b459edbd63</sum>
        </package>
        <package name="rubygem-rss" version="0.3.1" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="noarch" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>rubygem-rss-0.3.1-7.module_el8.10.0+4210+b037b1ec.noarch.rpm</filename>
          <sum type="sha256">86be01631fa3393a162239b227caedd18140ccbafb8c309764af1565acf7c2b1</sum>
        </package>
        <package name="ruby-bundled-gems" version="3.3.10" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="s390x" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>ruby-bundled-gems-3.3.10-7.module_el8.10.0+4210+b037b1ec.s390x.rpm</filename>
          <sum type="sha256">9129935433c196eed53487c104236e6051adbd55f62d99c61535ba812cddec27</sum>
        </package>
        <package name="rubygems-devel" version="3.5.22" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="noarch" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>rubygems-devel-3.5.22-7.module_el8.10.0+4210+b037b1ec.noarch.rpm</filename>
          <sum type="sha256">9ebbd32353bb508c0ac8c5f2a0c096c4e007d2667dd5429ab682500a21d05923</sum>
        </package>
        <package name="rubygem-mysql2-doc" version="0.5.5" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-mysql2-0.5.5-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-mysql2-doc-0.5.5-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">a1e84a63a7afd9043eb9ee27d2b4a2784de6e4790859efeb6e29353b8922b91f</sum>
        </package>
        <package name="rubygem-pg" version="1.5.4" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="s390x" src="rubygem-pg-1.5.4-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-pg-1.5.4-1.module_el8.10.0+3799+191214cc.s390x.rpm</filename>
          <sum type="sha256">b17f6e9ce3697902b5d1a0a00f804510913440b751583002e5226f0f1bafcfad</sum>
        </package>
        <package name="rubygem-pg-doc" version="1.5.4" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-pg-1.5.4-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-pg-doc-1.5.4-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">b8da427ba088e5a263b5c71d592a6515861cf12932be7ac5577f51afc1c68900</sum>
        </package>
        <package name="rubygem-rbs" version="3.4.0" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="s390x" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>rubygem-rbs-3.4.0-7.module_el8.10.0+4210+b037b1ec.s390x.rpm</filename>
          <sum type="sha256">c46daf05cb57464e842384c3f8cbbf003d0b076cb660d507ff5fa68c9c6e72cc</sum>
        </package>
        <package name="rubygem-abrt-doc" version="0.4.0" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-abrt-0.4.0-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-abrt-doc-0.4.0-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">c7018cb7e3cfdd28f00117935672e78df8eddf81f308a36b9be1dd8a3fec2afe</sum>
        </package>
        <package name="rubygem-psych" version="5.1.2" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="s390x" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>rubygem-psych-5.1.2-7.module_el8.10.0+4210+b037b1ec.s390x.rpm</filename>
          <sum type="sha256">d6ef54655fc4aedd6b606963bd659ce88a6f048eae2bb15b354a2c7dc7216a2e</sum>
        </package>
        <package name="rubygem-irb" version="1.13.1" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="noarch" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>rubygem-irb-1.13.1-7.module_el8.10.0+4210+b037b1ec.noarch.rpm</filename>
          <sum type="sha256">dde04713f808f68813402a04b1180a1af330f62764d5ab3ac72959efeeba869e</sum>
        </package>
        <package name="rubygem-bundler" version="2.5.22" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="noarch" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>rubygem-bundler-2.5.22-7.module_el8.10.0+4210+b037b1ec.noarch.rpm</filename>
          <sum type="sha256">def4e4503e1d6bbee4bcc7a7444ad72b13f157de3137824a71bae2873bc84a9a</sum>
        </package>
        <package name="rubygem-io-console" version="0.7.1" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="s390x" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>rubygem-io-console-0.7.1-7.module_el8.10.0+4210+b037b1ec.s390x.rpm</filename>
          <sum type="sha256">e0ba17705b77742c70b9aacc35fd875f9f3c2dd9662558312e566893c1b44b5d</sum>
        </package>
        <package name="rubygem-bigdecimal" version="3.1.5" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="s390x" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>rubygem-bigdecimal-3.1.5-7.module_el8.10.0+4210+b037b1ec.s390x.rpm</filename>
          <sum type="sha256">e210668f2d95acc487b9e96d73f1952637d181bbe675b03b7bed420de976d78d</sum>
        </package>
        <package name="rubygem-typeprof" version="0.21.9" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="noarch" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>rubygem-typeprof-0.21.9-7.module_el8.10.0+4210+b037b1ec.noarch.rpm</filename>
          <sum type="sha256">e7c1e382a50c8953562bf980b1f9181986f99fc051405e735ab1a930466778a8</sum>
        </package>
        <package name="ruby-devel" version="3.3.10" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="s390x" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>ruby-devel-3.3.10-7.module_el8.10.0+4210+b037b1ec.s390x.rpm</filename>
          <sum type="sha256">e8fb7b2dd4736a5990da4f3b69094616bfed345a5b0c45f6c92c3e1557beacd9</sum>
        </package>
        <package name="rubygem-abrt" version="0.4.0" release="1.module_el8.10.0+3799+191214cc" epoch="0" arch="noarch" src="rubygem-abrt-0.4.0-1.module_el8.10.0+3799+191214cc.src.rpm">
          <filename>rubygem-abrt-0.4.0-1.module_el8.10.0+3799+191214cc.noarch.rpm</filename>
          <sum type="sha256">eb0f7cad4d0f103b5e53f11647208a780406db8c8cd8c9556e219bec8e1d9893</sum>
        </package>
        <package name="ruby-default-gems" version="3.3.10" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="noarch" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>ruby-default-gems-3.3.10-7.module_el8.10.0+4210+b037b1ec.noarch.rpm</filename>
          <sum type="sha256">ec5149a8ab61357fe69a183657ca40d3fa0e0d1c5f29cf43ccb20183896c8cc6</sum>
        </package>
        <package name="rubygems" version="3.5.22" release="7.module_el8.10.0+4210+b037b1ec" epoch="0" arch="noarch" src="ruby-3.3.10-7.module_el8.10.0+4210+b037b1ec.src.rpm">
          <filename>rubygems-3.5.22-7.module_el8.10.0+4210+b037b1ec.noarch.rpm</filename>
          <sum type="sha256">fb6bfd75b7b1e00f206ae1438fb6eb1bde8004848c1b5ee4feeb8a3c9d8617e9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:33722</id>
    <title>Important: container-tools:rhel8 security, bug fix, and enhancement update</title>
    <issued date="2026-06-30 00:00:00"/>
    <updated date="2026-07-03 14:35:00"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>container-tools:rhel8 security, bug fix, and enhancement update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.  

Security Fix(es):  

  * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
  * github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)
  * crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)
  * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
  * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)


Bug Fix(es) and Enhancement(s):  

  * user_u SELinux user can't run podman containers as rootless (JIRA:AlmaLinux-135342)
  * podman does not clean up all files and leaves orphaned files consuming disk space [almalinux-8.10.z] (JIRA:AlmaLinux-173978)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:33722" id="RHSA-2026:33722" type="rhsa" title="RHSA-2026:33722"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25679" id="CVE-2026-25679" type="cve" title="CVE-2026-25679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32280" id="CVE-2026-32280" type="cve" title="CVE-2026-32280"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32281" id="CVE-2026-32281" type="cve" title="CVE-2026-32281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32283" id="CVE-2026-32283" type="cve" title="CVE-2026-32283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34986" id="CVE-2026-34986" type="cve" title="CVE-2026-34986"/>
      <reference href="https://bugzilla.redhat.com/2445356" id="2445356" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2455470" id="2455470" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2456333" id="2456333" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2456338" id="2456338" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2456339" id="2456339" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-33722.html" id="ALSA-2026:33722" type="self" title="ALSA-2026:33722"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="container-tools" stream="rhel8" version="8100020260120091026" context="20125149" arch="s390x"/>
        <package name="libslirp-devel" version="4.4.0" release="2.module_el8.10.0+4102+6c76e544" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>libslirp-devel-4.4.0-2.module_el8.10.0+4102+6c76e544.s390x.rpm</filename>
          <sum type="sha256">04d89a36990aa212a94bb2747825e0da8c83a7b25e78a61558e4d5b43429e4f4</sum>
        </package>
        <package name="podman-gvproxy" version="4.9.4" release="31.module_el8.10.0+4211+49ea0979" epoch="4" arch="s390x" src="podman-4.9.4-31.module_el8.10.0+4211+49ea0979.src.rpm">
          <filename>podman-gvproxy-4.9.4-31.module_el8.10.0+4211+49ea0979.s390x.rpm</filename>
          <sum type="sha256">064b9069265ede7fc7cf13d2f8065748b19a7ef9e20655ce146dbbbaff98d6d6</sum>
        </package>
        <package name="python3-podman" version="4.9.0" release="3.module_el8.10.0+4016+efd18bf8" epoch="0" arch="noarch" src="python-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>python3-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.noarch.rpm</filename>
          <sum type="sha256">087549428650af46817206c5d5ddd54bace235c2932b3e2004ac93e3b466cb6d</sum>
        </package>
        <package name="skopeo-tests" version="1.14.6" release="2.module_el8.10.0+4211+49ea0979" epoch="2" arch="s390x" src="skopeo-1.14.6-2.module_el8.10.0+4211+49ea0979.src.rpm">
          <filename>skopeo-tests-1.14.6-2.module_el8.10.0+4211+49ea0979.s390x.rpm</filename>
          <sum type="sha256">19938047e62ddce6132e3d550da8b9147e0a3e78bd828b3d968f1b9786cf4d47</sum>
        </package>
        <package name="netavark" version="1.10.3" release="1.module_el8.10.0+4120+03ad4b47" epoch="2" arch="s390x" src="netavark-1.10.3-1.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>netavark-1.10.3-1.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">1f5e2faafe780466e1224fe37b9a1e5dc04e53f831ba39b977b60d7df76f90bd</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="2.module_el8.10.0+4023+db236c53" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>libslirp-4.4.0-2.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">1fb16f13bc4c318fd2714e829a188f97facb4a31222911e078f5604ab7bcd2d9</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="31.module_el8.10.0+4211+49ea0979" epoch="4" arch="noarch" src="podman-4.9.4-31.module_el8.10.0+4211+49ea0979.src.rpm">
          <filename>podman-docker-4.9.4-31.module_el8.10.0+4211+49ea0979.noarch.rpm</filename>
          <sum type="sha256">33de7fa7001fbca69b6786f75d61fbb7d41481bbcbffe5d3583b8ca3d680fea2</sum>
        </package>
        <package name="podman-plugins" version="4.9.4" release="31.module_el8.10.0+4211+49ea0979" epoch="4" arch="s390x" src="podman-4.9.4-31.module_el8.10.0+4211+49ea0979.src.rpm">
          <filename>podman-plugins-4.9.4-31.module_el8.10.0+4211+49ea0979.s390x.rpm</filename>
          <sum type="sha256">35cd2b69aa5fb3931e08f522c75576a33e1f6bcf37e2a903bb47a44e022461b0</sum>
        </package>
        <package name="containernetworking-plugins" version="1.4.0" release="8.module_el8.10.0+4136+16425343" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-8.module_el8.10.0+4136+16425343.src.rpm">
          <filename>containernetworking-plugins-1.4.0-8.module_el8.10.0+4136+16425343.s390x.rpm</filename>
          <sum type="sha256">5b03d385ebddc1bae5ae08592be2ce5f4c8d44e3feba600e5735cf91f8ae3c7f</sum>
        </package>
        <package name="podman-catatonit" version="4.9.4" release="31.module_el8.10.0+4211+49ea0979" epoch="4" arch="s390x" src="podman-4.9.4-31.module_el8.10.0+4211+49ea0979.src.rpm">
          <filename>podman-catatonit-4.9.4-31.module_el8.10.0+4211+49ea0979.s390x.rpm</filename>
          <sum type="sha256">5cd285d0a917689f711a2223412431816e6d33acb68e928daa579dbc3eb8991b</sum>
        </package>
        <package name="podman" version="4.9.4" release="31.module_el8.10.0+4211+49ea0979" epoch="4" arch="s390x" src="podman-4.9.4-31.module_el8.10.0+4211+49ea0979.src.rpm">
          <filename>podman-4.9.4-31.module_el8.10.0+4211+49ea0979.s390x.rpm</filename>
          <sum type="sha256">5fd6f258c747cdcc6db0aa2911b7aaaa94519814a51dcbb1fe77f88f46b41d4d</sum>
        </package>
        <package name="container-selinux" version="2.229.0" release="3.module_el8.10.0+4211+49ea0979" epoch="2" arch="noarch" src="container-selinux-2.229.0-3.module_el8.10.0+4211+49ea0979.src.rpm">
          <filename>container-selinux-2.229.0-3.module_el8.10.0+4211+49ea0979.noarch.rpm</filename>
          <sum type="sha256">6026d4f2d709a3fdb0e028a6d914d0f10707145e16cb8c8a24cecb9c02453122</sum>
        </package>
        <package name="toolbox" version="0.0.99.5.1" release="1.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="toolbox-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>toolbox-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">6143186cb1c446d86cea17767eb5d7143bcfa3a6cda56b6972cea4289916158d</sum>
        </package>
        <package name="skopeo" version="1.14.6" release="2.module_el8.10.0+4211+49ea0979" epoch="2" arch="s390x" src="skopeo-1.14.6-2.module_el8.10.0+4211+49ea0979.src.rpm">
          <filename>skopeo-1.14.6-2.module_el8.10.0+4211+49ea0979.s390x.rpm</filename>
          <sum type="sha256">71fd4ee1947c746cfc6e43f5f9f0c90bce223b34427701d31caec6d368dc76e9</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.10" release="1.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">73a992b19df0eda4ae7ba076ebfab5d8d638889051c89b761735617047e0d181</sum>
        </package>
        <package name="udica" version="0.2.6" release="21.module_el8.10.0+4068+0e21408f" epoch="0" arch="noarch" src="udica-0.2.6-21.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>udica-0.2.6-21.module_el8.10.0+4068+0e21408f.noarch.rpm</filename>
          <sum type="sha256">79a48c91cfda7b53eceaf7fc427f6b428b66680f0441fed06fc3bb55a0327feb</sum>
        </package>
        <package name="cockpit-podman" version="84.1" release="1.module_el8.10.0+4102+6c76e544" epoch="0" arch="noarch" src="cockpit-podman-84.1-1.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>cockpit-podman-84.1-1.module_el8.10.0+4102+6c76e544.noarch.rpm</filename>
          <sum type="sha256">7ebfd9c6721f16e93505c790faf678779b529dd5d380e17887b0ba1629de4871</sum>
        </package>
        <package name="fuse-overlayfs" version="1.13" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="s390x" src="fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">8118067655696462cee9dfc553f57e4501b089590d837bc88091716914c8d3f5</sum>
        </package>
        <package name="crit" version="3.18" release="5.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>crit-3.18-5.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">8c081ab36feca1313187e33796d54822ad0f6d4a3bb42fe65fd20163f784085a</sum>
        </package>
        <package name="criu-devel" version="3.18" release="5.module_el8.10.0+4068+0e21408f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>criu-devel-3.18-5.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">8d858b9b5053b95ab7cb5eba9ab5bbd3cf5a1d07b77394b4d0f0d9d6c0769768</sum>
        </package>
        <package name="containers-common" version="1" release="82.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="s390x" src="containers-common-1-82.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>containers-common-1-82.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">98eb0c5785e1d53743858e76ac35aab0b199a918b88c02e20aa6f64cc6f89618</sum>
        </package>
        <package name="aardvark-dns" version="1.10.1" release="2.module_el8.10.0+4047+545787c4" epoch="2" arch="s390x" src="aardvark-dns-1.10.1-2.module_el8.10.0+4047+545787c4.src.rpm">
          <filename>aardvark-dns-1.10.1-2.module_el8.10.0+4047+545787c4.s390x.rpm</filename>
          <sum type="sha256">9e7e5cc9877a685769ee43c72dc867d179fe027d41775a01f1e73cfe366872ef</sum>
        </package>
        <package name="buildah" version="1.33.14" release="3.module_el8.10.0+4211+49ea0979" epoch="2" arch="s390x" src="buildah-1.33.14-3.module_el8.10.0+4211+49ea0979.src.rpm">
          <filename>buildah-1.33.14-3.module_el8.10.0+4211+49ea0979.s390x.rpm</filename>
          <sum type="sha256">acb4d3dd7089d9e737b1266c11d4d0bc91bc42cad37c2d653099bbac64b63321</sum>
        </package>
        <package name="runc" version="1.2.9" release="4.module_el8.10.0+4136+16425343" epoch="4" arch="s390x" src="runc-1.2.9-4.module_el8.10.0+4136+16425343.src.rpm">
          <filename>runc-1.2.9-4.module_el8.10.0+4136+16425343.s390x.rpm</filename>
          <sum type="sha256">b114cd179c7ed980d7c76e9ab68a55608d78cad0bb1cdb8a7b7106124e9f6ac2</sum>
        </package>
        <package name="crun" version="1.14.3" release="2.module_el8.10.0+4102+6c76e544" epoch="0" arch="s390x" src="crun-1.14.3-2.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>crun-1.14.3-2.module_el8.10.0+4102+6c76e544.s390x.rpm</filename>
          <sum type="sha256">b21ff72aa6dc2112775c618b7c6df02c4b2545cc7ee43ec04a1c6e1c84682757</sum>
        </package>
        <package name="criu" version="3.18" release="5.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>criu-3.18-5.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">bdaddee931f3746ac7472d9ccee504acd0be805433b3d160b1e7caf8bf361cb8</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.5.1" release="1.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="toolbox-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>toolbox-tests-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">bdc59eb38e3f90cd26d7f3417f6746988c30029b69aec49dfad5a57f785b6bf1</sum>
        </package>
        <package name="python3-criu" version="3.18" release="5.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>python3-criu-3.18-5.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">c24d9238067c95664620e800f7d24812b7788384f71812868db7ae5d390bb2dd</sum>
        </package>
        <package name="conmon" version="2.1.10" release="1.module_el8.10.0+4068+0e21408f" epoch="3" arch="s390x" src="conmon-2.1.10-1.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>conmon-2.1.10-1.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">c845407c7f2bb04735705b66ad0ca47b44437e8d6988148eeee4986701a2ab8d</sum>
        </package>
        <package name="buildah-tests" version="1.33.14" release="3.module_el8.10.0+4211+49ea0979" epoch="2" arch="s390x" src="buildah-1.33.14-3.module_el8.10.0+4211+49ea0979.src.rpm">
          <filename>buildah-tests-1.33.14-3.module_el8.10.0+4211+49ea0979.s390x.rpm</filename>
          <sum type="sha256">c87efb19ec5a2237fdee7f6230507cb204353494d69c1699380146184e46e5f2</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="31.module_el8.10.0+4211+49ea0979" epoch="4" arch="s390x" src="podman-4.9.4-31.module_el8.10.0+4211+49ea0979.src.rpm">
          <filename>podman-remote-4.9.4-31.module_el8.10.0+4211+49ea0979.s390x.rpm</filename>
          <sum type="sha256">daafea910319e4e3969f9c90a937f0788b4ac93f3502ce561a9d82f56e79b251</sum>
        </package>
        <package name="criu-libs" version="3.18" release="5.module_el8.10.0+4082+f7f0c95e" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4082+f7f0c95e.src.rpm">
          <filename>criu-libs-3.18-5.module_el8.10.0+4082+f7f0c95e.s390x.rpm</filename>
          <sum type="sha256">ef19ef2ed0463ac1a663bbbfaa1ebc2c430ca0f751305b9d5d0b4e41046bb967</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="31.module_el8.10.0+4211+49ea0979" epoch="4" arch="s390x" src="podman-4.9.4-31.module_el8.10.0+4211+49ea0979.src.rpm">
          <filename>podman-tests-4.9.4-31.module_el8.10.0+4211+49ea0979.s390x.rpm</filename>
          <sum type="sha256">f1384c78825a6b639e97f9d246268e6637630da7b11aa1785e295e9b5792251d</sum>
        </package>
        <package name="slirp4netns" version="1.2.3" release="1.module_el8.10.0+4082+f7f0c95e" epoch="0" arch="s390x" src="slirp4netns-1.2.3-1.module_el8.10.0+4082+f7f0c95e.src.rpm">
          <filename>slirp4netns-1.2.3-1.module_el8.10.0+4082+f7f0c95e.s390x.rpm</filename>
          <sum type="sha256">fd08808c8bda8cc9c5ecad38af925ba82a8d2124ba69ca9153b315c7e4879fd2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:34155</id>
    <title>Moderate: rrdtool security update</title>
    <issued date="2026-07-01 00:00:00"/>
    <updated date="2026-07-01 13:38:01"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>rrdtool security update</summary>
    <description>The round robin database (RRD) system stores and displays time-series data, such as network bandwidth, machine-room temperature, and server load average. RRDtool is a high performance data logging and graphing utility, which can be easily integrated with shell scripts, or used to create applications using its Perl, Python, Ruby, Lua, Tcl, and PHP bindings. The data is stored in a compact manner that does not expand over time, and RRDtool provides the user with useful graphs by processing the data to enforce a certain data density.  

Security Fix(es):  

  * rrdtool: Stack buffer overflow in rrdcached handle_request_create() allows local privilege escalation via unbounded DS/RRA arguments (CVE-2026-43958)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:34155" id="RHSA-2026:34155" type="rhsa" title="RHSA-2026:34155"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43958" id="CVE-2026-43958" type="cve" title="CVE-2026-43958"/>
      <reference href="https://bugzilla.redhat.com/2460932" id="2460932" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-34155.html" id="ALSA-2026:34155" type="self" title="ALSA-2026:34155"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="rrdtool-perl" version="1.7.0" release="17.el8_10" epoch="0" arch="s390x" src="rrdtool-1.7.0-17.el8_10.src.rpm">
          <filename>rrdtool-perl-1.7.0-17.el8_10.s390x.rpm</filename>
          <sum type="sha256">9cf5592bd4316f3d4b84fe29c74e3f786ea4499cce2e57f57c8957889b643073</sum>
        </package>
        <package name="rrdtool" version="1.7.0" release="17.el8_10" epoch="0" arch="s390x" src="rrdtool-1.7.0-17.el8_10.src.rpm">
          <filename>rrdtool-1.7.0-17.el8_10.s390x.rpm</filename>
          <sum type="sha256">aef0add4973676f4345640b9693563e66b1d9d6876f07f55ed85717d6a7e0e86</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3428</id>
    <title>Important: container-tools:rhel8 security update</title>
    <issued date="2026-02-26 00:00:00"/>
    <updated date="2026-03-02 15:20:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>container-tools:rhel8 security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.  

Security Fix(es):  

  * golang: html/template: errors returned from MarshalJSON methods may break template escaping (CVE-2024-24785)
  * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
  * github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload (CVE-2025-65637)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3428" id="RHSA-2026:3428" type="rhsa" title="RHSA-2026:3428"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24785" id="CVE-2024-24785" type="cve" title="CVE-2024-24785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61729" id="CVE-2025-61729" type="cve" title="CVE-2025-61729"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65637" id="CVE-2025-65637" type="cve" title="CVE-2025-65637"/>
      <reference href="https://bugzilla.redhat.com/2268022" id="2268022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418462" id="2418462" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418900" id="2418900" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-3428.html" id="ALSA-2026:3428" type="self" title="ALSA-2026:3428"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="container-tools" stream="rhel8" version="8100020251118072738" context="20125149" arch="s390x"/>
        <package name="libslirp-devel" version="4.4.0" release="2.module_el8.10.0+4102+6c76e544" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>libslirp-devel-4.4.0-2.module_el8.10.0+4102+6c76e544.s390x.rpm</filename>
          <sum type="sha256">04d89a36990aa212a94bb2747825e0da8c83a7b25e78a61558e4d5b43429e4f4</sum>
        </package>
        <package name="python3-podman" version="4.9.0" release="3.module_el8.10.0+4016+efd18bf8" epoch="0" arch="noarch" src="python-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>python3-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.noarch.rpm</filename>
          <sum type="sha256">087549428650af46817206c5d5ddd54bace235c2932b3e2004ac93e3b466cb6d</sum>
        </package>
        <package name="podman-plugins" version="4.9.4" release="28.module_el8.10.0+4120+03ad4b47" epoch="4" arch="s390x" src="podman-4.9.4-28.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>podman-plugins-4.9.4-28.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">1319ebf3ef42341ce4460213076cc6733455473cdbd60ba0947c4872cfb68daf</sum>
        </package>
        <package name="netavark" version="1.10.3" release="1.module_el8.10.0+4120+03ad4b47" epoch="2" arch="s390x" src="netavark-1.10.3-1.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>netavark-1.10.3-1.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">1f5e2faafe780466e1224fe37b9a1e5dc04e53f831ba39b977b60d7df76f90bd</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="2.module_el8.10.0+4023+db236c53" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>libslirp-4.4.0-2.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">1fb16f13bc4c318fd2714e829a188f97facb4a31222911e078f5604ab7bcd2d9</sum>
        </package>
        <package name="podman-catatonit" version="4.9.4" release="28.module_el8.10.0+4120+03ad4b47" epoch="4" arch="s390x" src="podman-4.9.4-28.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>podman-catatonit-4.9.4-28.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">33edd89e44baacad10cb24cfacf494493e630dbad36579409d473f32b03e2176</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="28.module_el8.10.0+4120+03ad4b47" epoch="4" arch="s390x" src="podman-4.9.4-28.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>podman-tests-4.9.4-28.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">3a6ad5b0748feec2ef1c1f4c920bef68e6c02fdb97e84078c0d5bcd88916c49b</sum>
        </package>
        <package name="toolbox" version="0.0.99.5.1" release="1.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="toolbox-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>toolbox-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">6143186cb1c446d86cea17767eb5d7143bcfa3a6cda56b6972cea4289916158d</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.10" release="1.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">73a992b19df0eda4ae7ba076ebfab5d8d638889051c89b761735617047e0d181</sum>
        </package>
        <package name="udica" version="0.2.6" release="21.module_el8.10.0+4068+0e21408f" epoch="0" arch="noarch" src="udica-0.2.6-21.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>udica-0.2.6-21.module_el8.10.0+4068+0e21408f.noarch.rpm</filename>
          <sum type="sha256">79a48c91cfda7b53eceaf7fc427f6b428b66680f0441fed06fc3bb55a0327feb</sum>
        </package>
        <package name="cockpit-podman" version="84.1" release="1.module_el8.10.0+4102+6c76e544" epoch="0" arch="noarch" src="cockpit-podman-84.1-1.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>cockpit-podman-84.1-1.module_el8.10.0+4102+6c76e544.noarch.rpm</filename>
          <sum type="sha256">7ebfd9c6721f16e93505c790faf678779b529dd5d380e17887b0ba1629de4871</sum>
        </package>
        <package name="fuse-overlayfs" version="1.13" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="s390x" src="fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">8118067655696462cee9dfc553f57e4501b089590d837bc88091716914c8d3f5</sum>
        </package>
        <package name="crit" version="3.18" release="5.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>crit-3.18-5.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">8c081ab36feca1313187e33796d54822ad0f6d4a3bb42fe65fd20163f784085a</sum>
        </package>
        <package name="criu-devel" version="3.18" release="5.module_el8.10.0+4068+0e21408f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>criu-devel-3.18-5.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">8d858b9b5053b95ab7cb5eba9ab5bbd3cf5a1d07b77394b4d0f0d9d6c0769768</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="28.module_el8.10.0+4120+03ad4b47" epoch="4" arch="noarch" src="podman-4.9.4-28.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>podman-docker-4.9.4-28.module_el8.10.0+4120+03ad4b47.noarch.rpm</filename>
          <sum type="sha256">980a8032d5d97e6208c9d4385ced66ca6460946425cf0774c07557805cfad086</sum>
        </package>
        <package name="containers-common" version="1" release="82.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="s390x" src="containers-common-1-82.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>containers-common-1-82.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">98eb0c5785e1d53743858e76ac35aab0b199a918b88c02e20aa6f64cc6f89618</sum>
        </package>
        <package name="container-selinux" version="2.229.0" release="2.module_el8.10.0+4090+91932338" epoch="2" arch="noarch" src="container-selinux-2.229.0-2.module_el8.10.0+4090+91932338.src.rpm">
          <filename>container-selinux-2.229.0-2.module_el8.10.0+4090+91932338.noarch.rpm</filename>
          <sum type="sha256">9bee177863e693c8b3f4cf092222ef14a59409617b381b0dd764102212ab2074</sum>
        </package>
        <package name="aardvark-dns" version="1.10.1" release="2.module_el8.10.0+4047+545787c4" epoch="2" arch="s390x" src="aardvark-dns-1.10.1-2.module_el8.10.0+4047+545787c4.src.rpm">
          <filename>aardvark-dns-1.10.1-2.module_el8.10.0+4047+545787c4.s390x.rpm</filename>
          <sum type="sha256">9e7e5cc9877a685769ee43c72dc867d179fe027d41775a01f1e73cfe366872ef</sum>
        </package>
        <package name="buildah" version="1.33.14" release="2.module_el8.10.0+4120+03ad4b47" epoch="2" arch="s390x" src="buildah-1.33.14-2.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>buildah-1.33.14-2.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">a74ed2ca53ddfa4137898aded8b3ecaffbb01157ebe44b0a77a3ac6ca2a0809e</sum>
        </package>
        <package name="podman" version="4.9.4" release="28.module_el8.10.0+4120+03ad4b47" epoch="4" arch="s390x" src="podman-4.9.4-28.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>podman-4.9.4-28.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">aa2bf18bce1a6f41bd3d5f5fd8e0d7866482c813afca27018fb9a8f52140bb88</sum>
        </package>
        <package name="crun" version="1.14.3" release="2.module_el8.10.0+4102+6c76e544" epoch="0" arch="s390x" src="crun-1.14.3-2.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>crun-1.14.3-2.module_el8.10.0+4102+6c76e544.s390x.rpm</filename>
          <sum type="sha256">b21ff72aa6dc2112775c618b7c6df02c4b2545cc7ee43ec04a1c6e1c84682757</sum>
        </package>
        <package name="buildah-tests" version="1.33.14" release="2.module_el8.10.0+4120+03ad4b47" epoch="2" arch="s390x" src="buildah-1.33.14-2.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>buildah-tests-1.33.14-2.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">b671cdd0f0aa7f515b2640fc7d95b7aafd3bbbf051cac005c771fa808ce83005</sum>
        </package>
        <package name="criu" version="3.18" release="5.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>criu-3.18-5.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">bdaddee931f3746ac7472d9ccee504acd0be805433b3d160b1e7caf8bf361cb8</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.5.1" release="1.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="toolbox-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>toolbox-tests-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">bdc59eb38e3f90cd26d7f3417f6746988c30029b69aec49dfad5a57f785b6bf1</sum>
        </package>
        <package name="python3-criu" version="3.18" release="5.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>python3-criu-3.18-5.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">c24d9238067c95664620e800f7d24812b7788384f71812868db7ae5d390bb2dd</sum>
        </package>
        <package name="conmon" version="2.1.10" release="1.module_el8.10.0+4068+0e21408f" epoch="3" arch="s390x" src="conmon-2.1.10-1.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>conmon-2.1.10-1.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">c845407c7f2bb04735705b66ad0ca47b44437e8d6988148eeee4986701a2ab8d</sum>
        </package>
        <package name="podman-gvproxy" version="4.9.4" release="28.module_el8.10.0+4120+03ad4b47" epoch="4" arch="s390x" src="podman-4.9.4-28.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>podman-gvproxy-4.9.4-28.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">c964db83b86ecbe1b40a809abe0369602b26c65a10068fe2fcf1611dda28f142</sum>
        </package>
        <package name="skopeo" version="1.14.5" release="6.module_el8.10.0+4120+03ad4b47" epoch="2" arch="s390x" src="skopeo-1.14.5-6.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>skopeo-1.14.5-6.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">d4652c41877019c4c573998fb0a4397f7ecf1c75073057e87b611d406af37076</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="28.module_el8.10.0+4120+03ad4b47" epoch="4" arch="s390x" src="podman-4.9.4-28.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>podman-remote-4.9.4-28.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">d763a9dcdd36ec60f95e4f5f1b0200a0f6790091908f683d9bccf6c1a9b8fe8d</sum>
        </package>
        <package name="containernetworking-plugins" version="1.4.0" release="7.module_el8.10.0+4120+03ad4b47" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-7.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>containernetworking-plugins-1.4.0-7.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">d8504c78368c6db044ef7faa8dd7525e668533bd44921fdb93fb270f795a12aa</sum>
        </package>
        <package name="runc" version="1.2.9" release="3.module_el8.10.0+4120+03ad4b47" epoch="4" arch="s390x" src="runc-1.2.9-3.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>runc-1.2.9-3.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">ed00a9aa29405034395485a45682dd483355b5f384748acabaf6d680c40941ea</sum>
        </package>
        <package name="criu-libs" version="3.18" release="5.module_el8.10.0+4082+f7f0c95e" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4082+f7f0c95e.src.rpm">
          <filename>criu-libs-3.18-5.module_el8.10.0+4082+f7f0c95e.s390x.rpm</filename>
          <sum type="sha256">ef19ef2ed0463ac1a663bbbfaa1ebc2c430ca0f751305b9d5d0b4e41046bb967</sum>
        </package>
        <package name="skopeo-tests" version="1.14.5" release="6.module_el8.10.0+4120+03ad4b47" epoch="2" arch="s390x" src="skopeo-1.14.5-6.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>skopeo-tests-1.14.5-6.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">fac502b2d428bd086e2f52a1b539c5e01e0ee70d775461fb27802d0ad59b2546</sum>
        </package>
        <package name="slirp4netns" version="1.2.3" release="1.module_el8.10.0+4082+f7f0c95e" epoch="0" arch="s390x" src="slirp4netns-1.2.3-1.module_el8.10.0+4082+f7f0c95e.src.rpm">
          <filename>slirp4netns-1.2.3-1.module_el8.10.0+4082+f7f0c95e.s390x.rpm</filename>
          <sum type="sha256">fd08808c8bda8cc9c5ecad38af925ba82a8d2124ba69ca9153b315c7e4879fd2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:34354</id>
    <title>Important: php:7.4 security update</title>
    <issued date="2026-07-01 00:00:00"/>
    <updated date="2026-07-02 09:24:53"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>php:7.4 security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  

Security Fix(es):  

  * php: php-soap: php-src: PHP SOAP extension: Remote Code Execution via use-after-free vulnerability (CVE-2026-6722)
  * PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions (CVE-2026-7258)
  * PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation (CVE-2026-6735)
  * PHP: PHP SoapServer: Memory corruption and information disclosure via incorrect persistence handling (CVE-2026-7261)
  * php: NULL pointer dereference in SOAP apache:Map decoder with missing &lt;value&gt; (CVE-2026-7262)
  * php: signed integer overflow in metaphone() (CVE-2026-7568)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:34354" id="RHSA-2026:34354" type="rhsa" title="RHSA-2026:34354"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6722" id="CVE-2026-6722" type="cve" title="CVE-2026-6722"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6735" id="CVE-2026-6735" type="cve" title="CVE-2026-6735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-7258" id="CVE-2026-7258" type="cve" title="CVE-2026-7258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-7261" id="CVE-2026-7261" type="cve" title="CVE-2026-7261"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-7262" id="CVE-2026-7262" type="cve" title="CVE-2026-7262"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-7568" id="CVE-2026-7568" type="cve" title="CVE-2026-7568"/>
      <reference href="https://bugzilla.redhat.com/2468560" id="2468560" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468561" id="2468561" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468562" id="2468562" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468563" id="2468563" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468565" id="2468565" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468566" id="2468566" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-34354.html" id="ALSA-2026:34354" type="self" title="ALSA-2026:34354"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="php" stream="7.4" version="8100020241212065510" context="eb0869e2" arch="s390x"/>
        <package name="php" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">0103b68450ff758a175eaa117b6c5a3f5c68c4a799f8d75efc2c7312e168f1c3</sum>
        </package>
        <package name="php-mysqlnd" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-mysqlnd-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">058f40004e2de0c396508175b7e41691249e53f6d6c71d25dc966921ae4ed45b</sum>
        </package>
        <package name="php-enchant" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-enchant-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">06091b6661c95027109495363ca5e882230229bf051bb192be90cd71b9f936f8</sum>
        </package>
        <package name="php-json" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-json-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">128ae5661d9d763e9a8ecf26125d99a0df636d658fae90e1e92f60d65374e5b5</sum>
        </package>
        <package name="php-bcmath" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-bcmath-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">17333a634e9b9d5aa988b4f8f2e47792fecf6e816e6f4f5c5c011531dd70d8a6</sum>
        </package>
        <package name="php-pgsql" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-pgsql-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">2259221b03f3faaf7610bee359c75ebc444934ce92d8e1d3a19adf07788cded7</sum>
        </package>
        <package name="php-dba" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-dba-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">272c0bc6a984ef1acca9bb5d08f21a2015418546670e3f937ecaf3b696530a70</sum>
        </package>
        <package name="php-pecl-apcu" version="5.1.18" release="1.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.18-1.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-pecl-apcu-5.1.18-1.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">28cdbec1cbb142c4f90886ef9e321757a16102af0d64e1554101885e86b3bde6</sum>
        </package>
        <package name="php-mbstring" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-mbstring-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">2b134d3df401ae0b05bbcb85e4ebd4d1ff6618cd0b5d6d0d1fd476e4f919a833</sum>
        </package>
        <package name="php-ldap" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-ldap-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">2b8b8fdee228bef5b994726c4237045b79fafa101dd3b47c5585fdea2f7a2b7d</sum>
        </package>
        <package name="php-odbc" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-odbc-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">318dc3c3892874a72a21a8fe1e5d474f7ca3217c4fac41bc8c9e3e5c050739bf</sum>
        </package>
        <package name="php-devel" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-devel-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">3f0b34cd593fa736c0448006b2343dd5a10c50d1dfb39109d672c49e2167a5ee</sum>
        </package>
        <package name="php-gd" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-gd-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">42d45eea0f9a1552c5eaed1b0e91a932f45836a3ce0e8a9d3932c2f545d958ca</sum>
        </package>
        <package name="php-pear" version="1.10.13" release="1.module_el8.10.0+3935+28808425" epoch="1" arch="noarch" src="php-pear-1.10.13-1.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-pear-1.10.13-1.module_el8.10.0+3935+28808425.noarch.rpm</filename>
          <sum type="sha256">45f620cfb1bf36fd848dfcfdd35a9fdf7051aa38bf1cf8f748e7da7342e08af1</sum>
        </package>
        <package name="php-cli" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-cli-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">482a9a5ba712d48834eddd211028d7ac8c869d7923051f1addf261a1daac3e3b</sum>
        </package>
        <package name="libzip-tools" version="1.6.1" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>libzip-tools-1.6.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">4dcd7aacc8eb606c28a6d4707bf2d928045c38a99d7f40e5818bdfd63931d7c0</sum>
        </package>
        <package name="php-xml" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-xml-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">554a813715b66f8d591734fab8cf49dc33b6450353e65847417751b9ea7475ac</sum>
        </package>
        <package name="php-process" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-process-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">561abf2ea00bffca7ef289e2fe01cc650f7fe15f4642ddb2285e9d6d238f095c</sum>
        </package>
        <package name="php-pecl-rrd" version="2.0.1" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-pecl-rrd-2.0.1-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pecl-rrd-2.0.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">5e91b3f33f42fdf8f7e58dc4a81af0f2cf8a51cb967a3803f55a275bb7a2b1f1</sum>
        </package>
        <package name="php-snmp" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-snmp-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">6d16e6b9122aa244dae993be602849279d4e9948ae0333401aa24cd5a4988c1a</sum>
        </package>
        <package name="php-pecl-zip" version="1.18.2" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-pecl-zip-1.18.2-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pecl-zip-1.18.2-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">801fd66e96d056487f697bb442ce1eba14196571735ca21d7c3e4d5a722c4006</sum>
        </package>
        <package name="php-dbg" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-dbg-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">806553e0a667db4109f85d311e32cae9417a9a9e4644703fcd18a0cb66ffb058</sum>
        </package>
        <package name="php-intl" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-intl-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">81c66c8dbb117d0885114ac9ea0546ecbdb2ed535ef6fdcadab77ce351abc744</sum>
        </package>
        <package name="php-pecl-xdebug" version="2.9.5" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="php-pecl-xdebug-2.9.5-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>php-pecl-xdebug-2.9.5-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">864cae889833ed12fd18cf7183adf90631fed1cf2cfe6eb1cbc4e31f2ae6ebee</sum>
        </package>
        <package name="libzip" version="1.6.1" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">9a9e43a839757a5b4aea25cc7ffbca0524546f9b9177562674854f7d3c042ed1</sum>
        </package>
        <package name="libzip-devel" version="1.6.1" release="1.module_el8.6.0+3239+bedf0508" epoch="0" arch="s390x" src="libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.src.rpm">
          <filename>libzip-devel-1.6.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm</filename>
          <sum type="sha256">a3859fbd79933d7d04d80ad2041fa602d3f20b3cefd633660c5dee5365df1f35</sum>
        </package>
        <package name="php-gmp" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-gmp-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">afae246fbf76bd4ceda3891fc0eecfd2354c920fdf3142ca7f47611e316287cc</sum>
        </package>
        <package name="php-opcache" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-opcache-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">b92526a0ef152cd492a4d6c3059c17fe3aa3aa5dcf7f93702938bd16d2cef6da</sum>
        </package>
        <package name="php-ffi" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-ffi-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">bde2b9ccd8bfa1cb09c758b0b5f76034a077654b1e3978827a7a64e1940aabb2</sum>
        </package>
        <package name="php-pecl-apcu-devel" version="5.1.18" release="1.module_el8.10.0+3935+28808425" epoch="0" arch="s390x" src="php-pecl-apcu-5.1.18-1.module_el8.10.0+3935+28808425.src.rpm">
          <filename>php-pecl-apcu-devel-5.1.18-1.module_el8.10.0+3935+28808425.s390x.rpm</filename>
          <sum type="sha256">c100fd4a0db09a4ab7955eceb70da5c39dc77c633908c171f7ee629b45ea9b9a</sum>
        </package>
        <package name="php-xmlrpc" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-xmlrpc-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">ca782d570fb74439cf3c514b9188322f0e13c3903d3e730692ef554add4ca907</sum>
        </package>
        <package name="php-pdo" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-pdo-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">d6aa4b2184d50242d63bc907e580be01674d0674ccb68b38892b81cdaa32c241</sum>
        </package>
        <package name="php-common" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-common-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">d8c1b67c1a8a7b4d6dd382c69133572ba8aaf2d84ef0e91f41621333233e296d</sum>
        </package>
        <package name="php-embedded" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-embedded-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">f091c010b7fa311e89493a810774eb5a60ff2530d88ba55bb83d37a5273d5638</sum>
        </package>
        <package name="php-soap" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-soap-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">f85c15d3fe24670270e8a7cbf62bc92140eb432ae2d0c5dde10274d304bf8f8c</sum>
        </package>
        <package name="php-fpm" version="7.4.33" release="4.module_el8.10.0+4209+2ed16ff0" epoch="0" arch="s390x" src="php-7.4.33-4.module_el8.10.0+4209+2ed16ff0.src.rpm">
          <filename>php-fpm-7.4.33-4.module_el8.10.0+4209+2ed16ff0.s390x.rpm</filename>
          <sum type="sha256">fc267eb8f1479df505ff669c1a9d99494913d5f0cfd7b364f110b91e3593e61c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3515</id>
    <title>Important: thunderbird security update</title>
    <issued date="2026-03-02 00:00:00"/>
    <updated date="2026-03-04 11:54:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447)
  * firefox: Invalid pointer in the JavaScript Engine component (CVE-2026-2785)
  * firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2793)
  * firefox: Undefined behavior in the DOM: Core &amp; HTML component (CVE-2026-2771)
  * firefox: Integer overflow in the Audio/Video component (CVE-2026-2774)
  * firefox: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software (CVE-2026-2776)
  * firefox: Integer overflow in the Libraries component in NSS (CVE-2026-2781)
  * firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-2766)
  * firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-2769)
  * firefox: Use-after-free in the DOM: Window and Location component (CVE-2026-2787)
  * firefox: Sandbox escape in the Storage: IndexedDB component (CVE-2026-2768)
  * firefox: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-2783)
  * firefox: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-2788)
  * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-2784)
  * firefox: Incorrect boundary conditions in the Graphics: ImageLib component (CVE-2026-2759)
  * firefox: Integer overflow in the JavaScript: Standard Library component (CVE-2026-2762)
  * firefox: Sandbox escape in the Graphics: WebRender component (CVE-2026-2761)
  * firefox: Privilege escalation in the Messaging System component (CVE-2026-2777)
  * firefox: Same-origin policy bypass in the Networking: JAR component (CVE-2026-2790)
  * firefox: Mitigation bypass in the DOM: HTML Parser component (CVE-2026-2775)
  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2763)
  * firefox: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2792)
  * firefox: Incorrect boundary conditions in the Web Audio component (CVE-2026-2773)
  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2786)
  * firefox: Use-after-free in the Graphics: ImageLib component (CVE-2026-2789)
  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component (CVE-2026-2757)
  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-2760)
  * firefox: Use-after-free in the Audio/Video: Playback component (CVE-2026-2772)
  * firefox: Incorrect boundary conditions in the Networking: JAR component (CVE-2026-2779)
  * firefox: Use-after-free in the JavaScript: WebAssembly component (CVE-2026-2767)
  * firefox: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component (CVE-2026-2764)
  * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2782)
  * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-2765)
  * firefox: Privilege escalation in the Netmonitor component (CVE-2026-2780)
  * firefox: Sandbox escape due to incorrect boundary conditions in the DOM: Core &amp; HTML component (CVE-2026-2778)
  * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-2758)
  * firefox: Mitigation bypass in the Networking: Cache component (CVE-2026-2791)
  * firefox: Use-after-free in the DOM: Bindings (WebIDL) component (CVE-2026-2770)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3515" id="RHSA-2026:3515" type="rhsa" title="RHSA-2026:3515"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2447" id="CVE-2026-2447" type="cve" title="CVE-2026-2447"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2757" id="CVE-2026-2757" type="cve" title="CVE-2026-2757"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2758" id="CVE-2026-2758" type="cve" title="CVE-2026-2758"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2759" id="CVE-2026-2759" type="cve" title="CVE-2026-2759"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2760" id="CVE-2026-2760" type="cve" title="CVE-2026-2760"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2761" id="CVE-2026-2761" type="cve" title="CVE-2026-2761"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2762" id="CVE-2026-2762" type="cve" title="CVE-2026-2762"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2763" id="CVE-2026-2763" type="cve" title="CVE-2026-2763"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2764" id="CVE-2026-2764" type="cve" title="CVE-2026-2764"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2765" id="CVE-2026-2765" type="cve" title="CVE-2026-2765"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2766" id="CVE-2026-2766" type="cve" title="CVE-2026-2766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2767" id="CVE-2026-2767" type="cve" title="CVE-2026-2767"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2768" id="CVE-2026-2768" type="cve" title="CVE-2026-2768"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2769" id="CVE-2026-2769" type="cve" title="CVE-2026-2769"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2770" id="CVE-2026-2770" type="cve" title="CVE-2026-2770"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2771" id="CVE-2026-2771" type="cve" title="CVE-2026-2771"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2772" id="CVE-2026-2772" type="cve" title="CVE-2026-2772"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2773" id="CVE-2026-2773" type="cve" title="CVE-2026-2773"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2774" id="CVE-2026-2774" type="cve" title="CVE-2026-2774"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2775" id="CVE-2026-2775" type="cve" title="CVE-2026-2775"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2776" id="CVE-2026-2776" type="cve" title="CVE-2026-2776"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2777" id="CVE-2026-2777" type="cve" title="CVE-2026-2777"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2778" id="CVE-2026-2778" type="cve" title="CVE-2026-2778"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2779" id="CVE-2026-2779" type="cve" title="CVE-2026-2779"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2780" id="CVE-2026-2780" type="cve" title="CVE-2026-2780"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2781" id="CVE-2026-2781" type="cve" title="CVE-2026-2781"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2782" id="CVE-2026-2782" type="cve" title="CVE-2026-2782"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2783" id="CVE-2026-2783" type="cve" title="CVE-2026-2783"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2784" id="CVE-2026-2784" type="cve" title="CVE-2026-2784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2785" id="CVE-2026-2785" type="cve" title="CVE-2026-2785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2786" id="CVE-2026-2786" type="cve" title="CVE-2026-2786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2787" id="CVE-2026-2787" type="cve" title="CVE-2026-2787"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2788" id="CVE-2026-2788" type="cve" title="CVE-2026-2788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2789" id="CVE-2026-2789" type="cve" title="CVE-2026-2789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2790" id="CVE-2026-2790" type="cve" title="CVE-2026-2790"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2791" id="CVE-2026-2791" type="cve" title="CVE-2026-2791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2792" id="CVE-2026-2792" type="cve" title="CVE-2026-2792"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2793" id="CVE-2026-2793" type="cve" title="CVE-2026-2793"/>
      <reference href="https://bugzilla.redhat.com/2440219" id="2440219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442284" id="2442284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442287" id="2442287" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442288" id="2442288" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442290" id="2442290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442291" id="2442291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442292" id="2442292" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442294" id="2442294" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442295" id="2442295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442297" id="2442297" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442298" id="2442298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442300" id="2442300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442302" id="2442302" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442304" id="2442304" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442307" id="2442307" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442308" id="2442308" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442309" id="2442309" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442312" id="2442312" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442313" id="2442313" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442314" id="2442314" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442316" id="2442316" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442318" id="2442318" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442319" id="2442319" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442320" id="2442320" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442322" id="2442322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442324" id="2442324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442325" id="2442325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442326" id="2442326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442327" id="2442327" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442328" id="2442328" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442329" id="2442329" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442331" id="2442331" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442333" id="2442333" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442334" id="2442334" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442335" id="2442335" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442337" id="2442337" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442342" id="2442342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442343" id="2442343" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-3515.html" id="ALSA-2026:3515" type="self" title="ALSA-2026:3515"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="140.8.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-140.8.0-1.el8_10.alma.1.src.rpm">
          <filename>thunderbird-140.8.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">8faa407efc8fb4dd7471633bd967725fbd26b9e3264c5858a9680cde85f2c555</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:35830</id>
    <title>Important: grafana security update</title>
    <issued date="2026-07-06 00:00:00"/>
    <updated date="2026-07-06 09:40:29"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.   

Security Fix(es):  

  * golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:35830" id="RHSA-2026:35830" type="rhsa" title="RHSA-2026:35830"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-39821" id="CVE-2026-39821" type="cve" title="CVE-2026-39821"/>
      <reference href="https://bugzilla.redhat.com/2480756" id="2480756" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-35830.html" id="ALSA-2026:35830" type="self" title="ALSA-2026:35830"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="grafana-selinux" version="9.2.10" release="31.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-31.el8_10.src.rpm">
          <filename>grafana-selinux-9.2.10-31.el8_10.s390x.rpm</filename>
          <sum type="sha256">247b27e86e09551a07573f74969921900e3dca6e719ce3fbe9fad4cc4983e427</sum>
        </package>
        <package name="grafana" version="9.2.10" release="31.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-31.el8_10.src.rpm">
          <filename>grafana-9.2.10-31.el8_10.s390x.rpm</filename>
          <sum type="sha256">5ebe7172cdd54942568c3061634cd7f48d248802fcb55ffe6a62916e10effec9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:35831</id>
    <title>Important: grafana-pcp security update</title>
    <issued date="2026-07-06 00:00:00"/>
    <updated date="2026-07-06 09:40:02"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana-pcp security update</summary>
    <description>The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.  

Security Fix(es):  

  * golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:35831" id="RHSA-2026:35831" type="rhsa" title="RHSA-2026:35831"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-39821" id="CVE-2026-39821" type="cve" title="CVE-2026-39821"/>
      <reference href="https://bugzilla.redhat.com/2480756" id="2480756" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-35831.html" id="ALSA-2026:35831" type="self" title="ALSA-2026:35831"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="grafana-pcp" version="5.1.1" release="16.el8_10" epoch="0" arch="s390x" src="grafana-pcp-5.1.1-16.el8_10.src.rpm">
          <filename>grafana-pcp-5.1.1-16.el8_10.s390x.rpm</filename>
          <sum type="sha256">7859bc16d98a0120bf62315c30342b6788ce0a3db23dff333960c58eaa9fda78</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:35833</id>
    <title>Important: container-tools:rhel8 security update</title>
    <issued date="2026-07-06 00:00:00"/>
    <updated date="2026-07-07 09:03:05"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>container-tools:rhel8 security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.  

Security Fix(es):  

  * github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)
  * golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)
  * golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)
  * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)
  * golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:35833" id="RHSA-2026:35833" type="rhsa" title="RHSA-2026:35833"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34986" id="CVE-2026-34986" type="cve" title="CVE-2026-34986"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-39829" id="CVE-2026-39829" type="cve" title="CVE-2026-39829"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-39830" id="CVE-2026-39830" type="cve" title="CVE-2026-39830"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-39832" id="CVE-2026-39832" type="cve" title="CVE-2026-39832"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42508" id="CVE-2026-42508" type="cve" title="CVE-2026-42508"/>
      <reference href="https://bugzilla.redhat.com/2455470" id="2455470" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2480681" id="2480681" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2480684" id="2480684" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2480685" id="2480685" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2480688" id="2480688" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-35833.html" id="ALSA-2026:35833" type="self" title="ALSA-2026:35833"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="container-tools" stream="rhel8" version="8100020260120091026" context="20125149" arch="s390x"/>
        <package name="libslirp-devel" version="4.4.0" release="2.module_el8.10.0+4102+6c76e544" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>libslirp-devel-4.4.0-2.module_el8.10.0+4102+6c76e544.s390x.rpm</filename>
          <sum type="sha256">04d89a36990aa212a94bb2747825e0da8c83a7b25e78a61558e4d5b43429e4f4</sum>
        </package>
        <package name="python3-podman" version="4.9.0" release="3.module_el8.10.0+4016+efd18bf8" epoch="0" arch="noarch" src="python-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>python3-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.noarch.rpm</filename>
          <sum type="sha256">087549428650af46817206c5d5ddd54bace235c2932b3e2004ac93e3b466cb6d</sum>
        </package>
        <package name="skopeo-tests" version="1.14.6" release="2.module_el8.10.0+4211+49ea0979" epoch="2" arch="s390x" src="skopeo-1.14.6-2.module_el8.10.0+4211+49ea0979.src.rpm">
          <filename>skopeo-tests-1.14.6-2.module_el8.10.0+4211+49ea0979.s390x.rpm</filename>
          <sum type="sha256">19938047e62ddce6132e3d550da8b9147e0a3e78bd828b3d968f1b9786cf4d47</sum>
        </package>
        <package name="netavark" version="1.10.3" release="1.module_el8.10.0+4120+03ad4b47" epoch="2" arch="s390x" src="netavark-1.10.3-1.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>netavark-1.10.3-1.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">1f5e2faafe780466e1224fe37b9a1e5dc04e53f831ba39b977b60d7df76f90bd</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="2.module_el8.10.0+4023+db236c53" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>libslirp-4.4.0-2.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">1fb16f13bc4c318fd2714e829a188f97facb4a31222911e078f5604ab7bcd2d9</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="32.module_el8.10.0+4213+0493256b" epoch="4" arch="noarch" src="podman-4.9.4-32.module_el8.10.0+4213+0493256b.src.rpm">
          <filename>podman-docker-4.9.4-32.module_el8.10.0+4213+0493256b.noarch.rpm</filename>
          <sum type="sha256">2ae9217eca87faea37f35379edaaf46ce476a88fb096c59f82dbed4c78532a0d</sum>
        </package>
        <package name="containernetworking-plugins" version="1.4.0" release="8.module_el8.10.0+4136+16425343" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-8.module_el8.10.0+4136+16425343.src.rpm">
          <filename>containernetworking-plugins-1.4.0-8.module_el8.10.0+4136+16425343.s390x.rpm</filename>
          <sum type="sha256">5b03d385ebddc1bae5ae08592be2ce5f4c8d44e3feba600e5735cf91f8ae3c7f</sum>
        </package>
        <package name="toolbox" version="0.0.99.5.1" release="1.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="toolbox-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>toolbox-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">6143186cb1c446d86cea17767eb5d7143bcfa3a6cda56b6972cea4289916158d</sum>
        </package>
        <package name="skopeo" version="1.14.6" release="2.module_el8.10.0+4211+49ea0979" epoch="2" arch="s390x" src="skopeo-1.14.6-2.module_el8.10.0+4211+49ea0979.src.rpm">
          <filename>skopeo-1.14.6-2.module_el8.10.0+4211+49ea0979.s390x.rpm</filename>
          <sum type="sha256">71fd4ee1947c746cfc6e43f5f9f0c90bce223b34427701d31caec6d368dc76e9</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.10" release="1.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">73a992b19df0eda4ae7ba076ebfab5d8d638889051c89b761735617047e0d181</sum>
        </package>
        <package name="udica" version="0.2.6" release="21.module_el8.10.0+4068+0e21408f" epoch="0" arch="noarch" src="udica-0.2.6-21.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>udica-0.2.6-21.module_el8.10.0+4068+0e21408f.noarch.rpm</filename>
          <sum type="sha256">79a48c91cfda7b53eceaf7fc427f6b428b66680f0441fed06fc3bb55a0327feb</sum>
        </package>
        <package name="cockpit-podman" version="84.1" release="1.module_el8.10.0+4102+6c76e544" epoch="0" arch="noarch" src="cockpit-podman-84.1-1.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>cockpit-podman-84.1-1.module_el8.10.0+4102+6c76e544.noarch.rpm</filename>
          <sum type="sha256">7ebfd9c6721f16e93505c790faf678779b529dd5d380e17887b0ba1629de4871</sum>
        </package>
        <package name="podman-catatonit" version="4.9.4" release="32.module_el8.10.0+4213+0493256b" epoch="4" arch="s390x" src="podman-4.9.4-32.module_el8.10.0+4213+0493256b.src.rpm">
          <filename>podman-catatonit-4.9.4-32.module_el8.10.0+4213+0493256b.s390x.rpm</filename>
          <sum type="sha256">80d409134bc388203b80a3029079573f746e3425db2730a1261efc7da9e053d8</sum>
        </package>
        <package name="fuse-overlayfs" version="1.13" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="s390x" src="fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">8118067655696462cee9dfc553f57e4501b089590d837bc88091716914c8d3f5</sum>
        </package>
        <package name="crit" version="3.18" release="5.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>crit-3.18-5.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">8c081ab36feca1313187e33796d54822ad0f6d4a3bb42fe65fd20163f784085a</sum>
        </package>
        <package name="criu-devel" version="3.18" release="5.module_el8.10.0+4068+0e21408f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>criu-devel-3.18-5.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">8d858b9b5053b95ab7cb5eba9ab5bbd3cf5a1d07b77394b4d0f0d9d6c0769768</sum>
        </package>
        <package name="containers-common" version="1" release="82.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="s390x" src="containers-common-1-82.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>containers-common-1-82.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">98eb0c5785e1d53743858e76ac35aab0b199a918b88c02e20aa6f64cc6f89618</sum>
        </package>
        <package name="aardvark-dns" version="1.10.1" release="2.module_el8.10.0+4047+545787c4" epoch="2" arch="s390x" src="aardvark-dns-1.10.1-2.module_el8.10.0+4047+545787c4.src.rpm">
          <filename>aardvark-dns-1.10.1-2.module_el8.10.0+4047+545787c4.s390x.rpm</filename>
          <sum type="sha256">9e7e5cc9877a685769ee43c72dc867d179fe027d41775a01f1e73cfe366872ef</sum>
        </package>
        <package name="buildah-tests" version="1.33.14" release="4.module_el8.10.0+4213+0493256b" epoch="2" arch="s390x" src="buildah-1.33.14-4.module_el8.10.0+4213+0493256b.src.rpm">
          <filename>buildah-tests-1.33.14-4.module_el8.10.0+4213+0493256b.s390x.rpm</filename>
          <sum type="sha256">a85e60f75c55e50996e9ac0ae978f5f89ea12862042154b7ff11d0ab5d1eba07</sum>
        </package>
        <package name="container-selinux" version="2.229.0" release="3.module_el8.10.0+4213+0493256b" epoch="2" arch="noarch" src="container-selinux-2.229.0-3.module_el8.10.0+4213+0493256b.src.rpm">
          <filename>container-selinux-2.229.0-3.module_el8.10.0+4213+0493256b.noarch.rpm</filename>
          <sum type="sha256">abac2d39c2a5230679fceaee40500c93c3318bc39553ee68bfc09e4796b10791</sum>
        </package>
        <package name="runc" version="1.2.9" release="4.module_el8.10.0+4136+16425343" epoch="4" arch="s390x" src="runc-1.2.9-4.module_el8.10.0+4136+16425343.src.rpm">
          <filename>runc-1.2.9-4.module_el8.10.0+4136+16425343.s390x.rpm</filename>
          <sum type="sha256">b114cd179c7ed980d7c76e9ab68a55608d78cad0bb1cdb8a7b7106124e9f6ac2</sum>
        </package>
        <package name="crun" version="1.14.3" release="2.module_el8.10.0+4102+6c76e544" epoch="0" arch="s390x" src="crun-1.14.3-2.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>crun-1.14.3-2.module_el8.10.0+4102+6c76e544.s390x.rpm</filename>
          <sum type="sha256">b21ff72aa6dc2112775c618b7c6df02c4b2545cc7ee43ec04a1c6e1c84682757</sum>
        </package>
        <package name="criu" version="3.18" release="5.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>criu-3.18-5.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">bdaddee931f3746ac7472d9ccee504acd0be805433b3d160b1e7caf8bf361cb8</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.5.1" release="1.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="toolbox-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>toolbox-tests-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">bdc59eb38e3f90cd26d7f3417f6746988c30029b69aec49dfad5a57f785b6bf1</sum>
        </package>
        <package name="podman-plugins" version="4.9.4" release="32.module_el8.10.0+4213+0493256b" epoch="4" arch="s390x" src="podman-4.9.4-32.module_el8.10.0+4213+0493256b.src.rpm">
          <filename>podman-plugins-4.9.4-32.module_el8.10.0+4213+0493256b.s390x.rpm</filename>
          <sum type="sha256">be133b5e5875b8838dab2077dc28b436e8033b3211b3fec253e4daa990be0709</sum>
        </package>
        <package name="python3-criu" version="3.18" release="5.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>python3-criu-3.18-5.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">c24d9238067c95664620e800f7d24812b7788384f71812868db7ae5d390bb2dd</sum>
        </package>
        <package name="buildah" version="1.33.14" release="4.module_el8.10.0+4213+0493256b" epoch="2" arch="s390x" src="buildah-1.33.14-4.module_el8.10.0+4213+0493256b.src.rpm">
          <filename>buildah-1.33.14-4.module_el8.10.0+4213+0493256b.s390x.rpm</filename>
          <sum type="sha256">c517daa82446fcae86f54623108c75f56242fd9ff209a73d7906e2d1f70b3837</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="32.module_el8.10.0+4213+0493256b" epoch="4" arch="s390x" src="podman-4.9.4-32.module_el8.10.0+4213+0493256b.src.rpm">
          <filename>podman-tests-4.9.4-32.module_el8.10.0+4213+0493256b.s390x.rpm</filename>
          <sum type="sha256">c51b347b75f87fefc9ca4538db9f06b490041f6b89860158444d41143abf1762</sum>
        </package>
        <package name="conmon" version="2.1.10" release="1.module_el8.10.0+4068+0e21408f" epoch="3" arch="s390x" src="conmon-2.1.10-1.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>conmon-2.1.10-1.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">c845407c7f2bb04735705b66ad0ca47b44437e8d6988148eeee4986701a2ab8d</sum>
        </package>
        <package name="podman" version="4.9.4" release="32.module_el8.10.0+4213+0493256b" epoch="4" arch="s390x" src="podman-4.9.4-32.module_el8.10.0+4213+0493256b.src.rpm">
          <filename>podman-4.9.4-32.module_el8.10.0+4213+0493256b.s390x.rpm</filename>
          <sum type="sha256">cbffb3f11ec19ea775ff0d3fb895cd0002bc2cbbf5efdeefc2d3749a875cbacc</sum>
        </package>
        <package name="podman-gvproxy" version="4.9.4" release="32.module_el8.10.0+4213+0493256b" epoch="4" arch="s390x" src="podman-4.9.4-32.module_el8.10.0+4213+0493256b.src.rpm">
          <filename>podman-gvproxy-4.9.4-32.module_el8.10.0+4213+0493256b.s390x.rpm</filename>
          <sum type="sha256">ceb615a058ef56ec65c211c85b33c03335954459d64e0be7dc1db87bda8e176a</sum>
        </package>
        <package name="criu-libs" version="3.18" release="5.module_el8.10.0+4082+f7f0c95e" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4082+f7f0c95e.src.rpm">
          <filename>criu-libs-3.18-5.module_el8.10.0+4082+f7f0c95e.s390x.rpm</filename>
          <sum type="sha256">ef19ef2ed0463ac1a663bbbfaa1ebc2c430ca0f751305b9d5d0b4e41046bb967</sum>
        </package>
        <package name="slirp4netns" version="1.2.3" release="1.module_el8.10.0+4082+f7f0c95e" epoch="0" arch="s390x" src="slirp4netns-1.2.3-1.module_el8.10.0+4082+f7f0c95e.src.rpm">
          <filename>slirp4netns-1.2.3-1.module_el8.10.0+4082+f7f0c95e.s390x.rpm</filename>
          <sum type="sha256">fd08808c8bda8cc9c5ecad38af925ba82a8d2124ba69ca9153b315c7e4879fd2</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="32.module_el8.10.0+4213+0493256b" epoch="4" arch="s390x" src="podman-4.9.4-32.module_el8.10.0+4213+0493256b.src.rpm">
          <filename>podman-remote-4.9.4-32.module_el8.10.0+4213+0493256b.s390x.rpm</filename>
          <sum type="sha256">ff01d580c282eecdfb0050ac16abbff0216ca08b701bef85915fbabcbe067050</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:35839</id>
    <title>Important: libreoffice security update</title>
    <issued date="2026-07-06 00:00:00"/>
    <updated date="2026-07-07 09:14:33"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libreoffice security update</summary>
    <description>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.  

Security Fix(es):  

  * libreoffice: LibreOffice Calc: Arbitrary code execution via heap buffer overflow in formula compilation (CVE-2026-8357)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:35839" id="RHSA-2026:35839" type="rhsa" title="RHSA-2026:35839"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8357" id="CVE-2026-8357" type="cve" title="CVE-2026-8357"/>
      <reference href="https://bugzilla.redhat.com/2488964" id="2488964" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-35839.html" id="ALSA-2026:35839" type="self" title="ALSA-2026:35839"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="autocorr-vi" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-vi-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">00fc86e2353116286643ec209198ce4ea250de4d3438d1e74b66db39f5c9b89b</sum>
        </package>
        <package name="libreoffice-pyuno" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>libreoffice-pyuno-6.4.7.2-21.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">0e1759951ac308a7eaa82277b421cf7fee6ccbc4b44822696d871ed73e367af2</sum>
        </package>
        <package name="libreoffice-data" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>libreoffice-data-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">166ec6af9e688881b5a57e071e0bea8013d455212a12b824cbfa42bd5bc84261</sum>
        </package>
        <package name="autocorr-sr" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-sr-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">17c5b916d7a62cbb22b5be14a0c7f84062890d998d5f42c3bbb5d547770c4a37</sum>
        </package>
        <package name="autocorr-cs" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-cs-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">1876122e8d6aaebd074e236350604a3719b7f8b0516123ecef48ab09810d5646</sum>
        </package>
        <package name="libreoffice-ure" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>libreoffice-ure-6.4.7.2-21.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">1c9894959099b38b34053cf109652556c3aaa57df54d005a974f1947f3d326d4</sum>
        </package>
        <package name="libreoffice-help-en" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>libreoffice-help-en-6.4.7.2-21.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">1e77ac751933ccd0abc5739ce145ce333f9aa369fa2c8f7676b8e1a597615fed</sum>
        </package>
        <package name="autocorr-af" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-af-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">1f2ac347cf2ea707b0fe9d999a8cf87bceaed57fd26e3e444200c35e69952c83</sum>
        </package>
        <package name="autocorr-ru" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-ru-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">20bc4e6e3e858b63430e0b7834cceccd6088df65913fd79efb22179a6cfac619</sum>
        </package>
        <package name="autocorr-ko" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-ko-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">2c882694dc6a7908a7e093f7956d3b440b74b19b3ed6e18174e93035cde2565e</sum>
        </package>
        <package name="autocorr-fr" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-fr-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">31963285cf63bfcc6a41ee0c66c7fcb0157f02dc503118168daa2ada12d09573</sum>
        </package>
        <package name="autocorr-it" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-it-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">330197f9ae4ed20b4db41e7936e0b16c807c5dd4b9ecac283d1d602097b4b3ef</sum>
        </package>
        <package name="autocorr-sv" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-sv-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">338510380394e1f01d490951764df65ea2ce76fd6e5fd878d1a3e455e1d2c230</sum>
        </package>
        <package name="autocorr-zh" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-zh-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">3446a77c017262f4d5009346dcb7a590bd11cecb1a37ab21b5b5d48e98d5a722</sum>
        </package>
        <package name="autocorr-pt" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-pt-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">47b726dfd23e72ca0dacff3b685de509fb82f8a8f54a1c6dae7a371cb9242314</sum>
        </package>
        <package name="libreoffice-impress" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>libreoffice-impress-6.4.7.2-21.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">584b81f99a6854857c6845b366581d002a3781bd1b07a4754dc31ac88a8508cb</sum>
        </package>
        <package name="autocorr-sk" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-sk-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">5e972e7cad6589063478ef3f901f3bced2063da7ab042ba2865ddac632583a62</sum>
        </package>
        <package name="autocorr-bg" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-bg-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">69d81267d2cd8217dc08a5e121872a98e281fb7035f6930e382515eeaeecf884</sum>
        </package>
        <package name="autocorr-tr" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-tr-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">6f7154b71b94ad1d36687977ee839228cf199bacc3359e20eae3e9b632a5341c</sum>
        </package>
        <package name="libreoffice-core" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>libreoffice-core-6.4.7.2-21.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">71d07c9b4b07a9e83d1f3515fc85858884dee1d1381133db56d1f2cbe4003600</sum>
        </package>
        <package name="autocorr-sl" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-sl-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">74b9f7e06f01cdcc695448c1710b2868e18802b9bc493783ec521adb637a7b08</sum>
        </package>
        <package name="autocorr-is" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-is-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">79027a057d8a8b1af76f7d4adf87dd644fec5d22a4ce62522dd766911150e01b</sum>
        </package>
        <package name="autocorr-de" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-de-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">7bc07c10daf7c099d2ae4d32f7931420789781872c97e3dbd62988bb4f786498</sum>
        </package>
        <package name="autocorr-lt" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-lt-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">8eac2f68eeebba8636711cfe25d18d3abc072cd506d3500f86c17e0da98e5a7e</sum>
        </package>
        <package name="autocorr-ja" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-ja-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">9519207af3433e191d908837de1273f0aeb5f51dc97c10c2fc6fb45381a0ee7b</sum>
        </package>
        <package name="autocorr-hu" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-hu-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">99b7e2e26977c34ce4d32d7a7c77fc3c680cc9d5516df6a9fda2db72cef31c2b</sum>
        </package>
        <package name="autocorr-fa" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-fa-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">9c1ac7d503fe495afc01d5dde30dc2ffb545cbf3ac9f7ed7a2042cdee196a6c8</sum>
        </package>
        <package name="libreoffice-ogltrans" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>libreoffice-ogltrans-6.4.7.2-21.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">9ff6fb252a530b2fd2e9b7efe87bd231b4b2cf0cd2e1c3a27ab6dfde9908f6c0</sum>
        </package>
        <package name="libreoffice-writer" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>libreoffice-writer-6.4.7.2-21.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">a1b514e4c085397069a4eb08dce3d05f4cdb641ad0277d6d862417f60e12a0fc</sum>
        </package>
        <package name="autocorr-ga" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-ga-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">a7dae401ddd63323bb3b8ae3cdc98c1d9ef50b438e64b5f7b5142de1af40b06b</sum>
        </package>
        <package name="libreoffice-pdfimport" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>libreoffice-pdfimport-6.4.7.2-21.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">af2ffa086d38e7643e59357eebbafef3a980d8e4a10c45680ab52449f7c02e41</sum>
        </package>
        <package name="autocorr-en" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-en-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">b5c00dc4c3bef0730290d350034e7a57315603f6ea65e40259ee5b1abfcff555</sum>
        </package>
        <package name="autocorr-da" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-da-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">ceb94709b4f78db79f2da5c789e18fa5d54280ddc3bfb0cd72dfa439eae84ede</sum>
        </package>
        <package name="libreoffice-graphicfilter" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>libreoffice-graphicfilter-6.4.7.2-21.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">d5bdfd94dd1fc6ce0aa57c598bd9bb547d59ebe46787872fab42ed5de8994145</sum>
        </package>
        <package name="autocorr-ro" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-ro-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">dc3e7d52eba143d04a79667b9fc92af5b400c7b0ef2685a4f44a07a62f1b95bb</sum>
        </package>
        <package name="libreoffice-opensymbol-fonts" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>libreoffice-opensymbol-fonts-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">dc66725808f9d4a8a64997bf81a697309d9c0346041e9ecd99d9cdbcfff3b5cf</sum>
        </package>
        <package name="libreoffice-calc" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>libreoffice-calc-6.4.7.2-21.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">defa2434ba2de43b5b167862ec62757176be95c99fccebe222e56c94456fdc16</sum>
        </package>
        <package name="autocorr-hr" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-hr-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">df5bcb0d46416bdc89667e8c0ed819bfb67de66207801e4dc9cfd0637dc0faba</sum>
        </package>
        <package name="autocorr-es" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-es-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">e6d6b058040dc507b98a72963492729c6a06643e1e5a084a0851a8fc2a240904</sum>
        </package>
        <package name="libreoffice-langpack-en" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="s390x" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>libreoffice-langpack-en-6.4.7.2-21.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">e80fbf71b32a42c025410c0501bda57d44b7b134c12a76d2a7cab0742a6c8ab0</sum>
        </package>
        <package name="autocorr-nl" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-nl-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">ecea6fdc6bac53a9fe1b9404bbd93377c2c79e711646619eabe6fc86a4b9ceeb</sum>
        </package>
        <package name="libreoffice-ure-common" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>libreoffice-ure-common-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">f4af8fe05fb6e6dd9fa2aa2a3d7e4d95002a7606ba2570faa28639348dd7c858</sum>
        </package>
        <package name="autocorr-fi" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-fi-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">f60b9161f2d43587d4c75dd32e943050f3941076c79da8526de9198015f0643a</sum>
        </package>
        <package name="autocorr-ca" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-ca-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">f7056dbdb2b207987fb06f99e242823c57e22040ef6aeb100db2d7d34514b622</sum>
        </package>
        <package name="autocorr-pl" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-pl-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">f7afba3322d7a317f06bb6d93e4333575d415130fa6ddf7415a361df940f5aac</sum>
        </package>
        <package name="autocorr-mn" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-mn-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">f87422a2213ad8b28f0fee93b52958a9dcd869fed58e703c093f750916d28069</sum>
        </package>
        <package name="autocorr-lb" version="6.4.7.2" release="21.el8_10.alma.1" epoch="1" arch="noarch" src="libreoffice-6.4.7.2-21.el8_10.alma.1.src.rpm">
          <filename>autocorr-lb-6.4.7.2-21.el8_10.alma.1.noarch.rpm</filename>
          <sum type="sha256">fa94ce1abed98ab3c06824f3faab12896055cc5b6d161537a9e1d12c4ab1cd7f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36201</id>
    <title>Important: 389-ds:1.4 security update</title>
    <issued date="2026-07-07 00:00:00"/>
    <updated date="2026-07-13 09:48:46"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>389-ds:1.4 security update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.   

Security Fix(es):  

  * 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND (CVE-2026-11610)
  * 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow (CVE-2026-11774)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36201" id="RHSA-2026:36201" type="rhsa" title="RHSA-2026:36201"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-11610" id="CVE-2026-11610" type="cve" title="CVE-2026-11610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-11774" id="CVE-2026-11774" type="cve" title="CVE-2026-11774"/>
      <reference href="https://bugzilla.redhat.com/2484414" id="2484414" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2484916" id="2484916" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-36201.html" id="ALSA-2026:36201" type="self" title="ALSA-2026:36201"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="389-ds" stream="1.4" version="8100020260709021006" context="17499975" arch="s390x"/>
        <package name="python3-lib389" version="1.4.3.39" release="25.module_el8.10.0+4214+f26e0f43" epoch="0" arch="noarch" src="389-ds-base-1.4.3.39-25.module_el8.10.0+4214+f26e0f43.src.rpm">
          <filename>python3-lib389-1.4.3.39-25.module_el8.10.0+4214+f26e0f43.noarch.rpm</filename>
          <sum type="sha256">4b07004d71422c25c3b945afabc448be4c7308e06cb3da86086ee1ea9313fe7e</sum>
        </package>
        <package name="389-ds-base-snmp" version="1.4.3.39" release="25.module_el8.10.0+4214+f26e0f43" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-25.module_el8.10.0+4214+f26e0f43.src.rpm">
          <filename>389-ds-base-snmp-1.4.3.39-25.module_el8.10.0+4214+f26e0f43.s390x.rpm</filename>
          <sum type="sha256">7392a785bd9d699ab15a4d1de468f493db7fa7e06326ec6a64d24bfe143f9980</sum>
        </package>
        <package name="389-ds-base-devel" version="1.4.3.39" release="25.module_el8.10.0+4214+f26e0f43" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-25.module_el8.10.0+4214+f26e0f43.src.rpm">
          <filename>389-ds-base-devel-1.4.3.39-25.module_el8.10.0+4214+f26e0f43.s390x.rpm</filename>
          <sum type="sha256">772d3ad20cbe1208084e10e746e3e83851a9de2d016da7eb18cc2011fc175a6a</sum>
        </package>
        <package name="389-ds-base-legacy-tools" version="1.4.3.39" release="25.module_el8.10.0+4214+f26e0f43" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-25.module_el8.10.0+4214+f26e0f43.src.rpm">
          <filename>389-ds-base-legacy-tools-1.4.3.39-25.module_el8.10.0+4214+f26e0f43.s390x.rpm</filename>
          <sum type="sha256">95467346cb268905f4aa2dbf1db275462383d860331907e145a387728da3c38a</sum>
        </package>
        <package name="389-ds-base-libs" version="1.4.3.39" release="25.module_el8.10.0+4214+f26e0f43" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-25.module_el8.10.0+4214+f26e0f43.src.rpm">
          <filename>389-ds-base-libs-1.4.3.39-25.module_el8.10.0+4214+f26e0f43.s390x.rpm</filename>
          <sum type="sha256">a881e34633ed9fbf5a29c5ceb9bd7f911d9ca709de7a6722d4498822f694e772</sum>
        </package>
        <package name="389-ds-base" version="1.4.3.39" release="25.module_el8.10.0+4214+f26e0f43" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-25.module_el8.10.0+4214+f26e0f43.src.rpm">
          <filename>389-ds-base-1.4.3.39-25.module_el8.10.0+4214+f26e0f43.s390x.rpm</filename>
          <sum type="sha256">c4d431201a603bf5d37cd386b685948585c66fff4b80dbdf7fd7785bcca4b193</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36215</id>
    <title>Important: compat-openssl10 security update</title>
    <issued date="2026-07-07 00:00:00"/>
    <updated date="2026-07-08 11:46:58"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>compat-openssl10 security update</summary>
    <description>The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries and is provided for compatibility with previous releases and software that does not support compilation with OpenSSL-1.1.  

Security Fix(es):  

  * openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36215" id="RHSA-2026:36215" type="rhsa" title="RHSA-2026:36215"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45447" id="CVE-2026-45447" type="cve" title="CVE-2026-45447"/>
      <reference href="https://bugzilla.redhat.com/2481898" id="2481898" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-36215.html" id="ALSA-2026:36215" type="self" title="ALSA-2026:36215"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="compat-openssl10" version="1.0.2o" release="4.el8_10.3" epoch="1" arch="s390x" src="compat-openssl10-1.0.2o-4.el8_10.3.src.rpm">
          <filename>compat-openssl10-1.0.2o-4.el8_10.3.s390x.rpm</filename>
          <sum type="sha256">d4debbbd48708ad08642d123beeb40715c6dc25368cf382136771bd3f5b4030d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36721</id>
    <title>Moderate: edk2 security, bug fix, and enhancement update</title>
    <issued date="2026-07-08 00:00:00"/>
    <updated date="2026-07-09 11:02:26"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>edk2 security, bug fix, and enhancement update</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.   

Security Fix(es):  

  * openssl: Out-of-bounds read &amp; write in RFC 3211 KEK Unwrap (CVE-2025-9230)


Bug Fix(es) and Enhancement(s):  

  * [FJ8.10 Bug] How to Update Secure Boot Certificates with Microsoft 2023 in KVM Guests (JIRA:AlmaLinux-151949)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36721" id="RHSA-2026:36721" type="rhsa" title="RHSA-2026:36721"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9230" id="CVE-2025-9230" type="cve" title="CVE-2025-9230"/>
      <reference href="https://bugzilla.redhat.com/2396054" id="2396054" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-36721.html" id="ALSA-2026:36721" type="self" title="ALSA-2026:36721"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="edk2-ovmf" version="20220126gitbb1bba3d77" release="13.el8_10.10" epoch="0" arch="noarch" src="edk2-20220126gitbb1bba3d77-13.el8_10.10.src.rpm">
          <filename>edk2-ovmf-20220126gitbb1bba3d77-13.el8_10.10.noarch.rpm</filename>
          <sum type="sha256">cd0a7b6775d19d2e953278236de61d32723aa23d0881f93f856caaddf6d80bc5</sum>
        </package>
        <package name="edk2-aarch64" version="20220126gitbb1bba3d77" release="13.el8_10.10" epoch="0" arch="noarch" src="edk2-20220126gitbb1bba3d77-13.el8_10.10.src.rpm">
          <filename>edk2-aarch64-20220126gitbb1bba3d77-13.el8_10.10.noarch.rpm</filename>
          <sum type="sha256">efbe615a52cf81a60a0a0969bb4b98a27beef49f03e266a691897b0e4038b6f0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36728</id>
    <title>Low: libtasn1 security update</title>
    <issued date="2026-07-08 00:00:00"/>
    <updated date="2026-07-09 11:05:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libtasn1 security update</summary>
    <description>A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.  

Security Fix(es):  

  * libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string (CVE-2025-13151)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36728" id="RHSA-2026:36728" type="rhsa" title="RHSA-2026:36728"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13151" id="CVE-2025-13151" type="cve" title="CVE-2025-13151"/>
      <reference href="https://bugzilla.redhat.com/2427698" id="2427698" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-36728.html" id="ALSA-2026:36728" type="self" title="ALSA-2026:36728"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libtasn1-tools" version="4.13" release="6.el8_10" epoch="0" arch="s390x" src="libtasn1-4.13-6.el8_10.src.rpm">
          <filename>libtasn1-tools-4.13-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">9002bbeefc92a25fe8f898dd22e293071cade3197be5d8cb17983a1c0218be1f</sum>
        </package>
        <package name="libtasn1-devel" version="4.13" release="6.el8_10" epoch="0" arch="s390x" src="libtasn1-4.13-6.el8_10.src.rpm">
          <filename>libtasn1-devel-4.13-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">966585e951e37b5497069e9b7a2449ae7baaaa9e893ead19e29a6ff327f59548</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36733</id>
    <title>Moderate: cups security update</title>
    <issued date="2026-07-08 00:00:00"/>
    <updated date="2026-07-09 11:09:14"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>cups security update</summary>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.  

Security Fix(es):  

  * cups: OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network (CVE-2026-34980)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36733" id="RHSA-2026:36733" type="rhsa" title="RHSA-2026:36733"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34980" id="CVE-2026-34980" type="cve" title="CVE-2026-34980"/>
      <reference href="https://bugzilla.redhat.com/2454954" id="2454954" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-36733.html" id="ALSA-2026:36733" type="self" title="ALSA-2026:36733"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="cups-client" version="2.2.6" release="68.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-68.el8_10.src.rpm">
          <filename>cups-client-2.2.6-68.el8_10.s390x.rpm</filename>
          <sum type="sha256">09a369ac641b4873ffb4ef6075d7a0dd65c584eee047c41f46d64bef66bb32b9</sum>
        </package>
        <package name="cups-ipptool" version="2.2.6" release="68.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-68.el8_10.src.rpm">
          <filename>cups-ipptool-2.2.6-68.el8_10.s390x.rpm</filename>
          <sum type="sha256">21ed7217304b520627372abf368ea04ff138e44bd7062e8dfe7d0f57ab168d50</sum>
        </package>
        <package name="cups-filesystem" version="2.2.6" release="68.el8_10" epoch="1" arch="noarch" src="cups-2.2.6-68.el8_10.src.rpm">
          <filename>cups-filesystem-2.2.6-68.el8_10.noarch.rpm</filename>
          <sum type="sha256">359c5abe0918c94cd27d0e472a2c8fbea5dff3be01c2db2f836e0a94463ec65c</sum>
        </package>
        <package name="cups" version="2.2.6" release="68.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-68.el8_10.src.rpm">
          <filename>cups-2.2.6-68.el8_10.s390x.rpm</filename>
          <sum type="sha256">6301250488b50ee73855c1499c1662e57ba477c45bcc16698dc7308240c5360b</sum>
        </package>
        <package name="cups-devel" version="2.2.6" release="68.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-68.el8_10.src.rpm">
          <filename>cups-devel-2.2.6-68.el8_10.s390x.rpm</filename>
          <sum type="sha256">ba4c3e98ff7c96cd6626fe91589db610fd6eef95e0bbb28e3d554cefe656ad0e</sum>
        </package>
        <package name="cups-lpd" version="2.2.6" release="68.el8_10" epoch="1" arch="s390x" src="cups-2.2.6-68.el8_10.src.rpm">
          <filename>cups-lpd-2.2.6-68.el8_10.s390x.rpm</filename>
          <sum type="sha256">f800408e7820291eb11816efb7f5619985fde8c8561668016a0406fbf5a1a8a2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36734</id>
    <title>Low: libxml2 security update</title>
    <issued date="2026-07-08 00:00:00"/>
    <updated date="2026-07-09 11:10:25"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libxml2 security update</summary>
    <description>The libxml2 library is a development toolbox providing the implementation of various XML standards.  

Security Fix(es):  

  * libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling (CVE-2025-6170)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36734" id="RHSA-2026:36734" type="rhsa" title="RHSA-2026:36734"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6170" id="CVE-2025-6170" type="cve" title="CVE-2025-6170"/>
      <reference href="https://bugzilla.redhat.com/2372952" id="2372952" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-36734.html" id="ALSA-2026:36734" type="self" title="ALSA-2026:36734"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libxml2-devel" version="2.9.7" release="21.el8_10.6" epoch="0" arch="s390x" src="libxml2-2.9.7-21.el8_10.6.src.rpm">
          <filename>libxml2-devel-2.9.7-21.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">9be3b6a8b8af5f08970096b7c6d4c127e6b651fd60fdca8b201c773be32d303e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36774</id>
    <title>Important: gstreamer1-plugins-good security update</title>
    <issued date="2026-07-08 00:00:00"/>
    <updated date="2026-07-09 11:12:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-good security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.  

Security Fix(es):  

  * gstreamer1-plugins-good: GStreamer: Heap buffer overflow in WavPack decoder via integer overflow (CVE-2026-53705)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36774" id="RHSA-2026:36774" type="rhsa" title="RHSA-2026:36774"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53705" id="CVE-2026-53705" type="cve" title="CVE-2026-53705"/>
      <reference href="https://bugzilla.redhat.com/2487615" id="2487615" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-36774.html" id="ALSA-2026:36774" type="self" title="ALSA-2026:36774"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="gstreamer1-plugins-good-gtk" version="1.16.1" release="7.el8_10" epoch="0" arch="s390x" src="gstreamer1-plugins-good-1.16.1-7.el8_10.src.rpm">
          <filename>gstreamer1-plugins-good-gtk-1.16.1-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">29ea945b065fc32911d890935f2f64f52c233717be760dd88dbc5c73ba40dead</sum>
        </package>
        <package name="gstreamer1-plugins-good" version="1.16.1" release="7.el8_10" epoch="0" arch="s390x" src="gstreamer1-plugins-good-1.16.1-7.el8_10.src.rpm">
          <filename>gstreamer1-plugins-good-1.16.1-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">4cc6c034b49950e26d4947067527ee62a8ee2a75c86dfb2a00ed3c8e0625ca11</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:37130</id>
    <title>Important: gstreamer1-plugins-bad-free security update</title>
    <issued date="2026-07-09 00:00:00"/>
    <updated date="2026-07-09 11:15:09"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-bad-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.  

Security Fix(es):  

  * gstreamer1-plugins-bad-free: GStreamer: Heap buffer overflow via crafted VNC server rectangle in librfb (CVE-2026-52720)
  * gstreamer1-plugins-bad-free: GStreamer: Signed integer overflow in VMnc decoder cursor payload handling (CVE-2026-52722)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:37130" id="RHSA-2026:37130" type="rhsa" title="RHSA-2026:37130"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-52720" id="CVE-2026-52720" type="cve" title="CVE-2026-52720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-52722" id="CVE-2026-52722" type="cve" title="CVE-2026-52722"/>
      <reference href="https://bugzilla.redhat.com/2486731" id="2486731" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2486733" id="2486733" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-37130.html" id="ALSA-2026:37130" type="self" title="ALSA-2026:37130"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="gstreamer1-plugins-bad-free" version="1.16.1" release="8.el8_10" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.16.1-8.el8_10.src.rpm">
          <filename>gstreamer1-plugins-bad-free-1.16.1-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">d4feecb401776e35cbb1641c451ff9a29a2066f798b09967e6ad53c72246bffa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:37137</id>
    <title>Important: tomcat security, bug fix, and enhancement update</title>
    <issued date="2026-07-09 00:00:00"/>
    <updated date="2026-07-10 09:23:21"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tomcat security, bug fix, and enhancement update</summary>
    <description>Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.  

Security Fix(es):  

  * Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor (CVE-2026-29146)
  * Apache Tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass (CVE-2026-34486)


Bug Fix(es) and Enhancement(s):  

  * Remove tomcat clustering JAR from RPM builds (JIRA:AlmaLinux-183993)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:37137" id="RHSA-2026:37137" type="rhsa" title="RHSA-2026:37137"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-29146" id="CVE-2026-29146" type="cve" title="CVE-2026-29146"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34486" id="CVE-2026-34486" type="cve" title="CVE-2026-34486"/>
      <reference href="https://bugzilla.redhat.com/2457020" id="2457020" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457027" id="2457027" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-37137.html" id="ALSA-2026:37137" type="self" title="ALSA-2026:37137"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="tomcat-admin-webapps" version="9.0.87" release="2.el8_10" epoch="1" arch="noarch" src="tomcat-9.0.87-2.el8_10.src.rpm">
          <filename>tomcat-admin-webapps-9.0.87-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">0a847f523c4539f66f9b201382adcd6cd284b7db91446e8708c77dc5a325547a</sum>
        </package>
        <package name="tomcat-docs-webapp" version="9.0.87" release="2.el8_10" epoch="1" arch="noarch" src="tomcat-9.0.87-2.el8_10.src.rpm">
          <filename>tomcat-docs-webapp-9.0.87-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">1478ff6052ccb3fe8a13c71f0636798bb9748b0e36a15f5d3cf64fa89330d741</sum>
        </package>
        <package name="tomcat-webapps" version="9.0.87" release="2.el8_10" epoch="1" arch="noarch" src="tomcat-9.0.87-2.el8_10.src.rpm">
          <filename>tomcat-webapps-9.0.87-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">17d70a5db891573de90d06a646969af101ee2e353167d3bc9cb008d74ed79f5d</sum>
        </package>
        <package name="tomcat-jsp-2.3-api" version="9.0.87" release="2.el8_10" epoch="1" arch="noarch" src="tomcat-9.0.87-2.el8_10.src.rpm">
          <filename>tomcat-jsp-2.3-api-9.0.87-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">36dce555015ae827460c440a1b36f71aa3d0ec9ba985e202ee9fcafe92e491c0</sum>
        </package>
        <package name="tomcat-el-3.0-api" version="9.0.87" release="2.el8_10" epoch="1" arch="noarch" src="tomcat-9.0.87-2.el8_10.src.rpm">
          <filename>tomcat-el-3.0-api-9.0.87-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">7c826956a6a5668fd6d76cd0ab1502b6209cdba3a3d3dcfc0b8fcab8c82a5cb4</sum>
        </package>
        <package name="tomcat-servlet-4.0-api" version="9.0.87" release="2.el8_10" epoch="1" arch="noarch" src="tomcat-9.0.87-2.el8_10.src.rpm">
          <filename>tomcat-servlet-4.0-api-9.0.87-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">983b8219aa47d5c899135d7b95eba504002bbb1aaaf3f02e26b6a34af9afd110</sum>
        </package>
        <package name="tomcat" version="9.0.87" release="2.el8_10" epoch="1" arch="noarch" src="tomcat-9.0.87-2.el8_10.src.rpm">
          <filename>tomcat-9.0.87-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">9ef6499a181a73cc0c13b7d0614c2953f25230ae2a778a1402e269abdbfa76ef</sum>
        </package>
        <package name="tomcat-lib" version="9.0.87" release="2.el8_10" epoch="1" arch="noarch" src="tomcat-9.0.87-2.el8_10.src.rpm">
          <filename>tomcat-lib-9.0.87-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">d03a1e342d59e8737b226f5835a2aa9919987e4ba81b270a6290538efa72ec15</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:38485</id>
    <title>Important: gegl security update</title>
    <issued date="2026-07-13 00:00:00"/>
    <updated date="2026-07-13 08:55:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gegl security update</summary>
    <description>GEGL (Generic Graphics Library) is a graph-based image processing framework.  

Security Fix(es):  

  * gimp: GIMP: Arbitrary code execution via heap-based buffer overflow in HDR file parsing (CVE-2026-2050)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:38485" id="RHSA-2026:38485" type="rhsa" title="RHSA-2026:38485"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2050" id="CVE-2026-2050" type="cve" title="CVE-2026-2050"/>
      <reference href="https://bugzilla.redhat.com/2492593" id="2492593" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-38485.html" id="ALSA-2026:38485" type="self" title="ALSA-2026:38485"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="gegl" version="0.2.0" release="40.el8_10" epoch="0" arch="s390x" src="gegl-0.2.0-40.el8_10.src.rpm">
          <filename>gegl-0.2.0-40.el8_10.s390x.rpm</filename>
          <sum type="sha256">d07d2012bcc8cd6094a6bf26a71fbb854e7cb6e95eae3ac4d13b250a7c5265a7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:38487</id>
    <title>Important: xorg-x11-server security update</title>
    <issued date="2026-07-13 00:00:00"/>
    <updated date="2026-07-13 08:56:33"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:38487" id="RHSA-2026:38487" type="rhsa" title="RHSA-2026:38487"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-55999" id="CVE-2026-55999" type="cve" title="CVE-2026-55999"/>
      <reference href="https://bugzilla.redhat.com/2496165" id="2496165" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-38487.html" id="ALSA-2026:38487" type="self" title="ALSA-2026:38487"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="xorg-x11-server-Xdmx" version="1.20.11" release="28.el8_10.3" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el8_10.3.src.rpm">
          <filename>xorg-x11-server-Xdmx-1.20.11-28.el8_10.3.s390x.rpm</filename>
          <sum type="sha256">5a52b354c5683c20705d0ee8458760d3901b60ef3b572c92f9f6eae55d2a39de</sum>
        </package>
        <package name="xorg-x11-server-Xorg" version="1.20.11" release="28.el8_10.3" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el8_10.3.src.rpm">
          <filename>xorg-x11-server-Xorg-1.20.11-28.el8_10.3.s390x.rpm</filename>
          <sum type="sha256">69226635b8e57fb1aedb87b2f7e8f30b53f318c12a380d98ac0f0ba0906884a2</sum>
        </package>
        <package name="xorg-x11-server-Xvfb" version="1.20.11" release="28.el8_10.3" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el8_10.3.src.rpm">
          <filename>xorg-x11-server-Xvfb-1.20.11-28.el8_10.3.s390x.rpm</filename>
          <sum type="sha256">826ee9cdea2b9f373af762641c31ddd7c1f61790d913a589afc4bc34c824854a</sum>
        </package>
        <package name="xorg-x11-server-Xephyr" version="1.20.11" release="28.el8_10.3" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el8_10.3.src.rpm">
          <filename>xorg-x11-server-Xephyr-1.20.11-28.el8_10.3.s390x.rpm</filename>
          <sum type="sha256">89f51d74dca49a2b2408400412475eb97bd0d9e08023f63661584a0d8c0f41d9</sum>
        </package>
        <package name="xorg-x11-server-Xnest" version="1.20.11" release="28.el8_10.3" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el8_10.3.src.rpm">
          <filename>xorg-x11-server-Xnest-1.20.11-28.el8_10.3.s390x.rpm</filename>
          <sum type="sha256">d5cad7f94b3cbcad5b079cd9920a3c1b4df2ef7b78c8e865550cd3fbb214b4e3</sum>
        </package>
        <package name="xorg-x11-server-common" version="1.20.11" release="28.el8_10.3" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el8_10.3.src.rpm">
          <filename>xorg-x11-server-common-1.20.11-28.el8_10.3.s390x.rpm</filename>
          <sum type="sha256">e46d3733c9c155063d83dac8816531dd357814b8c4e93e73ff68c1fc0914950d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:38488</id>
    <title>Important: xorg-x11-server-Xwayland security update</title>
    <issued date="2026-07-13 00:00:00"/>
    <updated date="2026-07-13 08:55:50"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.  

Security Fix(es):  

  * xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:38488" id="RHSA-2026:38488" type="rhsa" title="RHSA-2026:38488"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-55999" id="CVE-2026-55999" type="cve" title="CVE-2026-55999"/>
      <reference href="https://bugzilla.redhat.com/2496165" id="2496165" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-38488.html" id="ALSA-2026:38488" type="self" title="ALSA-2026:38488"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="xorg-x11-server-Xwayland" version="21.1.3" release="20.el8_10.3" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-21.1.3-20.el8_10.3.src.rpm">
          <filename>xorg-x11-server-Xwayland-21.1.3-20.el8_10.3.s390x.rpm</filename>
          <sum type="sha256">b61b7325db21cbab122b1f5bab7aad77562362c1c8dae56f5d97426410ab4c2d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:38501</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-07-13 00:00:00"/>
    <updated date="2026-07-14 08:49:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP: Out-of-bounds write in planar bitmap decoder allows arbitrary code execution (CVE-2026-45700)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:38501" id="RHSA-2026:38501" type="rhsa" title="RHSA-2026:38501"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45700" id="CVE-2026-45700" type="cve" title="CVE-2026-45700"/>
      <reference href="https://bugzilla.redhat.com/2483470" id="2483470" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-38501.html" id="ALSA-2026:38501" type="self" title="ALSA-2026:38501"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="freerdp-libs" version="2.11.7" release="10.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-10.el8_10.src.rpm">
          <filename>freerdp-libs-2.11.7-10.el8_10.s390x.rpm</filename>
          <sum type="sha256">086605cd09ca0a53baaf9fe94a6ce584d99bab2f2b45f394239836c70b54ba1c</sum>
        </package>
        <package name="libwinpr" version="2.11.7" release="10.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-10.el8_10.src.rpm">
          <filename>libwinpr-2.11.7-10.el8_10.s390x.rpm</filename>
          <sum type="sha256">8c537b741a22f7ee10be9165e6d80169bd2ce2e807b3c972d6768ce36440203f</sum>
        </package>
        <package name="freerdp" version="2.11.7" release="10.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-10.el8_10.src.rpm">
          <filename>freerdp-2.11.7-10.el8_10.s390x.rpm</filename>
          <sum type="sha256">9a4db89423def9af3f55603c63a1fca589958f49c9ba5edf9af66a00c37b2026</sum>
        </package>
        <package name="libwinpr-devel" version="2.11.7" release="10.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-10.el8_10.src.rpm">
          <filename>libwinpr-devel-2.11.7-10.el8_10.s390x.rpm</filename>
          <sum type="sha256">d928cc79326408dff06db9f8d42b30a92ffcffbc527c320f548fd711fddf40b8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:38504</id>
    <title>Important: container-tools:rhel8 security update</title>
    <issued date="2026-07-13 00:00:00"/>
    <updated date="2026-07-16 09:14:20"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>container-tools:rhel8 security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.  

Security Fix(es):  

  * net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
  * golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)
  * podman: Podman: Information disclosure via malicious container image environment variables (CVE-2026-57231)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:38504" id="RHSA-2026:38504" type="rhsa" title="RHSA-2026:38504"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33811" id="CVE-2026-33811" type="cve" title="CVE-2026-33811"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-39835" id="CVE-2026-39835" type="cve" title="CVE-2026-39835"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-57231" id="CVE-2026-57231" type="cve" title="CVE-2026-57231"/>
      <reference href="https://bugzilla.redhat.com/2467822" id="2467822" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2480680" id="2480680" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493620" id="2493620" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-38504.html" id="ALSA-2026:38504" type="self" title="ALSA-2026:38504"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="container-tools" stream="rhel8" version="8100020260120091026" context="20125149" arch="s390x"/>
        <package name="libslirp-devel" version="4.4.0" release="2.module_el8.10.0+4102+6c76e544" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>libslirp-devel-4.4.0-2.module_el8.10.0+4102+6c76e544.s390x.rpm</filename>
          <sum type="sha256">04d89a36990aa212a94bb2747825e0da8c83a7b25e78a61558e4d5b43429e4f4</sum>
        </package>
        <package name="python3-podman" version="4.9.0" release="3.module_el8.10.0+4016+efd18bf8" epoch="0" arch="noarch" src="python-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>python3-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.noarch.rpm</filename>
          <sum type="sha256">087549428650af46817206c5d5ddd54bace235c2932b3e2004ac93e3b466cb6d</sum>
        </package>
        <package name="skopeo-tests" version="1.14.6" release="2.module_el8.10.0+4211+49ea0979" epoch="2" arch="s390x" src="skopeo-1.14.6-2.module_el8.10.0+4211+49ea0979.src.rpm">
          <filename>skopeo-tests-1.14.6-2.module_el8.10.0+4211+49ea0979.s390x.rpm</filename>
          <sum type="sha256">19938047e62ddce6132e3d550da8b9147e0a3e78bd828b3d968f1b9786cf4d47</sum>
        </package>
        <package name="netavark" version="1.10.3" release="1.module_el8.10.0+4120+03ad4b47" epoch="2" arch="s390x" src="netavark-1.10.3-1.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>netavark-1.10.3-1.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">1f5e2faafe780466e1224fe37b9a1e5dc04e53f831ba39b977b60d7df76f90bd</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="2.module_el8.10.0+4023+db236c53" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>libslirp-4.4.0-2.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">1fb16f13bc4c318fd2714e829a188f97facb4a31222911e078f5604ab7bcd2d9</sum>
        </package>
        <package name="containernetworking-plugins" version="1.4.0" release="8.module_el8.10.0+4136+16425343" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-8.module_el8.10.0+4136+16425343.src.rpm">
          <filename>containernetworking-plugins-1.4.0-8.module_el8.10.0+4136+16425343.s390x.rpm</filename>
          <sum type="sha256">5b03d385ebddc1bae5ae08592be2ce5f4c8d44e3feba600e5735cf91f8ae3c7f</sum>
        </package>
        <package name="toolbox" version="0.0.99.5.1" release="1.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="toolbox-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>toolbox-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">6143186cb1c446d86cea17767eb5d7143bcfa3a6cda56b6972cea4289916158d</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="34.module_el8.10.0+4227+f1240cfc" epoch="4" arch="noarch" src="podman-4.9.4-34.module_el8.10.0+4227+f1240cfc.src.rpm">
          <filename>podman-docker-4.9.4-34.module_el8.10.0+4227+f1240cfc.noarch.rpm</filename>
          <sum type="sha256">650530a7b12e3ea9e4e2c2997c4d68f05faf8570eec15630aef5981ad782b92a</sum>
        </package>
        <package name="skopeo" version="1.14.6" release="2.module_el8.10.0+4211+49ea0979" epoch="2" arch="s390x" src="skopeo-1.14.6-2.module_el8.10.0+4211+49ea0979.src.rpm">
          <filename>skopeo-1.14.6-2.module_el8.10.0+4211+49ea0979.s390x.rpm</filename>
          <sum type="sha256">71fd4ee1947c746cfc6e43f5f9f0c90bce223b34427701d31caec6d368dc76e9</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.10" release="1.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">73a992b19df0eda4ae7ba076ebfab5d8d638889051c89b761735617047e0d181</sum>
        </package>
        <package name="udica" version="0.2.6" release="21.module_el8.10.0+4068+0e21408f" epoch="0" arch="noarch" src="udica-0.2.6-21.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>udica-0.2.6-21.module_el8.10.0+4068+0e21408f.noarch.rpm</filename>
          <sum type="sha256">79a48c91cfda7b53eceaf7fc427f6b428b66680f0441fed06fc3bb55a0327feb</sum>
        </package>
        <package name="cockpit-podman" version="84.1" release="1.module_el8.10.0+4102+6c76e544" epoch="0" arch="noarch" src="cockpit-podman-84.1-1.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>cockpit-podman-84.1-1.module_el8.10.0+4102+6c76e544.noarch.rpm</filename>
          <sum type="sha256">7ebfd9c6721f16e93505c790faf678779b529dd5d380e17887b0ba1629de4871</sum>
        </package>
        <package name="fuse-overlayfs" version="1.13" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="s390x" src="fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">8118067655696462cee9dfc553f57e4501b089590d837bc88091716914c8d3f5</sum>
        </package>
        <package name="podman-gvproxy" version="4.9.4" release="34.module_el8.10.0+4227+f1240cfc" epoch="4" arch="s390x" src="podman-4.9.4-34.module_el8.10.0+4227+f1240cfc.src.rpm">
          <filename>podman-gvproxy-4.9.4-34.module_el8.10.0+4227+f1240cfc.s390x.rpm</filename>
          <sum type="sha256">8a946751ea9d1ae6b17aa009c9ddf78b6bd58d43603131a65fa355c36a94693b</sum>
        </package>
        <package name="crit" version="3.18" release="5.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>crit-3.18-5.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">8c081ab36feca1313187e33796d54822ad0f6d4a3bb42fe65fd20163f784085a</sum>
        </package>
        <package name="criu-devel" version="3.18" release="5.module_el8.10.0+4068+0e21408f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>criu-devel-3.18-5.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">8d858b9b5053b95ab7cb5eba9ab5bbd3cf5a1d07b77394b4d0f0d9d6c0769768</sum>
        </package>
        <package name="podman-catatonit" version="4.9.4" release="34.module_el8.10.0+4227+f1240cfc" epoch="4" arch="s390x" src="podman-4.9.4-34.module_el8.10.0+4227+f1240cfc.src.rpm">
          <filename>podman-catatonit-4.9.4-34.module_el8.10.0+4227+f1240cfc.s390x.rpm</filename>
          <sum type="sha256">917bba1edab9ed067ce9b36cb8b5454337c9ed9d091dcfeef9ea5234a22365fc</sum>
        </package>
        <package name="containers-common" version="1" release="82.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="s390x" src="containers-common-1-82.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>containers-common-1-82.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">98eb0c5785e1d53743858e76ac35aab0b199a918b88c02e20aa6f64cc6f89618</sum>
        </package>
        <package name="aardvark-dns" version="1.10.1" release="2.module_el8.10.0+4047+545787c4" epoch="2" arch="s390x" src="aardvark-dns-1.10.1-2.module_el8.10.0+4047+545787c4.src.rpm">
          <filename>aardvark-dns-1.10.1-2.module_el8.10.0+4047+545787c4.s390x.rpm</filename>
          <sum type="sha256">9e7e5cc9877a685769ee43c72dc867d179fe027d41775a01f1e73cfe366872ef</sum>
        </package>
        <package name="buildah-tests" version="1.33.14" release="4.module_el8.10.0+4213+0493256b" epoch="2" arch="s390x" src="buildah-1.33.14-4.module_el8.10.0+4213+0493256b.src.rpm">
          <filename>buildah-tests-1.33.14-4.module_el8.10.0+4213+0493256b.s390x.rpm</filename>
          <sum type="sha256">a85e60f75c55e50996e9ac0ae978f5f89ea12862042154b7ff11d0ab5d1eba07</sum>
        </package>
        <package name="container-selinux" version="2.229.0" release="3.module_el8.10.0+4213+0493256b" epoch="2" arch="noarch" src="container-selinux-2.229.0-3.module_el8.10.0+4213+0493256b.src.rpm">
          <filename>container-selinux-2.229.0-3.module_el8.10.0+4213+0493256b.noarch.rpm</filename>
          <sum type="sha256">abac2d39c2a5230679fceaee40500c93c3318bc39553ee68bfc09e4796b10791</sum>
        </package>
        <package name="runc" version="1.2.9" release="4.module_el8.10.0+4136+16425343" epoch="4" arch="s390x" src="runc-1.2.9-4.module_el8.10.0+4136+16425343.src.rpm">
          <filename>runc-1.2.9-4.module_el8.10.0+4136+16425343.s390x.rpm</filename>
          <sum type="sha256">b114cd179c7ed980d7c76e9ab68a55608d78cad0bb1cdb8a7b7106124e9f6ac2</sum>
        </package>
        <package name="crun" version="1.14.3" release="2.module_el8.10.0+4102+6c76e544" epoch="0" arch="s390x" src="crun-1.14.3-2.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>crun-1.14.3-2.module_el8.10.0+4102+6c76e544.s390x.rpm</filename>
          <sum type="sha256">b21ff72aa6dc2112775c618b7c6df02c4b2545cc7ee43ec04a1c6e1c84682757</sum>
        </package>
        <package name="criu" version="3.18" release="5.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>criu-3.18-5.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">bdaddee931f3746ac7472d9ccee504acd0be805433b3d160b1e7caf8bf361cb8</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.5.1" release="1.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="toolbox-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>toolbox-tests-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">bdc59eb38e3f90cd26d7f3417f6746988c30029b69aec49dfad5a57f785b6bf1</sum>
        </package>
        <package name="python3-criu" version="3.18" release="5.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>python3-criu-3.18-5.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">c24d9238067c95664620e800f7d24812b7788384f71812868db7ae5d390bb2dd</sum>
        </package>
        <package name="buildah" version="1.33.14" release="4.module_el8.10.0+4213+0493256b" epoch="2" arch="s390x" src="buildah-1.33.14-4.module_el8.10.0+4213+0493256b.src.rpm">
          <filename>buildah-1.33.14-4.module_el8.10.0+4213+0493256b.s390x.rpm</filename>
          <sum type="sha256">c517daa82446fcae86f54623108c75f56242fd9ff209a73d7906e2d1f70b3837</sum>
        </package>
        <package name="conmon" version="2.1.10" release="1.module_el8.10.0+4068+0e21408f" epoch="3" arch="s390x" src="conmon-2.1.10-1.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>conmon-2.1.10-1.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">c845407c7f2bb04735705b66ad0ca47b44437e8d6988148eeee4986701a2ab8d</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="34.module_el8.10.0+4227+f1240cfc" epoch="4" arch="s390x" src="podman-4.9.4-34.module_el8.10.0+4227+f1240cfc.src.rpm">
          <filename>podman-tests-4.9.4-34.module_el8.10.0+4227+f1240cfc.s390x.rpm</filename>
          <sum type="sha256">e28e4505416da7e3340e08014fe79b8a72dea7c0efebfb83b48c2225c29da2c6</sum>
        </package>
        <package name="podman-plugins" version="4.9.4" release="34.module_el8.10.0+4227+f1240cfc" epoch="4" arch="s390x" src="podman-4.9.4-34.module_el8.10.0+4227+f1240cfc.src.rpm">
          <filename>podman-plugins-4.9.4-34.module_el8.10.0+4227+f1240cfc.s390x.rpm</filename>
          <sum type="sha256">e48780fc143b060885107e486e1043153f1fed74a457d3d5e01639e030e7de57</sum>
        </package>
        <package name="podman" version="4.9.4" release="34.module_el8.10.0+4227+f1240cfc" epoch="4" arch="s390x" src="podman-4.9.4-34.module_el8.10.0+4227+f1240cfc.src.rpm">
          <filename>podman-4.9.4-34.module_el8.10.0+4227+f1240cfc.s390x.rpm</filename>
          <sum type="sha256">e7b390190daaccd9db6c103e59623ba207b8f2cdcb55956dd6433f5659935284</sum>
        </package>
        <package name="criu-libs" version="3.18" release="5.module_el8.10.0+4082+f7f0c95e" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4082+f7f0c95e.src.rpm">
          <filename>criu-libs-3.18-5.module_el8.10.0+4082+f7f0c95e.s390x.rpm</filename>
          <sum type="sha256">ef19ef2ed0463ac1a663bbbfaa1ebc2c430ca0f751305b9d5d0b4e41046bb967</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="34.module_el8.10.0+4227+f1240cfc" epoch="4" arch="s390x" src="podman-4.9.4-34.module_el8.10.0+4227+f1240cfc.src.rpm">
          <filename>podman-remote-4.9.4-34.module_el8.10.0+4227+f1240cfc.s390x.rpm</filename>
          <sum type="sha256">f1c6aaec3bd798ac2b91da19ac79b0219a544d413ba348298d3e60de9033e1cc</sum>
        </package>
        <package name="slirp4netns" version="1.2.3" release="1.module_el8.10.0+4082+f7f0c95e" epoch="0" arch="s390x" src="slirp4netns-1.2.3-1.module_el8.10.0+4082+f7f0c95e.src.rpm">
          <filename>slirp4netns-1.2.3-1.module_el8.10.0+4082+f7f0c95e.s390x.rpm</filename>
          <sum type="sha256">fd08808c8bda8cc9c5ecad38af925ba82a8d2124ba69ca9153b315c7e4879fd2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:38847</id>
    <title>Important: nginx:1.24 security, bug fix, and enhancement update</title>
    <issued date="2026-07-13 00:00:00"/>
    <updated date="2026-07-14 07:39:48"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nginx:1.24 security, bug fix, and enhancement update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055)


Bug Fix(es) and Enhancement(s):  

  * "HTTP/2 bomb" nginx fix breaks module ABI causing crashes [almalinux-8.10.z] (JIRA:AlmaLinux-191779)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:38847" id="RHSA-2026:38847" type="rhsa" title="RHSA-2026:38847"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42055" id="CVE-2026-42055" type="cve" title="CVE-2026-42055"/>
      <reference href="https://bugzilla.redhat.com/2489866" id="2489866" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-38847.html" id="ALSA-2026:38847" type="self" title="ALSA-2026:38847"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="nginx" stream="1.24" version="8100020260713121029" context="9edba152" arch="s390x"/>
        <package name="nginx-mod-mail" version="1.24.0" release="3.module_el8.10.0+4215+c88f2fa5.3.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1.src.rpm">
          <filename>nginx-mod-mail-1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1.s390x.rpm</filename>
          <sum type="sha256">0360eed55deb9e9ec04d654d345074fe4840ddade7c8974e0e00a2126649568e</sum>
        </package>
        <package name="nginx-mod-stream" version="1.24.0" release="3.module_el8.10.0+4215+c88f2fa5.3.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1.src.rpm">
          <filename>nginx-mod-stream-1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1.s390x.rpm</filename>
          <sum type="sha256">33cadb907da6cad433d557d945fb1ba91474066ea8a29d7f6fb8d10bf82f2e1c</sum>
        </package>
        <package name="nginx" version="1.24.0" release="3.module_el8.10.0+4215+c88f2fa5.3.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1.src.rpm">
          <filename>nginx-1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1.s390x.rpm</filename>
          <sum type="sha256">3564635de8e7c0b5eb1c1bb777ae9946370ab66e3b6357f6a8bee2006d52a306</sum>
        </package>
        <package name="nginx-mod-http-xslt-filter" version="1.24.0" release="3.module_el8.10.0+4215+c88f2fa5.3.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1.src.rpm">
          <filename>nginx-mod-http-xslt-filter-1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1.s390x.rpm</filename>
          <sum type="sha256">6ea901354e4edef39dbf2fb535d5558f59fd1e3b9baf5f157f4378f92a48b94a</sum>
        </package>
        <package name="nginx-mod-http-image-filter" version="1.24.0" release="3.module_el8.10.0+4215+c88f2fa5.3.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1.src.rpm">
          <filename>nginx-mod-http-image-filter-1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1.s390x.rpm</filename>
          <sum type="sha256">782bd4883d4f7aace62940efb1ed38952fc0364d0b6bcfdfe9d0990e2d898a67</sum>
        </package>
        <package name="nginx-mod-devel" version="1.24.0" release="3.module_el8.10.0+4215+c88f2fa5.3.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1.src.rpm">
          <filename>nginx-mod-devel-1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1.s390x.rpm</filename>
          <sum type="sha256">a1c382fd1828ec38ac29c41bddf515289fc099c989f4d7405f089b512e57d3ba</sum>
        </package>
        <package name="nginx-filesystem" version="1.24.0" release="3.module_el8.10.0+4215+c88f2fa5.3.alma.1" epoch="1" arch="noarch" src="nginx-1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1.src.rpm">
          <filename>nginx-filesystem-1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1.noarch.rpm</filename>
          <sum type="sha256">c564a3cccb2208c0b657b5c212804320ca8226b7bd189c3a7c078164b8023573</sum>
        </package>
        <package name="nginx-all-modules" version="1.24.0" release="3.module_el8.10.0+4215+c88f2fa5.3.alma.1" epoch="1" arch="noarch" src="nginx-1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1.src.rpm">
          <filename>nginx-all-modules-1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1.noarch.rpm</filename>
          <sum type="sha256">c8ec5792c88cf994eaf06de5de2ac76306198ced41fbc4b71b6edd565ebbb3c8</sum>
        </package>
        <package name="nginx-mod-http-perl" version="1.24.0" release="3.module_el8.10.0+4215+c88f2fa5.3.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1.src.rpm">
          <filename>nginx-mod-http-perl-1.24.0-3.module_el8.10.0+4215+c88f2fa5.3.alma.1.s390x.rpm</filename>
          <sum type="sha256">f83bb3768648a87fec8bd0e46618d38dc7749e8f348270ba285cfd027721116b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:38901</id>
    <title>Important: perl-DBI:1.641 security update</title>
    <issued date="2026-07-13 00:00:00"/>
    <updated date="2026-07-14 08:45:44"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>perl-DBI:1.641 security update</summary>
    <description>The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations.  

Security Fix(es):  

  * DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution (CVE-2026-9698)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:38901" id="RHSA-2026:38901" type="rhsa" title="RHSA-2026:38901"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-9698" id="CVE-2026-9698" type="cve" title="CVE-2026-9698"/>
      <reference href="https://bugzilla.redhat.com/2486734" id="2486734" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-38901.html" id="ALSA-2026:38901" type="self" title="ALSA-2026:38901"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="perl-DBI" stream="1.641" version="8100020260713142629" context="dbc5bc9a" arch="s390x"/>
        <package name="perl-DBI" version="1.641" release="5.module_el8.10.0+4220+8669cc49" epoch="0" arch="s390x" src="perl-DBI-1.641-5.module_el8.10.0+4220+8669cc49.src.rpm">
          <filename>perl-DBI-1.641-5.module_el8.10.0+4220+8669cc49.s390x.rpm</filename>
          <sum type="sha256">d1ff1cfe807a5232bc5efe774fa0e9c352da66e3a85ed4510f5a7fa315e71b6b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3898</id>
    <title>Important: osbuild-composer security update</title>
    <issued date="2026-03-05 00:00:00"/>
    <updated date="2026-03-11 09:54:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>osbuild-composer security update</summary>
    <description>A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients.  

Security Fix(es):  

  * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
  * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3898" id="RHSA-2026:3898" type="rhsa" title="RHSA-2026:3898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61726" id="CVE-2025-61726" type="cve" title="CVE-2025-61726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68121" id="CVE-2025-68121" type="cve" title="CVE-2025-68121"/>
      <reference href="https://bugzilla.redhat.com/2434432" id="2434432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2437111" id="2437111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-3898.html" id="ALSA-2026:3898" type="self" title="ALSA-2026:3898"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="osbuild-composer-worker" version="101.4" release="4.el8_10.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101.4-4.el8_10.alma.1.src.rpm">
          <filename>osbuild-composer-worker-101.4-4.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">260e395489036c80a75b9b5b786919bbc4e3031b3e6411e1d1794765a2f0ad84</sum>
        </package>
        <package name="osbuild-composer" version="101.4" release="4.el8_10.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101.4-4.el8_10.alma.1.src.rpm">
          <filename>osbuild-composer-101.4-4.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">2f697b5d16ad989468c3f81ef385e8e229582f6b1987c4e9f334ec6b20ab5d31</sum>
        </package>
        <package name="osbuild-composer-core" version="101.4" release="4.el8_10.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101.4-4.el8_10.alma.1.src.rpm">
          <filename>osbuild-composer-core-101.4-4.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">811b6ca2e16dbaf37d27f66d790c841f2a67a52dc68e67e5b0a8b5df25684788</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:38995</id>
    <title>Important: go-toolset:rhel8 security, bug fix, and enhancement update</title>
    <issued date="2026-07-13 00:00:00"/>
    <updated date="2026-07-14 09:10:38"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>go-toolset:rhel8 security, bug fix, and enhancement update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.   

Security Fix(es):  

  * golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
  * crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)
  * os: golang: Go os.Root: Symlink following vulnerability allows directory traversal (CVE-2026-39822)


Bug Fix(es) and Enhancement(s):  

  * Update Go to version 1.26.5+1 [almalinux-8.10.z] (JIRA:AlmaLinux-193478)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:38995" id="RHSA-2026:38995" type="rhsa" title="RHSA-2026:38995"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27145" id="CVE-2026-27145" type="cve" title="CVE-2026-27145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-39821" id="CVE-2026-39821" type="cve" title="CVE-2026-39821"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-39822" id="CVE-2026-39822" type="cve" title="CVE-2026-39822"/>
      <reference href="https://bugzilla.redhat.com/2480756" id="2480756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2484207" id="2484207" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2498152" id="2498152" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-38995.html" id="ALSA-2026:38995" type="self" title="ALSA-2026:38995"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="go-toolset" stream="rhel8" version="8100020260714081830" context="9edba152" arch="s390x"/>
        <package name="golang-docs" version="1.26.5" release="1.module_el8.10.0+4223+bd807c2e" epoch="0" arch="noarch" src="golang-1.26.5-1.module_el8.10.0+4223+bd807c2e.src.rpm">
          <filename>golang-docs-1.26.5-1.module_el8.10.0+4223+bd807c2e.noarch.rpm</filename>
          <sum type="sha256">229e1a7d25b8e1d2947e9d18aa3a184caca32a1444328f8763794dea60403b10</sum>
        </package>
        <package name="golang-bin" version="1.26.5" release="1.module_el8.10.0+4223+bd807c2e" epoch="0" arch="s390x" src="golang-1.26.5-1.module_el8.10.0+4223+bd807c2e.src.rpm">
          <filename>golang-bin-1.26.5-1.module_el8.10.0+4223+bd807c2e.s390x.rpm</filename>
          <sum type="sha256">2cf463d5846f63346bd8233c46d4d030e0efd8b2029b67ac15c8da1466803347</sum>
        </package>
        <package name="golang-src" version="1.26.5" release="1.module_el8.10.0+4223+bd807c2e" epoch="0" arch="noarch" src="golang-1.26.5-1.module_el8.10.0+4223+bd807c2e.src.rpm">
          <filename>golang-src-1.26.5-1.module_el8.10.0+4223+bd807c2e.noarch.rpm</filename>
          <sum type="sha256">50f0ee3b371ce452d038a5e43c1f29869cb2138f0fc2ba4bc177f085214b1221</sum>
        </package>
        <package name="golang" version="1.26.5" release="1.module_el8.10.0+4223+bd807c2e" epoch="0" arch="s390x" src="golang-1.26.5-1.module_el8.10.0+4223+bd807c2e.src.rpm">
          <filename>golang-1.26.5-1.module_el8.10.0+4223+bd807c2e.s390x.rpm</filename>
          <sum type="sha256">510686277cd47c03bdf74272f6783cc4342471b37db40fa1a8d7ccd2aaa6b1f4</sum>
        </package>
        <package name="golang-tests" version="1.26.5" release="1.module_el8.10.0+4223+bd807c2e" epoch="0" arch="noarch" src="golang-1.26.5-1.module_el8.10.0+4223+bd807c2e.src.rpm">
          <filename>golang-tests-1.26.5-1.module_el8.10.0+4223+bd807c2e.noarch.rpm</filename>
          <sum type="sha256">cd304cc0c117880a1fdfae552aec002c3ab597282532a030b3ce563e51a3d3bd</sum>
        </package>
        <package name="golang-race" version="1.26.5" release="1.module_el8.10.0+4223+bd807c2e" epoch="0" arch="s390x" src="golang-1.26.5-1.module_el8.10.0+4223+bd807c2e.src.rpm">
          <filename>golang-race-1.26.5-1.module_el8.10.0+4223+bd807c2e.s390x.rpm</filename>
          <sum type="sha256">e6ec6927eb7a3c3ef8be5fb83186c9e0f2f666b224888ba2053fc3afb868ccef</sum>
        </package>
        <package name="go-toolset" version="1.26.5" release="1.module_el8.10.0+4223+bd807c2e" epoch="0" arch="s390x" src="golang-1.26.5-1.module_el8.10.0+4223+bd807c2e.src.rpm">
          <filename>go-toolset-1.26.5-1.module_el8.10.0+4223+bd807c2e.s390x.rpm</filename>
          <sum type="sha256">f26f6c7ae81fd49b04a1d4addce747a04aa6c4b1ca2da6d2ced6c6a3f2e11459</sum>
        </package>
        <package name="golang-misc" version="1.26.5" release="1.module_el8.10.0+4223+bd807c2e" epoch="0" arch="noarch" src="golang-1.26.5-1.module_el8.10.0+4223+bd807c2e.src.rpm">
          <filename>golang-misc-1.26.5-1.module_el8.10.0+4223+bd807c2e.noarch.rpm</filename>
          <sum type="sha256">f3806c3e7f9a48379903c2f02f54be6a24534cf648149fa25812f91a51ef1fee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:39127</id>
    <title>Important: python-pillow security update</title>
    <issued date="2026-07-14 00:00:00"/>
    <updated date="2026-07-14 10:11:13"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python-pillow security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python-pillow: Pillow: Denial of Service via crafted BDF font file (CVE-2026-55379)
  * python-pillow: Pillow: Denial of Service via crafted GD 2.x image file (CVE-2026-55380)
  * python-pillow: Pillow: Denial of Service via crafted PCF font data (CVE-2026-54059)
  * python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files (CVE-2026-54060)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:39127" id="RHSA-2026:39127" type="rhsa" title="RHSA-2026:39127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-54059" id="CVE-2026-54059" type="cve" title="CVE-2026-54059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-54060" id="CVE-2026-54060" type="cve" title="CVE-2026-54060"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-55379" id="CVE-2026-55379" type="cve" title="CVE-2026-55379"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-55380" id="CVE-2026-55380" type="cve" title="CVE-2026-55380"/>
      <reference href="https://bugzilla.redhat.com/2497452" id="2497452" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2497455" id="2497455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2497464" id="2497464" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2497466" id="2497466" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-39127.html" id="ALSA-2026:39127" type="self" title="ALSA-2026:39127"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3-pillow" version="5.1.1" release="22.el8_10" epoch="0" arch="s390x" src="python-pillow-5.1.1-22.el8_10.src.rpm">
          <filename>python3-pillow-5.1.1-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">d7a32e7efa760741c2a98b7dc59f6126bb0937d66787f54b55de39cded55556b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:39266</id>
    <title>Important: git-lfs security update</title>
    <issued date="2026-07-14 00:00:00"/>
    <updated date="2026-07-14 16:07:28"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git-lfs security update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.  

Security Fix(es):  

  * net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:39266" id="RHSA-2026:39266" type="rhsa" title="RHSA-2026:39266"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33811" id="CVE-2026-33811" type="cve" title="CVE-2026-33811"/>
      <reference href="https://bugzilla.redhat.com/2467822" id="2467822" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-39266.html" id="ALSA-2026:39266" type="self" title="ALSA-2026:39266"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="git-lfs" version="3.4.1" release="12.el8_10" epoch="0" arch="s390x" src="git-lfs-3.4.1-12.el8_10.src.rpm">
          <filename>git-lfs-3.4.1-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">7fbc919165a0220ced404735f929bac18274ac71d77b89114b738fa1bf48a3ae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:39320</id>
    <title>Important: python3 security update</title>
    <issued date="2026-07-14 00:00:00"/>
    <updated date="2026-07-15 08:46:10"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations (CVE-2026-15308)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:39320" id="RHSA-2026:39320" type="rhsa" title="RHSA-2026:39320"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-15308" id="CVE-2026-15308" type="cve" title="CVE-2026-15308"/>
      <reference href="https://bugzilla.redhat.com/2498608" id="2498608" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-39320.html" id="ALSA-2026:39320" type="self" title="ALSA-2026:39320"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="platform-python-debug" version="3.6.8" release="77.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-77.el8_10.alma.1.src.rpm">
          <filename>platform-python-debug-3.6.8-77.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">06fdc80bf23b7dcb73428dc8cacd32d2c93aeedba8849ec9438a86125baa6598</sum>
        </package>
        <package name="python3-tkinter" version="3.6.8" release="77.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-77.el8_10.alma.1.src.rpm">
          <filename>python3-tkinter-3.6.8-77.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">635f147c75f9a46652245b75a6269301e1f84627da95f03ba74415ced68d25e8</sum>
        </package>
        <package name="python3-idle" version="3.6.8" release="77.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-77.el8_10.alma.1.src.rpm">
          <filename>python3-idle-3.6.8-77.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">bde83e00793e487d881e297844b557917e0ce3eb898df0b24c645c782a31b513</sum>
        </package>
        <package name="platform-python-devel" version="3.6.8" release="77.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-77.el8_10.alma.1.src.rpm">
          <filename>platform-python-devel-3.6.8-77.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">c85f3ee53aa105868cc085465a3af3916305fc3de2ef5f570a8d88a21490c484</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:39322</id>
    <title>Important: pacemaker security update</title>
    <issued date="2026-07-14 00:00:00"/>
    <updated date="2026-07-15 08:40:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pacemaker security update</summary>
    <description>The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures.   

Security Fix(es):  

  * pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression (CVE-2026-10649)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:39322" id="RHSA-2026:39322" type="rhsa" title="RHSA-2026:39322"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-10649" id="CVE-2026-10649" type="cve" title="CVE-2026-10649"/>
      <reference href="https://bugzilla.redhat.com/2462817" id="2462817" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-39322.html" id="ALSA-2026:39322" type="self" title="ALSA-2026:39322"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="pacemaker-cluster-libs" version="2.1.7" release="5.6.el8_10" epoch="0" arch="s390x" src="pacemaker-2.1.7-5.6.el8_10.src.rpm">
          <filename>pacemaker-cluster-libs-2.1.7-5.6.el8_10.s390x.rpm</filename>
          <sum type="sha256">44ec9ddf883fd6b1d8b6b544be8406ab0d39aa67ac7406b526dae44837e1a3ed</sum>
        </package>
        <package name="pacemaker-schemas" version="2.1.7" release="5.6.el8_10" epoch="0" arch="noarch" src="pacemaker-2.1.7-5.6.el8_10.src.rpm">
          <filename>pacemaker-schemas-2.1.7-5.6.el8_10.noarch.rpm</filename>
          <sum type="sha256">e4c346361a560e3233a138d72ece20f96817d1ead1f701a6027cfc6c32005625</sum>
        </package>
        <package name="pacemaker-libs" version="2.1.7" release="5.6.el8_10" epoch="0" arch="s390x" src="pacemaker-2.1.7-5.6.el8_10.src.rpm">
          <filename>pacemaker-libs-2.1.7-5.6.el8_10.s390x.rpm</filename>
          <sum type="sha256">fe6d5c2b795cfb42d481a06ea6c39f76f23a63d9e3075fba4afc1356415661ef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3967</id>
    <title>Important: libvpx security update</title>
    <issued date="2026-03-09 00:00:00"/>
    <updated date="2026-03-10 01:53:59"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libvpx security update</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.  

Security Fix(es):  

  * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3967" id="RHSA-2026:3967" type="rhsa" title="RHSA-2026:3967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2447" id="CVE-2026-2447" type="cve" title="CVE-2026-2447"/>
      <reference href="https://bugzilla.redhat.com/2440219" id="2440219" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-3967.html" id="ALSA-2026:3967" type="self" title="ALSA-2026:3967"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libvpx" version="1.7.0" release="13.el8_10" epoch="0" arch="s390x" src="libvpx-1.7.0-13.el8_10.src.rpm">
          <filename>libvpx-1.7.0-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">e7b91c20ad390457ff79f8f2f92e6839047a96a1e99bbabbbe79846fa16606b2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3985</id>
    <title>Important: git-lfs security update</title>
    <issued date="2026-03-09 00:00:00"/>
    <updated date="2026-03-13 12:38:07"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git-lfs security update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.  

Security Fix(es):  

  * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
  * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3985" id="RHSA-2026:3985" type="rhsa" title="RHSA-2026:3985"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61726" id="CVE-2025-61726" type="cve" title="CVE-2025-61726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68121" id="CVE-2025-68121" type="cve" title="CVE-2025-68121"/>
      <reference href="https://bugzilla.redhat.com/2434432" id="2434432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2437111" id="2437111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-3985.html" id="ALSA-2026:3985" type="self" title="ALSA-2026:3985"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="git-lfs" version="3.4.1" release="8.el8_10" epoch="0" arch="s390x" src="git-lfs-3.4.1-8.el8_10.src.rpm">
          <filename>git-lfs-3.4.1-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">ebaf72e89e21fbabae40653d114cb3fb42e41ac5a62ffeafaa583d92cec496b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:39868</id>
    <title>Important: nodejs:24 security, bug fix, and enhancement update</title>
    <issued date="2026-07-15 00:00:00"/>
    <updated date="2026-07-16 10:27:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:24 security, bug fix, and enhancement update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (CVE-2026-42338)
  * undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames (CVE-2026-12151)
  * undici: Undici: Information disclosure due to improper cache-control header parsing (CVE-2026-9678)
  * undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery. (CVE-2026-6733)
  * undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header (CVE-2026-11525)
  * undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy (CVE-2026-9697)
  * undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing (CVE-2026-6734)
  * nodejs: Node.js: Denial of Service via unlimited HTTP/2 ORIGIN frames (CVE-2026-48619)
  * nodejs: Node.js: Silent authority rebinding due to embedded-nul hostnames in TLS handling (CVE-2026-48930)
  * nodejs: Node.js: Unauthorized file metadata modification (CVE-2026-48935)
  * nodejs: Node.js WebCrypto: Denial of Service via large input to subtle.encrypt() (CVE-2026-48933)
  * nodejs: Node.js: Certification validation bypass in TLS host verification (CVE-2026-48934)
  * Node.js: Node.js: Trust-policy bypass due to hostname matching inconsistency (CVE-2026-48928)
  * nodejs: Node.js: Information disclosure of proxy credentials via proxy tunnel error handling (CVE-2026-48615)
  * nodejs: Node.js: Authentication bypass due to TLS hostname handling and unicode dot separator mismatch (CVE-2026-48618)


Bug Fix(es) and Enhancement(s):  

  * nodejs:24/nodejs: Rebase to the latest Node.js 24 release [almalinux-8] (JIRA:AlmaLinux-168744)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:39868" id="RHSA-2026:39868" type="rhsa" title="RHSA-2026:39868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-11525" id="CVE-2026-11525" type="cve" title="CVE-2026-11525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12151" id="CVE-2026-12151" type="cve" title="CVE-2026-12151"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42338" id="CVE-2026-42338" type="cve" title="CVE-2026-42338"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48615" id="CVE-2026-48615" type="cve" title="CVE-2026-48615"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48618" id="CVE-2026-48618" type="cve" title="CVE-2026-48618"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48619" id="CVE-2026-48619" type="cve" title="CVE-2026-48619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48928" id="CVE-2026-48928" type="cve" title="CVE-2026-48928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48930" id="CVE-2026-48930" type="cve" title="CVE-2026-48930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48933" id="CVE-2026-48933" type="cve" title="CVE-2026-48933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48934" id="CVE-2026-48934" type="cve" title="CVE-2026-48934"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48935" id="CVE-2026-48935" type="cve" title="CVE-2026-48935"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6733" id="CVE-2026-6733" type="cve" title="CVE-2026-6733"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6734" id="CVE-2026-6734" type="cve" title="CVE-2026-6734"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-9678" id="CVE-2026-9678" type="cve" title="CVE-2026-9678"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-9697" id="CVE-2026-9697" type="cve" title="CVE-2026-9697"/>
      <reference href="https://bugzilla.redhat.com/2476810" id="2476810" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489980" id="2489980" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2490000" id="2490000" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2490006" id="2490006" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2490008" id="2490008" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2490018" id="2490018" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2490024" id="2490024" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493325" id="2493325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493326" id="2493326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493329" id="2493329" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493331" id="2493331" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493332" id="2493332" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493333" id="2493333" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493335" id="2493335" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493337" id="2493337" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-39868.html" id="ALSA-2026:39868" type="self" title="ALSA-2026:39868"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="nodejs" stream="24" version="8100020260716073211" context="9c84b808" arch="s390x"/>
        <package name="nodejs-devel" version="24.18.0" release="1.module_el8.10.0+4228+2938bc94" epoch="1" arch="s390x" src="nodejs-24.18.0-1.module_el8.10.0+4228+2938bc94.src.rpm">
          <filename>nodejs-devel-24.18.0-1.module_el8.10.0+4228+2938bc94.s390x.rpm</filename>
          <sum type="sha256">0f779737e7618766deda2d92aa2a2808f08d7c1818e0c0546d2b094426cd8973</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="6.module_el8.10.0+4086+70facd4a" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-6.module_el8.10.0+4086+70facd4a.src.rpm">
          <filename>nodejs-packaging-2021.06-6.module_el8.10.0+4086+70facd4a.noarch.rpm</filename>
          <sum type="sha256">318c493f93f2190506361306b5759e5e65eee18e3a8d85b195c800d8b7064bc0</sum>
        </package>
        <package name="nodejs-full-i18n" version="24.18.0" release="1.module_el8.10.0+4228+2938bc94" epoch="1" arch="s390x" src="nodejs-24.18.0-1.module_el8.10.0+4228+2938bc94.src.rpm">
          <filename>nodejs-full-i18n-24.18.0-1.module_el8.10.0+4228+2938bc94.s390x.rpm</filename>
          <sum type="sha256">3e68cb36e286d7d48dde8603d064f018cf6a14bc9bee3e334cd9aab3b7dd6ff8</sum>
        </package>
        <package name="npm" version="11.16.0" release="1.24.18.0.1.module_el8.10.0+4228+2938bc94" epoch="1" arch="noarch" src="nodejs-24.18.0-1.module_el8.10.0+4228+2938bc94.src.rpm">
          <filename>npm-11.16.0-1.24.18.0.1.module_el8.10.0+4228+2938bc94.noarch.rpm</filename>
          <sum type="sha256">8622fde48003921573a31d0b6e33f98c4d6584ca5bbdc8fd71c17f8426a535e7</sum>
        </package>
        <package name="nodejs-libs" version="24.18.0" release="1.module_el8.10.0+4228+2938bc94" epoch="1" arch="s390x" src="nodejs-24.18.0-1.module_el8.10.0+4228+2938bc94.src.rpm">
          <filename>nodejs-libs-24.18.0-1.module_el8.10.0+4228+2938bc94.s390x.rpm</filename>
          <sum type="sha256">900dbd67e78d3251c2f2c13aa141fb199cdd9a5cbe837fb9fb842830a93e239e</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.3" release="1.module_el8.10.0+4061+f8ceeab9" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.3-1.module_el8.10.0+4061+f8ceeab9.src.rpm">
          <filename>nodejs-nodemon-3.0.3-1.module_el8.10.0+4061+f8ceeab9.noarch.rpm</filename>
          <sum type="sha256">9a38ec0d35f9d0671cb0343c1270c1a85bf1b2250b40fe3facedbd919eee2b91</sum>
        </package>
        <package name="nodejs-docs" version="24.18.0" release="1.module_el8.10.0+4228+2938bc94" epoch="1" arch="noarch" src="nodejs-24.18.0-1.module_el8.10.0+4228+2938bc94.src.rpm">
          <filename>nodejs-docs-24.18.0-1.module_el8.10.0+4228+2938bc94.noarch.rpm</filename>
          <sum type="sha256">b6dd8086b81ee8aac9c2dbc943a9fce9b5f68f5802471fbc5bd5ecdc39cd7446</sum>
        </package>
        <package name="v8-13.6-devel" version="13.6.233.17" release="1.24.18.0.1.module_el8.10.0+4228+2938bc94" epoch="3" arch="s390x" src="nodejs-24.18.0-1.module_el8.10.0+4228+2938bc94.src.rpm">
          <filename>v8-13.6-devel-13.6.233.17-1.24.18.0.1.module_el8.10.0+4228+2938bc94.s390x.rpm</filename>
          <sum type="sha256">def3a802aa5d6c0f95aaa5141af9db4c125dc8e2f67fb68bd5a9ee1ea6ac2209</sum>
        </package>
        <package name="nodejs" version="24.18.0" release="1.module_el8.10.0+4228+2938bc94" epoch="1" arch="s390x" src="nodejs-24.18.0-1.module_el8.10.0+4228+2938bc94.src.rpm">
          <filename>nodejs-24.18.0-1.module_el8.10.0+4228+2938bc94.s390x.rpm</filename>
          <sum type="sha256">e6c1fa3d82f5a9347befbe0a0106a966126cfd0a828b752a3b91ca83bebd9910</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="6.module_el8.10.0+4086+70facd4a" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-6.module_el8.10.0+4086+70facd4a.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-6.module_el8.10.0+4086+70facd4a.noarch.rpm</filename>
          <sum type="sha256">f4b4a25dc07327deb51619715aae6bd35d22e29ccfc97141c0b61de3a1995eee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:39878</id>
    <title>Important: perl-XML-LibXML security update</title>
    <issued date="2026-07-15 00:00:00"/>
    <updated date="2026-07-16 09:03:13"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>perl-XML-LibXML security update</summary>
    <description>This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module allows Perl programmers to make use of the highly capable validating XML parser and the high performance DOM implementation.  

Security Fix(es):  

  * perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names (CVE-2026-8177)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:39878" id="RHSA-2026:39878" type="rhsa" title="RHSA-2026:39878"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8177" id="CVE-2026-8177" type="cve" title="CVE-2026-8177"/>
      <reference href="https://bugzilla.redhat.com/2468684" id="2468684" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-39878.html" id="ALSA-2026:39878" type="self" title="ALSA-2026:39878"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="perl-XML-LibXML" version="2.0132" release="3.el8_10" epoch="1" arch="s390x" src="perl-XML-LibXML-2.0132-3.el8_10.src.rpm">
          <filename>perl-XML-LibXML-2.0132-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">5779f5ea660dad3c6bb667c739b96098920891a7f7b24035ab26b384d4ffa538</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:39893</id>
    <title>Important: python3.12 security update</title>
    <issued date="2026-07-15 00:00:00"/>
    <updated date="2026-07-16 09:03:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations (CVE-2026-15308)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:39893" id="RHSA-2026:39893" type="rhsa" title="RHSA-2026:39893"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-15308" id="CVE-2026-15308" type="cve" title="CVE-2026-15308"/>
      <reference href="https://bugzilla.redhat.com/2498608" id="2498608" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-39893.html" id="ALSA-2026:39893" type="self" title="ALSA-2026:39893"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.12-devel" version="3.12.13" release="3.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.13-3.el8_10.src.rpm">
          <filename>python3.12-devel-3.12.13-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">0e122fde1e3292dabe1d8098cfefe97f092b319a332857f0945e48c3094b7aef</sum>
        </package>
        <package name="python3.12-libs" version="3.12.13" release="3.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.13-3.el8_10.src.rpm">
          <filename>python3.12-libs-3.12.13-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">335531a919f71165ea815afe9f434f91a85ad0706a87836fe9a6627d48c9abd2</sum>
        </package>
        <package name="python3.12-tkinter" version="3.12.13" release="3.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.13-3.el8_10.src.rpm">
          <filename>python3.12-tkinter-3.12.13-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">37b89c36784974a50c129d3afdfc3669f098b89890f71040627c6894d6b1298b</sum>
        </package>
        <package name="python3.12" version="3.12.13" release="3.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.13-3.el8_10.src.rpm">
          <filename>python3.12-3.12.13-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">ce9c6334c1328bf739cce0196ea0edf93dab0a2d47a9eef1f5a08964e3752de9</sum>
        </package>
        <package name="python3.12-rpm-macros" version="3.12.13" release="3.el8_10" epoch="0" arch="noarch" src="python3.12-3.12.13-3.el8_10.src.rpm">
          <filename>python3.12-rpm-macros-3.12.13-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">e9cde798bd476674a9bc724392a7aa3fffabd42418c0819dbf31d10a1ee140f5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4024</id>
    <title>Important: postgresql:13 security update</title>
    <issued date="2026-03-09 00:00:00"/>
    <updated date="2026-03-11 09:52:09"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:13 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006)
  * postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code (CVE-2026-2004)
  * postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code (CVE-2026-2005)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4024" id="RHSA-2026:4024" type="rhsa" title="RHSA-2026:4024"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2004" id="CVE-2026-2004" type="cve" title="CVE-2026-2004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2005" id="CVE-2026-2005" type="cve" title="CVE-2026-2005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2006" id="CVE-2026-2006" type="cve" title="CVE-2026-2006"/>
      <reference href="https://bugzilla.redhat.com/2439324" id="2439324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439325" id="2439325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439326" id="2439326" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4024.html" id="ALSA-2026:4024" type="self" title="ALSA-2026:4024"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="13" version="8100020260310072426" context="9edba152" arch="s390x"/>
        <package name="postgresql-server" version="13.23" release="2.module_el8.10.0+4124+c9cb0592" epoch="0" arch="s390x" src="postgresql-13.23-2.module_el8.10.0+4124+c9cb0592.src.rpm">
          <filename>postgresql-server-13.23-2.module_el8.10.0+4124+c9cb0592.s390x.rpm</filename>
          <sum type="sha256">018b78c9ca07e1fe3030e6ab576105b265131900e1b2636e01b731847735a78f</sum>
        </package>
        <package name="postgresql-pltcl" version="13.23" release="2.module_el8.10.0+4124+c9cb0592" epoch="0" arch="s390x" src="postgresql-13.23-2.module_el8.10.0+4124+c9cb0592.src.rpm">
          <filename>postgresql-pltcl-13.23-2.module_el8.10.0+4124+c9cb0592.s390x.rpm</filename>
          <sum type="sha256">30c42fed1c55a34553c2bbeb312edeef268f6d2218876f5cc3dbc0a95eb9dd0d</sum>
        </package>
        <package name="postgresql-static" version="13.23" release="2.module_el8.10.0+4124+c9cb0592" epoch="0" arch="s390x" src="postgresql-13.23-2.module_el8.10.0+4124+c9cb0592.src.rpm">
          <filename>postgresql-static-13.23-2.module_el8.10.0+4124+c9cb0592.s390x.rpm</filename>
          <sum type="sha256">4381b817df68042725980b3ac7938a028b5ed0232a05b39130887514a0176134</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.23" release="2.module_el8.10.0+4124+c9cb0592" epoch="0" arch="s390x" src="postgresql-13.23-2.module_el8.10.0+4124+c9cb0592.src.rpm">
          <filename>postgresql-upgrade-devel-13.23-2.module_el8.10.0+4124+c9cb0592.s390x.rpm</filename>
          <sum type="sha256">4f844d75fa1f0aabd45b2e8462ebed37391481b4358c7db1331807baabd7f9ef</sum>
        </package>
        <package name="postgresql-contrib" version="13.23" release="2.module_el8.10.0+4124+c9cb0592" epoch="0" arch="s390x" src="postgresql-13.23-2.module_el8.10.0+4124+c9cb0592.src.rpm">
          <filename>postgresql-contrib-13.23-2.module_el8.10.0+4124+c9cb0592.s390x.rpm</filename>
          <sum type="sha256">5159c19f2687ef8a35402c20952b7de2ff53a3e5e2b896bdf20ae317533527ee</sum>
        </package>
        <package name="postgresql-plpython3" version="13.23" release="2.module_el8.10.0+4124+c9cb0592" epoch="0" arch="s390x" src="postgresql-13.23-2.module_el8.10.0+4124+c9cb0592.src.rpm">
          <filename>postgresql-plpython3-13.23-2.module_el8.10.0+4124+c9cb0592.s390x.rpm</filename>
          <sum type="sha256">6e4a00767d77ac42937365c04f5b385d1f71905cf56751d279d31f944c6c202a</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="13.23" release="2.module_el8.10.0+4124+c9cb0592" epoch="0" arch="noarch" src="postgresql-13.23-2.module_el8.10.0+4124+c9cb0592.src.rpm">
          <filename>postgresql-test-rpm-macros-13.23-2.module_el8.10.0+4124+c9cb0592.noarch.rpm</filename>
          <sum type="sha256">6f651b960872f798489cd14cd96732ace84bac770cfc0e3d986fd6cf25276eb7</sum>
        </package>
        <package name="postgresql-server-devel" version="13.23" release="2.module_el8.10.0+4124+c9cb0592" epoch="0" arch="s390x" src="postgresql-13.23-2.module_el8.10.0+4124+c9cb0592.src.rpm">
          <filename>postgresql-server-devel-13.23-2.module_el8.10.0+4124+c9cb0592.s390x.rpm</filename>
          <sum type="sha256">907a2adcaf1c62487a2145229d2d3677733e9b0c8434f1bfe58b3b2cf58a3569</sum>
        </package>
        <package name="postgresql-test" version="13.23" release="2.module_el8.10.0+4124+c9cb0592" epoch="0" arch="s390x" src="postgresql-13.23-2.module_el8.10.0+4124+c9cb0592.src.rpm">
          <filename>postgresql-test-13.23-2.module_el8.10.0+4124+c9cb0592.s390x.rpm</filename>
          <sum type="sha256">977e3b7bcd22c77cd7ea50d4fe433e070f2aa821201da8da5b680dafb59ab47a</sum>
        </package>
        <package name="pgaudit" version="1.5.0" release="1.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="pgaudit-1.5.0-1.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>pgaudit-1.5.0-1.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">a29cba50326b3c78b1cff9ad076eff7837022e71f02d7ec9e918aed69a9c3f35</sum>
        </package>
        <package name="postgresql-plperl" version="13.23" release="2.module_el8.10.0+4124+c9cb0592" epoch="0" arch="s390x" src="postgresql-13.23-2.module_el8.10.0+4124+c9cb0592.src.rpm">
          <filename>postgresql-plperl-13.23-2.module_el8.10.0+4124+c9cb0592.s390x.rpm</filename>
          <sum type="sha256">a94cd061c15c9b8f1588ac35998166869866ada31700e8e3b3ffd7c9e49f13e0</sum>
        </package>
        <package name="postgres-decoderbufs" version="0.10.0" release="2.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>postgres-decoderbufs-0.10.0-2.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">b11226898b888f8213eefe941cece0f636a08ccce2ceaa8bee2a38e6058ed4f3</sum>
        </package>
        <package name="pg_repack" version="1.4.6" release="3.module_el8.6.0+3095+ee60d910" epoch="0" arch="s390x" src="pg_repack-1.4.6-3.module_el8.6.0+3095+ee60d910.src.rpm">
          <filename>pg_repack-1.4.6-3.module_el8.6.0+3095+ee60d910.s390x.rpm</filename>
          <sum type="sha256">c1b386540b304a4de3ff8d840ec35dc9d67ecd1827aa06cd695f06060e8d2ea7</sum>
        </package>
        <package name="postgresql-docs" version="13.23" release="2.module_el8.10.0+4124+c9cb0592" epoch="0" arch="s390x" src="postgresql-13.23-2.module_el8.10.0+4124+c9cb0592.src.rpm">
          <filename>postgresql-docs-13.23-2.module_el8.10.0+4124+c9cb0592.s390x.rpm</filename>
          <sum type="sha256">c4a2aa62fc3f92fec9be34f4b3bdbd91f1fc5cc5ec399653acb714a933316f08</sum>
        </package>
        <package name="postgresql" version="13.23" release="2.module_el8.10.0+4124+c9cb0592" epoch="0" arch="s390x" src="postgresql-13.23-2.module_el8.10.0+4124+c9cb0592.src.rpm">
          <filename>postgresql-13.23-2.module_el8.10.0+4124+c9cb0592.s390x.rpm</filename>
          <sum type="sha256">e7eb9b404e7465057c7f4c75a28af0a466dee479988056a8955b3a774d1bbd1f</sum>
        </package>
        <package name="postgresql-upgrade" version="13.23" release="2.module_el8.10.0+4124+c9cb0592" epoch="0" arch="s390x" src="postgresql-13.23-2.module_el8.10.0+4124+c9cb0592.src.rpm">
          <filename>postgresql-upgrade-13.23-2.module_el8.10.0+4124+c9cb0592.s390x.rpm</filename>
          <sum type="sha256">e83a1c6370a88d9d36ad1f902c2b0436e0c102e341f1f83a0b1697b289247669</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4059</id>
    <title>Important: postgresql:15 security update</title>
    <issued date="2026-03-09 00:00:00"/>
    <updated date="2026-03-11 09:49:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:15 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006)
  * postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code (CVE-2026-2004)
  * postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code (CVE-2026-2005)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4059" id="RHSA-2026:4059" type="rhsa" title="RHSA-2026:4059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2004" id="CVE-2026-2004" type="cve" title="CVE-2026-2004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2005" id="CVE-2026-2005" type="cve" title="CVE-2026-2005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2006" id="CVE-2026-2006" type="cve" title="CVE-2026-2006"/>
      <reference href="https://bugzilla.redhat.com/2439324" id="2439324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439325" id="2439325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439326" id="2439326" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4059.html" id="ALSA-2026:4059" type="self" title="ALSA-2026:4059"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="15" version="8100020260310134015" context="9edba152" arch="s390x"/>
        <package name="postgresql-plperl" version="15.17" release="1.module_el8.10.0+4127+dc6e3c5c" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el8.10.0+4127+dc6e3c5c.src.rpm">
          <filename>postgresql-plperl-15.17-1.module_el8.10.0+4127+dc6e3c5c.s390x.rpm</filename>
          <sum type="sha256">058e37438b0036672e31fa193000640902b9eb83afbfd22654011010a4958f5f</sum>
        </package>
        <package name="postgresql-contrib" version="15.17" release="1.module_el8.10.0+4127+dc6e3c5c" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el8.10.0+4127+dc6e3c5c.src.rpm">
          <filename>postgresql-contrib-15.17-1.module_el8.10.0+4127+dc6e3c5c.s390x.rpm</filename>
          <sum type="sha256">1e8607d7e77da570ec01fe9fcda0828aafd0be35d50ee94b0e196b3515175e84</sum>
        </package>
        <package name="postgresql-test" version="15.17" release="1.module_el8.10.0+4127+dc6e3c5c" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el8.10.0+4127+dc6e3c5c.src.rpm">
          <filename>postgresql-test-15.17-1.module_el8.10.0+4127+dc6e3c5c.s390x.rpm</filename>
          <sum type="sha256">24a20251cf390aa3e4a30e2f540415b4e11d4c7f1d09b3cbd10048c4f359eafe</sum>
        </package>
        <package name="postgresql-pltcl" version="15.17" release="1.module_el8.10.0+4127+dc6e3c5c" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el8.10.0+4127+dc6e3c5c.src.rpm">
          <filename>postgresql-pltcl-15.17-1.module_el8.10.0+4127+dc6e3c5c.s390x.rpm</filename>
          <sum type="sha256">24d438c387a77e101ccb5fe62b7d85b819c0f9f296660e7c56d8a89f62138498</sum>
        </package>
        <package name="postgresql-private-libs" version="15.17" release="1.module_el8.10.0+4127+dc6e3c5c" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el8.10.0+4127+dc6e3c5c.src.rpm">
          <filename>postgresql-private-libs-15.17-1.module_el8.10.0+4127+dc6e3c5c.s390x.rpm</filename>
          <sum type="sha256">35b52aa1d1eab29d7a4d9fcf2667994a7ffe9009c1f79cfb4675a97f247bf330</sum>
        </package>
        <package name="postgresql" version="15.17" release="1.module_el8.10.0+4127+dc6e3c5c" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el8.10.0+4127+dc6e3c5c.src.rpm">
          <filename>postgresql-15.17-1.module_el8.10.0+4127+dc6e3c5c.s390x.rpm</filename>
          <sum type="sha256">47b06af2aed057de28ea14727f1bc87da8cd0309223d0898c34acceb3d2d9f6f</sum>
        </package>
        <package name="postgresql-static" version="15.17" release="1.module_el8.10.0+4127+dc6e3c5c" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el8.10.0+4127+dc6e3c5c.src.rpm">
          <filename>postgresql-static-15.17-1.module_el8.10.0+4127+dc6e3c5c.s390x.rpm</filename>
          <sum type="sha256">6b38e5a7861c50de586ef22a1c0d7e390e4f071a53baf74ff714ab81ed0c64df</sum>
        </package>
        <package name="pg_repack" version="1.4.8" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="pg_repack-1.4.8-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>pg_repack-1.4.8-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">7fbd57e759f737f8bc3c7bc2715300640b00ae84ed9b74d469be03ee537d20b9</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="15.17" release="1.module_el8.10.0+4127+dc6e3c5c" epoch="0" arch="noarch" src="postgresql-15.17-1.module_el8.10.0+4127+dc6e3c5c.src.rpm">
          <filename>postgresql-test-rpm-macros-15.17-1.module_el8.10.0+4127+dc6e3c5c.noarch.rpm</filename>
          <sum type="sha256">8ccdc0aa7da019330e4cc05f8215958c1fd76efc57cf3ba13e2a4e0184d90aba</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="15.17" release="1.module_el8.10.0+4127+dc6e3c5c" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el8.10.0+4127+dc6e3c5c.src.rpm">
          <filename>postgresql-upgrade-devel-15.17-1.module_el8.10.0+4127+dc6e3c5c.s390x.rpm</filename>
          <sum type="sha256">b53d9b5d0e65cc057784fc7b1b313f4a9680322d0144e03519456fc8a030cee1</sum>
        </package>
        <package name="postgresql-upgrade" version="15.17" release="1.module_el8.10.0+4127+dc6e3c5c" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el8.10.0+4127+dc6e3c5c.src.rpm">
          <filename>postgresql-upgrade-15.17-1.module_el8.10.0+4127+dc6e3c5c.s390x.rpm</filename>
          <sum type="sha256">ba006618a8d3d65dbf29f931859f827172568c34d91e254e22878ac932359f9d</sum>
        </package>
        <package name="pgaudit" version="1.7.0" release="1.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="pgaudit-1.7.0-1.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>pgaudit-1.7.0-1.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">bebebc0b85b4d88d466cf43a44e5ae321c851b621377e2c96e1564cf00fd07bd</sum>
        </package>
        <package name="postgresql-server" version="15.17" release="1.module_el8.10.0+4127+dc6e3c5c" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el8.10.0+4127+dc6e3c5c.src.rpm">
          <filename>postgresql-server-15.17-1.module_el8.10.0+4127+dc6e3c5c.s390x.rpm</filename>
          <sum type="sha256">bf9f53612e1df921548cbbadbc26f2bbd53e51298399d64bc75bb3e8f76ce597</sum>
        </package>
        <package name="postgresql-server-devel" version="15.17" release="1.module_el8.10.0+4127+dc6e3c5c" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el8.10.0+4127+dc6e3c5c.src.rpm">
          <filename>postgresql-server-devel-15.17-1.module_el8.10.0+4127+dc6e3c5c.s390x.rpm</filename>
          <sum type="sha256">d44700f0196b67aca82728478b0533832735cacd14898fca656d74e5d55e484c</sum>
        </package>
        <package name="postgres-decoderbufs" version="1.9.7" release="1.Final.module_el8.9.0+3706+885c732e" epoch="0" arch="s390x" src="postgres-decoderbufs-1.9.7-1.Final.module_el8.9.0+3706+885c732e.src.rpm">
          <filename>postgres-decoderbufs-1.9.7-1.Final.module_el8.9.0+3706+885c732e.s390x.rpm</filename>
          <sum type="sha256">d93f26982b8a0299bb5535e5aed623996c696a2eb2f9157554b4dae3f5cce2ef</sum>
        </package>
        <package name="postgresql-docs" version="15.17" release="1.module_el8.10.0+4127+dc6e3c5c" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el8.10.0+4127+dc6e3c5c.src.rpm">
          <filename>postgresql-docs-15.17-1.module_el8.10.0+4127+dc6e3c5c.s390x.rpm</filename>
          <sum type="sha256">e4706f55c566f925c3bb46686d45d647e1360b9bf4db7bd9b8539dad31ee2d20</sum>
        </package>
        <package name="postgresql-plpython3" version="15.17" release="1.module_el8.10.0+4127+dc6e3c5c" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el8.10.0+4127+dc6e3c5c.src.rpm">
          <filename>postgresql-plpython3-15.17-1.module_el8.10.0+4127+dc6e3c5c.s390x.rpm</filename>
          <sum type="sha256">e9c237fbd84d49b203d750cf3b904fdfc7ed90f55740692046d4e90033c8bfa2</sum>
        </package>
        <package name="postgresql-private-devel" version="15.17" release="1.module_el8.10.0+4127+dc6e3c5c" epoch="0" arch="s390x" src="postgresql-15.17-1.module_el8.10.0+4127+dc6e3c5c.src.rpm">
          <filename>postgresql-private-devel-15.17-1.module_el8.10.0+4127+dc6e3c5c.s390x.rpm</filename>
          <sum type="sha256">f73ba8c4d5c28e78515d145b8bef2c3a5622726526b049778aaa10c22a4f0a1a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4063</id>
    <title>Important: postgresql:16 security update</title>
    <issued date="2026-03-09 00:00:00"/>
    <updated date="2026-03-11 09:46:43"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:16 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006)
  * postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code (CVE-2026-2004)
  * postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code (CVE-2026-2005)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4063" id="RHSA-2026:4063" type="rhsa" title="RHSA-2026:4063"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2004" id="CVE-2026-2004" type="cve" title="CVE-2026-2004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2005" id="CVE-2026-2005" type="cve" title="CVE-2026-2005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2006" id="CVE-2026-2006" type="cve" title="CVE-2026-2006"/>
      <reference href="https://bugzilla.redhat.com/2439324" id="2439324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439325" id="2439325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439326" id="2439326" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4063.html" id="ALSA-2026:4063" type="self" title="ALSA-2026:4063"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="16" version="8100020241205105204" context="9edba152" arch="s390x"/>
        <package name="postgresql-docs" version="16.13" release="1.module_el8.10.0+4125+ceaf7d1b" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el8.10.0+4125+ceaf7d1b.src.rpm">
          <filename>postgresql-docs-16.13-1.module_el8.10.0+4125+ceaf7d1b.s390x.rpm</filename>
          <sum type="sha256">14a91ad2335e71001b7477f0b563944431e734f5a908aa00ec69082bab1c20a6</sum>
        </package>
        <package name="postgresql-pltcl" version="16.13" release="1.module_el8.10.0+4125+ceaf7d1b" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el8.10.0+4125+ceaf7d1b.src.rpm">
          <filename>postgresql-pltcl-16.13-1.module_el8.10.0+4125+ceaf7d1b.s390x.rpm</filename>
          <sum type="sha256">17fb381ab3ff03639ccb109567e7a83145e64eb93dcc43cc416b3920081dd805</sum>
        </package>
        <package name="postgresql-plperl" version="16.13" release="1.module_el8.10.0+4125+ceaf7d1b" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el8.10.0+4125+ceaf7d1b.src.rpm">
          <filename>postgresql-plperl-16.13-1.module_el8.10.0+4125+ceaf7d1b.s390x.rpm</filename>
          <sum type="sha256">39e7ac3108c97d53552dfb9b75bf80d6485a6193cbd9775ea02b8ce13d4e86d7</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="16.13" release="1.module_el8.10.0+4125+ceaf7d1b" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el8.10.0+4125+ceaf7d1b.src.rpm">
          <filename>postgresql-upgrade-devel-16.13-1.module_el8.10.0+4125+ceaf7d1b.s390x.rpm</filename>
          <sum type="sha256">43afffdbe8e96797675082d05f87221d877196d5ac70cd100445fb4498112146</sum>
        </package>
        <package name="postgresql-test" version="16.13" release="1.module_el8.10.0+4125+ceaf7d1b" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el8.10.0+4125+ceaf7d1b.src.rpm">
          <filename>postgresql-test-16.13-1.module_el8.10.0+4125+ceaf7d1b.s390x.rpm</filename>
          <sum type="sha256">7d37de8f739fb7daa52fb6f44bc66c102c8f0e96062844a9aec0d154eb3e90da</sum>
        </package>
        <package name="postgresql-contrib" version="16.13" release="1.module_el8.10.0+4125+ceaf7d1b" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el8.10.0+4125+ceaf7d1b.src.rpm">
          <filename>postgresql-contrib-16.13-1.module_el8.10.0+4125+ceaf7d1b.s390x.rpm</filename>
          <sum type="sha256">8c8348ec1ab77c080c7d96667dcfd216a83367e7b04d16c512fb3c7355af7c79</sum>
        </package>
        <package name="postgresql-plpython3" version="16.13" release="1.module_el8.10.0+4125+ceaf7d1b" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el8.10.0+4125+ceaf7d1b.src.rpm">
          <filename>postgresql-plpython3-16.13-1.module_el8.10.0+4125+ceaf7d1b.s390x.rpm</filename>
          <sum type="sha256">93ca4b209092152afcc1b59476659defae9d731a05d0ddb06cd2222be9e26425</sum>
        </package>
        <package name="pg_repack" version="1.5.1" release="1.module_el8.10.0+3930+ecf33554" epoch="0" arch="s390x" src="pg_repack-1.5.1-1.module_el8.10.0+3930+ecf33554.src.rpm">
          <filename>pg_repack-1.5.1-1.module_el8.10.0+3930+ecf33554.s390x.rpm</filename>
          <sum type="sha256">9b13f1d5444f6cf8500fa428e1512f73c0cf1f4ddddd6964d429433ae4e5f724</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="16.13" release="1.module_el8.10.0+4125+ceaf7d1b" epoch="0" arch="noarch" src="postgresql-16.13-1.module_el8.10.0+4125+ceaf7d1b.src.rpm">
          <filename>postgresql-test-rpm-macros-16.13-1.module_el8.10.0+4125+ceaf7d1b.noarch.rpm</filename>
          <sum type="sha256">a0ed26cda5836bb028d575f7dd5905462e7c40c788798f14f5cd0e77c314376b</sum>
        </package>
        <package name="postgresql-private-libs" version="16.13" release="1.module_el8.10.0+4125+ceaf7d1b" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el8.10.0+4125+ceaf7d1b.src.rpm">
          <filename>postgresql-private-libs-16.13-1.module_el8.10.0+4125+ceaf7d1b.s390x.rpm</filename>
          <sum type="sha256">a78f406b19a0a73a9eff8d1fb4d785168d33bfa5f14ee08bf157be88a58bd3f4</sum>
        </package>
        <package name="postgres-decoderbufs" version="2.4.0" release="1.Final.module_el8.10.0+3798+606ebb9f" epoch="0" arch="s390x" src="postgres-decoderbufs-2.4.0-1.Final.module_el8.10.0+3798+606ebb9f.src.rpm">
          <filename>postgres-decoderbufs-2.4.0-1.Final.module_el8.10.0+3798+606ebb9f.s390x.rpm</filename>
          <sum type="sha256">b4ab4ce80d621ce9e80cef82edec35ef1ab32c9448d690e668db0bb17bd1a90a</sum>
        </package>
        <package name="postgresql-server" version="16.13" release="1.module_el8.10.0+4125+ceaf7d1b" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el8.10.0+4125+ceaf7d1b.src.rpm">
          <filename>postgresql-server-16.13-1.module_el8.10.0+4125+ceaf7d1b.s390x.rpm</filename>
          <sum type="sha256">bbbe113cb2a3d847b797ed88d082bc68037ca09d0d02be9a8cc1143634366dd7</sum>
        </package>
        <package name="postgresql-private-devel" version="16.13" release="1.module_el8.10.0+4125+ceaf7d1b" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el8.10.0+4125+ceaf7d1b.src.rpm">
          <filename>postgresql-private-devel-16.13-1.module_el8.10.0+4125+ceaf7d1b.s390x.rpm</filename>
          <sum type="sha256">ce048f068071cfef3a77f2f19cce19d43ebe0ee497135501578dc69186f40d62</sum>
        </package>
        <package name="postgresql-upgrade" version="16.13" release="1.module_el8.10.0+4125+ceaf7d1b" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el8.10.0+4125+ceaf7d1b.src.rpm">
          <filename>postgresql-upgrade-16.13-1.module_el8.10.0+4125+ceaf7d1b.s390x.rpm</filename>
          <sum type="sha256">cf467c80fda11dcc496ebfcec19e88ac65042c516b350125d1a5c1b46c32659d</sum>
        </package>
        <package name="pgaudit" version="16.0" release="1.module_el8.10.0+3798+606ebb9f" epoch="0" arch="s390x" src="pgaudit-16.0-1.module_el8.10.0+3798+606ebb9f.src.rpm">
          <filename>pgaudit-16.0-1.module_el8.10.0+3798+606ebb9f.s390x.rpm</filename>
          <sum type="sha256">e1395e420ef0b455c809e9fbbc50b5a27410be72d91603805a4907b86ca95cce</sum>
        </package>
        <package name="postgresql" version="16.13" release="1.module_el8.10.0+4125+ceaf7d1b" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el8.10.0+4125+ceaf7d1b.src.rpm">
          <filename>postgresql-16.13-1.module_el8.10.0+4125+ceaf7d1b.s390x.rpm</filename>
          <sum type="sha256">e54d0f503b4a3c8d84200f2c502a37f6163849ea3ab89c222ffce9cff21cc76e</sum>
        </package>
        <package name="postgresql-server-devel" version="16.13" release="1.module_el8.10.0+4125+ceaf7d1b" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el8.10.0+4125+ceaf7d1b.src.rpm">
          <filename>postgresql-server-devel-16.13-1.module_el8.10.0+4125+ceaf7d1b.s390x.rpm</filename>
          <sum type="sha256">e7707f03956f8190f8aaf769bdae9449a1bb1680ed43a86d526afe39f8f4437f</sum>
        </package>
        <package name="postgresql-static" version="16.13" release="1.module_el8.10.0+4125+ceaf7d1b" epoch="0" arch="s390x" src="postgresql-16.13-1.module_el8.10.0+4125+ceaf7d1b.src.rpm">
          <filename>postgresql-static-16.13-1.module_el8.10.0+4125+ceaf7d1b.s390x.rpm</filename>
          <sum type="sha256">fcde828037b23273500e5cca84b293613f7955fbc4a5418f822efc7b00238792</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4064</id>
    <title>Important: postgresql:12 security update</title>
    <issued date="2026-03-09 00:00:00"/>
    <updated date="2026-03-11 09:29:57"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql:12 security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006)
  * postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code (CVE-2026-2004)
  * postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code (CVE-2026-2005)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4064" id="RHSA-2026:4064" type="rhsa" title="RHSA-2026:4064"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2004" id="CVE-2026-2004" type="cve" title="CVE-2026-2004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2005" id="CVE-2026-2005" type="cve" title="CVE-2026-2005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2006" id="CVE-2026-2006" type="cve" title="CVE-2026-2006"/>
      <reference href="https://bugzilla.redhat.com/2439324" id="2439324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439325" id="2439325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439326" id="2439326" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4064.html" id="ALSA-2026:4064" type="self" title="ALSA-2026:4064"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="postgresql" stream="12" version="8090020240227082527" context="9edba152" arch="s390x"/>
        <package name="pgaudit" version="1.4.0" release="7.module_el8.9.0+3740+0e74851f.alma.1" epoch="0" arch="s390x" src="pgaudit-1.4.0-7.module_el8.9.0+3740+0e74851f.alma.1.src.rpm">
          <filename>pgaudit-1.4.0-7.module_el8.9.0+3740+0e74851f.alma.1.s390x.rpm</filename>
          <sum type="sha256">05a6d09d675776fb9ab998aa9fb52890d6c4ecc40957331844fd2c42f555ebca</sum>
        </package>
        <package name="pg_repack" version="1.4.6" release="3.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="pg_repack-1.4.6-3.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>pg_repack-1.4.6-3.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">14fdf29fe5dd7075aaf956b75aec2c5028f78ea8c06a19b461fa970284284047</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="12.22" release="6.module_el8.10.0+4123+1638d348" epoch="0" arch="noarch" src="postgresql-12.22-6.module_el8.10.0+4123+1638d348.src.rpm">
          <filename>postgresql-test-rpm-macros-12.22-6.module_el8.10.0+4123+1638d348.noarch.rpm</filename>
          <sum type="sha256">2a295fb3c4aea3532b0a135dafc89276c6d8c52ba34ddb673137fcf2b0fb7c29</sum>
        </package>
        <package name="postgresql-docs" version="12.22" release="6.module_el8.10.0+4123+1638d348" epoch="0" arch="s390x" src="postgresql-12.22-6.module_el8.10.0+4123+1638d348.src.rpm">
          <filename>postgresql-docs-12.22-6.module_el8.10.0+4123+1638d348.s390x.rpm</filename>
          <sum type="sha256">49dac5b36af1298df91b1a2957b2099c85a5798ba552843a80f9f83a7e635f48</sum>
        </package>
        <package name="postgresql-server" version="12.22" release="6.module_el8.10.0+4123+1638d348" epoch="0" arch="s390x" src="postgresql-12.22-6.module_el8.10.0+4123+1638d348.src.rpm">
          <filename>postgresql-server-12.22-6.module_el8.10.0+4123+1638d348.s390x.rpm</filename>
          <sum type="sha256">70023e01eea84b5f9fcd65fd7bd26098711d7670a4cad22cd5a9c93a95687744</sum>
        </package>
        <package name="postgresql-server-devel" version="12.22" release="6.module_el8.10.0+4123+1638d348" epoch="0" arch="s390x" src="postgresql-12.22-6.module_el8.10.0+4123+1638d348.src.rpm">
          <filename>postgresql-server-devel-12.22-6.module_el8.10.0+4123+1638d348.s390x.rpm</filename>
          <sum type="sha256">72408f0a0593f032f5c65ef141ccb152fe8b8e498f14d4c1bf9b1f87f966a791</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="12.22" release="6.module_el8.10.0+4123+1638d348" epoch="0" arch="s390x" src="postgresql-12.22-6.module_el8.10.0+4123+1638d348.src.rpm">
          <filename>postgresql-upgrade-devel-12.22-6.module_el8.10.0+4123+1638d348.s390x.rpm</filename>
          <sum type="sha256">741a74f4a0fa71c1aaf605b317bdbe4c820d75542c5023112a972f3ffe031ea3</sum>
        </package>
        <package name="postgresql-pltcl" version="12.22" release="6.module_el8.10.0+4123+1638d348" epoch="0" arch="s390x" src="postgresql-12.22-6.module_el8.10.0+4123+1638d348.src.rpm">
          <filename>postgresql-pltcl-12.22-6.module_el8.10.0+4123+1638d348.s390x.rpm</filename>
          <sum type="sha256">7cb953d3660d3b80a3d8f3d874f0df7aa8ec4e71c8251074bcf8a416c83faf07</sum>
        </package>
        <package name="postgresql-contrib" version="12.22" release="6.module_el8.10.0+4123+1638d348" epoch="0" arch="s390x" src="postgresql-12.22-6.module_el8.10.0+4123+1638d348.src.rpm">
          <filename>postgresql-contrib-12.22-6.module_el8.10.0+4123+1638d348.s390x.rpm</filename>
          <sum type="sha256">7e193b99e7e837582f750232d5dca732edf026853b8990e70a2d76edabf1f09d</sum>
        </package>
        <package name="postgres-decoderbufs" version="0.10.0" release="2.module_el8.9.0+3704+f1f917ce" epoch="0" arch="s390x" src="postgres-decoderbufs-0.10.0-2.module_el8.9.0+3704+f1f917ce.src.rpm">
          <filename>postgres-decoderbufs-0.10.0-2.module_el8.9.0+3704+f1f917ce.s390x.rpm</filename>
          <sum type="sha256">8cd16a1e3af9b7e12bf6df8db5735aeeb762e32913e95ec5dabcb05c6ac34f39</sum>
        </package>
        <package name="postgresql-test" version="12.22" release="6.module_el8.10.0+4123+1638d348" epoch="0" arch="s390x" src="postgresql-12.22-6.module_el8.10.0+4123+1638d348.src.rpm">
          <filename>postgresql-test-12.22-6.module_el8.10.0+4123+1638d348.s390x.rpm</filename>
          <sum type="sha256">92949988eb0cd925631922826d79409fea18383a856a5d3a2f794a238914b212</sum>
        </package>
        <package name="postgresql-upgrade" version="12.22" release="6.module_el8.10.0+4123+1638d348" epoch="0" arch="s390x" src="postgresql-12.22-6.module_el8.10.0+4123+1638d348.src.rpm">
          <filename>postgresql-upgrade-12.22-6.module_el8.10.0+4123+1638d348.s390x.rpm</filename>
          <sum type="sha256">9d9a8b879a49dbf515eb3454903f8b0cc8db9b3baa09a4bf4daefbd8391279b2</sum>
        </package>
        <package name="postgresql-plperl" version="12.22" release="6.module_el8.10.0+4123+1638d348" epoch="0" arch="s390x" src="postgresql-12.22-6.module_el8.10.0+4123+1638d348.src.rpm">
          <filename>postgresql-plperl-12.22-6.module_el8.10.0+4123+1638d348.s390x.rpm</filename>
          <sum type="sha256">daef56c783a557f28b020afb4f2f964a661d086acdf3358bad634cc87c23157e</sum>
        </package>
        <package name="postgresql" version="12.22" release="6.module_el8.10.0+4123+1638d348" epoch="0" arch="s390x" src="postgresql-12.22-6.module_el8.10.0+4123+1638d348.src.rpm">
          <filename>postgresql-12.22-6.module_el8.10.0+4123+1638d348.s390x.rpm</filename>
          <sum type="sha256">e53241742ac19ba08dbb4ea75e69697f2a22f93ac717d91dc0b64901de669368</sum>
        </package>
        <package name="postgresql-static" version="12.22" release="6.module_el8.10.0+4123+1638d348" epoch="0" arch="s390x" src="postgresql-12.22-6.module_el8.10.0+4123+1638d348.src.rpm">
          <filename>postgresql-static-12.22-6.module_el8.10.0+4123+1638d348.s390x.rpm</filename>
          <sum type="sha256">e964aa1df1d3af8793c07238e7123195a94723a5894d4ff89ec1aa931a4a6af5</sum>
        </package>
        <package name="postgresql-plpython3" version="12.22" release="6.module_el8.10.0+4123+1638d348" epoch="0" arch="s390x" src="postgresql-12.22-6.module_el8.10.0+4123+1638d348.src.rpm">
          <filename>postgresql-plpython3-12.22-6.module_el8.10.0+4123+1638d348.s390x.rpm</filename>
          <sum type="sha256">f656a9b69b3b79c1e8ec67faeaa6ef2075ebdb2a76625675b796871c93ec79a4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:40841</id>
    <title>Important: maven:3.8 security update</title>
    <issued date="2026-07-16 00:00:00"/>
    <updated date="2026-07-17 08:35:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>maven:3.8 security update</summary>
    <description>Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information.  

Security Fix(es):  

  * org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:40841" id="RHSA-2026:40841" type="rhsa" title="RHSA-2026:40841"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-67030" id="CVE-2025-67030" type="cve" title="CVE-2025-67030"/>
      <reference href="https://bugzilla.redhat.com/2451409" id="2451409" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-40841.html" id="ALSA-2026:40841" type="self" title="ALSA-2026:40841"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="maven" stream="3.8" version="8100020240411163558" context="89d92b8f" arch="s390x"/>
        <package name="apache-commons-cli" version="1.5.0" release="5.module_el8.10.0+3805+55513176" epoch="0" arch="noarch" src="apache-commons-cli-1.5.0-5.module_el8.10.0+3805+55513176.src.rpm">
          <filename>apache-commons-cli-1.5.0-5.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">0f1bd0485f08cf241212290a1820a2abdd79d85c1151a6dd14d4890078e8c79a</sum>
        </package>
        <package name="maven-resolver" version="1.7.3" release="6.module_el8.10.0+3805+55513176" epoch="1" arch="noarch" src="maven-resolver-1.7.3-6.module_el8.10.0+3805+55513176.src.rpm">
          <filename>maven-resolver-1.7.3-6.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">11224b0fd44644c23cb91ac7441fb149502328cccb6a723a37974d27e8517580</sum>
        </package>
        <package name="maven-wagon" version="3.5.1" release="3.module_el8.10.0+3805+55513176" epoch="0" arch="noarch" src="maven-wagon-3.5.1-3.module_el8.10.0+3805+55513176.src.rpm">
          <filename>maven-wagon-3.5.1-3.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">15542f79dbdee24d7027142f3f76a08ae1ccfb3dc5dad83f50fb8297819b1778</sum>
        </package>
        <package name="plexus-interpolation" version="1.26" release="13.module_el8.10.0+3805+55513176" epoch="0" arch="noarch" src="plexus-interpolation-1.26-13.module_el8.10.0+3805+55513176.src.rpm">
          <filename>plexus-interpolation-1.26-13.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">279316c48ed6a75dca087977f2cc72d9d3de612d8a7a95abfbaf05a8057513ed</sum>
        </package>
        <package name="sisu" version="0.3.5" release="3.module_el8.10.0+3805+55513176" epoch="1" arch="noarch" src="sisu-0.3.5-3.module_el8.10.0+3805+55513176.src.rpm">
          <filename>sisu-0.3.5-3.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">359b319b90d5882ef79531744707dc048eb5fc38453c67c807e18483319c5e42</sum>
        </package>
        <package name="jansi" version="2.4.0" release="7.module_el8.10.0+3805+55513176" epoch="0" arch="s390x" src="jansi-2.4.0-7.module_el8.10.0+3805+55513176.src.rpm">
          <filename>jansi-2.4.0-7.module_el8.10.0+3805+55513176.s390x.rpm</filename>
          <sum type="sha256">375459f303f0fc57966c51d5b80b10e842b519bb914a97a8add8fe5bdd41a297</sum>
        </package>
        <package name="maven-openjdk8" version="3.8.5" release="6.module_el8.10.0+3805+55513176" epoch="1" arch="noarch" src="maven-3.8.5-6.module_el8.10.0+3805+55513176.src.rpm">
          <filename>maven-openjdk8-3.8.5-6.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">3a71f5ddb267e5c0b9e812efe1d3360ba5cd209400ca7a2967a0b564b07b0c64</sum>
        </package>
        <package name="guava" version="31.0.1" release="5.module_el8.10.0+3805+55513176" epoch="0" arch="noarch" src="guava-31.0.1-5.module_el8.10.0+3805+55513176.src.rpm">
          <filename>guava-31.0.1-5.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">3c3887641e5a333583b8bfa7a6a575a2b457475ab6ed4156835dcadc65149b53</sum>
        </package>
        <package name="plexus-classworlds" version="2.6.0" release="13.module_el8.10.0+3805+55513176" epoch="0" arch="noarch" src="plexus-classworlds-2.6.0-13.module_el8.10.0+3805+55513176.src.rpm">
          <filename>plexus-classworlds-2.6.0-13.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">3f6eff55b4d3cc97325fc5014b0bb854bbbd3331160232d1e8916e8b078b7262</sum>
        </package>
        <package name="httpcomponents-client" version="4.5.13" release="6.module_el8.10.0+3805+55513176" epoch="0" arch="noarch" src="httpcomponents-client-4.5.13-6.module_el8.10.0+3805+55513176.src.rpm">
          <filename>httpcomponents-client-4.5.13-6.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">44914de7115e0609e41f74d6f46c411485064e74491c8517f64e8a1d9478dca5</sum>
        </package>
        <package name="apache-commons-lang3" version="3.12.0" release="8.module_el8.10.0+3805+55513176" epoch="0" arch="noarch" src="apache-commons-lang3-3.12.0-8.module_el8.10.0+3805+55513176.src.rpm">
          <filename>apache-commons-lang3-3.12.0-8.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">4ca698a5034dff9ee989920230259550922c2904991f966aa430090443244ca3</sum>
        </package>
        <package name="maven-openjdk11" version="3.8.5" release="6.module_el8.10.0+3805+55513176" epoch="1" arch="noarch" src="maven-3.8.5-6.module_el8.10.0+3805+55513176.src.rpm">
          <filename>maven-openjdk11-3.8.5-6.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">533449c7f763b537b8377ec04fe8aa5aab15bc23deabe4dedcf3de604e9fb957</sum>
        </package>
        <package name="slf4j" version="1.7.32" release="5.module_el8.10.0+3805+55513176" epoch="0" arch="noarch" src="slf4j-1.7.32-5.module_el8.10.0+3805+55513176.src.rpm">
          <filename>slf4j-1.7.32-5.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">5904d6f3c667ab61ec93496a13d0e9846e7b1deef4067a21a89c2e97b1ad552f</sum>
        </package>
        <package name="google-guice" version="4.2.3" release="10.module_el8.10.0+3805+55513176" epoch="0" arch="noarch" src="google-guice-4.2.3-10.module_el8.10.0+3805+55513176.src.rpm">
          <filename>google-guice-4.2.3-10.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">604460a84ed8741d05c6b18c6552a52a405976b6bccd9929a6e6297bf46ef1b6</sum>
        </package>
        <package name="maven-lib" version="3.8.5" release="6.module_el8.10.0+3805+55513176" epoch="1" arch="noarch" src="maven-3.8.5-6.module_el8.10.0+3805+55513176.src.rpm">
          <filename>maven-lib-3.8.5-6.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">61b92c96106b71127cd7a3033deec400248a153453fcfc645c06b32802ccc37a</sum>
        </package>
        <package name="jakarta-annotations" version="1.3.5" release="15.module_el8.10.0+3805+55513176" epoch="0" arch="noarch" src="jakarta-annotations-1.3.5-15.module_el8.10.0+3805+55513176.src.rpm">
          <filename>jakarta-annotations-1.3.5-15.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">61e2a3ef70efcbd8b7a255663534d48d57735688b1a81ef75e5d1f0c8ef34be0</sum>
        </package>
        <package name="plexus-cipher" version="2.0" release="3.module_el8.10.0+3805+55513176" epoch="0" arch="noarch" src="plexus-cipher-2.0-3.module_el8.10.0+3805+55513176.src.rpm">
          <filename>plexus-cipher-2.0-3.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">621c1fd20bfef9221721d0b898b6ce409fbc627d801e3fc50822c037c7010a55</sum>
        </package>
        <package name="maven-shared-utils" version="3.3.4" release="6.module_el8.10.0+3805+55513176" epoch="0" arch="noarch" src="maven-shared-utils-3.3.4-6.module_el8.10.0+3805+55513176.src.rpm">
          <filename>maven-shared-utils-3.3.4-6.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">64810b7ac5e97b117a5dd331725c192399911649a7b7a9b7288dfd273c3a6e93</sum>
        </package>
        <package name="plexus-utils" version="3.3.0" release="11.module_el8.10.0+4229+5e0a6206.1" epoch="0" arch="noarch" src="plexus-utils-3.3.0-11.module_el8.10.0+4229+5e0a6206.1.src.rpm">
          <filename>plexus-utils-3.3.0-11.module_el8.10.0+4229+5e0a6206.1.noarch.rpm</filename>
          <sum type="sha256">7d84e2100b24b9cf64226280bb5c901ffdf595ee43c879fe9624ef1d25fc9791</sum>
        </package>
        <package name="apache-commons-io" version="2.11.0" release="3.module_el8.10.0+3805+55513176" epoch="1" arch="noarch" src="apache-commons-io-2.11.0-3.module_el8.10.0+3805+55513176.src.rpm">
          <filename>apache-commons-io-2.11.0-3.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">7e6c4596519cdbcce14d60ba680721c58864586c3bc97817626da25c09e4a174</sum>
        </package>
        <package name="maven-openjdk17" version="3.8.5" release="6.module_el8.10.0+3805+55513176" epoch="1" arch="noarch" src="maven-3.8.5-6.module_el8.10.0+3805+55513176.src.rpm">
          <filename>maven-openjdk17-3.8.5-6.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">83642f83df1d1cff8573f6747e98f68a8930bbc6d66455d0c08aff0a451c0a1d</sum>
        </package>
        <package name="cdi-api" version="2.0.2" release="7.module_el8.10.0+3805+55513176" epoch="0" arch="noarch" src="cdi-api-2.0.2-7.module_el8.10.0+3805+55513176.src.rpm">
          <filename>cdi-api-2.0.2-7.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">847f06749308637a9fa8e16689861311d382c5e9202555f2b7b5ecb9b38a4732</sum>
        </package>
        <package name="plexus-sec-dispatcher" version="2.0" release="5.module_el8.10.0+3805+55513176" epoch="0" arch="noarch" src="plexus-sec-dispatcher-2.0-5.module_el8.10.0+3805+55513176.src.rpm">
          <filename>plexus-sec-dispatcher-2.0-5.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">995cbfa359c34762109bc9a10be6b51578c56a589b2d68ee2575dabf4da5ed36</sum>
        </package>
        <package name="jcl-over-slf4j" version="1.7.32" release="5.module_el8.10.0+3805+55513176" epoch="0" arch="noarch" src="slf4j-1.7.32-5.module_el8.10.0+3805+55513176.src.rpm">
          <filename>jcl-over-slf4j-1.7.32-5.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">a3d510e491871acb6a13aa178f55be47d05e117ad9038181dd1b7f56efa3daba</sum>
        </package>
        <package name="plexus-containers-component-annotations" version="2.1.1" release="3.module_el8.10.0+3805+55513176" epoch="0" arch="noarch" src="plexus-containers-2.1.1-3.module_el8.10.0+3805+55513176.src.rpm">
          <filename>plexus-containers-component-annotations-2.1.1-3.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">ab956c4efe20416414653fa862fdad3de922b1e3aed078fa7e3c0075095c19be</sum>
        </package>
        <package name="maven-openjdk21" version="3.8.5" release="6.module_el8.10.0+3805+55513176" epoch="1" arch="noarch" src="maven-3.8.5-6.module_el8.10.0+3805+55513176.src.rpm">
          <filename>maven-openjdk21-3.8.5-6.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">cde1d2b69f921d546fc272f7b6e03930c532da06a97fa385df21dde252a072cf</sum>
        </package>
        <package name="httpcomponents-core" version="4.4.13" release="8.module_el8.10.0+3805+55513176" epoch="0" arch="noarch" src="httpcomponents-core-4.4.13-8.module_el8.10.0+3805+55513176.src.rpm">
          <filename>httpcomponents-core-4.4.13-8.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">d9bf602b972aebf92d7bc16d24b5901519a0c2366d51ece5cfc0bbe068e82c01</sum>
        </package>
        <package name="jsr-305" version="3.0.2" release="7.module_el8.10.0+3805+55513176" epoch="0" arch="noarch" src="jsr-305-3.0.2-7.module_el8.10.0+3805+55513176.src.rpm">
          <filename>jsr-305-3.0.2-7.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">db87b4494dd3175f10d2e445d1edbc09bf6fabc70fbd2d5a0d3f0eddd2bd600f</sum>
        </package>
        <package name="atinject" version="1.0.5" release="5.module_el8.10.0+3805+55513176" epoch="0" arch="noarch" src="atinject-1.0.5-5.module_el8.10.0+3805+55513176.src.rpm">
          <filename>atinject-1.0.5-5.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">dbaae5a176cac57aac2d84edd7f9f36cde3ddcf8f2300a7bda84b1e31a188fbe</sum>
        </package>
        <package name="apache-commons-codec" version="1.15" release="8.module_el8.10.0+3805+55513176" epoch="0" arch="noarch" src="apache-commons-codec-1.15-8.module_el8.10.0+3805+55513176.src.rpm">
          <filename>apache-commons-codec-1.15-8.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">dcb929eda6b25b0a986f419fcff1e9733bbf09d45dc9a50e19cd007d72928ac9</sum>
        </package>
        <package name="maven" version="3.8.5" release="6.module_el8.10.0+3805+55513176" epoch="1" arch="noarch" src="maven-3.8.5-6.module_el8.10.0+3805+55513176.src.rpm">
          <filename>maven-3.8.5-6.module_el8.10.0+3805+55513176.noarch.rpm</filename>
          <sum type="sha256">ed075a938c596ec751ed459de116819daa9baa0625bcc59da97805c1f7b5e0ae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:40894</id>
    <title>Important: hplip security update</title>
    <issued date="2026-07-16 00:00:00"/>
    <updated date="2026-07-17 08:06:02"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>hplip security update</summary>
    <description>The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.  

Security Fix(es):  

  * HPLIP: Incomplete Fix for CVE-2026-8631 (CVE-2026-14544)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:40894" id="RHSA-2026:40894" type="rhsa" title="RHSA-2026:40894"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-14544" id="CVE-2026-14544" type="cve" title="CVE-2026-14544"/>
      <reference href="https://bugzilla.redhat.com/2496772" id="2496772" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-40894.html" id="ALSA-2026:40894" type="self" title="ALSA-2026:40894"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="hplip-common" version="3.18.4" release="14.el8_10.alma.1" epoch="0" arch="s390x" src="hplip-3.18.4-14.el8_10.alma.1.src.rpm">
          <filename>hplip-common-3.18.4-14.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">05cf162d46eff058dfdc4440c2a7ed17d4ceb78f19f487ff59db1faa9c7248c5</sum>
        </package>
        <package name="libsane-hpaio" version="3.18.4" release="14.el8_10.alma.1" epoch="0" arch="s390x" src="hplip-3.18.4-14.el8_10.alma.1.src.rpm">
          <filename>libsane-hpaio-3.18.4-14.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">25a3da3fa0f0a1079eb0b8422931f73f34e11b17d1670d067442045f5966c5c5</sum>
        </package>
        <package name="hplip" version="3.18.4" release="14.el8_10.alma.1" epoch="0" arch="s390x" src="hplip-3.18.4-14.el8_10.alma.1.src.rpm">
          <filename>hplip-3.18.4-14.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">75ce3d859fb73470ac24b9525e6027d36ffb55fc9c5fb26e1057a4859077d7bc</sum>
        </package>
        <package name="hplip-libs" version="3.18.4" release="14.el8_10.alma.1" epoch="0" arch="s390x" src="hplip-3.18.4-14.el8_10.alma.1.src.rpm">
          <filename>hplip-libs-3.18.4-14.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">765bd17e7fb3d305d6d93bf535571a4887cc3403341e006e429b3ab8b3db203a</sum>
        </package>
        <package name="hplip-gui" version="3.18.4" release="14.el8_10.alma.1" epoch="0" arch="s390x" src="hplip-3.18.4-14.el8_10.alma.1.src.rpm">
          <filename>hplip-gui-3.18.4-14.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">962052d647a421e51e8cba766dbc3b7db1cb369eb11de0027d29ab58bca4691a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4146</id>
    <title>Important: python-pyasn1 security update</title>
    <issued date="2026-03-10 00:00:00"/>
    <updated date="2026-03-10 08:51:50"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python-pyasn1 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4146" id="RHSA-2026:4146" type="rhsa" title="RHSA-2026:4146"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23490" id="CVE-2026-23490" type="cve" title="CVE-2026-23490"/>
      <reference href="https://bugzilla.redhat.com/2430472" id="2430472" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4146.html" id="ALSA-2026:4146" type="self" title="ALSA-2026:4146"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3-pyasn1-modules" version="0.3.7" release="6.el8_10.1" epoch="0" arch="noarch" src="python-pyasn1-0.3.7-6.el8_10.1.src.rpm">
          <filename>python3-pyasn1-modules-0.3.7-6.el8_10.1.noarch.rpm</filename>
          <sum type="sha256">157cdededec2c2bf429668084fec6d64ad0742643919a738007a6d044e640e88</sum>
        </package>
        <package name="python3-pyasn1" version="0.3.7" release="6.el8_10.1" epoch="0" arch="noarch" src="python-pyasn1-0.3.7-6.el8_10.1.src.rpm">
          <filename>python3-pyasn1-0.3.7-6.el8_10.1.noarch.rpm</filename>
          <sum type="sha256">21540e93b6505958661bf61e831885f1d33e89d2d4bcb2ea9d6f7e330e4a827b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:41947</id>
    <title>Important: nodejs:22 security, bug fix, and enhancement update</title>
    <issued date="2026-07-20 00:00:00"/>
    <updated date="2026-07-21 10:43:04"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:22 security, bug fix, and enhancement update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (CVE-2026-42338)
  * undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames (CVE-2026-12151)
  * undici: Undici: Information disclosure due to improper cache-control header parsing (CVE-2026-9678)
  * undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery. (CVE-2026-6733)
  * undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header (CVE-2026-11525)
  * nodejs: Node.js: Denial of Service via unlimited HTTP/2 ORIGIN frames (CVE-2026-48619)
  * nodejs: Node.js: Silent authority rebinding due to embedded-nul hostnames in TLS handling (CVE-2026-48930)
  * nodejs: Node.js: Unauthorized file metadata modification (CVE-2026-48935)
  * nodejs: Node.js WebCrypto: Denial of Service via large input to subtle.encrypt() (CVE-2026-48933)
  * nodejs: Node.js: Certification validation bypass in TLS host verification (CVE-2026-48934)
  * Node.js: Node.js: Trust-policy bypass due to hostname matching inconsistency (CVE-2026-48928)
  * nodejs: Node.js: Information disclosure of proxy credentials via proxy tunnel error handling (CVE-2026-48615)
  * nodejs: Node.js: Authentication bypass due to TLS hostname handling and unicode dot separator mismatch (CVE-2026-48618)


Bug Fix(es) and Enhancement(s):  

  * nodejs:22/nodejs: Rebase to the latest Node.js 22 release [almalinux-8] (JIRA:AlmaLinux-176170)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:41947" id="RHSA-2026:41947" type="rhsa" title="RHSA-2026:41947"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-11525" id="CVE-2026-11525" type="cve" title="CVE-2026-11525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12151" id="CVE-2026-12151" type="cve" title="CVE-2026-12151"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42338" id="CVE-2026-42338" type="cve" title="CVE-2026-42338"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48615" id="CVE-2026-48615" type="cve" title="CVE-2026-48615"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48618" id="CVE-2026-48618" type="cve" title="CVE-2026-48618"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48619" id="CVE-2026-48619" type="cve" title="CVE-2026-48619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48928" id="CVE-2026-48928" type="cve" title="CVE-2026-48928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48930" id="CVE-2026-48930" type="cve" title="CVE-2026-48930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48933" id="CVE-2026-48933" type="cve" title="CVE-2026-48933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48934" id="CVE-2026-48934" type="cve" title="CVE-2026-48934"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48935" id="CVE-2026-48935" type="cve" title="CVE-2026-48935"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6733" id="CVE-2026-6733" type="cve" title="CVE-2026-6733"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-9678" id="CVE-2026-9678" type="cve" title="CVE-2026-9678"/>
      <reference href="https://bugzilla.redhat.com/2476810" id="2476810" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2489980" id="2489980" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2490000" id="2490000" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2490006" id="2490006" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2490008" id="2490008" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493325" id="2493325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493326" id="2493326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493329" id="2493329" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493331" id="2493331" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493332" id="2493332" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493333" id="2493333" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493335" id="2493335" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493337" id="2493337" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-41947.html" id="ALSA-2026:41947" type="self" title="ALSA-2026:41947"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="nodejs" stream="22" version="8100020260720141108" context="9c84b808" arch="s390x"/>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.10.0+3956+47c9ee9f" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.10.0+3956+47c9ee9f.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.10.0+3956+47c9ee9f.noarch.rpm</filename>
          <sum type="sha256">021150406b73938423f86035275d5036c2cb0970af2ba79e22c19ead5527d763</sum>
        </package>
        <package name="v8-12.4-devel" version="12.4.254.21" release="1.22.23.1.1.module_el8.10.0+4231+1bf2f855" epoch="3" arch="s390x" src="nodejs-22.23.1-1.module_el8.10.0+4231+1bf2f855.src.rpm">
          <filename>v8-12.4-devel-12.4.254.21-1.22.23.1.1.module_el8.10.0+4231+1bf2f855.s390x.rpm</filename>
          <sum type="sha256">21cdd65380d77949b7218c2131fed44fe68eeade1f334378e7eb200eb85fc0e9</sum>
        </package>
        <package name="npm" version="10.9.8" release="1.22.23.1.1.module_el8.10.0+4231+1bf2f855" epoch="1" arch="s390x" src="nodejs-22.23.1-1.module_el8.10.0+4231+1bf2f855.src.rpm">
          <filename>npm-10.9.8-1.22.23.1.1.module_el8.10.0+4231+1bf2f855.s390x.rpm</filename>
          <sum type="sha256">54440347f9b4b6d3638962b510ef4a9d75908a3cd54e1447b02f9d808ed9811b</sum>
        </package>
        <package name="nodejs" version="22.23.1" release="1.module_el8.10.0+4231+1bf2f855" epoch="1" arch="s390x" src="nodejs-22.23.1-1.module_el8.10.0+4231+1bf2f855.src.rpm">
          <filename>nodejs-22.23.1-1.module_el8.10.0+4231+1bf2f855.s390x.rpm</filename>
          <sum type="sha256">87d4c10642bfcdf520104e594e4ccc1af41a4caa28b46447aab9c0208653d4a6</sum>
        </package>
        <package name="nodejs-libs" version="22.23.1" release="1.module_el8.10.0+4231+1bf2f855" epoch="1" arch="s390x" src="nodejs-22.23.1-1.module_el8.10.0+4231+1bf2f855.src.rpm">
          <filename>nodejs-libs-22.23.1-1.module_el8.10.0+4231+1bf2f855.s390x.rpm</filename>
          <sum type="sha256">8bae4514f52ef01c9268f063267408cc2878128ee6fc086bac484403b4f05d09</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="6.module_el8.10.0+4158+e796f37f" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-6.module_el8.10.0+4158+e796f37f.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-6.module_el8.10.0+4158+e796f37f.noarch.rpm</filename>
          <sum type="sha256">95549e780e9ad76b8e49f9c9db940d99cb8260f37e3d9cf05df2baaf6182e412</sum>
        </package>
        <package name="nodejs-full-i18n" version="22.23.1" release="1.module_el8.10.0+4231+1bf2f855" epoch="1" arch="s390x" src="nodejs-22.23.1-1.module_el8.10.0+4231+1bf2f855.src.rpm">
          <filename>nodejs-full-i18n-22.23.1-1.module_el8.10.0+4231+1bf2f855.s390x.rpm</filename>
          <sum type="sha256">a69ce8fa82a95c7a17d69ab74bb101299cc83fa0a7abc35fb6500ac7264ef30f</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="6.module_el8.10.0+4158+e796f37f" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-6.module_el8.10.0+4158+e796f37f.src.rpm">
          <filename>nodejs-packaging-2021.06-6.module_el8.10.0+4158+e796f37f.noarch.rpm</filename>
          <sum type="sha256">aaede6e40164690ca8a8b2229ad4ad4e0faea8ce4f2d6cfb3358572d8576dace</sum>
        </package>
        <package name="nodejs-devel" version="22.23.1" release="1.module_el8.10.0+4231+1bf2f855" epoch="1" arch="s390x" src="nodejs-22.23.1-1.module_el8.10.0+4231+1bf2f855.src.rpm">
          <filename>nodejs-devel-22.23.1-1.module_el8.10.0+4231+1bf2f855.s390x.rpm</filename>
          <sum type="sha256">c55f6c1b272f554db16f1dbd0a33ecbbccbc56ac5623691e386923ab860fe473</sum>
        </package>
        <package name="nodejs-docs" version="22.23.1" release="1.module_el8.10.0+4231+1bf2f855" epoch="1" arch="noarch" src="nodejs-22.23.1-1.module_el8.10.0+4231+1bf2f855.src.rpm">
          <filename>nodejs-docs-22.23.1-1.module_el8.10.0+4231+1bf2f855.noarch.rpm</filename>
          <sum type="sha256">d1e0fef2605d0ed0b4f8f22c16eb7a3338a7b99a35bc064eb6c66142b727c052</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:41948</id>
    <title>Important: javapackages-tools:201801 security update</title>
    <issued date="2026-07-20 00:00:00"/>
    <updated date="2026-07-22 10:13:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>javapackages-tools:201801 security update</summary>
    <description>The javapackages-tools packages provide macros and scripts to support Java packaging.  

Security Fix(es):  

  * org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:41948" id="RHSA-2026:41948" type="rhsa" title="RHSA-2026:41948"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-67030" id="CVE-2025-67030" type="cve" title="CVE-2025-67030"/>
      <reference href="https://bugzilla.redhat.com/2451409" id="2451409" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-41948.html" id="ALSA-2026:41948" type="self" title="ALSA-2026:41948"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="javapackages-tools" stream="201801" version="8100020250623120251" context="9edba152" arch="s390x"/>
        <package name="sisu-plexus" version="0.3.3" release="7.module_el8.10.0+4020+7deec6e4" epoch="1" arch="noarch" src="sisu-0.3.3-7.module_el8.10.0+4020+7deec6e4.src.rpm">
          <filename>sisu-plexus-0.3.3-7.module_el8.10.0+4020+7deec6e4.noarch.rpm</filename>
          <sum type="sha256">3bdc5b844b321b8b0ea52eea40909491b3cb4b493ebe2444f94037db2e6f78f9</sum>
        </package>
        <package name="sisu-inject" version="0.3.3" release="7.module_el8.10.0+4020+7deec6e4" epoch="1" arch="noarch" src="sisu-0.3.3-7.module_el8.10.0+4020+7deec6e4.src.rpm">
          <filename>sisu-inject-0.3.3-7.module_el8.10.0+4020+7deec6e4.noarch.rpm</filename>
          <sum type="sha256">ef29ebced6604b95ad3dbf8fd5b64bbd5e0320ac9aa9e7dfcef02756c7c331d1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:42088</id>
    <title>Important: webkit2gtk3 security update</title>
    <issued date="2026-07-20 00:00:00"/>
    <updated date="2026-07-21 10:22:51"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>webkit2gtk3 security update</summary>
    <description>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  

Security Fix(es):  

  * Mozilla: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367)
  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-39872)
  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43663)
  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43676)
  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43699)
  * webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43701)
  * webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43705)
  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43707)
  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43712)
  * webkitgtk: webkitgtk: Visiting a website may leak sensitive data (CVE-2026-43713)
  * webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43715)
  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43716)
  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43720)
  * webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data (CVE-2026-43721)
  * webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43725)
  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43726)
  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43727)
  * webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43731)
  * webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information (CVE-2026-43732)
  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43734)
  * webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory (CVE-2026-43740)
  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43742)
  * webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43745)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:42088" id="RHSA-2026:42088" type="rhsa" title="RHSA-2026:42088"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4367" id="CVE-2024-4367" type="cve" title="CVE-2024-4367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-39872" id="CVE-2026-39872" type="cve" title="CVE-2026-39872"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43663" id="CVE-2026-43663" type="cve" title="CVE-2026-43663"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43676" id="CVE-2026-43676" type="cve" title="CVE-2026-43676"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43699" id="CVE-2026-43699" type="cve" title="CVE-2026-43699"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43701" id="CVE-2026-43701" type="cve" title="CVE-2026-43701"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43705" id="CVE-2026-43705" type="cve" title="CVE-2026-43705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43707" id="CVE-2026-43707" type="cve" title="CVE-2026-43707"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43712" id="CVE-2026-43712" type="cve" title="CVE-2026-43712"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43713" id="CVE-2026-43713" type="cve" title="CVE-2026-43713"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43715" id="CVE-2026-43715" type="cve" title="CVE-2026-43715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43716" id="CVE-2026-43716" type="cve" title="CVE-2026-43716"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43720" id="CVE-2026-43720" type="cve" title="CVE-2026-43720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43721" id="CVE-2026-43721" type="cve" title="CVE-2026-43721"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43725" id="CVE-2026-43725" type="cve" title="CVE-2026-43725"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43726" id="CVE-2026-43726" type="cve" title="CVE-2026-43726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43727" id="CVE-2026-43727" type="cve" title="CVE-2026-43727"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43731" id="CVE-2026-43731" type="cve" title="CVE-2026-43731"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43732" id="CVE-2026-43732" type="cve" title="CVE-2026-43732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43734" id="CVE-2026-43734" type="cve" title="CVE-2026-43734"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43740" id="CVE-2026-43740" type="cve" title="CVE-2026-43740"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43742" id="CVE-2026-43742" type="cve" title="CVE-2026-43742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43745" id="CVE-2026-43745" type="cve" title="CVE-2026-43745"/>
      <reference href="https://bugzilla.redhat.com/2280382" id="2280382" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500519" id="2500519" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500520" id="2500520" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500521" id="2500521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500522" id="2500522" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500523" id="2500523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500524" id="2500524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500525" id="2500525" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500526" id="2500526" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500527" id="2500527" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500528" id="2500528" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500529" id="2500529" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500530" id="2500530" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500531" id="2500531" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500532" id="2500532" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500533" id="2500533" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500534" id="2500534" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500535" id="2500535" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500536" id="2500536" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500537" id="2500537" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500538" id="2500538" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500539" id="2500539" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500540" id="2500540" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-42088.html" id="ALSA-2026:42088" type="self" title="ALSA-2026:42088"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="webkit2gtk3-devel" version="2.52.5" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.52.5-1.el8_10.src.rpm">
          <filename>webkit2gtk3-devel-2.52.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">10448eb7426680e1aca923aad1fb9614898ce680225d593f060e33401dcca439</sum>
        </package>
        <package name="webkit2gtk3" version="2.52.5" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.52.5-1.el8_10.src.rpm">
          <filename>webkit2gtk3-2.52.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">2f0cad9af03d872f991950606c7b5e97fe266236702768205a6c8ed2545527c1</sum>
        </package>
        <package name="webkit2gtk3-jsc-devel" version="2.52.5" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.52.5-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-devel-2.52.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b10124c34c01ed2d8f7db371fcb581eb0738e339b798d9c2b899fc8a3b24f9eb</sum>
        </package>
        <package name="webkit2gtk3-jsc" version="2.52.5" release="1.el8_10" epoch="0" arch="s390x" src="webkit2gtk3-2.52.5-1.el8_10.src.rpm">
          <filename>webkit2gtk3-jsc-2.52.5-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">f1d8e0f116cf04080dd2189a5386483e52d8db8f5e30217a702d55d435c3a58b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:42733</id>
    <title>Moderate: glibc security update</title>
    <issued date="2026-07-21 00:00:00"/>
    <updated date="2026-07-22 10:16:01"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings (CVE-2026-5928)
  * glibc: glibc: Out-of-bounds write via TSIG record processing (CVE-2026-5435)
  * glibc: glibc: Application crash or uninitialized memory read via crafted DNS response (CVE-2026-6238)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:42733" id="RHSA-2026:42733" type="rhsa" title="RHSA-2026:42733"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5435" id="CVE-2026-5435" type="cve" title="CVE-2026-5435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5928" id="CVE-2026-5928" type="cve" title="CVE-2026-5928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6238" id="CVE-2026-6238" type="cve" title="CVE-2026-6238"/>
      <reference href="https://bugzilla.redhat.com/2459854" id="2459854" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2463465" id="2463465" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2463539" id="2463539" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-42733.html" id="ALSA-2026:42733" type="self" title="ALSA-2026:42733"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="glibc-utils" version="2.28" release="251.el8_10.40" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.40.src.rpm">
          <filename>glibc-utils-2.28-251.el8_10.40.s390x.rpm</filename>
          <sum type="sha256">4504327bbf25ff4f1fb759d92da8b4022bd88be3df20540409f7a3d04def881b</sum>
        </package>
        <package name="compat-libpthread-nonshared" version="2.28" release="251.el8_10.40" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.40.src.rpm">
          <filename>compat-libpthread-nonshared-2.28-251.el8_10.40.s390x.rpm</filename>
          <sum type="sha256">694eb278bb96ee1c35032bdc857c2b6d3e382945fdb6c1c4034c094f80600053</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:42828</id>
    <title>Important: httpd:2.4 security, bug fix, and enhancement update</title>
    <issued date="2026-07-21 00:00:00"/>
    <updated date="2026-07-22 10:04:10"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>httpd:2.4 security, bug fix, and enhancement update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.  

Security Fix(es):  

  * httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516)
  * httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169)
  * httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356)
  * httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185)
  * httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631)
  * httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server (CVE-2026-44186)
  * httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536)
  * httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355)
  * httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime (CVE-2026-43951)


Bug Fix(es) and Enhancement(s):  

  * mod_proxy_html regression in CVE-2026-34355 fix [almalinux-8.10.z] (JIRA:AlmaLinux-192751)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:42828" id="RHSA-2026:42828" type="rhsa" title="RHSA-2026:42828"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42516" id="CVE-2024-42516" type="cve" title="CVE-2024-42516"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-29169" id="CVE-2026-29169" type="cve" title="CVE-2026-29169"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34355" id="CVE-2026-34355" type="cve" title="CVE-2026-34355"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34356" id="CVE-2026-34356" type="cve" title="CVE-2026-34356"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42536" id="CVE-2026-42536" type="cve" title="CVE-2026-42536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43951" id="CVE-2026-43951" type="cve" title="CVE-2026-43951"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-44185" id="CVE-2026-44185" type="cve" title="CVE-2026-44185"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-44186" id="CVE-2026-44186" type="cve" title="CVE-2026-44186"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-44631" id="CVE-2026-44631" type="cve" title="CVE-2026-44631"/>
      <reference href="https://bugzilla.redhat.com/2374549" id="2374549" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2465296" id="2465296" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2486395" id="2486395" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2486397" id="2486397" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2486399" id="2486399" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2486402" id="2486402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2486411" id="2486411" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2486414" id="2486414" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2486415" id="2486415" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-42828.html" id="ALSA-2026:42828" type="self" title="ALSA-2026:42828"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="httpd" stream="2.4" version="8100020260721171125" context="9edba152" arch="s390x"/>
        <package name="httpd" version="2.4.37" release="65.module_el8.10.0+4233+8b7d9181.9" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4233+8b7d9181.9.src.rpm">
          <filename>httpd-2.4.37-65.module_el8.10.0+4233+8b7d9181.9.s390x.rpm</filename>
          <sum type="sha256">453dc98f84d2d3df3900907bde7101ea08cbdab946ce1e5435d477af220319ec</sum>
        </package>
        <package name="mod_md" version="2.0.8" release="8.module_el8.10.0+4088+57f011c1.2" epoch="1" arch="s390x" src="mod_md-2.0.8-8.module_el8.10.0+4088+57f011c1.2.src.rpm">
          <filename>mod_md-2.0.8-8.module_el8.10.0+4088+57f011c1.2.s390x.rpm</filename>
          <sum type="sha256">51f08f5a2c2c9925c2d8acf5069e109f519302af55ab044dba7de03782591748</sum>
        </package>
        <package name="httpd-devel" version="2.4.37" release="65.module_el8.10.0+4233+8b7d9181.9" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4233+8b7d9181.9.src.rpm">
          <filename>httpd-devel-2.4.37-65.module_el8.10.0+4233+8b7d9181.9.s390x.rpm</filename>
          <sum type="sha256">53376634d276e947d8ae10cd100a82be6887dc2a44045054177e393c9cd3029a</sum>
        </package>
        <package name="mod_session" version="2.4.37" release="65.module_el8.10.0+4233+8b7d9181.9" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4233+8b7d9181.9.src.rpm">
          <filename>mod_session-2.4.37-65.module_el8.10.0+4233+8b7d9181.9.s390x.rpm</filename>
          <sum type="sha256">66d1bd00ad80a68a5d7557570aca613909fe1b9b656a1190f8c84f2a0eae6740</sum>
        </package>
        <package name="httpd-tools" version="2.4.37" release="65.module_el8.10.0+4233+8b7d9181.9" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4233+8b7d9181.9.src.rpm">
          <filename>httpd-tools-2.4.37-65.module_el8.10.0+4233+8b7d9181.9.s390x.rpm</filename>
          <sum type="sha256">6dab375ae66b41a65c1b29735f800e262a7ac787d7e8c416d317bc137688d031</sum>
        </package>
        <package name="mod_proxy_html" version="2.4.37" release="65.module_el8.10.0+4233+8b7d9181.9" epoch="1" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4233+8b7d9181.9.src.rpm">
          <filename>mod_proxy_html-2.4.37-65.module_el8.10.0+4233+8b7d9181.9.s390x.rpm</filename>
          <sum type="sha256">6f5a8e63f584fbb9dbfe351dbcb1240ef2f5ee1c0cc8ca9727bd17a3168c0a83</sum>
        </package>
        <package name="mod_ldap" version="2.4.37" release="65.module_el8.10.0+4233+8b7d9181.9" epoch="0" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4233+8b7d9181.9.src.rpm">
          <filename>mod_ldap-2.4.37-65.module_el8.10.0+4233+8b7d9181.9.s390x.rpm</filename>
          <sum type="sha256">cd6d5d1688bea33bf3f81980a25caaa6d2369c3f16c832bba545e038a330e914</sum>
        </package>
        <package name="httpd-manual" version="2.4.37" release="65.module_el8.10.0+4233+8b7d9181.9" epoch="0" arch="noarch" src="httpd-2.4.37-65.module_el8.10.0+4233+8b7d9181.9.src.rpm">
          <filename>httpd-manual-2.4.37-65.module_el8.10.0+4233+8b7d9181.9.noarch.rpm</filename>
          <sum type="sha256">d963250fcc124df89e4fa1c92d752f600ccc0d9201b8ddb1dc565eaf221908ff</sum>
        </package>
        <package name="mod_ssl" version="2.4.37" release="65.module_el8.10.0+4233+8b7d9181.9" epoch="1" arch="s390x" src="httpd-2.4.37-65.module_el8.10.0+4233+8b7d9181.9.src.rpm">
          <filename>mod_ssl-2.4.37-65.module_el8.10.0+4233+8b7d9181.9.s390x.rpm</filename>
          <sum type="sha256">f6e3ce0a479eb7be70c32c0bdb255454e243d727d65efcf98d0e877af4eddd63</sum>
        </package>
        <package name="mod_http2" version="1.15.7" release="10.module_el8.10.0+4233+8b7d9181.7" epoch="0" arch="s390x" src="mod_http2-1.15.7-10.module_el8.10.0+4233+8b7d9181.7.src.rpm">
          <filename>mod_http2-1.15.7-10.module_el8.10.0+4233+8b7d9181.7.s390x.rpm</filename>
          <sum type="sha256">ff47e1fb2a585ec374a56215d22828192bddf16403b007260955c8e1649e8fdb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:42877</id>
    <title>Important: java-1.8.0-openjdk security update</title>
    <issued date="2026-07-23 00:00:00"/>
    <updated date="2026-07-24 12:55:05"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance TLS certificate handling (CVE-2026-46968)
  * JDK: Enhance JPEG handling (CVE-2026-47010)
  * JDK: Enhance XBM image support (CVE-2026-47021)
  * JDK: Enhance Jar file processing (CVE-2026-47027)
  * JDK: Improve certification checking (CVE-2026-60147)
  * JDK: Enhance AWT ImagingLib (CVE-2026-47059)
  * JDK: Enhance Jar handling (CVE-2026-47063)
  * JDK: Improve Nashorn index handling (CVE-2026-47057)
  * JDK: Enhance Dataview Implementation (CVE-2026-47058)
  * JDK: Update LCMS to 2.19 (CVE-2026-41254)


Enhancement(s):  

  * For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single "portable" build has a release number ('p') and each RPM has its own release number ('r'). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (AlmaLinux-212308, AlmaLinux-212309, AlmaLinux-212310, AlmaLinux-212311, AlmaLinux-212312, AlmaLinux-212313, AlmaLinux-212314, AlmaLinux-212315)


Bug Fix(es):  

  * In previous releases, the RPM did not correctly own the subdirectories used for documentation in /usr/share/doc and /usr/share/javadoc. This is fixed in this release, so these subdirectories will be removed when the package is uninstalled. (AlmaLinux-212319, AlmaLinux-212320, AlmaLinux-212321, AlmaLinux-212322, AlmaLinux-212323, AlmaLinux-212324, AlmaLinux-212325, AlmaLinux-212326)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:42877" id="RHSA-2026:42877" type="rhsa" title="RHSA-2026:42877"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-41254" id="CVE-2026-41254" type="cve" title="CVE-2026-41254"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46968" id="CVE-2026-46968" type="cve" title="CVE-2026-46968"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47010" id="CVE-2026-47010" type="cve" title="CVE-2026-47010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47021" id="CVE-2026-47021" type="cve" title="CVE-2026-47021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47027" id="CVE-2026-47027" type="cve" title="CVE-2026-47027"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47057" id="CVE-2026-47057" type="cve" title="CVE-2026-47057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47058" id="CVE-2026-47058" type="cve" title="CVE-2026-47058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47059" id="CVE-2026-47059" type="cve" title="CVE-2026-47059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47063" id="CVE-2026-47063" type="cve" title="CVE-2026-47063"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60147" id="CVE-2026-60147" type="cve" title="CVE-2026-60147"/>
      <reference href="https://bugzilla.redhat.com/2459420" id="2459420" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502751" id="2502751" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502783" id="2502783" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502784" id="2502784" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502791" id="2502791" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502792" id="2502792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502793" id="2502793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502794" id="2502794" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502795" id="2502795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2503636" id="2503636" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-42877.html" id="ALSA-2026:42877" type="self" title="ALSA-2026:42877"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.502.b07" release="1.1.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.502.b07-1.1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.502.b07-1.1.el8.noarch.rpm</filename>
          <sum type="sha256">22261c034cade2f94269e62d8962bd2a840f6ec3704523c4f52c2baf20cfe384</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.502.b07" release="1.1.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.502.b07-1.1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.502.b07-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">6d9cb4360aa0f521c94d385380b9b26e93f2651550515455db503489c5cae65b</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.502.b07" release="1.1.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.502.b07-1.1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.502.b07-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">7d30b618f360dfd502bf329f146597bd27ecf3b6943c8811d0b2a6f2c6891051</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.502.b07" release="1.1.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.502.b07-1.1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-1.1.el8.noarch.rpm</filename>
          <sum type="sha256">850c0e2e8a2718ca8997258f0e97cea021bd11895a5a7b6d9b45067faaa4e25d</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.502.b07" release="1.1.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.502.b07-1.1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.502.b07-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">9772caa0bc60e19a0669a5f6daf4865b88de32529a6919838b511b4f9a58eadd</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.502.b07" release="1.1.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.502.b07-1.1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.502.b07-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">a9309055d6c22b8d0ffc46b4d5a2eb262701f40638e27ffd503b39197c4caa30</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility" version="1.8.0.502.b07" release="1.1.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.502.b07-1.1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-1.8.0.502.b07-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">e0f4a5e2ef699e404ad3a782b6f17248f3780f498e27c7d1cff8fa12a5c45bfd</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.502.b07" release="1.1.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.502.b07-1.1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.502.b07-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">e7a2fc55852f15a1ae9caeca534b246036d1a30cc7f8f20f5075120315989f52</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:42887</id>
    <title>Important: java-17-openjdk security update</title>
    <issued date="2026-07-22 00:00:00"/>
    <updated date="2026-07-24 08:10:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance TLS certificate handling (CVE-2026-46968)
  * JDK: Improve DTLS handshaking (CVE-2026-46917)
  * JDK: Enhance JPEG handling (CVE-2026-47010)
  * JDK: Enhance XBM image support (CVE-2026-47021)
  * JDK: Enhance Jar file processing (CVE-2026-47027)
  * JDK: Improve certification checking (CVE-2026-60147)
  * JDK: Enhance AWT ImagingLib (CVE-2026-47059)
  * JDK: Enhance Jar handling (CVE-2026-47063)
  * JDK: Update LCMS to 2.19 (CVE-2026-41254)


Enhancement(s):  

  * For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single "portable" build has a release number ('p') and each RPM has its own release number ('r'). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (AlmaLinux-212474, AlmaLinux-212475, AlmaLinux-212476, AlmaLinux-212477, AlmaLinux-212478, AlmaLinux-212479, AlmaLinux-212480, AlmaLinux-212481)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:42887" id="RHSA-2026:42887" type="rhsa" title="RHSA-2026:42887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-41254" id="CVE-2026-41254" type="cve" title="CVE-2026-41254"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46917" id="CVE-2026-46917" type="cve" title="CVE-2026-46917"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46968" id="CVE-2026-46968" type="cve" title="CVE-2026-46968"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47010" id="CVE-2026-47010" type="cve" title="CVE-2026-47010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47021" id="CVE-2026-47021" type="cve" title="CVE-2026-47021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47027" id="CVE-2026-47027" type="cve" title="CVE-2026-47027"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47059" id="CVE-2026-47059" type="cve" title="CVE-2026-47059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47063" id="CVE-2026-47063" type="cve" title="CVE-2026-47063"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60147" id="CVE-2026-60147" type="cve" title="CVE-2026-60147"/>
      <reference href="https://bugzilla.redhat.com/2459420" id="2459420" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502751" id="2502751" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502782" id="2502782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502783" id="2502783" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502784" id="2502784" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502791" id="2502791" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502792" id="2502792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502793" id="2502793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2503636" id="2503636" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-42887.html" id="ALSA-2026:42887" type="self" title="ALSA-2026:42887"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-17-openjdk-demo" version="17.0.20.0.8" release="1.1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.20.0.8-1.1.el8.src.rpm">
          <filename>java-17-openjdk-demo-17.0.20.0.8-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">3d6ce16755d7b5d9d70be81efe40d232112dd6aa9f78d8123f83a6790f79df3d</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.20.0.8" release="1.1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.20.0.8-1.1.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.20.0.8-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">5deb551e62ef717b7edf0bc2a96818f0b6f98fa93340db880419da6ce0fd128a</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.20.0.8" release="1.1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.20.0.8-1.1.el8.src.rpm">
          <filename>java-17-openjdk-headless-17.0.20.0.8-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">63d6c1e8bf7dee1d907715eae4ac53df6bce43aa1ee0fb9f44164585fc0acdaf</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.20.0.8" release="1.1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.20.0.8-1.1.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.20.0.8-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">6cd0c9656d4e5e072c66e47402a597445957d3c70dd9ff04f72f4c24fc535f3d</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.20.0.8" release="1.1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.20.0.8-1.1.el8.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.20.0.8-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">9f867b8b00bd28a17a12a4904b16707ffa8562a35043c61b789735ab87ece771</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.20.0.8" release="1.1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.20.0.8-1.1.el8.src.rpm">
          <filename>java-17-openjdk-src-17.0.20.0.8-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">b5514a90684646de31bb7614f7a720a258ee15930396bbc69672c46f6055a98c</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.20.0.8" release="1.1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.20.0.8-1.1.el8.src.rpm">
          <filename>java-17-openjdk-17.0.20.0.8-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">c23c748d93ed6970a74bde95a640cb631959fe9f16bad3f7c4bca79a80154e80</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.20.0.8" release="1.1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.20.0.8-1.1.el8.src.rpm">
          <filename>java-17-openjdk-devel-17.0.20.0.8-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">dd846e51fccaf2ca5a9c0b047c74214c3f8806206656904e3cb718276ed116b9</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.20.0.8" release="1.1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.20.0.8-1.1.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.20.0.8-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">f1f182dfc4e98038d9a91b1f7bb70e5af12d2dff52aa45aec9a5958120a19a22</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:42895</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2026-07-22 00:00:00"/>
    <updated date="2026-07-24 08:14:27"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance TLS certificate handling (CVE-2026-46968)
  * JDK: Improve DTLS handshaking (CVE-2026-46917)
  * JDK: Enhance JPEG handling (CVE-2026-47010)
  * JDK: Enhance XBM image support (CVE-2026-47021)
  * JDK: Enhance Jar file processing (CVE-2026-47027)
  * JDK: Improve certification checking (CVE-2026-60147)
  * JDK: Enhance AWT ImagingLib (CVE-2026-47059)
  * JDK: Enhance Jar handling (CVE-2026-47063)
  * JDK: Update LCMS to 2.19 (CVE-2026-41254)


Enhancement(s):  

  * For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single "portable" build has a release number ('p') and each RPM has its own release number ('r'). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (AlmaLinux-212337, AlmaLinux-212338, AlmaLinux-212339, AlmaLinux-212340, AlmaLinux-212342, AlmaLinux-212343)


Bug Fix(es):  

  * In previous releases, the RPM did not correctly own the subdirectories used for documentation in /usr/share/doc and /usr/share/javadoc. This is fixed in this release, so these subdirectories will be removed when the package is uninstalled. (AlmaLinux-212353, AlmaLinux-212359, AlmaLinux-212360, AlmaLinux-212361)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:42895" id="RHSA-2026:42895" type="rhsa" title="RHSA-2026:42895"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-41254" id="CVE-2026-41254" type="cve" title="CVE-2026-41254"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46917" id="CVE-2026-46917" type="cve" title="CVE-2026-46917"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46968" id="CVE-2026-46968" type="cve" title="CVE-2026-46968"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47010" id="CVE-2026-47010" type="cve" title="CVE-2026-47010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47021" id="CVE-2026-47021" type="cve" title="CVE-2026-47021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47027" id="CVE-2026-47027" type="cve" title="CVE-2026-47027"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47059" id="CVE-2026-47059" type="cve" title="CVE-2026-47059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47063" id="CVE-2026-47063" type="cve" title="CVE-2026-47063"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60147" id="CVE-2026-60147" type="cve" title="CVE-2026-60147"/>
      <reference href="https://bugzilla.redhat.com/2459420" id="2459420" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502751" id="2502751" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502782" id="2502782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502783" id="2502783" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502784" id="2502784" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502791" id="2502791" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502792" id="2502792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502793" id="2502793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2503636" id="2503636" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-42895.html" id="ALSA-2026:42895" type="self" title="ALSA-2026:42895"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-21-openjdk-javadoc" version="21.0.12.0.8" release="1.1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.12.0.8-1.1.el8.src.rpm">
          <filename>java-21-openjdk-javadoc-21.0.12.0.8-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">0968abaf181eba707a5e65dc0efe3a7135f81b39f42d61d3c9c8a6293d17cb78</sum>
        </package>
        <package name="java-21-openjdk-devel" version="21.0.12.0.8" release="1.1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.12.0.8-1.1.el8.src.rpm">
          <filename>java-21-openjdk-devel-21.0.12.0.8-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">30e0bae713bc76ca6a0b95bff9103dbca6b80d8e99247c164fedfbca0285c0a2</sum>
        </package>
        <package name="java-21-openjdk-headless" version="21.0.12.0.8" release="1.1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.12.0.8-1.1.el8.src.rpm">
          <filename>java-21-openjdk-headless-21.0.12.0.8-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">3bedb619452ebc2479e5dee275e2c891da4faf447ad4b69e4616b9d06cd715a2</sum>
        </package>
        <package name="java-21-openjdk-static-libs" version="21.0.12.0.8" release="1.1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.12.0.8-1.1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-21.0.12.0.8-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">62032b3b25b5cbec929c1ae47084de6c8083dcced1f0cc44e326555433ce48b7</sum>
        </package>
        <package name="java-21-openjdk-jmods" version="21.0.12.0.8" release="1.1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.12.0.8-1.1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-21.0.12.0.8-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">a6aefd97e3197c6c315755f7365e66fb6392abc0392e90475a1e1518231f74a5</sum>
        </package>
        <package name="java-21-openjdk" version="21.0.12.0.8" release="1.1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.12.0.8-1.1.el8.src.rpm">
          <filename>java-21-openjdk-21.0.12.0.8-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">a7fa2299f029b0ed923dec5554238aedbecfe2722a9713f98186c0f5a0a2356c</sum>
        </package>
        <package name="java-21-openjdk-javadoc-zip" version="21.0.12.0.8" release="1.1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.12.0.8-1.1.el8.src.rpm">
          <filename>java-21-openjdk-javadoc-zip-21.0.12.0.8-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">c1250844846801bc4b2eae3340d023455541bd9b1ed3cdd57a1ed1380ccda232</sum>
        </package>
        <package name="java-21-openjdk-src" version="21.0.12.0.8" release="1.1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.12.0.8-1.1.el8.src.rpm">
          <filename>java-21-openjdk-src-21.0.12.0.8-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">d15c25a6b1a033b8c59ebb6b2688abc7b762c4ec54221f39777ae281a17d71cc</sum>
        </package>
        <package name="java-21-openjdk-demo" version="21.0.12.0.8" release="1.1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.12.0.8-1.1.el8.src.rpm">
          <filename>java-21-openjdk-demo-21.0.12.0.8-1.1.el8.s390x.rpm</filename>
          <sum type="sha256">efd58e40394703126264e52b019f79c144821120e9392d8c960451826eed72d7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:43218</id>
    <title>Important: pki-deps:10.6 security update</title>
    <issued date="2026-07-22 00:00:00"/>
    <updated date="2026-07-22 13:42:53"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pki-deps:10.6 security update</summary>
    <description>The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.  

Security Fix(es):  

  * jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution (CVE-2026-54513)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:43218" id="RHSA-2026:43218" type="rhsa" title="RHSA-2026:43218"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-54513" id="CVE-2026-54513" type="cve" title="CVE-2026-54513"/>
      <reference href="https://bugzilla.redhat.com/2492010" id="2492010" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-43218.html" id="ALSA-2026:43218" type="self" title="ALSA-2026:43218"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="pki-deps" stream="10.6" version="8100020240410201031" context="9edba152" arch="s390x"/>
        <package name="jackson-annotations" version="2.21" release="1.module_el8.10.0+4235+0924958e" epoch="0" arch="noarch" src="jackson-annotations-2.21-1.module_el8.10.0+4235+0924958e.src.rpm">
          <filename>jackson-annotations-2.21-1.module_el8.10.0+4235+0924958e.noarch.rpm</filename>
          <sum type="sha256">202e7c95c36b58cc04f5b2f86b1f1acfad53e4693a6b70a91780fcede168ef8b</sum>
        </package>
        <package name="glassfish-jaxb-core" version="2.2.11" release="12.module_el8.10.0+3791+e0637953" epoch="0" arch="noarch" src="glassfish-jaxb-2.2.11-12.module_el8.10.0+3791+e0637953.src.rpm">
          <filename>glassfish-jaxb-core-2.2.11-12.module_el8.10.0+3791+e0637953.noarch.rpm</filename>
          <sum type="sha256">477a47687a21585315f4689a51288631d5fbac847b6673fba9f274890712a70a</sum>
        </package>
        <package name="pki-servlet-engine" version="9.0.62" release="1.module_el8.10.0+3791+e0637953" epoch="1" arch="noarch" src="pki-servlet-engine-9.0.62-1.module_el8.10.0+3791+e0637953.src.rpm">
          <filename>pki-servlet-engine-9.0.62-1.module_el8.10.0+3791+e0637953.noarch.rpm</filename>
          <sum type="sha256">532c855c94c4c589650554fdca9b4a4273dbb7c39b9840babd880c237ced690c</sum>
        </package>
        <package name="glassfish-jaxb-txw2" version="2.2.11" release="12.module_el8.10.0+3791+e0637953" epoch="0" arch="noarch" src="glassfish-jaxb-2.2.11-12.module_el8.10.0+3791+e0637953.src.rpm">
          <filename>glassfish-jaxb-txw2-2.2.11-12.module_el8.10.0+3791+e0637953.noarch.rpm</filename>
          <sum type="sha256">6a6d9268a508987cc0336c3494e5657095dba3e655f1225b7fa7128dc097887f</sum>
        </package>
        <package name="glassfish-jaxb-runtime" version="2.2.11" release="12.module_el8.10.0+3791+e0637953" epoch="0" arch="noarch" src="glassfish-jaxb-2.2.11-12.module_el8.10.0+3791+e0637953.src.rpm">
          <filename>glassfish-jaxb-runtime-2.2.11-12.module_el8.10.0+3791+e0637953.noarch.rpm</filename>
          <sum type="sha256">7eeafc54dba1be4f10984f2ad8dd2430740d7c134a735d41d95eb83becf36033</sum>
        </package>
        <package name="jackson-jaxrs-json-provider" version="2.21.4" release="1.module_el8.10.0+4235+0924958e" epoch="0" arch="noarch" src="jackson-jaxrs-providers-2.21.4-1.module_el8.10.0+4235+0924958e.src.rpm">
          <filename>jackson-jaxrs-json-provider-2.21.4-1.module_el8.10.0+4235+0924958e.noarch.rpm</filename>
          <sum type="sha256">985a88b5d98d73b2a7267e172b80a60a660b2fd60206670bd6e7478c133f8058</sum>
        </package>
        <package name="jackson-jaxrs-providers" version="2.21.4" release="1.module_el8.10.0+4235+0924958e" epoch="0" arch="noarch" src="jackson-jaxrs-providers-2.21.4-1.module_el8.10.0+4235+0924958e.src.rpm">
          <filename>jackson-jaxrs-providers-2.21.4-1.module_el8.10.0+4235+0924958e.noarch.rpm</filename>
          <sum type="sha256">a2df5f90f097e77f2d72ac4444080052dd10046f6cb8c1ea84e4c39bb9acc806</sum>
        </package>
        <package name="jackson-module-jaxb-annotations" version="2.21.4" release="2.module_el8.10.0+4235+0924958e" epoch="0" arch="noarch" src="jackson-modules-base-2.21.4-2.module_el8.10.0+4235+0924958e.src.rpm">
          <filename>jackson-module-jaxb-annotations-2.21.4-2.module_el8.10.0+4235+0924958e.noarch.rpm</filename>
          <sum type="sha256">dd8d05152348807c92f9091b8f888ed8f4401fc4075f99e57d201ac31564aa07</sum>
        </package>
        <package name="jackson-core" version="2.21.4" release="1.module_el8.10.0+4235+0924958e" epoch="0" arch="noarch" src="jackson-core-2.21.4-1.module_el8.10.0+4235+0924958e.src.rpm">
          <filename>jackson-core-2.21.4-1.module_el8.10.0+4235+0924958e.noarch.rpm</filename>
          <sum type="sha256">e1e030b138b27491e80aa528fb56d0f6bea9e6a719c76ca8c45ae966b4d12458</sum>
        </package>
        <package name="jackson-databind" version="2.21.4" release="1.module_el8.10.0+4235+0924958e" epoch="0" arch="noarch" src="jackson-databind-2.21.4-1.module_el8.10.0+4235+0924958e.src.rpm">
          <filename>jackson-databind-2.21.4-1.module_el8.10.0+4235+0924958e.noarch.rpm</filename>
          <sum type="sha256">e76bfca84d6db1ae09e4ea8f16c2f036d4a4e130ee6b6edd06334479fa14cb58</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4442</id>
    <title>Moderate: vim security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-12 14:47:41"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: Vim: Arbitrary code execution via 'helpfile' option processing (CVE-2026-25749)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4442" id="RHSA-2026:4442" type="rhsa" title="RHSA-2026:4442"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25749" id="CVE-2026-25749" type="cve" title="CVE-2026-25749"/>
      <reference href="https://bugzilla.redhat.com/2437843" id="2437843" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4442.html" id="ALSA-2026:4442" type="self" title="ALSA-2026:4442"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="vim-enhanced" version="8.0.1763" release="22.el8_10" epoch="2" arch="s390x" src="vim-8.0.1763-22.el8_10.src.rpm">
          <filename>vim-enhanced-8.0.1763-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">3c0c1cf87ba1af686a3dc903048961f15c4c533b1c1454272f317988fdb6da49</sum>
        </package>
        <package name="vim-filesystem" version="8.0.1763" release="22.el8_10" epoch="2" arch="noarch" src="vim-8.0.1763-22.el8_10.src.rpm">
          <filename>vim-filesystem-8.0.1763-22.el8_10.noarch.rpm</filename>
          <sum type="sha256">52c336af2e6ba1862ec68806dcc33e78ae012d08b0584d128449b288cc2b3759</sum>
        </package>
        <package name="vim-X11" version="8.0.1763" release="22.el8_10" epoch="2" arch="s390x" src="vim-8.0.1763-22.el8_10.src.rpm">
          <filename>vim-X11-8.0.1763-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">83ead65879d71574ea31134e419e03106847acbf6e36c79883ca0093e6c9e97f</sum>
        </package>
        <package name="vim-common" version="8.0.1763" release="22.el8_10" epoch="2" arch="s390x" src="vim-8.0.1763-22.el8_10.src.rpm">
          <filename>vim-common-8.0.1763-22.el8_10.s390x.rpm</filename>
          <sum type="sha256">c679e12e5bf4ddbb4442fe154f4457ba9f68523ce708caed8a002da98c9a3c5d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4443</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-13 09:01:06"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.115 and .NET Runtime 9.0.14.Security Fix(es):  

  * .net: .NET: Denial of Service via out-of-bounds read (CVE-2026-26127)
  * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4443" id="RHSA-2026:4443" type="rhsa" title="RHSA-2026:4443"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26127" id="CVE-2026-26127" type="cve" title="CVE-2026-26127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26130" id="CVE-2026-26130" type="cve" title="CVE-2026-26130"/>
      <reference href="https://bugzilla.redhat.com/2446098" id="2446098" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2446134" id="2446134" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4443.html" id="ALSA-2026:4443" type="self" title="ALSA-2026:4443"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="netstandard-targeting-pack-2.1" version="9.0.115" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el8_10.src.rpm">
          <filename>netstandard-targeting-pack-2.1-9.0.115-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">1e9385430dec2d63361b45afd2a4b4541803d1a4efc97e06bd74dd50be4968fa</sum>
        </package>
        <package name="dotnet-runtime-9.0" version="9.0.14" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el8_10.src.rpm">
          <filename>dotnet-runtime-9.0-9.0.14-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">4b2d762ad87729a8d011128b39bafd01c61a148d782e7910d836329bc8169a76</sum>
        </package>
        <package name="dotnet-hostfxr-9.0" version="9.0.14" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-9.0-9.0.14-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">522aea886235f67c5d466affb1cb83e395a3a1ae3e3ee8cdb43ec52b0824232b</sum>
        </package>
        <package name="dotnet-apphost-pack-9.0" version="9.0.14" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-9.0-9.0.14-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">54b99e124faf776a2c5575ef09f12d727923ac55d1fff98025432f3e4c9a72fc</sum>
        </package>
        <package name="dotnet-templates-9.0" version="9.0.115" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el8_10.src.rpm">
          <filename>dotnet-templates-9.0-9.0.115-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">54e67c26d7e79010e7a440654f544353cc6585f89c2bb97be6184ba52077df97</sum>
        </package>
        <package name="dotnet-runtime-dbg-9.0" version="9.0.14" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-9.0-9.0.14-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5e903244d256635d9b8537f545e33d6e183df993ee193071ceb59655c69d2a83</sum>
        </package>
        <package name="dotnet-targeting-pack-9.0" version="9.0.14" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-9.0-9.0.14-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">60b40381fbd1d81cdc16d854ae76a41eadbf038a6b8708f4a2160cfc445a23b5</sum>
        </package>
        <package name="aspnetcore-targeting-pack-9.0" version="9.0.14" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-9.0-9.0.14-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">950ca9006cca9ed671cc300e9b110a0cf1fb6dfceca151a5e4b707a62660eed4</sum>
        </package>
        <package name="dotnet-sdk-dbg-9.0" version="9.0.115" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-9.0-9.0.115-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">989d5eb321837fa832e574ce85dfc389de7decc6fe0af5e84961c45d1af93fd2</sum>
        </package>
        <package name="aspnetcore-runtime-9.0" version="9.0.14" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-9.0-9.0.14-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c897fff36ef87c822620b8ab3bc2c6a75daf9e9c2a085853b77e4a23ac3e38de</sum>
        </package>
        <package name="dotnet-sdk-9.0" version="9.0.115" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-9.0.115-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">d52257037dd748212e94ce9e3c467504fd737f1a1d771421bc017b00c0c32182</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-9.0" version="9.0.14" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-9.0-9.0.14-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">f1c5c0d40f42331ae67b6a92221539f5b0c70a0a6a43b33f54aa5e76daf0f856</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4455</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-13 09:11:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.125 and .NET Runtime 8.0.25.Security Fix(es):  

  * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4455" id="RHSA-2026:4455" type="rhsa" title="RHSA-2026:4455"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26130" id="CVE-2026-26130" type="cve" title="CVE-2026-26130"/>
      <reference href="https://bugzilla.redhat.com/2446134" id="2446134" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4455.html" id="ALSA-2026:4455" type="self" title="ALSA-2026:4455"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.125" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.125-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">566cab734b71c6b72f85be7fadfa79a94d2918b81b97a813a91c822eecab5914</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.25" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.25-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">57b66940c6009c5412a8ef9ec5a86c21192759c10431bd5a11bd93feff7359c2</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.25" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el8_10.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.25-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5f8d499c341b007eadf97ad518540b286619ee8bff2a8241e0cf81d9e10b2be7</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.25" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.25-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">6bf424e4d8782cbcbba7ca54c877ab6dc2665c3d2e0ea2c0eac6799350bf5580</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.25" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.25-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">6f8092b567bfc8b96f7c2f65a18ea31a90eba1705d60b02c258aabbd5c1c60ab</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.25" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.25-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">77418ea95bf3c6e1cdf8e7916dfa7f4d5b43b444287dd56e9b22c6bcea4ce6b8</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.25" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.25-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">9d97a150a0947d90e8f7d5f7acc79394b09a34e296d71e9574c2f9641e116e89</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.125" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.125-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">bda5bc16c4b5771e833bdba552a4e1106c4492a2700507b1bba61a13ee73fc6d</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.125" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el8_10.src.rpm">
          <filename>dotnet-templates-8.0-8.0.125-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">cd3b20f3eb9bb3752d798b273eaf125c4997d3c1ecb0648c52cac1eb6ac7cec1</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.25" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.25-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">dd496c24b30044162155798cd198c058a7d2820294cd7d98acf9245258b46acf</sum>
        </package>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.25" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.25-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">deca87fde231000bb6e84c8d6e31117e8281573158e092da3222f15a02367309</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4458</id>
    <title>Important: .NET 10.0 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-13 09:14:43"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.104 and .NET Runtime 10.0.4.Security Fix(es):  

  * .net: .NET: Denial of Service via out-of-bounds read (CVE-2026-26127)
  * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4458" id="RHSA-2026:4458" type="rhsa" title="RHSA-2026:4458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26127" id="CVE-2026-26127" type="cve" title="CVE-2026-26127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26130" id="CVE-2026-26130" type="cve" title="CVE-2026-26130"/>
      <reference href="https://bugzilla.redhat.com/2446098" id="2446098" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2446134" id="2446134" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4458.html" id="ALSA-2026:4458" type="self" title="ALSA-2026:4458"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="dotnet-hostfxr-10.0" version="10.0.4" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-10.0-10.0.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">0a8322e33be13125570c0eeac1eaa5642a23c89c6cbed14e36fda3df28d8adf4</sum>
        </package>
        <package name="dotnet-templates-10.0" version="10.0.104" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>dotnet-templates-10.0-10.0.104-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">12ea74cc6258dd6d375b2a4ff9e5c6b7adbb43774e17b95b282a4d24a3d1a4e2</sum>
        </package>
        <package name="dotnet-host" version="10.0.4" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>dotnet-host-10.0.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">399284049759a1559aa948953e11ea8895ed42c9fdc77d5b47e1a6657c76660a</sum>
        </package>
        <package name="dotnet-sdk-dbg-10.0" version="10.0.104" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-10.0-10.0.104-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">58e1015de1c5795bbae67688f66946c37309d8c02bf108bcd4d592b344ca1939</sum>
        </package>
        <package name="dotnet-sdk-10.0" version="10.0.104" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>dotnet-sdk-10.0-10.0.104-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5b003ae265c7d72c1f8de794cc1ee88de7a015253e796f06fb0ede1fff861344</sum>
        </package>
        <package name="aspnetcore-runtime-10.0" version="10.0.4" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-10.0-10.0.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">8991b115394f2906fc85cb955b637beac1ad0242b595ec3a66322bdf15ac9b26</sum>
        </package>
        <package name="dotnet-runtime-dbg-10.0" version="10.0.4" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-10.0-10.0.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">91ad940bfaba3b2efd4a7c3b21fe2b44038650388dcb2a46836d9bb1ec3c0ba1</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-10.0" version="10.0.4" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-10.0-10.0.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a599f2204af6946ef278f7f6b0999e03ebf3de8a90ed63a762ecc43b7b4d1376</sum>
        </package>
        <package name="aspnetcore-targeting-pack-10.0" version="10.0.4" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-10.0-10.0.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b46a307d53b453999f38a0c6ffe27b2658b0832f5261db0b5a9b565c1440417e</sum>
        </package>
        <package name="dotnet-apphost-pack-10.0" version="10.0.4" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-10.0-10.0.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c817853aa6c3077f7323010224d03689b87fc914e8c17c0059288d3ff8a4473f</sum>
        </package>
        <package name="dotnet-targeting-pack-10.0" version="10.0.4" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-10.0-10.0.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">ce44f95dbe3bfa9ecc58fe9d7435c11d984b393a2c79dfe69e763e3a0c1c81ab</sum>
        </package>
        <package name="dotnet" version="10.0.104" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>dotnet-10.0.104-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">cfdb0cd62bc177f6cb670034e0b4054ab58716403c1c04551bb8c5b3cfb6d6a0</sum>
        </package>
        <package name="dotnet-runtime-10.0" version="10.0.4" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>dotnet-runtime-10.0-10.0.4-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">eabd434e387a8294714be9528e9e2ea39efb81fab5c9aa3a0a7afaee791b0030</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4463</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-13 09:03:58"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: wsgiref.headers.Headers allows header newline injection in Python (CVE-2026-0865)
  * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366)
  * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367)
  * cpython: email header injection due to unquoted newlines (CVE-2026-1299)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4463" id="RHSA-2026:4463" type="rhsa" title="RHSA-2026:4463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15366" id="CVE-2025-15366" type="cve" title="CVE-2025-15366"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15367" id="CVE-2025-15367" type="cve" title="CVE-2025-15367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0865" id="CVE-2026-0865" type="cve" title="CVE-2026-0865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1299" id="CVE-2026-1299" type="cve" title="CVE-2026-1299"/>
      <reference href="https://bugzilla.redhat.com/2431367" id="2431367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431368" id="2431368" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431373" id="2431373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432437" id="2432437" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4463.html" id="ALSA-2026:4463" type="self" title="ALSA-2026:4463"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.12-libs" version="3.12.12" release="3.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-3.el8_10.src.rpm">
          <filename>python3.12-libs-3.12.12-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">0c53c5c9a9a7cd9ce0dff02966bf552c5df4e67d4e58ed5627063b653376cda1</sum>
        </package>
        <package name="python3.12-tkinter" version="3.12.12" release="3.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-3.el8_10.src.rpm">
          <filename>python3.12-tkinter-3.12.12-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">39c110a1265b66b2931a5a46b2cf71fb6ce965124b3b6e950b688767b69e9756</sum>
        </package>
        <package name="python3.12-devel" version="3.12.12" release="3.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-3.el8_10.src.rpm">
          <filename>python3.12-devel-3.12.12-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">4a91d0124bdeb04f118fb09c4b0a913b39f1dfbfeaa5671c71d1edc2362ebb3f</sum>
        </package>
        <package name="python3.12-rpm-macros" version="3.12.12" release="3.el8_10" epoch="0" arch="noarch" src="python3.12-3.12.12-3.el8_10.src.rpm">
          <filename>python3.12-rpm-macros-3.12.12-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">59ed1249fe8df5f0f4daac62a8bb11db4eb71858ff39cd9430698be4b6b869f1</sum>
        </package>
        <package name="python3.12" version="3.12.12" release="3.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-3.el8_10.src.rpm">
          <filename>python3.12-3.12.12-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">fe873d31f28d86c23f227cc515db758ee8d2e1091431013713bbdd89bdf69686</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4473</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-19 12:33:17"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: wsgiref.headers.Headers allows header newline injection in Python (CVE-2026-0865)
  * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366)
  * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367)
  * cpython: email header injection due to unquoted newlines (CVE-2026-1299)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4473" id="RHSA-2026:4473" type="rhsa" title="RHSA-2026:4473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15366" id="CVE-2025-15366" type="cve" title="CVE-2025-15366"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15367" id="CVE-2025-15367" type="cve" title="CVE-2025-15367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0865" id="CVE-2026-0865" type="cve" title="CVE-2026-0865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1299" id="CVE-2026-1299" type="cve" title="CVE-2026-1299"/>
      <reference href="https://bugzilla.redhat.com/2431367" id="2431367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431368" id="2431368" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431373" id="2431373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432437" id="2432437" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4473.html" id="ALSA-2026:4473" type="self" title="ALSA-2026:4473"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.11-devel" version="3.11.13" release="5.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-5.el8_10.src.rpm">
          <filename>python3.11-devel-3.11.13-5.el8_10.s390x.rpm</filename>
          <sum type="sha256">253194af0ea7d8d7d692755e5a081ab0ca2344b2e0f98aa90cf7d80875aa266a</sum>
        </package>
        <package name="python3.11" version="3.11.13" release="5.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-5.el8_10.src.rpm">
          <filename>python3.11-3.11.13-5.el8_10.s390x.rpm</filename>
          <sum type="sha256">52f986e5eed1dac5ab56a1d530bc241de5e53008d4213896e911f79040a91893</sum>
        </package>
        <package name="python3.11-libs" version="3.11.13" release="5.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-5.el8_10.src.rpm">
          <filename>python3.11-libs-3.11.13-5.el8_10.s390x.rpm</filename>
          <sum type="sha256">de28d6544058ed80008a2725643527d55a4fa308cfff927e99772658eea72641</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.13" release="5.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-5.el8_10.src.rpm">
          <filename>python3.11-tkinter-3.11.13-5.el8_10.s390x.rpm</filename>
          <sum type="sha256">e008981157f715551de301717ebe6d6aa7f99ebf4d389e60231a7a906b845220</sum>
        </package>
        <package name="python3.11-rpm-macros" version="3.11.13" release="5.el8_10" epoch="0" arch="noarch" src="python3.11-3.11.13-5.el8_10.src.rpm">
          <filename>python3.11-rpm-macros-3.11.13-5.el8_10.noarch.rpm</filename>
          <sum type="sha256">f829b93d3f29096341f5c64d03300203bde1c9c37ab57d9a9ff8d3cdbb773a51</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:46391</id>
    <title>Important: grafana security, bug fix, and enhancement update</title>
    <issued date="2026-07-27 00:00:00"/>
    <updated date="2026-07-27 12:29:59"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana security, bug fix, and enhancement update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.   

Security Fix(es):  

  * github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation (CVE-2026-44740)


Bug Fix(es) and Enhancement(s):  

  * [grafana / almalinux-8.10.z] Remove Lua ExclusiveArch macro for Konflux build (JIRA:AlmaLinux-188279)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:46391" id="RHSA-2026:46391" type="rhsa" title="RHSA-2026:46391"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-44740" id="CVE-2026-44740" type="cve" title="CVE-2026-44740"/>
      <reference href="https://bugzilla.redhat.com/2483894" id="2483894" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-46391.html" id="ALSA-2026:46391" type="self" title="ALSA-2026:46391"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="grafana-selinux" version="9.2.10" release="32.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-32.el8_10.src.rpm">
          <filename>grafana-selinux-9.2.10-32.el8_10.s390x.rpm</filename>
          <sum type="sha256">0b3e1f4478693f5f091b496d9471e99aae6466e814f890c53fda2489361251a3</sum>
        </package>
        <package name="grafana" version="9.2.10" release="32.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-32.el8_10.src.rpm">
          <filename>grafana-9.2.10-32.el8_10.s390x.rpm</filename>
          <sum type="sha256">fd8d29c3da444eb5887f911a781f17124ed74540f3e3f09fb6d717c89d244b3c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:46396</id>
    <title>Important: libreswan security update</title>
    <issued date="2026-07-27 00:00:00"/>
    <updated date="2026-07-27 12:29:59"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libreswan security update</summary>
    <description>Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).  

Security Fix(es):  

  * librenswan: IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload (CVE-2026-50721)
  * librenswan: IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload (CVE-2026-50722)
  * librenswan: IKEv2 Denial of Service via malformed fragmentation (CVE-2026-12413)
  * libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process (CVE-2026-14957)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:46396" id="RHSA-2026:46396" type="rhsa" title="RHSA-2026:46396"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12413" id="CVE-2026-12413" type="cve" title="CVE-2026-12413"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-14957" id="CVE-2026-14957" type="cve" title="CVE-2026-14957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50721" id="CVE-2026-50721" type="cve" title="CVE-2026-50721"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50722" id="CVE-2026-50722" type="cve" title="CVE-2026-50722"/>
      <reference href="https://bugzilla.redhat.com/2494147" id="2494147" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2494148" id="2494148" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2494149" id="2494149" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2501764" id="2501764" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-46396.html" id="ALSA-2026:46396" type="self" title="ALSA-2026:46396"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libreswan" version="4.12" release="2.el8_10.6" epoch="0" arch="s390x" src="libreswan-4.12-2.el8_10.6.src.rpm">
          <filename>libreswan-4.12-2.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">7f1c79e8136fe240115379b2e51dadfe0a4c2388b1524eff4eff3010c3328c04</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4672</id>
    <title>Important: container-tools:rhel8 security update</title>
    <issued date="2026-03-17 00:00:00"/>
    <updated date="2026-03-17 10:17:22"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>container-tools:rhel8 security update</summary>
    <description>The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.  

Security Fix(es):  

  * golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728)
  * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
  * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4672" id="RHSA-2026:4672" type="rhsa" title="RHSA-2026:4672"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61726" id="CVE-2025-61726" type="cve" title="CVE-2025-61726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61728" id="CVE-2025-61728" type="cve" title="CVE-2025-61728"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68121" id="CVE-2025-68121" type="cve" title="CVE-2025-68121"/>
      <reference href="https://bugzilla.redhat.com/2434431" id="2434431" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2434432" id="2434432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2437111" id="2437111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4672.html" id="ALSA-2026:4672" type="self" title="ALSA-2026:4672"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="container-tools" stream="rhel8" version="8100020260317061220" context="20125149" arch="s390x"/>
        <package name="libslirp-devel" version="4.4.0" release="2.module_el8.10.0+4102+6c76e544" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>libslirp-devel-4.4.0-2.module_el8.10.0+4102+6c76e544.s390x.rpm</filename>
          <sum type="sha256">04d89a36990aa212a94bb2747825e0da8c83a7b25e78a61558e4d5b43429e4f4</sum>
        </package>
        <package name="python3-podman" version="4.9.0" release="3.module_el8.10.0+4016+efd18bf8" epoch="0" arch="noarch" src="python-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.src.rpm">
          <filename>python3-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.noarch.rpm</filename>
          <sum type="sha256">087549428650af46817206c5d5ddd54bace235c2932b3e2004ac93e3b466cb6d</sum>
        </package>
        <package name="podman-docker" version="4.9.4" release="30.module_el8.10.0+4136+16425343" epoch="4" arch="noarch" src="podman-4.9.4-30.module_el8.10.0+4136+16425343.src.rpm">
          <filename>podman-docker-4.9.4-30.module_el8.10.0+4136+16425343.noarch.rpm</filename>
          <sum type="sha256">17f03d0189f1b0a4fefe7e5f8df039ee0c8fa966c6a81a0421395c46cc9a6dd4</sum>
        </package>
        <package name="podman" version="4.9.4" release="30.module_el8.10.0+4136+16425343" epoch="4" arch="s390x" src="podman-4.9.4-30.module_el8.10.0+4136+16425343.src.rpm">
          <filename>podman-4.9.4-30.module_el8.10.0+4136+16425343.s390x.rpm</filename>
          <sum type="sha256">18701e1d1b772d6e49defb91337c90df9fbeef848d5721b7b1095a6797e6d870</sum>
        </package>
        <package name="netavark" version="1.10.3" release="1.module_el8.10.0+4120+03ad4b47" epoch="2" arch="s390x" src="netavark-1.10.3-1.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>netavark-1.10.3-1.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">1f5e2faafe780466e1224fe37b9a1e5dc04e53f831ba39b977b60d7df76f90bd</sum>
        </package>
        <package name="libslirp" version="4.4.0" release="2.module_el8.10.0+4023+db236c53" epoch="0" arch="s390x" src="libslirp-4.4.0-2.module_el8.10.0+4023+db236c53.src.rpm">
          <filename>libslirp-4.4.0-2.module_el8.10.0+4023+db236c53.s390x.rpm</filename>
          <sum type="sha256">1fb16f13bc4c318fd2714e829a188f97facb4a31222911e078f5604ab7bcd2d9</sum>
        </package>
        <package name="podman-tests" version="4.9.4" release="30.module_el8.10.0+4136+16425343" epoch="4" arch="s390x" src="podman-4.9.4-30.module_el8.10.0+4136+16425343.src.rpm">
          <filename>podman-tests-4.9.4-30.module_el8.10.0+4136+16425343.s390x.rpm</filename>
          <sum type="sha256">3fccd67068b39ffa34a950eb9502b3c9d86c39efc6b018f771946df21bfdce90</sum>
        </package>
        <package name="podman-remote" version="4.9.4" release="30.module_el8.10.0+4136+16425343" epoch="4" arch="s390x" src="podman-4.9.4-30.module_el8.10.0+4136+16425343.src.rpm">
          <filename>podman-remote-4.9.4-30.module_el8.10.0+4136+16425343.s390x.rpm</filename>
          <sum type="sha256">423817633c426dcb9518149e4c36e651c7ebf63d8d859335582448bdd4a5e2a5</sum>
        </package>
        <package name="podman-plugins" version="4.9.4" release="30.module_el8.10.0+4136+16425343" epoch="4" arch="s390x" src="podman-4.9.4-30.module_el8.10.0+4136+16425343.src.rpm">
          <filename>podman-plugins-4.9.4-30.module_el8.10.0+4136+16425343.s390x.rpm</filename>
          <sum type="sha256">51a3095e97e9bf8340137b5768278823a0fe50ff1298b9cbf2010f2b966901e0</sum>
        </package>
        <package name="podman-gvproxy" version="4.9.4" release="30.module_el8.10.0+4136+16425343" epoch="4" arch="s390x" src="podman-4.9.4-30.module_el8.10.0+4136+16425343.src.rpm">
          <filename>podman-gvproxy-4.9.4-30.module_el8.10.0+4136+16425343.s390x.rpm</filename>
          <sum type="sha256">5b02622c4c2c186c6e1c1c0acb3f67a59dbc6327099bb07dbd7c1632e0999fad</sum>
        </package>
        <package name="containernetworking-plugins" version="1.4.0" release="8.module_el8.10.0+4136+16425343" epoch="1" arch="s390x" src="containernetworking-plugins-1.4.0-8.module_el8.10.0+4136+16425343.src.rpm">
          <filename>containernetworking-plugins-1.4.0-8.module_el8.10.0+4136+16425343.s390x.rpm</filename>
          <sum type="sha256">5b03d385ebddc1bae5ae08592be2ce5f4c8d44e3feba600e5735cf91f8ae3c7f</sum>
        </package>
        <package name="toolbox" version="0.0.99.5.1" release="1.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="toolbox-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>toolbox-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">6143186cb1c446d86cea17767eb5d7143bcfa3a6cda56b6972cea4289916158d</sum>
        </package>
        <package name="skopeo-tests" version="1.14.5" release="7.module_el8.10.0+4136+16425343" epoch="2" arch="s390x" src="skopeo-1.14.5-7.module_el8.10.0+4136+16425343.src.rpm">
          <filename>skopeo-tests-1.14.5-7.module_el8.10.0+4136+16425343.s390x.rpm</filename>
          <sum type="sha256">62d7e474b11786e286f13ec07d6966ea7ffcd5da6474336ca266916ebed1f6a4</sum>
        </package>
        <package name="oci-seccomp-bpf-hook" version="1.2.10" release="1.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">73a992b19df0eda4ae7ba076ebfab5d8d638889051c89b761735617047e0d181</sum>
        </package>
        <package name="udica" version="0.2.6" release="21.module_el8.10.0+4068+0e21408f" epoch="0" arch="noarch" src="udica-0.2.6-21.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>udica-0.2.6-21.module_el8.10.0+4068+0e21408f.noarch.rpm</filename>
          <sum type="sha256">79a48c91cfda7b53eceaf7fc427f6b428b66680f0441fed06fc3bb55a0327feb</sum>
        </package>
        <package name="cockpit-podman" version="84.1" release="1.module_el8.10.0+4102+6c76e544" epoch="0" arch="noarch" src="cockpit-podman-84.1-1.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>cockpit-podman-84.1-1.module_el8.10.0+4102+6c76e544.noarch.rpm</filename>
          <sum type="sha256">7ebfd9c6721f16e93505c790faf678779b529dd5d380e17887b0ba1629de4871</sum>
        </package>
        <package name="fuse-overlayfs" version="1.13" release="1.module_el8.10.0+3792+03eaed9c" epoch="0" arch="s390x" src="fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.src.rpm">
          <filename>fuse-overlayfs-1.13-1.module_el8.10.0+3792+03eaed9c.s390x.rpm</filename>
          <sum type="sha256">8118067655696462cee9dfc553f57e4501b089590d837bc88091716914c8d3f5</sum>
        </package>
        <package name="crit" version="3.18" release="5.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>crit-3.18-5.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">8c081ab36feca1313187e33796d54822ad0f6d4a3bb42fe65fd20163f784085a</sum>
        </package>
        <package name="buildah" version="1.33.14" release="3.module_el8.10.0+4136+16425343" epoch="2" arch="s390x" src="buildah-1.33.14-3.module_el8.10.0+4136+16425343.src.rpm">
          <filename>buildah-1.33.14-3.module_el8.10.0+4136+16425343.s390x.rpm</filename>
          <sum type="sha256">8d2ed06580fe6e39d79ea839590b59bf4013eff036aa12cac144a6da4a36e9e0</sum>
        </package>
        <package name="criu-devel" version="3.18" release="5.module_el8.10.0+4068+0e21408f" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>criu-devel-3.18-5.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">8d858b9b5053b95ab7cb5eba9ab5bbd3cf5a1d07b77394b4d0f0d9d6c0769768</sum>
        </package>
        <package name="containers-common" version="1" release="82.module_el8.10.0+3901+4b80ecd7" epoch="2" arch="s390x" src="containers-common-1-82.module_el8.10.0+3901+4b80ecd7.src.rpm">
          <filename>containers-common-1-82.module_el8.10.0+3901+4b80ecd7.s390x.rpm</filename>
          <sum type="sha256">98eb0c5785e1d53743858e76ac35aab0b199a918b88c02e20aa6f64cc6f89618</sum>
        </package>
        <package name="container-selinux" version="2.229.0" release="2.module_el8.10.0+4090+91932338" epoch="2" arch="noarch" src="container-selinux-2.229.0-2.module_el8.10.0+4090+91932338.src.rpm">
          <filename>container-selinux-2.229.0-2.module_el8.10.0+4090+91932338.noarch.rpm</filename>
          <sum type="sha256">9bee177863e693c8b3f4cf092222ef14a59409617b381b0dd764102212ab2074</sum>
        </package>
        <package name="aardvark-dns" version="1.10.1" release="2.module_el8.10.0+4047+545787c4" epoch="2" arch="s390x" src="aardvark-dns-1.10.1-2.module_el8.10.0+4047+545787c4.src.rpm">
          <filename>aardvark-dns-1.10.1-2.module_el8.10.0+4047+545787c4.s390x.rpm</filename>
          <sum type="sha256">9e7e5cc9877a685769ee43c72dc867d179fe027d41775a01f1e73cfe366872ef</sum>
        </package>
        <package name="podman-catatonit" version="4.9.4" release="30.module_el8.10.0+4136+16425343" epoch="4" arch="s390x" src="podman-4.9.4-30.module_el8.10.0+4136+16425343.src.rpm">
          <filename>podman-catatonit-4.9.4-30.module_el8.10.0+4136+16425343.s390x.rpm</filename>
          <sum type="sha256">ad80be0e2471592710bf20fa84e108e57469a72744247487bbfbad0929c8cc87</sum>
        </package>
        <package name="runc" version="1.2.9" release="4.module_el8.10.0+4136+16425343" epoch="4" arch="s390x" src="runc-1.2.9-4.module_el8.10.0+4136+16425343.src.rpm">
          <filename>runc-1.2.9-4.module_el8.10.0+4136+16425343.s390x.rpm</filename>
          <sum type="sha256">b114cd179c7ed980d7c76e9ab68a55608d78cad0bb1cdb8a7b7106124e9f6ac2</sum>
        </package>
        <package name="crun" version="1.14.3" release="2.module_el8.10.0+4102+6c76e544" epoch="0" arch="s390x" src="crun-1.14.3-2.module_el8.10.0+4102+6c76e544.src.rpm">
          <filename>crun-1.14.3-2.module_el8.10.0+4102+6c76e544.s390x.rpm</filename>
          <sum type="sha256">b21ff72aa6dc2112775c618b7c6df02c4b2545cc7ee43ec04a1c6e1c84682757</sum>
        </package>
        <package name="criu" version="3.18" release="5.module_el8.10.0+3876+e55593a8" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+3876+e55593a8.src.rpm">
          <filename>criu-3.18-5.module_el8.10.0+3876+e55593a8.s390x.rpm</filename>
          <sum type="sha256">bdaddee931f3746ac7472d9ccee504acd0be805433b3d160b1e7caf8bf361cb8</sum>
        </package>
        <package name="toolbox-tests" version="0.0.99.5.1" release="1.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="toolbox-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>toolbox-tests-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">bdc59eb38e3f90cd26d7f3417f6746988c30029b69aec49dfad5a57f785b6bf1</sum>
        </package>
        <package name="skopeo" version="1.14.5" release="7.module_el8.10.0+4136+16425343" epoch="2" arch="s390x" src="skopeo-1.14.5-7.module_el8.10.0+4136+16425343.src.rpm">
          <filename>skopeo-1.14.5-7.module_el8.10.0+4136+16425343.s390x.rpm</filename>
          <sum type="sha256">c14f2edda5209c3e8f255b5bbb0749db991ff728925c410b58c7518679a05f35</sum>
        </package>
        <package name="python3-criu" version="3.18" release="5.module_el8.10.0+4120+03ad4b47" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4120+03ad4b47.src.rpm">
          <filename>python3-criu-3.18-5.module_el8.10.0+4120+03ad4b47.s390x.rpm</filename>
          <sum type="sha256">c24d9238067c95664620e800f7d24812b7788384f71812868db7ae5d390bb2dd</sum>
        </package>
        <package name="conmon" version="2.1.10" release="1.module_el8.10.0+4068+0e21408f" epoch="3" arch="s390x" src="conmon-2.1.10-1.module_el8.10.0+4068+0e21408f.src.rpm">
          <filename>conmon-2.1.10-1.module_el8.10.0+4068+0e21408f.s390x.rpm</filename>
          <sum type="sha256">c845407c7f2bb04735705b66ad0ca47b44437e8d6988148eeee4986701a2ab8d</sum>
        </package>
        <package name="buildah-tests" version="1.33.14" release="3.module_el8.10.0+4136+16425343" epoch="2" arch="s390x" src="buildah-1.33.14-3.module_el8.10.0+4136+16425343.src.rpm">
          <filename>buildah-tests-1.33.14-3.module_el8.10.0+4136+16425343.s390x.rpm</filename>
          <sum type="sha256">cfffa30bfbdce20dec151d5520e62dc3de5a98bbf3434c856ed1f2d486f408ec</sum>
        </package>
        <package name="criu-libs" version="3.18" release="5.module_el8.10.0+4082+f7f0c95e" epoch="0" arch="s390x" src="criu-3.18-5.module_el8.10.0+4082+f7f0c95e.src.rpm">
          <filename>criu-libs-3.18-5.module_el8.10.0+4082+f7f0c95e.s390x.rpm</filename>
          <sum type="sha256">ef19ef2ed0463ac1a663bbbfaa1ebc2c430ca0f751305b9d5d0b4e41046bb967</sum>
        </package>
        <package name="slirp4netns" version="1.2.3" release="1.module_el8.10.0+4082+f7f0c95e" epoch="0" arch="s390x" src="slirp4netns-1.2.3-1.module_el8.10.0+4082+f7f0c95e.src.rpm">
          <filename>slirp4netns-1.2.3-1.module_el8.10.0+4082+f7f0c95e.s390x.rpm</filename>
          <sum type="sha256">fd08808c8bda8cc9c5ecad38af925ba82a8d2124ba69ca9153b315c7e4879fd2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5113</id>
    <title>Important: gimp:2.8 security update</title>
    <issued date="2026-03-19 00:00:00"/>
    <updated date="2026-03-20 13:31:59"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gimp:2.8 security update</summary>
    <description>The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.  

Security Fix(es):  

  * gimp: GIMP: Remote Code Execution via uninitialized memory in PGM file parsing (CVE-2026-2044)
  * gimp: GIMP: Remote Code Execution via out-of-bounds write in XWD file parsing (CVE-2026-2045)
  * gimp: GIMP: Remote Code Execution via ICO File Parsing Vulnerability (CVE-2026-0797)
  * gimp: GIMP: Remote Code Execution via XWD file parsing vulnerability (CVE-2026-2048)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5113" id="RHSA-2026:5113" type="rhsa" title="RHSA-2026:5113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0797" id="CVE-2026-0797" type="cve" title="CVE-2026-0797"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2044" id="CVE-2026-2044" type="cve" title="CVE-2026-2044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2045" id="CVE-2026-2045" type="cve" title="CVE-2026-2045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2048" id="CVE-2026-2048" type="cve" title="CVE-2026-2048"/>
      <reference href="https://bugzilla.redhat.com/2441521" id="2441521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2441522" id="2441522" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2441524" id="2441524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2441527" id="2441527" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-5113.html" id="ALSA-2026:5113" type="self" title="ALSA-2026:5113"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="gimp" stream="2.8" version="8100020250128092246" context="77fc8825" arch="s390x"/>
        <package name="gimp-devel-tools" version="2.8.22" release="26.module_el8.10.0+4137+2d0d25cf.5" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+4137+2d0d25cf.5.src.rpm">
          <filename>gimp-devel-tools-2.8.22-26.module_el8.10.0+4137+2d0d25cf.5.s390x.rpm</filename>
          <sum type="sha256">03cb2f66d258f811b7874c69400886e6a859bcc2d02b5298d2a10a4f71eba8ab</sum>
        </package>
        <package name="gimp-libs" version="2.8.22" release="26.module_el8.10.0+4137+2d0d25cf.5" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+4137+2d0d25cf.5.src.rpm">
          <filename>gimp-libs-2.8.22-26.module_el8.10.0+4137+2d0d25cf.5.s390x.rpm</filename>
          <sum type="sha256">1eb185f8702c0178c4d78a9f83734e4a63a55826e17bcbf75d408dfbb9d2a5d9</sum>
        </package>
        <package name="gimp" version="2.8.22" release="26.module_el8.10.0+4137+2d0d25cf.5" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+4137+2d0d25cf.5.src.rpm">
          <filename>gimp-2.8.22-26.module_el8.10.0+4137+2d0d25cf.5.s390x.rpm</filename>
          <sum type="sha256">2e2e078e90172d42f097615eb5beb766ada572682608e96a2a80ab6e9d3a90e1</sum>
        </package>
        <package name="pygtk2-devel" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="s390x" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-devel-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">42ea8b58abfff83cebc7a09a7f6f264b168a95782decbb03b4fcfef37fd7c062</sum>
        </package>
        <package name="pygtk2" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="s390x" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">43c790ef899908821a64cfad4af33097d1a9d9351a75d63d45e4363e0d91eec8</sum>
        </package>
        <package name="pygobject2-doc" version="2.28.7" release="5.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>pygobject2-doc-2.28.7-5.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">5104a2191c14aaf70d6f3d9ebf6374c054a182a2a7b0f63f32c1adc918ad4111</sum>
        </package>
        <package name="pygobject2-devel" version="2.28.7" release="5.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>pygobject2-devel-2.28.7-5.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">753e845a487e2072a62bfa272332266761c207df3360102c42900695a0fe3d32</sum>
        </package>
        <package name="pygtk2-codegen" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="s390x" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-codegen-2.24.0-25.module_el8.9.0+3725+d1441900.s390x.rpm</filename>
          <sum type="sha256">91402fea22feef9d15400358a93ae5d2ff0b95b332edfbae2245ac5846848476</sum>
        </package>
        <package name="pygtk2-doc" version="2.24.0" release="25.module_el8.9.0+3725+d1441900" epoch="0" arch="noarch" src="pygtk2-2.24.0-25.module_el8.9.0+3725+d1441900.src.rpm">
          <filename>pygtk2-doc-2.24.0-25.module_el8.9.0+3725+d1441900.noarch.rpm</filename>
          <sum type="sha256">bec32577bca5233d67a34af1ef0ae0d1ca15f8896607b22d94cc18d8d4c93d70</sum>
        </package>
        <package name="pygobject2-codegen" version="2.28.7" release="5.module_el8.10.0+4137+2d0d25cf" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+4137+2d0d25cf.src.rpm">
          <filename>pygobject2-codegen-2.28.7-5.module_el8.10.0+4137+2d0d25cf.s390x.rpm</filename>
          <sum type="sha256">d8941833e5dc0c9e073b3e170c25253fc75cf9b8d1a086f0be5a8d90fbf63885</sum>
        </package>
        <package name="pygobject2" version="2.28.7" release="5.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>pygobject2-2.28.7-5.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">d9c541afe98fa2f9c4fb770991f7c15dae66b0b36616ff2b94ae7c824b1b0e84</sum>
        </package>
        <package name="python2-cairo" version="1.16.3" release="7.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="python2-pycairo-1.16.3-7.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>python2-cairo-1.16.3-7.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">e015ce54a4c31a35c21aa3d77fd6d10674ff10a9058f1dd194a9167328d8a0d9</sum>
        </package>
        <package name="gimp-devel" version="2.8.22" release="26.module_el8.10.0+4137+2d0d25cf.5" epoch="2" arch="s390x" src="gimp-2.8.22-26.module_el8.10.0+4137+2d0d25cf.5.src.rpm">
          <filename>gimp-devel-2.8.22-26.module_el8.10.0+4137+2d0d25cf.5.s390x.rpm</filename>
          <sum type="sha256">e288c8ab77e0b36b0d426ffa634e7571077ed9f2104bd411e7a459cdf90df3c5</sum>
        </package>
        <package name="python2-cairo-devel" version="1.16.3" release="7.module_el8.10.0+3952+571e801c" epoch="0" arch="s390x" src="python2-pycairo-1.16.3-7.module_el8.10.0+3952+571e801c.src.rpm">
          <filename>python2-cairo-devel-1.16.3-7.module_el8.10.0+3952+571e801c.s390x.rpm</filename>
          <sum type="sha256">ecc0dda98450cefa8281d354f444d8e91876cc91f2cf6c8fd8ecf460a4dbdc8b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5513</id>
    <title>Moderate: 389-ds:1.4 security update</title>
    <issued date="2026-03-24 00:00:00"/>
    <updated date="2026-03-26 11:22:25"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>389-ds:1.4 security update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.   

Security Fix(es):  

  * 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow (CVE-2025-14905)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5513" id="RHSA-2026:5513" type="rhsa" title="RHSA-2026:5513"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14905" id="CVE-2025-14905" type="cve" title="CVE-2025-14905"/>
      <reference href="https://bugzilla.redhat.com/2423624" id="2423624" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-5513.html" id="ALSA-2026:5513" type="self" title="ALSA-2026:5513"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="389-ds" stream="1.4" version="8100020260325014858" context="17499975" arch="s390x"/>
        <package name="389-ds-base-snmp" version="1.4.3.39" release="23.module_el8.10.0+4139+ef6adba4" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-23.module_el8.10.0+4139+ef6adba4.src.rpm">
          <filename>389-ds-base-snmp-1.4.3.39-23.module_el8.10.0+4139+ef6adba4.s390x.rpm</filename>
          <sum type="sha256">05a18f1d2a3834c091284880c288b9b4849191ccc8726dab70283c0fbf01da23</sum>
        </package>
        <package name="389-ds-base-legacy-tools" version="1.4.3.39" release="23.module_el8.10.0+4139+ef6adba4" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-23.module_el8.10.0+4139+ef6adba4.src.rpm">
          <filename>389-ds-base-legacy-tools-1.4.3.39-23.module_el8.10.0+4139+ef6adba4.s390x.rpm</filename>
          <sum type="sha256">1490c890b285322bc55ca0a4a9b2908f2de6749327d3850b5208db8e16b90ec2</sum>
        </package>
        <package name="389-ds-base" version="1.4.3.39" release="23.module_el8.10.0+4139+ef6adba4" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-23.module_el8.10.0+4139+ef6adba4.src.rpm">
          <filename>389-ds-base-1.4.3.39-23.module_el8.10.0+4139+ef6adba4.s390x.rpm</filename>
          <sum type="sha256">428c2aa0e9add8fb3902edbfff822f87a42b3f022f5fd5a30342452732449591</sum>
        </package>
        <package name="389-ds-base-libs" version="1.4.3.39" release="23.module_el8.10.0+4139+ef6adba4" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-23.module_el8.10.0+4139+ef6adba4.src.rpm">
          <filename>389-ds-base-libs-1.4.3.39-23.module_el8.10.0+4139+ef6adba4.s390x.rpm</filename>
          <sum type="sha256">717b45d6f44ae069adf731de2c0541235a2d4053088c18ca6253286b61897f3b</sum>
        </package>
        <package name="python3-lib389" version="1.4.3.39" release="23.module_el8.10.0+4139+ef6adba4" epoch="0" arch="noarch" src="389-ds-base-1.4.3.39-23.module_el8.10.0+4139+ef6adba4.src.rpm">
          <filename>python3-lib389-1.4.3.39-23.module_el8.10.0+4139+ef6adba4.noarch.rpm</filename>
          <sum type="sha256">a7dba57a01d3280d5a874e59691d3ce731eeee6fa9d2f4883cd975c5b54c1cb7</sum>
        </package>
        <package name="389-ds-base-devel" version="1.4.3.39" release="23.module_el8.10.0+4139+ef6adba4" epoch="0" arch="s390x" src="389-ds-base-1.4.3.39-23.module_el8.10.0+4139+ef6adba4.src.rpm">
          <filename>389-ds-base-devel-1.4.3.39-23.module_el8.10.0+4139+ef6adba4.s390x.rpm</filename>
          <sum type="sha256">d02af1e802c86b173411d51e8f13e6e75a7ba4a2ca0ed240ae4a928c46c6db0b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5578</id>
    <title>Moderate: virt:rhel and virt-devel:rhel security update</title>
    <issued date="2026-03-24 00:00:00"/>
    <updated date="2026-03-26 13:06:48"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>virt:rhel and virt-devel:rhel security update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.  

Security Fix(es):  

  * qemu-kvm: VNC WebSocket handshake use-after-free (CVE-2025-11234)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5578" id="RHSA-2026:5578" type="rhsa" title="RHSA-2026:5578"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11234" id="CVE-2025-11234" type="cve" title="CVE-2025-11234"/>
      <reference href="https://bugzilla.redhat.com/2401209" id="2401209" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-5578.html" id="ALSA-2026:5578" type="self" title="ALSA-2026:5578"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="virt" stream="rhel" version="8100020240924083209" context="9edba152" arch="s390x"/>
        <package name="nbdkit-basic-plugins" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-basic-plugins-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">04adc669a1655a4f4dcadbdd520afd5f6f5dc82b44738fcabde3a280f36fb90f</sum>
        </package>
        <package name="python3-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>python3-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">05372f9ad377c74c0d221dacf23c7510171afbb751c03585fd3c09513d7e1bde</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-nwfilter-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">07cb2b671d93ac66030500fb83a7ed0ac2f4bbc4c57eb44402d588b56f41f260</sum>
        </package>
        <package name="libvirt-client" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-client-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">0d09bdb8d956521a043b45119899363387d72874b63e0f116cedb80f147bd849</sum>
        </package>
        <package name="libguestfs-tools" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-tools-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">116835a3e003417d7186479fbf47960a09588a3ace207d4f34da6a19ab8c07de</sum>
        </package>
        <package name="libnbd-devel" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="s390x" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>libnbd-devel-1.6.0-6.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">13ff008c635e7416a262ccfc52419629b03bcd3da12d32abdc3ee37072fb40ec</sum>
        </package>
        <package name="netcf-devel" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-devel-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1888edc09e8d44539c2c7b84b7a8df91477b8a725fe93436ac4d71106e177d48</sum>
        </package>
        <package name="libguestfs-javadoc" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-javadoc-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">18b9d6c98999a3b289a865504944fb3dc9b2994eff5461933549add50c6faa5b</sum>
        </package>
        <package name="nbdkit" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">1a6f5649d6acd35dd28d2d99042056bc8308fe0910ce6322bf27b0ec71bbee4f</sum>
        </package>
        <package name="hivex-devel" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>hivex-devel-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">1aa145aa6a3f900531fc1c8f1c161197f37539d113d47c14efd9c66def20940a</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-storage-logical-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">1f070f681d716e06931288e208daa09f353f4963f436aa27d354fa17c633e780</sum>
        </package>
        <package name="libnbd" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="s390x" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">1f3f644969c542586e0a5467676e856c27df1546e6807a8a890dfd446f76c6d6</sum>
        </package>
        <package name="libvirt-nss" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-nss-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">221e7b8f8bbcc5fb5b906ab8aad9ccefd1e25d2ca5574ac928d958e1233da2c2</sum>
        </package>
        <package name="nbdkit-python-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-python-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">23c394ecc23e544232d78956b610b1403324cb6a46a3d46adc0fd256f19a1e4b</sum>
        </package>
        <package name="nbdkit-tar-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tar-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">2521bcc64ce8e24df611cf9194277fd5f7856f3df3f72be3276748b10d23beb3</sum>
        </package>
        <package name="nbdkit-bash-completion" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="noarch" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-bash-completion-1.24.0-5.module_el8.8.0+3485+7cffc4a3.noarch.rpm</filename>
          <sum type="sha256">254dfbf64036ae05d930d81be90202718fba7b341f0457de4a29ecfca3aea646</sum>
        </package>
        <package name="nbdkit-xz-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-xz-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">263ad615e21aaba0dce020cf1ad8b569c3860640d8074e9f74035ff925c409d0</sum>
        </package>
        <package name="nbdkit-gzip-filter" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-gzip-filter-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">27675a3171d769e7f9ea9b7fa63303b3e51f8221a68feaee1f16aeb7d658dccb</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-secret-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">2861a46f85f00d3580741b9653906060723860d6b1b46e63249f755dc63d9a62</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-config-nwfilter-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">2cbf5704bd28d243d95a378ce3cc292945a5f192980bb3e8178dc2b692eefc1f</sum>
        </package>
        <package name="qemu-kvm-common" version="6.2.0" release="53.module_el8.10.0+4110+4a319788.6" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+4110+4a319788.6.src.rpm">
          <filename>qemu-kvm-common-6.2.0-53.module_el8.10.0+4110+4a319788.6.s390x.rpm</filename>
          <sum type="sha256">309940e61462e967e1d1604ff9e60290dafe1b7de4cbc0bcd6b560fc5a2d0a8d</sum>
        </package>
        <package name="lua-guestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>lua-guestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">36d15a85e154608cf2bc661120c8a573356cb3e0e1dc77a94387aa3c8bce90ef</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="6.2.0" release="53.module_el8.10.0+4110+4a319788.6" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+4110+4a319788.6.src.rpm">
          <filename>qemu-kvm-block-iscsi-6.2.0-53.module_el8.10.0+4110+4a319788.6.s390x.rpm</filename>
          <sum type="sha256">37a9eccd6cb40ed4b53ec092ac8f295cd4334bfb245d09fb35b8b6cebd652f0a</sum>
        </package>
        <package name="libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">40e3ffa7c3e67b0fe9a110dbe8bf267fa9906f358a3bd81135b33a624e6429ba</sum>
        </package>
        <package name="ruby-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ruby-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">4428b40d29de3a3eda15340b2cbacebe838ba363b3897a1a91f904b9f2b4f8b9</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="6.2.0" release="53.module_el8.10.0+4110+4a319788.6" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+4110+4a319788.6.src.rpm">
          <filename>qemu-kvm-block-rbd-6.2.0-53.module_el8.10.0+4110+4a319788.6.s390x.rpm</filename>
          <sum type="sha256">471ee369a56c15737f0df6121825a7c228319d4ec3f2c47ac02f9b6d503466a6</sum>
        </package>
        <package name="qemu-kvm-docs" version="6.2.0" release="53.module_el8.10.0+4110+4a319788.6" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+4110+4a319788.6.src.rpm">
          <filename>qemu-kvm-docs-6.2.0-53.module_el8.10.0+4110+4a319788.6.s390x.rpm</filename>
          <sum type="sha256">48a7998db867e3d4ec8d61d35fd7e9a35be216784d21d28f3f9f4569084bf60a</sum>
        </package>
        <package name="libtpms-devel" version="0.9.1" release="3.20211126git1ff6fe1f43.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libtpms-0.9.1-3.20211126git1ff6fe1f43.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libtpms-devel-0.9.1-3.20211126git1ff6fe1f43.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">48cdd543f8b28754dc028f83386b64554c9e284a8d22429319034a969208eab9</sum>
        </package>
        <package name="nbdkit-basic-filters" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-basic-filters-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">494ad345b2b9b009436ba9a8c8c6bb245e8617e921dae51ab6d9281e95999f31</sum>
        </package>
        <package name="qemu-guest-agent" version="6.2.0" release="53.module_el8.10.0+4110+4a319788.6" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+4110+4a319788.6.src.rpm">
          <filename>qemu-guest-agent-6.2.0-53.module_el8.10.0+4110+4a319788.6.s390x.rpm</filename>
          <sum type="sha256">496f7332e6dc7e381156bea11bb49ac8072b0dabcc3f08ae49e122d2c42a712e</sum>
        </package>
        <package name="nbdkit-curl-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-curl-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">4fd1a6bbe855d7c4068fcf080b4b0b15b367ef7f635ac869b7bddb1698dafa01</sum>
        </package>
        <package name="libvirt-daemon" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">50acabca0feb3f7b9aa72997ffcb6bc1e5a900b50705d380527c00c279baa569</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">517537474707f98d3659be977cd72804e8b4560f65db419adae773bfea86133d</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-qemu-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">57d98c10721e28a8c587f4a000c693a8f85f372e3ccf4dd5e5f762da11ed815e</sum>
        </package>
        <package name="libguestfs-bash-completion" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-bash-completion-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">5a67ce33e944ee07d6ea976afa13f8c832ce4be22f124591ace620dfe08b5178</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-kvm-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">5b81e3699d4c2d4e5edfb28fd30da7587fff1424b0bef20541cf49185d764e84</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-nodedev-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">5bc4afc9cf9901549895de9e9e7cc7a5bb2558b5f9c78ee93a7cbaf31c09dff4</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">5d188fb37627fcf40795946a762cd1ada2b870e52488402995db6c68da967d05</sum>
        </package>
        <package name="libguestfs-gobject-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gobject-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">5e05d955e58bc16ccb3e4097f338dd34af18225ef9bcd2b420d794a9efdd269b</sum>
        </package>
        <package name="qemu-img" version="6.2.0" release="53.module_el8.10.0+4110+4a319788.6" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+4110+4a319788.6.src.rpm">
          <filename>qemu-img-6.2.0-53.module_el8.10.0+4110+4a319788.6.s390x.rpm</filename>
          <sum type="sha256">5f8e7d858c7098e440fc58cc7961ef9e2ca71696115fa8106673d9617975e0cd</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-config-network-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">6959fef172f059452dd85ab0f6935aff8a1591f243664d4dfad22820217a3171</sum>
        </package>
        <package name="libvirt-libs" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-libs-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">6c70c7706f50f8efd4e2cb315301ee671d26fcce9a9c607d5efc5fa1f0c511d4</sum>
        </package>
        <package name="nbdkit-tmpdisk-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tmpdisk-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">6f4728c5aa7cc03d70b241d6947aff1fe49546aac4cc62bd01a59c1b1b73ba35</sum>
        </package>
        <package name="libguestfs-java-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-java-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">6fc6fe19b2e83d70d5f240d776ccc00a181870a485d39667fccb62ec0b851f02</sum>
        </package>
        <package name="nbdkit-server" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-server-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">706c1dd5780f1e48f883702f6c86a985bd057078fcd41326947b283625a77e05</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">75fd1ae3accffbecf01e98cd742734cfd64d7b6eb2ee087ada87349f473edf8a</sum>
        </package>
        <package name="perl-Sys-Guestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>perl-Sys-Guestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">77c035cdcf2f7e819dcb6d76b9ba12ae63a6f07d615a9a435b7ec2dc8ca93330</sum>
        </package>
        <package name="libvirt" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">7af92334f15923171783ec3af6baec1ea0aec152fdba79db213d2bc14446efc3</sum>
        </package>
        <package name="qemu-kvm-core" version="6.2.0" release="53.module_el8.10.0+4110+4a319788.6" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+4110+4a319788.6.src.rpm">
          <filename>qemu-kvm-core-6.2.0-53.module_el8.10.0+4110+4a319788.6.s390x.rpm</filename>
          <sum type="sha256">7afb805e1690c75e7c4172fac1fa0700fc10bfdbcf1299053d48588e9d5da398</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-gluster" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-storage-gluster-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">7c9cb4acef9f2982128fd195467c8dca85ec19a1af4216e5e585eb38ec4ea38b</sum>
        </package>
        <package name="libguestfs-gfs2" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gfs2-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">7ee36ba216591f26a055c687e5e75e054585c69c86b085d8966cb419ddeb3362</sum>
        </package>
        <package name="libguestfs-gobject" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-gobject-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">8292ca96b97184b2ca5475901b46b09f715adbe99d1a5983c9ad4a0d2b3d72bb</sum>
        </package>
        <package name="netcf-libs" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-libs-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">843b61e4019e8cec44d5f5823d3c8c0b803997791aecef6ff1023224147cd6f8</sum>
        </package>
        <package name="libvirt-devel" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-devel-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">85f387bb12e423f68f821c92de412458cfb0ed31dd33542c21ad4ba90dfb8857</sum>
        </package>
        <package name="nbdkit-linuxdisk-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-linuxdisk-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">8673003aa4610f82cbe152021387ac3c6c59d730a79b446aad432030e20f5eff</sum>
        </package>
        <package name="swtpm-tools" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-tools-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">87ce1c2ecc368965a92cf71a29a7cb1331508c7c86394cfaa7e4e87d20897d7b</sum>
        </package>
        <package name="nbdkit-tar-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-tar-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">87ec102223607b5d8760ee3d8998a48b3fbce6a1abe6d8056782c1d9f94513ad</sum>
        </package>
        <package name="supermin-devel" version="5.2.1" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="supermin-5.2.1-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>supermin-devel-5.2.1-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">8a47307269cf95719225e1e27dcd1cebdf6a0481948e4a044db972af12de9ce3</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-storage-disk-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">8c3e43a41e7db0fd2551e7ec32211e8f296c56751fb6ef1ea690db4447f5e196</sum>
        </package>
        <package name="libguestfs-man-pages-uk" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-man-pages-uk-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">8cd1a80b657a0373e6dcf0b6699e7574c9874db489201985b16bc1d1d78cc55b</sum>
        </package>
        <package name="swtpm-tools-pkcs11" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-tools-pkcs11-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">8e7eeb060f1253ff8a48085d0b452c2ba2c1837e286fd23d91426f255d72398a</sum>
        </package>
        <package name="libguestfs-rescue" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-rescue-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">92093c28f6226504668df61e0bc2c5d1e7d8bf505a8bf762cdd5d2e7a50bb52f</sum>
        </package>
        <package name="netcf" version="0.2.8" release="12.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>netcf-0.2.8-12.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">9268b4ab854af88a5e511f78b47cf3c4acd66d76f7ea901452f6efd3f9c8bc7c</sum>
        </package>
        <package name="libtpms" version="0.9.1" release="3.20211126git1ff6fe1f43.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libtpms-0.9.1-3.20211126git1ff6fe1f43.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libtpms-0.9.1-3.20211126git1ff6fe1f43.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">945f5e8c26e39a8c29ce6e42df905d69ed0d696a97c9e2c317450bfdbe8b800c</sum>
        </package>
        <package name="libguestfs-man-pages-ja" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-man-pages-ja-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">968dd115e865d941a07d1728940d84bdfef4f26d43d39aa225f4f4a5a821c89d</sum>
        </package>
        <package name="libvirt-lock-sanlock" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-lock-sanlock-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">9bb70ad869c0661ca891fd51006df4f855f79693a33c976db4e82e1bd3f18f73</sum>
        </package>
        <package name="libguestfs-rsync" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-rsync-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">9cc94d5cec35a9f048fa74c69a8b7d6a0ec48c14074297bb564b91f4cdc4c54f</sum>
        </package>
        <package name="hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">9d259d5ff0ee30b3a2a8e5f897675750f74741ed06d50d3623cf469d1d0f01d8</sum>
        </package>
        <package name="qemu-kvm" version="6.2.0" release="53.module_el8.10.0+4110+4a319788.6" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+4110+4a319788.6.src.rpm">
          <filename>qemu-kvm-6.2.0-53.module_el8.10.0+4110+4a319788.6.s390x.rpm</filename>
          <sum type="sha256">9d6baf937f2768fe196245f48d45719c4a750bb105e3da9419f9cebbf8087c90</sum>
        </package>
        <package name="libiscsi" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">a1c871e87ebd136bfd498f13824563fd7428fcaf66bcffb341cfbb8370c2a18d</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-network-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">a708e43887a53a9eb9fe414eef79e18763e3a474e1f5be9e6046c3e7bc26f7a4</sum>
        </package>
        <package name="swtpm" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">a7fbed17619ce4d6d7d43a459be652ec92882b41903ac386ebfd9815806bc622</sum>
        </package>
        <package name="perl-Sys-Virt" version="8.0.0" release="1.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="perl-Sys-Virt-8.0.0-1.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>perl-Sys-Virt-8.0.0-1.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">a8b115eb9ca2707d1d7f800ac1b7730dcc6718168ff355f065464e6778ef5929</sum>
        </package>
        <package name="nbdkit-nbd-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-nbd-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">a9427bee7f157a63f2acd2357032ce829e0561b24193d204072502adad4aa52e</sum>
        </package>
        <package name="python3-libnbd" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="s390x" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>python3-libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">af55cd779b02d3ce09e49f1e8a86893252ce44c2b04cb115e13107018b32841d</sum>
        </package>
        <package name="nbdkit-example-plugins" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-example-plugins-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">b10c0d094e84d5c035dae70b4db36c311eb7ff9cbee00c8443848f049a600ae4</sum>
        </package>
        <package name="libnbd-bash-completion" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="noarch" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>libnbd-bash-completion-1.6.0-6.module_el8.10.0+3897+eb84924d.noarch.rpm</filename>
          <sum type="sha256">b3fd3388c6c1d03a6cbb0a2c371b7e5e0fbfdce2b1481e96c9ad7cb2ef12147d</sum>
        </package>
        <package name="libguestfs-appliance" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-appliance-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">b5add06502e5bda5f39f712640e2ab0e8cf539b7a90370c6c1fd963bb73bc7d7</sum>
        </package>
        <package name="libiscsi-utils" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-utils-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">b6eb101dc2787a7d79b4fe51913319933f5927d1816ea03592d2be849ce21faf</sum>
        </package>
        <package name="ruby-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ruby-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">b8696f7658b7872cb5f4e9fe2319e00ec6b668fe0e9adea787890cb9500e0223</sum>
        </package>
        <package name="nbdkit-ssh-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-ssh-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">b9b590364d69f18da851dea269d4774ff711f44e3ace9b3304e87fe25f26aaa5</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-storage-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">bd279e2f6a60eac16ea3efbd9c2bbaa1ef3e4314c56f9ee63f211d962106b71e</sum>
        </package>
        <package name="virt-dib" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>virt-dib-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">bf4b5929cf910fb7e4671e32c9ac2ce2f456e8b1e577cb0f4f33a0df8d316c27</sum>
        </package>
        <package name="libguestfs-java" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-java-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">bfc05f2dc57991bad44654221ea88f653c916e80637290b69c96e3e0f5aa55a8</sum>
        </package>
        <package name="libvirt-dbus" version="1.3.0" release="2.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libvirt-dbus-1.3.0-2.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libvirt-dbus-1.3.0-2.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">c20042be5784c1f4323e5590891be2a0e33244acff6b45149f36a2eef834064b</sum>
        </package>
        <package name="libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">c685dcd2fb41a700a866919788441d7c80c9a10b9757ea843e7a56c67a5d4be2</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-interface-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">cc03c95b04dd053094973e09440d44930c48239e1f8864b7d19fb070e72dc14c</sum>
        </package>
        <package name="libguestfs-winsupport" version="8.10" release="1.module_el8.10.0+3768+dfd76e10" epoch="0" arch="s390x" src="libguestfs-winsupport-8.10-1.module_el8.10.0+3768+dfd76e10.src.rpm">
          <filename>libguestfs-winsupport-8.10-1.module_el8.10.0+3768+dfd76e10.s390x.rpm</filename>
          <sum type="sha256">ccf203e75a1c0f0de8598ecc0fce3f409a12f34189a7fae21d58c8311062f236</sum>
        </package>
        <package name="swtpm-libs" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-libs-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">d077f2d1f54aa47907a883e12d46f0632e33ad5141bd16a25759a580f851b91c</sum>
        </package>
        <package name="libiscsi-devel" version="1.18.0" release="8.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libiscsi-1.18.0-8.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>libiscsi-devel-1.18.0-8.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">d45a7d8438477f375ed86276eea276fd3bb0965844cb8733a09691fc68d730db</sum>
        </package>
        <package name="nbdkit-devel" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-devel-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">d5bc58eda3110ad1589ab9d239e347e155bf59eaee69e0bea028f67d9e0ea216</sum>
        </package>
        <package name="swtpm-devel" version="0.7.0" release="4.20211109gitb79fd91.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="swtpm-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>swtpm-devel-0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">d69840154560e2ca3f4ea1315bfcca103b2260692f2c3d5fa1a76dbed7ddfbe1</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">da595cdc224f10c26134e485350243f62a250dbf56dec156c62a70205bfff3c0</sum>
        </package>
        <package name="libvirt-wireshark" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-wireshark-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">db032b069b3a97411ed2d23b2e5c7be94845c899edf89470cd980f849894149d</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-storage-core-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">dc38cf4821cbc6482a61cbd9d77190d36ddc3854754e07bc4e44e779ceaae7d4</sum>
        </package>
        <package name="supermin" version="5.2.1" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="supermin-5.2.1-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>supermin-5.2.1-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">e15b529769bbaa1d035eb7e4d4f58f4757e58772523d45cb07cc7533eeef0057</sum>
        </package>
        <package name="libvirt-docs" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-docs-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">e346fa792bf187e985fae6614788413604ef6e646d94c3555105bec155616b44</sum>
        </package>
        <package name="python3-libvirt" version="8.0.0" release="2.module_el8.7.0+3346+68867adb" epoch="0" arch="s390x" src="libvirt-python-8.0.0-2.module_el8.7.0+3346+68867adb.src.rpm">
          <filename>python3-libvirt-8.0.0-2.module_el8.7.0+3346+68867adb.s390x.rpm</filename>
          <sum type="sha256">e36c5a8c03f3393622b5dd5badefcd4a05ee01b8de17de28812017ddfda63954</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="6.2.0" release="53.module_el8.10.0+4110+4a319788.6" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+4110+4a319788.6.src.rpm">
          <filename>qemu-kvm-block-curl-6.2.0-53.module_el8.10.0+4110+4a319788.6.s390x.rpm</filename>
          <sum type="sha256">e52e0482cdc09cb5a818e8cada0a876452d8abcf505599a27251dda8c30f8fdd</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="8.0.0" release="23.4.module_el8.10.0+4031+06966654" epoch="0" arch="s390x" src="libvirt-8.0.0-23.4.module_el8.10.0+4031+06966654.src.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-8.0.0-23.4.module_el8.10.0+4031+06966654.s390x.rpm</filename>
          <sum type="sha256">e7999bf1058ea9ae93873a86be3d1f820a2ccf3a623f58880c542b204ad85824</sum>
        </package>
        <package name="python3-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>python3-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">ec11102e66953715d97704c820c0effcd80944fdd525efca9645f70b1cfa2fa9</sum>
        </package>
        <package name="nbdfuse" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="s390x" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>nbdfuse-1.6.0-6.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">ec2a6b02d5f84f5b5788518aed5038b701ea7ef7c7b7d4c85f8320106d4a9d05</sum>
        </package>
        <package name="libguestfs-inspect-icons" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-inspect-icons-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.noarch.rpm</filename>
          <sum type="sha256">ece57f7c833d85599725786783875d496fd9d38644cdc96ce23e4d73c6d5e4c9</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="6.2.0" release="53.module_el8.10.0+4110+4a319788.6" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+4110+4a319788.6.src.rpm">
          <filename>qemu-kvm-block-ssh-6.2.0-53.module_el8.10.0+4110+4a319788.6.s390x.rpm</filename>
          <sum type="sha256">f19be1cf72fdf7c2d0d52817590d3537be55c55b950267d435588737a440d3cd</sum>
        </package>
        <package name="nbdkit-gzip-plugin" version="1.24.0" release="5.module_el8.8.0+3485+7cffc4a3" epoch="0" arch="s390x" src="nbdkit-1.24.0-5.module_el8.8.0+3485+7cffc4a3.src.rpm">
          <filename>nbdkit-gzip-plugin-1.24.0-5.module_el8.8.0+3485+7cffc4a3.s390x.rpm</filename>
          <sum type="sha256">f3befb065571d5207296b7d7f2db60348cb935ec26b3fcf7a5db2f66dbec7dc5</sum>
        </package>
        <package name="libguestfs-xfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-xfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">fa8ce4ce15f9b8d5753db18aa569fdbb4c636e16d88c6bb83fc588c594c1ee90</sum>
        </package>
        <package name="perl-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>perl-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">fcc1bade9f3d715b09d2679d6efc9fd94b2faa9e912dcae68dbc372613f90965</sum>
        </package>
        <package name="libguestfs-tools-c" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>libguestfs-tools-c-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">fce060540b90878b0d21bfa525965ac06b8622b0a7cf824c54761c92b79f0764</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5580</id>
    <title>Moderate: mysql:8.0 security update</title>
    <issued date="2026-03-24 00:00:00"/>
    <updated date="2026-03-26 11:12:15"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql:8.0 security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  

Security Fix(es):  

  * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21941)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21948)
  * mysql: InnoDB unspecified vulnerability (CPU Jan 2026) (CVE-2026-21936)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)
  * mysql: DDL unspecified vulnerability (CPU Jan 2026) (CVE-2026-21937)
  * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2026) (CVE-2026-21964)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5580" id="RHSA-2026:5580" type="rhsa" title="RHSA-2026:5580"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21936" id="CVE-2026-21936" type="cve" title="CVE-2026-21936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21937" id="CVE-2026-21937" type="cve" title="CVE-2026-21937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21941" id="CVE-2026-21941" type="cve" title="CVE-2026-21941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21948" id="CVE-2026-21948" type="cve" title="CVE-2026-21948"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21964" id="CVE-2026-21964" type="cve" title="CVE-2026-21964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21968" id="CVE-2026-21968" type="cve" title="CVE-2026-21968"/>
      <reference href="https://bugzilla.redhat.com/2431384" id="2431384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431385" id="2431385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431402" id="2431402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431409" id="2431409" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431413" id="2431413" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431431" id="2431431" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-5580.html" id="ALSA-2026:5580" type="self" title="ALSA-2026:5580"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="mysql" stream="8.0" version="8100020260325121458" context="9edba152" arch="s390x"/>
        <package name="mysql-test" version="8.0.45" release="1.module_el8.10.0+4142+0b28b031" epoch="0" arch="s390x" src="mysql-8.0.45-1.module_el8.10.0+4142+0b28b031.src.rpm">
          <filename>mysql-test-8.0.45-1.module_el8.10.0+4142+0b28b031.s390x.rpm</filename>
          <sum type="sha256">044638b37eab0c98581cd0f7f189b16c7085544620cb5740be40142c64115564</sum>
        </package>
        <package name="mecab" version="0.996" release="2.module_el8.10.0+3965+b415b607" epoch="0" arch="s390x" src="mecab-0.996-2.module_el8.10.0+3965+b415b607.src.rpm">
          <filename>mecab-0.996-2.module_el8.10.0+3965+b415b607.s390x.rpm</filename>
          <sum type="sha256">33b6163fbf1b6b08111e95f3543dbb14bf19fc0ff5086e737fe6343a4443df82</sum>
        </package>
        <package name="mysql-common" version="8.0.45" release="1.module_el8.10.0+4142+0b28b031" epoch="0" arch="s390x" src="mysql-8.0.45-1.module_el8.10.0+4142+0b28b031.src.rpm">
          <filename>mysql-common-8.0.45-1.module_el8.10.0+4142+0b28b031.s390x.rpm</filename>
          <sum type="sha256">533ec3735572a534f44b6347a60a67cd7aab1c80b2edca2476cfffb92720a1a2</sum>
        </package>
        <package name="mysql-server" version="8.0.45" release="1.module_el8.10.0+4142+0b28b031" epoch="0" arch="s390x" src="mysql-8.0.45-1.module_el8.10.0+4142+0b28b031.src.rpm">
          <filename>mysql-server-8.0.45-1.module_el8.10.0+4142+0b28b031.s390x.rpm</filename>
          <sum type="sha256">57f370cbf55d79a733eab7ad50fad2b14fc062acbda59c06cc349936bb4f1fec</sum>
        </package>
        <package name="mysql" version="8.0.45" release="1.module_el8.10.0+4142+0b28b031" epoch="0" arch="s390x" src="mysql-8.0.45-1.module_el8.10.0+4142+0b28b031.src.rpm">
          <filename>mysql-8.0.45-1.module_el8.10.0+4142+0b28b031.s390x.rpm</filename>
          <sum type="sha256">5a0f9c4bcdf0a96f4e640e9bf6ea84147f2c4ae6dce5ad5db0aada7d7c25eceb</sum>
        </package>
        <package name="mecab-ipadic-EUCJP" version="2.7.0.20070801" release="17.module_el8.10.0+4142+0b28b031" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+4142+0b28b031.src.rpm">
          <filename>mecab-ipadic-EUCJP-2.7.0.20070801-17.module_el8.10.0+4142+0b28b031.s390x.rpm</filename>
          <sum type="sha256">5c2c4be1b706f2375ebe433520a9df47da83ecb94f399a35bdfa9532a05316de</sum>
        </package>
        <package name="mecab-devel" version="0.996" release="2.module_el8.6.0+3340+d764b636" epoch="0" arch="s390x" src="mecab-0.996-2.module_el8.6.0+3340+d764b636.src.rpm">
          <filename>mecab-devel-0.996-2.module_el8.6.0+3340+d764b636.s390x.rpm</filename>
          <sum type="sha256">95fbafd6a495d411511dcfabd6b0f0746e44e7a7bcc70330024e0022229ee5d3</sum>
        </package>
        <package name="mysql-errmsg" version="8.0.45" release="1.module_el8.10.0+4142+0b28b031" epoch="0" arch="s390x" src="mysql-8.0.45-1.module_el8.10.0+4142+0b28b031.src.rpm">
          <filename>mysql-errmsg-8.0.45-1.module_el8.10.0+4142+0b28b031.s390x.rpm</filename>
          <sum type="sha256">aefb7f307fff23288578149e4509515c3ed8206e0c4a7d982f16590d004d324d</sum>
        </package>
        <package name="mysql-libs" version="8.0.45" release="1.module_el8.10.0+4142+0b28b031" epoch="0" arch="s390x" src="mysql-8.0.45-1.module_el8.10.0+4142+0b28b031.src.rpm">
          <filename>mysql-libs-8.0.45-1.module_el8.10.0+4142+0b28b031.s390x.rpm</filename>
          <sum type="sha256">b4b4f641a44705b19796d9f13f90aa50fd5eac2aacc206efbce1fa4a623d3fa0</sum>
        </package>
        <package name="mecab-ipadic" version="2.7.0.20070801" release="17.module_el8.10.0+4142+0b28b031" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+4142+0b28b031.src.rpm">
          <filename>mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+4142+0b28b031.s390x.rpm</filename>
          <sum type="sha256">c3a11d45548f782dcdecd4d101438588aa1cd7d52fcecabec45ab2a1d34243dc</sum>
        </package>
        <package name="mysql-devel" version="8.0.45" release="1.module_el8.10.0+4142+0b28b031" epoch="0" arch="s390x" src="mysql-8.0.45-1.module_el8.10.0+4142+0b28b031.src.rpm">
          <filename>mysql-devel-8.0.45-1.module_el8.10.0+4142+0b28b031.s390x.rpm</filename>
          <sum type="sha256">dfe6c945b4130bd1c1201766d814f0f6a51c3d5b61458827ae10a28b388f819c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5581</id>
    <title>Moderate: nginx:1.24 security update</title>
    <issued date="2026-03-24 00:00:00"/>
    <updated date="2026-03-26 13:17:45"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nginx:1.24 security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5581" id="RHSA-2026:5581" type="rhsa" title="RHSA-2026:5581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1642" id="CVE-2026-1642" type="cve" title="CVE-2026-1642"/>
      <reference href="https://bugzilla.redhat.com/2436738" id="2436738" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-5581.html" id="ALSA-2026:5581" type="self" title="ALSA-2026:5581"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="nginx" stream="1.24" version="8100020260326074018" context="9edba152" arch="s390x"/>
        <package name="nginx" version="1.24.0" release="2.module_el8.10.0+4143+ec3e7d32.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-2.module_el8.10.0+4143+ec3e7d32.alma.1.src.rpm">
          <filename>nginx-1.24.0-2.module_el8.10.0+4143+ec3e7d32.alma.1.s390x.rpm</filename>
          <sum type="sha256">03813e2cf006d9a15bf93d020fbfd6d1e6170bd00ed51494aca3763a436a550f</sum>
        </package>
        <package name="nginx-mod-http-image-filter" version="1.24.0" release="2.module_el8.10.0+4143+ec3e7d32.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-2.module_el8.10.0+4143+ec3e7d32.alma.1.src.rpm">
          <filename>nginx-mod-http-image-filter-1.24.0-2.module_el8.10.0+4143+ec3e7d32.alma.1.s390x.rpm</filename>
          <sum type="sha256">0832c4daac55f26f659a2c2ef38dbe12b79370ca784d726a59ca0cd73bb2925d</sum>
        </package>
        <package name="nginx-mod-mail" version="1.24.0" release="2.module_el8.10.0+4143+ec3e7d32.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-2.module_el8.10.0+4143+ec3e7d32.alma.1.src.rpm">
          <filename>nginx-mod-mail-1.24.0-2.module_el8.10.0+4143+ec3e7d32.alma.1.s390x.rpm</filename>
          <sum type="sha256">54ca43a8338cb26281119bff3b683401feabb86ef1b540539ce23a62926dc616</sum>
        </package>
        <package name="nginx-mod-stream" version="1.24.0" release="2.module_el8.10.0+4143+ec3e7d32.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-2.module_el8.10.0+4143+ec3e7d32.alma.1.src.rpm">
          <filename>nginx-mod-stream-1.24.0-2.module_el8.10.0+4143+ec3e7d32.alma.1.s390x.rpm</filename>
          <sum type="sha256">9277f220117c7b49868962a651de7c63524197dc32e1260a7362b4bf623e8f7f</sum>
        </package>
        <package name="nginx-mod-http-perl" version="1.24.0" release="2.module_el8.10.0+4143+ec3e7d32.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-2.module_el8.10.0+4143+ec3e7d32.alma.1.src.rpm">
          <filename>nginx-mod-http-perl-1.24.0-2.module_el8.10.0+4143+ec3e7d32.alma.1.s390x.rpm</filename>
          <sum type="sha256">994b34ef1a2a8e43d670cdafa7fb77b973eff83bd9e6f5d8f792f3cd7d4d2d2a</sum>
        </package>
        <package name="nginx-all-modules" version="1.24.0" release="2.module_el8.10.0+4143+ec3e7d32.alma.1" epoch="1" arch="noarch" src="nginx-1.24.0-2.module_el8.10.0+4143+ec3e7d32.alma.1.src.rpm">
          <filename>nginx-all-modules-1.24.0-2.module_el8.10.0+4143+ec3e7d32.alma.1.noarch.rpm</filename>
          <sum type="sha256">9c4e365c1252e12014ce9ab194227e4ac6f7d41d6e64637673815e17a1a30e6b</sum>
        </package>
        <package name="nginx-mod-devel" version="1.24.0" release="2.module_el8.10.0+4143+ec3e7d32.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-2.module_el8.10.0+4143+ec3e7d32.alma.1.src.rpm">
          <filename>nginx-mod-devel-1.24.0-2.module_el8.10.0+4143+ec3e7d32.alma.1.s390x.rpm</filename>
          <sum type="sha256">c85a153e3ed602eddef48929b521adeba6805620a05441f850d49477ea2eb8a6</sum>
        </package>
        <package name="nginx-mod-http-xslt-filter" version="1.24.0" release="2.module_el8.10.0+4143+ec3e7d32.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-2.module_el8.10.0+4143+ec3e7d32.alma.1.src.rpm">
          <filename>nginx-mod-http-xslt-filter-1.24.0-2.module_el8.10.0+4143+ec3e7d32.alma.1.s390x.rpm</filename>
          <sum type="sha256">d2a2fd7d1b84ea83186aa68d062929c86f1ccd3ebb6bf9df410cfc466a1ea099</sum>
        </package>
        <package name="nginx-filesystem" version="1.24.0" release="2.module_el8.10.0+4143+ec3e7d32.alma.1" epoch="1" arch="noarch" src="nginx-1.24.0-2.module_el8.10.0+4143+ec3e7d32.alma.1.src.rpm">
          <filename>nginx-filesystem-1.24.0-2.module_el8.10.0+4143+ec3e7d32.alma.1.noarch.rpm</filename>
          <sum type="sha256">dbe947a515d1bbf4f4d8db19ee758922b3b3dc7a9a25211a6f957bb3eff94f8f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5585</id>
    <title>Moderate: gnutls security update</title>
    <issued date="2026-03-24 00:00:00"/>
    <updated date="2026-03-26 11:00:35"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gnutls security update</summary>
    <description>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.  

Security Fix(es):  

  * gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function (CVE-2025-9820)
  * gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification (CVE-2025-14831)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5585" id="RHSA-2026:5585" type="rhsa" title="RHSA-2026:5585"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14831" id="CVE-2025-14831" type="cve" title="CVE-2025-14831"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9820" id="CVE-2025-9820" type="cve" title="CVE-2025-9820"/>
      <reference href="https://bugzilla.redhat.com/2392528" id="2392528" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2423177" id="2423177" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-5585.html" id="ALSA-2026:5585" type="self" title="ALSA-2026:5585"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="gnutls-c++" version="3.6.16" release="8.el8_10.5" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_10.5.src.rpm">
          <filename>gnutls-c++-3.6.16-8.el8_10.5.s390x.rpm</filename>
          <sum type="sha256">2baf69e6f626d93e7e4c1f3026896171f53a0ee7ffe81ef01b9d8435b56959ab</sum>
        </package>
        <package name="gnutls-dane" version="3.6.16" release="8.el8_10.5" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_10.5.src.rpm">
          <filename>gnutls-dane-3.6.16-8.el8_10.5.s390x.rpm</filename>
          <sum type="sha256">4404217526ee031ce778944d403bedff3f9beedaa632c8d7203afd8d8a0598e8</sum>
        </package>
        <package name="gnutls-devel" version="3.6.16" release="8.el8_10.5" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_10.5.src.rpm">
          <filename>gnutls-devel-3.6.16-8.el8_10.5.s390x.rpm</filename>
          <sum type="sha256">6777a73d1ff42c2f25eafb46bd6560acf69aa5193b328dbc7dcf5f5f8dc9a777</sum>
        </package>
        <package name="gnutls-utils" version="3.6.16" release="8.el8_10.5" epoch="0" arch="s390x" src="gnutls-3.6.16-8.el8_10.5.src.rpm">
          <filename>gnutls-utils-3.6.16-8.el8_10.5.s390x.rpm</filename>
          <sum type="sha256">78bbc2a42b1a87da893ea5df5ce4f0125a716799d0f7f81c9c6b823033052360</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5588</id>
    <title>Moderate: python3 security update</title>
    <issued date="2026-03-24 00:00:00"/>
    <updated date="2026-03-26 10:35:12"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: URL parser allowed square brackets in domain names (CVE-2025-0938)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5588" id="RHSA-2026:5588" type="rhsa" title="RHSA-2026:5588"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0938" id="CVE-2025-0938" type="cve" title="CVE-2025-0938"/>
      <reference href="https://bugzilla.redhat.com/2343237" id="2343237" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-5588.html" id="ALSA-2026:5588" type="self" title="ALSA-2026:5588"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3-tkinter" version="3.6.8" release="74.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-74.el8_10.alma.1.src.rpm">
          <filename>python3-tkinter-3.6.8-74.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">2d273b157fd7fe640dc988a52cb83b087ed872ad2189046d664a136cc2af376d</sum>
        </package>
        <package name="python3-idle" version="3.6.8" release="74.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-74.el8_10.alma.1.src.rpm">
          <filename>python3-idle-3.6.8-74.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">5c074e4b628b546155e4671b874c75566bec75876febad608f4a8790490fcdc8</sum>
        </package>
        <package name="platform-python-debug" version="3.6.8" release="74.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-74.el8_10.alma.1.src.rpm">
          <filename>platform-python-debug-3.6.8-74.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">5d72289cfb865280e082a22d5e91f7c60fba535f2c35aefefaad9c578e50fda7</sum>
        </package>
        <package name="platform-python-devel" version="3.6.8" release="74.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-74.el8_10.alma.1.src.rpm">
          <filename>platform-python-devel-3.6.8-74.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">89162bb3d83c156d49fb05b265c22d7951de3ab1854b8b372de4cf82891e2220</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5932</id>
    <title>Important: firefox security update</title>
    <issued date="2026-03-26 00:00:00"/>
    <updated date="2026-03-30 10:46:04"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)
  * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)
  * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-4688)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4695)
  * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4689)
  * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)
  * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component (CVE-2026-4716)
  * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component (CVE-2026-4684)
  * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)
  * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)
  * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4697)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)
  * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4690)
  * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)
  * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)
  * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-4699)
  * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-4693)
  * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)
  * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)
  * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component (CVE-2026-4694)
  * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4720)
  * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)
  * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)
  * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component (CVE-2026-4687)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5932" id="RHSA-2026:5932" type="rhsa" title="RHSA-2026:5932"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4684" id="CVE-2026-4684" type="cve" title="CVE-2026-4684"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4685" id="CVE-2026-4685" type="cve" title="CVE-2026-4685"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4686" id="CVE-2026-4686" type="cve" title="CVE-2026-4686"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4687" id="CVE-2026-4687" type="cve" title="CVE-2026-4687"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4688" id="CVE-2026-4688" type="cve" title="CVE-2026-4688"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4689" id="CVE-2026-4689" type="cve" title="CVE-2026-4689"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4690" id="CVE-2026-4690" type="cve" title="CVE-2026-4690"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4691" id="CVE-2026-4691" type="cve" title="CVE-2026-4691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4692" id="CVE-2026-4692" type="cve" title="CVE-2026-4692"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4693" id="CVE-2026-4693" type="cve" title="CVE-2026-4693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4694" id="CVE-2026-4694" type="cve" title="CVE-2026-4694"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4695" id="CVE-2026-4695" type="cve" title="CVE-2026-4695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4696" id="CVE-2026-4696" type="cve" title="CVE-2026-4696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4697" id="CVE-2026-4697" type="cve" title="CVE-2026-4697"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4698" id="CVE-2026-4698" type="cve" title="CVE-2026-4698"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4699" id="CVE-2026-4699" type="cve" title="CVE-2026-4699"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4700" id="CVE-2026-4700" type="cve" title="CVE-2026-4700"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4701" id="CVE-2026-4701" type="cve" title="CVE-2026-4701"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4702" id="CVE-2026-4702" type="cve" title="CVE-2026-4702"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4704" id="CVE-2026-4704" type="cve" title="CVE-2026-4704"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4705" id="CVE-2026-4705" type="cve" title="CVE-2026-4705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4706" id="CVE-2026-4706" type="cve" title="CVE-2026-4706"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4707" id="CVE-2026-4707" type="cve" title="CVE-2026-4707"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4708" id="CVE-2026-4708" type="cve" title="CVE-2026-4708"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4709" id="CVE-2026-4709" type="cve" title="CVE-2026-4709"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4710" id="CVE-2026-4710" type="cve" title="CVE-2026-4710"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4711" id="CVE-2026-4711" type="cve" title="CVE-2026-4711"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4712" id="CVE-2026-4712" type="cve" title="CVE-2026-4712"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4713" id="CVE-2026-4713" type="cve" title="CVE-2026-4713"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4714" id="CVE-2026-4714" type="cve" title="CVE-2026-4714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4715" id="CVE-2026-4715" type="cve" title="CVE-2026-4715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4716" id="CVE-2026-4716" type="cve" title="CVE-2026-4716"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4717" id="CVE-2026-4717" type="cve" title="CVE-2026-4717"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4718" id="CVE-2026-4718" type="cve" title="CVE-2026-4718"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4719" id="CVE-2026-4719" type="cve" title="CVE-2026-4719"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4720" id="CVE-2026-4720" type="cve" title="CVE-2026-4720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4721" id="CVE-2026-4721" type="cve" title="CVE-2026-4721"/>
      <reference href="https://bugzilla.redhat.com/2450710" id="2450710" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450711" id="2450711" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450712" id="2450712" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450713" id="2450713" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450714" id="2450714" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450715" id="2450715" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450718" id="2450718" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450719" id="2450719" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450720" id="2450720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450721" id="2450721" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450722" id="2450722" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450723" id="2450723" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450724" id="2450724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450725" id="2450725" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450726" id="2450726" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450727" id="2450727" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450728" id="2450728" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450729" id="2450729" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450730" id="2450730" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450732" id="2450732" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450733" id="2450733" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450734" id="2450734" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450735" id="2450735" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450738" id="2450738" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450739" id="2450739" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450740" id="2450740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450741" id="2450741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450742" id="2450742" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450744" id="2450744" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450746" id="2450746" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450747" id="2450747" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450748" id="2450748" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450751" id="2450751" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450752" id="2450752" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450755" id="2450755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450756" id="2450756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450757" id="2450757" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-5932.html" id="ALSA-2026:5932" type="self" title="ALSA-2026:5932"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="140.9.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-140.9.0-1.el8_10.alma.1.src.rpm">
          <filename>firefox-140.9.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">b5de54e61b4c5c8c2621e7f21db2b8a42c546fd076e53cd31b151ecd7fe07c57</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6005</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-03-30 00:00:00"/>
    <updated date="2026-04-02 08:59:48"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path (CVE-2026-26965)
  * freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in GDI surface pipeline (CVE-2026-26955)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6005" id="RHSA-2026:6005" type="rhsa" title="RHSA-2026:6005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26955" id="CVE-2026-26955" type="cve" title="CVE-2026-26955"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26965" id="CVE-2026-26965" type="cve" title="CVE-2026-26965"/>
      <reference href="https://bugzilla.redhat.com/2442959" id="2442959" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2443132" id="2443132" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6005.html" id="ALSA-2026:6005" type="self" title="ALSA-2026:6005"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libwinpr" version="2.11.7" release="4.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-4.el8_10.src.rpm">
          <filename>libwinpr-2.11.7-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">54cee13fbadafe2d81d60caad0958bc2c0064c5bf158fcef47e81120b5b9e254</sum>
        </package>
        <package name="freerdp-libs" version="2.11.7" release="4.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-4.el8_10.src.rpm">
          <filename>freerdp-libs-2.11.7-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">668c5386eecbc3d7e5d618289de2279b67bd1da73755b202e056e402c7f86430</sum>
        </package>
        <package name="libwinpr-devel" version="2.11.7" release="4.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-4.el8_10.src.rpm">
          <filename>libwinpr-devel-2.11.7-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">bf7e724937176717d65d1910b18a84d7a62981f9384f848186a61f2e1c92a6a3</sum>
        </package>
        <package name="freerdp" version="2.11.7" release="4.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-4.el8_10.src.rpm">
          <filename>freerdp-2.11.7-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">ed4172d4038360ffd4ed2b2a4246523c714f07dcdbcbfb205fce63351a24b88e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6281</id>
    <title>Important: python3.11 security update</title>
    <issued date="2026-03-31 00:00:00"/>
    <updated date="2026-04-01 08:52:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6281" id="RHSA-2026:6281" type="rhsa" title="RHSA-2026:6281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4519" id="CVE-2026-4519" type="cve" title="CVE-2026-4519"/>
      <reference href="https://bugzilla.redhat.com/2449649" id="2449649" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6281.html" id="ALSA-2026:6281" type="self" title="ALSA-2026:6281"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.11-rpm-macros" version="3.11.13" release="6.el8_10" epoch="0" arch="noarch" src="python3.11-3.11.13-6.el8_10.src.rpm">
          <filename>python3.11-rpm-macros-3.11.13-6.el8_10.noarch.rpm</filename>
          <sum type="sha256">341f058c8480202c0c5902b3d8b9c82a3ea43cadbcbf5d20bc16d13b81bdec99</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.13" release="6.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-6.el8_10.src.rpm">
          <filename>python3.11-tkinter-3.11.13-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">5c3c6d5e1f20d5d81705d0edb58219bb5f4a892534e80f23c8d17d9c140747c6</sum>
        </package>
        <package name="python3.11-libs" version="3.11.13" release="6.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-6.el8_10.src.rpm">
          <filename>python3.11-libs-3.11.13-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">b2bc3396a8ff455b31740c30d55828ca4e987874c0247e0d5e215c3acf32b535</sum>
        </package>
        <package name="python3.11-devel" version="3.11.13" release="6.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-6.el8_10.src.rpm">
          <filename>python3.11-devel-3.11.13-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">c7c17c2dbe9f48f432f720a087c41425ff7b4c6125c72fbfa479e99d7c76fada</sum>
        </package>
        <package name="python3.11" version="3.11.13" release="6.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-6.el8_10.src.rpm">
          <filename>python3.11-3.11.13-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">cc951c628b190aa474b842b274735ef853f5f99f2c6907b3cb028cafab3ddcca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6283</id>
    <title>Important: python3.12 security update</title>
    <issued date="2026-03-31 00:00:00"/>
    <updated date="2026-04-01 08:56:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6283" id="RHSA-2026:6283" type="rhsa" title="RHSA-2026:6283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4519" id="CVE-2026-4519" type="cve" title="CVE-2026-4519"/>
      <reference href="https://bugzilla.redhat.com/2449649" id="2449649" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6283.html" id="ALSA-2026:6283" type="self" title="ALSA-2026:6283"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3.12-libs" version="3.12.12" release="4.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el8_10.src.rpm">
          <filename>python3.12-libs-3.12.12-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">8ee1d95000ad7a2219144fc503ca10feaa7433ecc015bf507722efe401e1a0e8</sum>
        </package>
        <package name="python3.12" version="3.12.12" release="4.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el8_10.src.rpm">
          <filename>python3.12-3.12.12-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">988099ba751955f40b075c60a904630cda78b35a48875f9a717adfd20b282c86</sum>
        </package>
        <package name="python3.12-devel" version="3.12.12" release="4.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el8_10.src.rpm">
          <filename>python3.12-devel-3.12.12-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">ddb6c0813019ca45e7cc75ca9748511882f71fd497e5941b074b618044b6d032</sum>
        </package>
        <package name="python3.12-rpm-macros" version="3.12.12" release="4.el8_10" epoch="0" arch="noarch" src="python3.12-3.12.12-4.el8_10.src.rpm">
          <filename>python3.12-rpm-macros-3.12.12-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">e4295af2b04c31a170ad263ec9527db12a511dfbc9c536d25ef8d40a44363fde</sum>
        </package>
        <package name="python3.12-tkinter" version="3.12.12" release="4.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el8_10.src.rpm">
          <filename>python3.12-tkinter-3.12.12-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">e99d4709b2848aba4d2810bbc23f1b363e32f57d67faa49d34aa6beca1feca87</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6391</id>
    <title>Moderate: mysql:8.4 security update</title>
    <issued date="2026-04-01 00:00:00"/>
    <updated date="2026-04-09 10:00:41"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql:8.4 security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  

Security Fix(es):  

  * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21941)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21948)
  * mysql: InnoDB unspecified vulnerability (CPU Jan 2026) (CVE-2026-21936)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)
  * mysql: DDL unspecified vulnerability (CPU Jan 2026) (CVE-2026-21937)
  * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2026) (CVE-2026-21964)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6391" id="RHSA-2026:6391" type="rhsa" title="RHSA-2026:6391"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21936" id="CVE-2026-21936" type="cve" title="CVE-2026-21936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21937" id="CVE-2026-21937" type="cve" title="CVE-2026-21937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21941" id="CVE-2026-21941" type="cve" title="CVE-2026-21941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21948" id="CVE-2026-21948" type="cve" title="CVE-2026-21948"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21964" id="CVE-2026-21964" type="cve" title="CVE-2026-21964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21968" id="CVE-2026-21968" type="cve" title="CVE-2026-21968"/>
      <reference href="https://bugzilla.redhat.com/2431384" id="2431384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431385" id="2431385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431402" id="2431402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431409" id="2431409" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431413" id="2431413" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431431" id="2431431" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6391.html" id="ALSA-2026:6391" type="self" title="ALSA-2026:6391"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="mysql" stream="8.4" version="8100020260406112035" context="9edba152" arch="s390x"/>
        <package name="mysql-test-data" version="8.4.8" release="1.module_el8.10.0+4154+a69a9128" epoch="0" arch="noarch" src="mysql-8.4.8-1.module_el8.10.0+4154+a69a9128.src.rpm">
          <filename>mysql-test-data-8.4.8-1.module_el8.10.0+4154+a69a9128.noarch.rpm</filename>
          <sum type="sha256">132e239d2e381d6d84c5ff6879a5f733dc36643413bc8cb6f17518f85f7303dd</sum>
        </package>
        <package name="mysql-test" version="8.4.8" release="1.module_el8.10.0+4154+a69a9128" epoch="0" arch="s390x" src="mysql-8.4.8-1.module_el8.10.0+4154+a69a9128.src.rpm">
          <filename>mysql-test-8.4.8-1.module_el8.10.0+4154+a69a9128.s390x.rpm</filename>
          <sum type="sha256">16ee36ca9424c7a0f275200904a29ec7281f9c1b70bebc6f2f2fd00d7c92884d</sum>
        </package>
        <package name="mecab" version="0.996" release="2.module_el8.10.0+4060+d4256e26" epoch="0" arch="s390x" src="mecab-0.996-2.module_el8.10.0+4060+d4256e26.src.rpm">
          <filename>mecab-0.996-2.module_el8.10.0+4060+d4256e26.s390x.rpm</filename>
          <sum type="sha256">18cfaf8b55a7cec65d1d202594207c808c7bc9ecefd417e953be47e61549f4a6</sum>
        </package>
        <package name="mecab-devel" version="0.996" release="2.module_el8.10.0+4060+d4256e26" epoch="0" arch="s390x" src="mecab-0.996-2.module_el8.10.0+4060+d4256e26.src.rpm">
          <filename>mecab-devel-0.996-2.module_el8.10.0+4060+d4256e26.s390x.rpm</filename>
          <sum type="sha256">1ceaffe3718cc738100e80d34513effcff5daf7341a6b23c27f685a533755c35</sum>
        </package>
        <package name="mysql-server" version="8.4.8" release="1.module_el8.10.0+4154+a69a9128" epoch="0" arch="s390x" src="mysql-8.4.8-1.module_el8.10.0+4154+a69a9128.src.rpm">
          <filename>mysql-server-8.4.8-1.module_el8.10.0+4154+a69a9128.s390x.rpm</filename>
          <sum type="sha256">52efe0e180bd7118c1055e495fabc24a1965b4fe2e15a97745fbe1ac388d5837</sum>
        </package>
        <package name="mecab-ipadic-EUCJP" version="2.7.0.20070801" release="17.module_el8.10.0+4154+a69a9128" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+4154+a69a9128.src.rpm">
          <filename>mecab-ipadic-EUCJP-2.7.0.20070801-17.module_el8.10.0+4154+a69a9128.s390x.rpm</filename>
          <sum type="sha256">671d7acd59e342e018304b42449a39aceb94a30e47ca6d06b855ff2ae34e1328</sum>
        </package>
        <package name="mecab-ipadic" version="2.7.0.20070801" release="17.module_el8.10.0+4060+d4256e26" epoch="0" arch="s390x" src="mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+4060+d4256e26.src.rpm">
          <filename>mecab-ipadic-2.7.0.20070801-17.module_el8.10.0+4060+d4256e26.s390x.rpm</filename>
          <sum type="sha256">699791fde21af136b5be1e5f47f07915fe3dbc68f07cec6e808ef0a6fd38ee92</sum>
        </package>
        <package name="mysql-libs" version="8.4.8" release="1.module_el8.10.0+4154+a69a9128" epoch="0" arch="s390x" src="mysql-8.4.8-1.module_el8.10.0+4154+a69a9128.src.rpm">
          <filename>mysql-libs-8.4.8-1.module_el8.10.0+4154+a69a9128.s390x.rpm</filename>
          <sum type="sha256">92cac0a3a95ec851bdc8aacc20485b70cf7c8980578e6962efaab563dcc6409e</sum>
        </package>
        <package name="mysql-errmsg" version="8.4.8" release="1.module_el8.10.0+4154+a69a9128" epoch="0" arch="noarch" src="mysql-8.4.8-1.module_el8.10.0+4154+a69a9128.src.rpm">
          <filename>mysql-errmsg-8.4.8-1.module_el8.10.0+4154+a69a9128.noarch.rpm</filename>
          <sum type="sha256">9a3e60b49d558d7e50333d04cc2e23d3fc3dd796da2994c0db236d453cbb176d</sum>
        </package>
        <package name="mysql-common" version="8.4.8" release="1.module_el8.10.0+4154+a69a9128" epoch="0" arch="noarch" src="mysql-8.4.8-1.module_el8.10.0+4154+a69a9128.src.rpm">
          <filename>mysql-common-8.4.8-1.module_el8.10.0+4154+a69a9128.noarch.rpm</filename>
          <sum type="sha256">aed379944a57d0b9a041d49e5844d2a6b9cac49d21f67dd731061dda00f50bab</sum>
        </package>
        <package name="mysql" version="8.4.8" release="1.module_el8.10.0+4154+a69a9128" epoch="0" arch="s390x" src="mysql-8.4.8-1.module_el8.10.0+4154+a69a9128.src.rpm">
          <filename>mysql-8.4.8-1.module_el8.10.0+4154+a69a9128.s390x.rpm</filename>
          <sum type="sha256">c7eae720419951f7478a97a831aec73e975233be24855f29066cb549d1639561</sum>
        </package>
        <package name="mysql-devel" version="8.4.8" release="1.module_el8.10.0+4154+a69a9128" epoch="0" arch="s390x" src="mysql-8.4.8-1.module_el8.10.0+4154+a69a9128.src.rpm">
          <filename>mysql-devel-8.4.8-1.module_el8.10.0+4154+a69a9128.s390x.rpm</filename>
          <sum type="sha256">e0521db51918cda58894d1b37d784a4edb4c468ab917eb6a4b8e9d8e0c7d840e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6435</id>
    <title>Moderate: mariadb:10.11 security update</title>
    <issued date="2026-04-02 00:00:00"/>
    <updated date="2026-04-09 09:01:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mariadb:10.11 security update</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.   

Security Fix(es):  

  * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
  * mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)
  * mariadb: MariaDB Server Crash (CVE-2023-52971)
  * mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)
  * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6435" id="RHSA-2026:6435" type="rhsa" title="RHSA-2026:6435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52969" id="CVE-2023-52969" type="cve" title="CVE-2023-52969"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52970" id="CVE-2023-52970" type="cve" title="CVE-2023-52970"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52971" id="CVE-2023-52971" type="cve" title="CVE-2023-52971"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21490" id="CVE-2025-21490" type="cve" title="CVE-2025-21490"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30693" id="CVE-2025-30693" type="cve" title="CVE-2025-30693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30722" id="CVE-2025-30722" type="cve" title="CVE-2025-30722"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21968" id="CVE-2026-21968" type="cve" title="CVE-2026-21968"/>
      <reference href="https://bugzilla.redhat.com/2339221" id="2339221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350916" id="2350916" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350917" id="2350917" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350918" id="2350918" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359885" id="2359885" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359963" id="2359963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431409" id="2431409" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6435.html" id="ALSA-2026:6435" type="self" title="ALSA-2026:6435"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="mariadb" stream="10.11" version="8100020250128105049" context="9edba152" arch="s390x"/>
        <package name="mariadb-devel" version="10.11.15" release="1.module_el8.10.0+4152+4d93c53f" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el8.10.0+4152+4d93c53f.src.rpm">
          <filename>mariadb-devel-10.11.15-1.module_el8.10.0+4152+4d93c53f.s390x.rpm</filename>
          <sum type="sha256">0b00ed2cd1d78df21eeab9ecdd58c122d84670a4ebf19438e0c6dbf68056b281</sum>
        </package>
        <package name="mariadb-errmsg" version="10.11.15" release="1.module_el8.10.0+4152+4d93c53f" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el8.10.0+4152+4d93c53f.src.rpm">
          <filename>mariadb-errmsg-10.11.15-1.module_el8.10.0+4152+4d93c53f.s390x.rpm</filename>
          <sum type="sha256">233f08f9d89cf951be5b0d195982730d84857fc2646c19543926b2ca3e419b69</sum>
        </package>
        <package name="mariadb" version="10.11.15" release="1.module_el8.10.0+4152+4d93c53f" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el8.10.0+4152+4d93c53f.src.rpm">
          <filename>mariadb-10.11.15-1.module_el8.10.0+4152+4d93c53f.s390x.rpm</filename>
          <sum type="sha256">2a111dc5236a1d132321210b8f67805d8223c2446350f4e1c356af47e7b5a21e</sum>
        </package>
        <package name="mariadb-common" version="10.11.15" release="1.module_el8.10.0+4152+4d93c53f" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el8.10.0+4152+4d93c53f.src.rpm">
          <filename>mariadb-common-10.11.15-1.module_el8.10.0+4152+4d93c53f.s390x.rpm</filename>
          <sum type="sha256">36e7046c4b10caae51e6cd60e5077d344165628dc1d9ec57773a51670e535aad</sum>
        </package>
        <package name="mariadb-test" version="10.11.15" release="1.module_el8.10.0+4152+4d93c53f" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el8.10.0+4152+4d93c53f.src.rpm">
          <filename>mariadb-test-10.11.15-1.module_el8.10.0+4152+4d93c53f.s390x.rpm</filename>
          <sum type="sha256">384639154f83bed6fbc79ff2e1f5bf73da947657d1fda40c7778bf50b78d4ec6</sum>
        </package>
        <package name="mariadb-server" version="10.11.15" release="1.module_el8.10.0+4152+4d93c53f" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el8.10.0+4152+4d93c53f.src.rpm">
          <filename>mariadb-server-10.11.15-1.module_el8.10.0+4152+4d93c53f.s390x.rpm</filename>
          <sum type="sha256">4f490d4a8df692d1f3d029edb6e68a24fb7478ef54c362237587a9ddb8343a2f</sum>
        </package>
        <package name="galera" version="26.4.23" release="1.module_el8.10.0+4152+4d93c53f" epoch="0" arch="s390x" src="galera-26.4.23-1.module_el8.10.0+4152+4d93c53f.src.rpm">
          <filename>galera-26.4.23-1.module_el8.10.0+4152+4d93c53f.s390x.rpm</filename>
          <sum type="sha256">613be3ba6e4cf15fbaf8899dd4bdb37fb216baa7a554be43d945e48d291e615c</sum>
        </package>
        <package name="mariadb-embedded-devel" version="10.11.15" release="1.module_el8.10.0+4152+4d93c53f" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el8.10.0+4152+4d93c53f.src.rpm">
          <filename>mariadb-embedded-devel-10.11.15-1.module_el8.10.0+4152+4d93c53f.s390x.rpm</filename>
          <sum type="sha256">637ff03773d2960200dd5e8ecfcb3df60f205d3ab7c35b8744405d34787e02c3</sum>
        </package>
        <package name="mariadb-backup" version="10.11.15" release="1.module_el8.10.0+4152+4d93c53f" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el8.10.0+4152+4d93c53f.src.rpm">
          <filename>mariadb-backup-10.11.15-1.module_el8.10.0+4152+4d93c53f.s390x.rpm</filename>
          <sum type="sha256">72888020f95fb4c9a6109a321ffe83394e5697fbaa3ca1735a3d15d83e1266bf</sum>
        </package>
        <package name="mariadb-server-utils" version="10.11.15" release="1.module_el8.10.0+4152+4d93c53f" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el8.10.0+4152+4d93c53f.src.rpm">
          <filename>mariadb-server-utils-10.11.15-1.module_el8.10.0+4152+4d93c53f.s390x.rpm</filename>
          <sum type="sha256">9541556c68364f3683583c3b5e3c3bc25b6ca782109bfdd3421ca7ef9b64cb81</sum>
        </package>
        <package name="Judy" version="1.0.5" release="18.module_el8.10.0+3955+6534edaf" epoch="0" arch="s390x" src="Judy-1.0.5-18.module_el8.10.0+3955+6534edaf.src.rpm">
          <filename>Judy-1.0.5-18.module_el8.10.0+3955+6534edaf.s390x.rpm</filename>
          <sum type="sha256">99b62cdef6ceaba085de83cc984e6cbf05038bdb656233ab329acb0253ef0e8b</sum>
        </package>
        <package name="mariadb-gssapi-server" version="10.11.15" release="1.module_el8.10.0+4152+4d93c53f" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el8.10.0+4152+4d93c53f.src.rpm">
          <filename>mariadb-gssapi-server-10.11.15-1.module_el8.10.0+4152+4d93c53f.s390x.rpm</filename>
          <sum type="sha256">a20bb17e532bbeec51790d06a8ebb42ffb4287f79798cca677ecbe2d1d5e65b4</sum>
        </package>
        <package name="mariadb-oqgraph-engine" version="10.11.15" release="1.module_el8.10.0+4152+4d93c53f" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el8.10.0+4152+4d93c53f.src.rpm">
          <filename>mariadb-oqgraph-engine-10.11.15-1.module_el8.10.0+4152+4d93c53f.s390x.rpm</filename>
          <sum type="sha256">a94c6ede553adc37d985bbcbdc8622951b3db39f6d3574655d4941d1cd260cb4</sum>
        </package>
        <package name="mariadb-embedded" version="10.11.15" release="1.module_el8.10.0+4152+4d93c53f" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el8.10.0+4152+4d93c53f.src.rpm">
          <filename>mariadb-embedded-10.11.15-1.module_el8.10.0+4152+4d93c53f.s390x.rpm</filename>
          <sum type="sha256">dd40c5cad85ae54f85c3d4a0209b90f878aa0c33479e2be6b459398f524fb22f</sum>
        </package>
        <package name="mariadb-pam" version="10.11.15" release="1.module_el8.10.0+4152+4d93c53f" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el8.10.0+4152+4d93c53f.src.rpm">
          <filename>mariadb-pam-10.11.15-1.module_el8.10.0+4152+4d93c53f.s390x.rpm</filename>
          <sum type="sha256">e4de0d3d79ac3724e503cec7621ab70913866d2977038dc5863c26b9d8ac15a2</sum>
        </package>
        <package name="mariadb-server-galera" version="10.11.15" release="1.module_el8.10.0+4152+4d93c53f" epoch="3" arch="s390x" src="mariadb-10.11.15-1.module_el8.10.0+4152+4d93c53f.src.rpm">
          <filename>mariadb-server-galera-10.11.15-1.module_el8.10.0+4152+4d93c53f.s390x.rpm</filename>
          <sum type="sha256">e950055ca56712550522955ac35d786980f4d06ff079181c6b501df37603ef73</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6439</id>
    <title>Important: libpng15 security update</title>
    <issued date="2026-04-02 00:00:00"/>
    <updated date="2026-04-03 12:19:41"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libpng15 security update</summary>
    <description>The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG (Portable Network Graphics) image format files. This version should be used only if you are unable to use the current version of libpng.  

Security Fix(es):  

  * libpng: LIBPNG has a heap buffer overflow in png_set_quantize (CVE-2026-25646)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6439" id="RHSA-2026:6439" type="rhsa" title="RHSA-2026:6439"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25646" id="CVE-2026-25646" type="cve" title="CVE-2026-25646"/>
      <reference href="https://bugzilla.redhat.com/2438542" id="2438542" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6439.html" id="ALSA-2026:6439" type="self" title="ALSA-2026:6439"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libpng15" version="1.5.30" release="8.el8_10" epoch="0" arch="s390x" src="libpng15-1.5.30-8.el8_10.src.rpm">
          <filename>libpng15-1.5.30-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">6b0377e8766c02992df6aca69c70346e788b82a77a0b3d3edbd91c2ca0733a69</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6445</id>
    <title>Important: libpng12 security update</title>
    <issued date="2026-04-02 00:00:00"/>
    <updated date="2026-04-03 12:13:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libpng12 security update</summary>
    <description>The libpng12 package provides libpng 1.2, which is the previous version of the libpng library for manipulating PNG (Portable Network Graphics) image format files. This version should be used in case that it is not possible to use the current version of libpng.  

Security Fix(es):  

  * libpng: LIBPNG has a heap buffer overflow in png_set_quantize (CVE-2026-25646)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6445" id="RHSA-2026:6445" type="rhsa" title="RHSA-2026:6445"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25646" id="CVE-2026-25646" type="cve" title="CVE-2026-25646"/>
      <reference href="https://bugzilla.redhat.com/2438542" id="2438542" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6445.html" id="ALSA-2026:6445" type="self" title="ALSA-2026:6445"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libpng12" version="1.2.57" release="6.el8_10" epoch="0" arch="s390x" src="libpng12-1.2.57-6.el8_10.src.rpm">
          <filename>libpng12-1.2.57-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">ad29e82b57c25fe0af387f6c439924cf4db8c9c8acfcf3af5b0c409964437195</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6461</id>
    <title>Important: openssh security update</title>
    <issued date="2026-04-02 00:00:00"/>
    <updated date="2026-04-09 08:27:30"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openssh security update</summary>
    <description>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.  

Security Fix(es):  

  * openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables (CVE-2026-3497)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6461" id="RHSA-2026:6461" type="rhsa" title="RHSA-2026:6461"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3497" id="CVE-2026-3497" type="cve" title="CVE-2026-3497"/>
      <reference href="https://bugzilla.redhat.com/2447085" id="2447085" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6461.html" id="ALSA-2026:6461" type="self" title="ALSA-2026:6461"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="openssh-askpass" version="8.0p1" release="28.el8_10" epoch="0" arch="s390x" src="openssh-8.0p1-28.el8_10.src.rpm">
          <filename>openssh-askpass-8.0p1-28.el8_10.s390x.rpm</filename>
          <sum type="sha256">b825aec758045954f9bfdf05d555bae4dd7d1ef585461520bb4932bfa3014b0c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6473</id>
    <title>Important: python3 security update</title>
    <issued date="2026-04-02 00:00:00"/>
    <updated date="2026-04-03 12:01:47"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6473" id="RHSA-2026:6473" type="rhsa" title="RHSA-2026:6473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4519" id="CVE-2026-4519" type="cve" title="CVE-2026-4519"/>
      <reference href="https://bugzilla.redhat.com/2449649" id="2449649" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6473.html" id="ALSA-2026:6473" type="self" title="ALSA-2026:6473"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="python3-tkinter" version="3.6.8" release="75.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-75.el8_10.alma.1.src.rpm">
          <filename>python3-tkinter-3.6.8-75.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">7b095d92d6d6c67885e75412f57bed08ac20a07fc1659b0fce2c15beada2e723</sum>
        </package>
        <package name="platform-python-devel" version="3.6.8" release="75.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-75.el8_10.alma.1.src.rpm">
          <filename>platform-python-devel-3.6.8-75.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">98670f244a1daa636375e478a29eb50743b852c96300776b6e9d6834a7649935</sum>
        </package>
        <package name="python3-idle" version="3.6.8" release="75.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-75.el8_10.alma.1.src.rpm">
          <filename>python3-idle-3.6.8-75.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">be9ca940d85e76e85a7234e6e9195d70c75df064bf39747b185d959d8d65637a</sum>
        </package>
        <package name="platform-python-debug" version="3.6.8" release="75.el8_10.alma.1" epoch="0" arch="s390x" src="python3-3.6.8-75.el8_10.alma.1.src.rpm">
          <filename>platform-python-debug-3.6.8-75.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">f6954b5f57e7a8e397bbdf0f37e334c1c425b1fb004cf74def50b9e3df312553</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6750</id>
    <title>Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, and gstreamer1-plugins-good security update</title>
    <issued date="2026-04-07 00:00:00"/>
    <updated date="2026-04-09 12:29:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-bad-free, gstreamer1-plugins-base, and gstreamer1-plugins-good security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.  

Security Fix(es):  

  * GStreamer: GStreamer: Arbitrary code execution via ASF file processing (CVE-2026-2920)
  * GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser (CVE-2026-3082)
  * GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay (CVE-2026-3085)
  * GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling (CVE-2026-2921)
  * GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay (CVE-2026-3083)
  * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling (CVE-2026-2923)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6750" id="RHSA-2026:6750" type="rhsa" title="RHSA-2026:6750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2920" id="CVE-2026-2920" type="cve" title="CVE-2026-2920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2921" id="CVE-2026-2921" type="cve" title="CVE-2026-2921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2923" id="CVE-2026-2923" type="cve" title="CVE-2026-2923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3082" id="CVE-2026-3082" type="cve" title="CVE-2026-3082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3083" id="CVE-2026-3083" type="cve" title="CVE-2026-3083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3085" id="CVE-2026-3085" type="cve" title="CVE-2026-3085"/>
      <reference href="https://bugzilla.redhat.com/2447490" id="2447490" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447492" id="2447492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447495" id="2447495" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447496" id="2447496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447498" id="2447498" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447503" id="2447503" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6750.html" id="ALSA-2026:6750" type="self" title="ALSA-2026:6750"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="gstreamer1-plugins-good" version="1.16.1" release="6.el8_10" epoch="0" arch="s390x" src="gstreamer1-plugins-good-1.16.1-6.el8_10.src.rpm">
          <filename>gstreamer1-plugins-good-1.16.1-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">77b780b3f1f766f8e8b795b36613e0579a2d8dd430c57b97fb28ff569af47a76</sum>
        </package>
        <package name="gstreamer1-plugins-good-gtk" version="1.16.1" release="6.el8_10" epoch="0" arch="s390x" src="gstreamer1-plugins-good-1.16.1-6.el8_10.src.rpm">
          <filename>gstreamer1-plugins-good-gtk-1.16.1-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">8cb449bef34e80d233db80117c2cd5841ada2bdf2afea4ec017533c5c4e434f4</sum>
        </package>
        <package name="gstreamer1-plugins-base-devel" version="1.16.1" release="6.el8_10" epoch="0" arch="s390x" src="gstreamer1-plugins-base-1.16.1-6.el8_10.src.rpm">
          <filename>gstreamer1-plugins-base-devel-1.16.1-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">94c553ef20de7529601655f57a32fe101b9e82e5b8de18de6f297f032745f9c4</sum>
        </package>
        <package name="gstreamer1-plugins-base" version="1.16.1" release="6.el8_10" epoch="0" arch="s390x" src="gstreamer1-plugins-base-1.16.1-6.el8_10.src.rpm">
          <filename>gstreamer1-plugins-base-1.16.1-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">eb9b5ab01458085a68a48421e2b807a2deffd91711ac0e78c65e81a785db62a2</sum>
        </package>
        <package name="gstreamer1-plugins-bad-free" version="1.16.1" release="6.el8_10" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.16.1-6.el8_10.src.rpm">
          <filename>gstreamer1-plugins-bad-free-1.16.1-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">f3e34c92a7c3bd051e8e4778981f34b8eb8fbcd0e075651d2e98b12c6e481421</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6907</id>
    <title>Important: nginx:1.24 security update</title>
    <issued date="2026-04-07 00:00:00"/>
    <updated date="2026-04-14 11:33:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nginx:1.24 security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files (CVE-2026-32647)
  * NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module (CVE-2026-27654)
  * NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file (CVE-2026-27784)
  * NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled (CVE-2026-27651)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6907" id="RHSA-2026:6907" type="rhsa" title="RHSA-2026:6907"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27651" id="CVE-2026-27651" type="cve" title="CVE-2026-27651"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27654" id="CVE-2026-27654" type="cve" title="CVE-2026-27654"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27784" id="CVE-2026-27784" type="cve" title="CVE-2026-27784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32647" id="CVE-2026-32647" type="cve" title="CVE-2026-32647"/>
      <reference href="https://bugzilla.redhat.com/2449598" id="2449598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450776" id="2450776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450785" id="2450785" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450791" id="2450791" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6907.html" id="ALSA-2026:6907" type="self" title="ALSA-2026:6907"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="nginx" stream="1.24" version="8100020260409082804" context="9edba152" arch="s390x"/>
        <package name="nginx" version="1.24.0" release="3.module_el8.10.0+4159+021b4a2a.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4159+021b4a2a.alma.1.src.rpm">
          <filename>nginx-1.24.0-3.module_el8.10.0+4159+021b4a2a.alma.1.s390x.rpm</filename>
          <sum type="sha256">0559b30285106e626ee550e2ae14b1bf616cf89479ef158f834cb43ab18c00f5</sum>
        </package>
        <package name="nginx-filesystem" version="1.24.0" release="3.module_el8.10.0+4159+021b4a2a.alma.1" epoch="1" arch="noarch" src="nginx-1.24.0-3.module_el8.10.0+4159+021b4a2a.alma.1.src.rpm">
          <filename>nginx-filesystem-1.24.0-3.module_el8.10.0+4159+021b4a2a.alma.1.noarch.rpm</filename>
          <sum type="sha256">232aeecbe7792b190428c3dbe534fa66b8238b90ad7fba7e0c41cdb9b66f5169</sum>
        </package>
        <package name="nginx-mod-http-image-filter" version="1.24.0" release="3.module_el8.10.0+4159+021b4a2a.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4159+021b4a2a.alma.1.src.rpm">
          <filename>nginx-mod-http-image-filter-1.24.0-3.module_el8.10.0+4159+021b4a2a.alma.1.s390x.rpm</filename>
          <sum type="sha256">415c03f5f0fb33f4c491ea1a1ab30322eab07fb0cf13b692e293bafd44b280d4</sum>
        </package>
        <package name="nginx-mod-http-perl" version="1.24.0" release="3.module_el8.10.0+4159+021b4a2a.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4159+021b4a2a.alma.1.src.rpm">
          <filename>nginx-mod-http-perl-1.24.0-3.module_el8.10.0+4159+021b4a2a.alma.1.s390x.rpm</filename>
          <sum type="sha256">8ba9716c1eaf3c928c093f8d68fe2c1f6064bc5ac03d9e48d9890488081b282a</sum>
        </package>
        <package name="nginx-mod-mail" version="1.24.0" release="3.module_el8.10.0+4159+021b4a2a.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4159+021b4a2a.alma.1.src.rpm">
          <filename>nginx-mod-mail-1.24.0-3.module_el8.10.0+4159+021b4a2a.alma.1.s390x.rpm</filename>
          <sum type="sha256">b347b70555e4b50117cc9342dae29940bf6b8ba711c916bae54819ef2073eb59</sum>
        </package>
        <package name="nginx-mod-devel" version="1.24.0" release="3.module_el8.10.0+4159+021b4a2a.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4159+021b4a2a.alma.1.src.rpm">
          <filename>nginx-mod-devel-1.24.0-3.module_el8.10.0+4159+021b4a2a.alma.1.s390x.rpm</filename>
          <sum type="sha256">be28e9d3789e07203626e02a1b7280b746b54c7e1207de7635c6bd2eb7af3de3</sum>
        </package>
        <package name="nginx-mod-stream" version="1.24.0" release="3.module_el8.10.0+4159+021b4a2a.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4159+021b4a2a.alma.1.src.rpm">
          <filename>nginx-mod-stream-1.24.0-3.module_el8.10.0+4159+021b4a2a.alma.1.s390x.rpm</filename>
          <sum type="sha256">d09beabccb0043233a1acf65bc58e049305c9f0b0f44cffd34b3872af6a35900</sum>
        </package>
        <package name="nginx-mod-http-xslt-filter" version="1.24.0" release="3.module_el8.10.0+4159+021b4a2a.alma.1" epoch="1" arch="s390x" src="nginx-1.24.0-3.module_el8.10.0+4159+021b4a2a.alma.1.src.rpm">
          <filename>nginx-mod-http-xslt-filter-1.24.0-3.module_el8.10.0+4159+021b4a2a.alma.1.s390x.rpm</filename>
          <sum type="sha256">ee2ffb17b2a052649d170f5ffe912d902a8335a0caf5861b4aec368918d1587f</sum>
        </package>
        <package name="nginx-all-modules" version="1.24.0" release="3.module_el8.10.0+4159+021b4a2a.alma.1" epoch="1" arch="noarch" src="nginx-1.24.0-3.module_el8.10.0+4159+021b4a2a.alma.1.src.rpm">
          <filename>nginx-all-modules-1.24.0-3.module_el8.10.0+4159+021b4a2a.alma.1.noarch.rpm</filename>
          <sum type="sha256">f2c20501c45cd7990637895a0432563f9a7a2440eafe89ac2cb93c44a23cb1ce</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6915</id>
    <title>Important: vim security update</title>
    <issued date="2026-04-07 00:00:00"/>
    <updated date="2026-04-09 11:41:05"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin (CVE-2026-28417)
  * vim: Vim: Denial of service and information disclosure via crafted swap file (CVE-2026-28421)
  * vim: Vim: Arbitrary code execution via command injection in glob() function (CVE-2026-33412)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6915" id="RHSA-2026:6915" type="rhsa" title="RHSA-2026:6915"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28417" id="CVE-2026-28417" type="cve" title="CVE-2026-28417"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-28421" id="CVE-2026-28421" type="cve" title="CVE-2026-28421"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33412" id="CVE-2026-33412" type="cve" title="CVE-2026-33412"/>
      <reference href="https://bugzilla.redhat.com/2443455" id="2443455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2443474" id="2443474" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450907" id="2450907" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6915.html" id="ALSA-2026:6915" type="self" title="ALSA-2026:6915"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="vim-filesystem" version="8.0.1763" release="22.el8_10.1" epoch="2" arch="noarch" src="vim-8.0.1763-22.el8_10.1.src.rpm">
          <filename>vim-filesystem-8.0.1763-22.el8_10.1.noarch.rpm</filename>
          <sum type="sha256">5d41f078b6c9fd5ac7c36f605093122fe3af69830d8e82ee4fb414291cc0fd29</sum>
        </package>
        <package name="vim-common" version="8.0.1763" release="22.el8_10.1" epoch="2" arch="s390x" src="vim-8.0.1763-22.el8_10.1.src.rpm">
          <filename>vim-common-8.0.1763-22.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">c7f039dcd3a20f64378c8aa8499299ff027b0fdf203c59bacfc0cafa1db2eec5</sum>
        </package>
        <package name="vim-enhanced" version="8.0.1763" release="22.el8_10.1" epoch="2" arch="s390x" src="vim-8.0.1763-22.el8_10.1.src.rpm">
          <filename>vim-enhanced-8.0.1763-22.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">ee246be14bbc01d426650c7e5889e8dbebcf39c9e9ca3c48f5105431cad16dc4</sum>
        </package>
        <package name="vim-X11" version="8.0.1763" release="22.el8_10.1" epoch="2" arch="s390x" src="vim-8.0.1763-22.el8_10.1.src.rpm">
          <filename>vim-X11-8.0.1763-22.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">f9703cdedf435b8ab3685d7900ba1331fef5f72d1afcfcb1b67c21211e6d33f1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6917</id>
    <title>Important: thunderbird security update</title>
    <issued date="2026-04-07 00:00:00"/>
    <updated date="2026-04-15 07:55:19"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721)
  * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717)
  * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-4688)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4695)
  * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4689)
  * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698)
  * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component (CVE-2026-4716)
  * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component (CVE-2026-4684)
  * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705)
  * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4685)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4714)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-4709)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video component (CVE-2026-4710)
  * firefox: thunderbird: Information disclosure in the Widget: Cocoa component (CVE-2026-4712)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4697)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4713)
  * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4690)
  * firefox: thunderbird: Use-after-free in the Widget: Cocoa component (CVE-2026-4711)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4686)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-4708)
  * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-4691)
  * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-4699)
  * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-4696)
  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component (CVE-2026-4693)
  * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4718)
  * firefox: thunderbird: JIT miscompilation in the JavaScript Engine component (CVE-2026-4702)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Text component (CVE-2026-4719)
  * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component (CVE-2026-4694)
  * firefox: thunderbird: Sandbox escape in the Responsive Design Mode component (CVE-2026-4692)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4720)
  * firefox: thunderbird: Mitigation bypass in the Networking: HTTP component (CVE-2026-4700)
  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4707)
  * firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704)
  * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component (CVE-2026-4687)
  * thunderbird: Out of bounds read in IMAP parsing (CVE-2026-4371)
  * thunderbird: Spoofing issue in Thunderbird (CVE-2026-3889)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6917" id="RHSA-2026:6917" type="rhsa" title="RHSA-2026:6917"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3889" id="CVE-2026-3889" type="cve" title="CVE-2026-3889"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4371" id="CVE-2026-4371" type="cve" title="CVE-2026-4371"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4684" id="CVE-2026-4684" type="cve" title="CVE-2026-4684"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4685" id="CVE-2026-4685" type="cve" title="CVE-2026-4685"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4686" id="CVE-2026-4686" type="cve" title="CVE-2026-4686"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4687" id="CVE-2026-4687" type="cve" title="CVE-2026-4687"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4688" id="CVE-2026-4688" type="cve" title="CVE-2026-4688"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4689" id="CVE-2026-4689" type="cve" title="CVE-2026-4689"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4690" id="CVE-2026-4690" type="cve" title="CVE-2026-4690"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4691" id="CVE-2026-4691" type="cve" title="CVE-2026-4691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4692" id="CVE-2026-4692" type="cve" title="CVE-2026-4692"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4693" id="CVE-2026-4693" type="cve" title="CVE-2026-4693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4694" id="CVE-2026-4694" type="cve" title="CVE-2026-4694"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4695" id="CVE-2026-4695" type="cve" title="CVE-2026-4695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4696" id="CVE-2026-4696" type="cve" title="CVE-2026-4696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4697" id="CVE-2026-4697" type="cve" title="CVE-2026-4697"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4698" id="CVE-2026-4698" type="cve" title="CVE-2026-4698"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4699" id="CVE-2026-4699" type="cve" title="CVE-2026-4699"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4700" id="CVE-2026-4700" type="cve" title="CVE-2026-4700"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4701" id="CVE-2026-4701" type="cve" title="CVE-2026-4701"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4702" id="CVE-2026-4702" type="cve" title="CVE-2026-4702"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4704" id="CVE-2026-4704" type="cve" title="CVE-2026-4704"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4705" id="CVE-2026-4705" type="cve" title="CVE-2026-4705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4706" id="CVE-2026-4706" type="cve" title="CVE-2026-4706"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4707" id="CVE-2026-4707" type="cve" title="CVE-2026-4707"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4708" id="CVE-2026-4708" type="cve" title="CVE-2026-4708"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4709" id="CVE-2026-4709" type="cve" title="CVE-2026-4709"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4710" id="CVE-2026-4710" type="cve" title="CVE-2026-4710"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4711" id="CVE-2026-4711" type="cve" title="CVE-2026-4711"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4712" id="CVE-2026-4712" type="cve" title="CVE-2026-4712"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4713" id="CVE-2026-4713" type="cve" title="CVE-2026-4713"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4714" id="CVE-2026-4714" type="cve" title="CVE-2026-4714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4715" id="CVE-2026-4715" type="cve" title="CVE-2026-4715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4716" id="CVE-2026-4716" type="cve" title="CVE-2026-4716"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4717" id="CVE-2026-4717" type="cve" title="CVE-2026-4717"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4718" id="CVE-2026-4718" type="cve" title="CVE-2026-4718"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4719" id="CVE-2026-4719" type="cve" title="CVE-2026-4719"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4720" id="CVE-2026-4720" type="cve" title="CVE-2026-4720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4721" id="CVE-2026-4721" type="cve" title="CVE-2026-4721"/>
      <reference href="https://bugzilla.redhat.com/2450710" id="2450710" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450711" id="2450711" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450712" id="2450712" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450713" id="2450713" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450714" id="2450714" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450715" id="2450715" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450718" id="2450718" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450719" id="2450719" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450720" id="2450720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450721" id="2450721" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450722" id="2450722" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450723" id="2450723" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450724" id="2450724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450725" id="2450725" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450726" id="2450726" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450727" id="2450727" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450728" id="2450728" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450729" id="2450729" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450730" id="2450730" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450732" id="2450732" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450733" id="2450733" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450734" id="2450734" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450735" id="2450735" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450738" id="2450738" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450739" id="2450739" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450740" id="2450740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450741" id="2450741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450742" id="2450742" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450744" id="2450744" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450746" id="2450746" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450747" id="2450747" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450748" id="2450748" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450751" id="2450751" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450752" id="2450752" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450755" id="2450755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450756" id="2450756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450757" id="2450757" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451001" id="2451001" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451006" id="2451006" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6917.html" id="ALSA-2026:6917" type="self" title="ALSA-2026:6917"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="140.9.0" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-140.9.0-1.el8_10.alma.1.src.rpm">
          <filename>thunderbird-140.9.0-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">a74ac809dd88901c040aa2e9d099fe9cd5021383b8693041000daf7dc071796d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6918</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-04-07 00:00:00"/>
    <updated date="2026-04-09 10:19:20"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP heap-use-after-free (CVE-2026-22856)
  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22854)
  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22852)
  * freerdp: FreeRDP: Denial of Service via FastGlyph parsing buffer overflow (CVE-2026-23732)
  * freerdp: FreeRDP: Denial of Service via use-after-free in AUDIN format renegotiation (CVE-2026-24676)
  * freerdp: FreeRDP has a heap-use-after-free in video_timer (CVE-2026-24491)
  * freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2() (CVE-2026-23948)
  * freerdp: FreeRDP has a Heap-use-after-free in play_thread (CVE-2026-24684)
  * freerdp: FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb (CVE-2026-24681)
  * freerdp: FreeRDP has a heap-use-after-free in ainput_send_input_event (CVE-2026-24683)
  * freerdp: FreeRDP has a heap-buffer-overflow in urb_select_interface (CVE-2026-24679)
  * freerdp: FreeRDP has a Heap-use-after-free in urb_select_interface (CVE-2026-24675)
  * freerdp: FreeRDP: Arbitrary code execution via crafted Remote Desktop Protocol (RDP) server messages (CVE-2026-31806)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6918" id="RHSA-2026:6918" type="rhsa" title="RHSA-2026:6918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22852" id="CVE-2026-22852" type="cve" title="CVE-2026-22852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22854" id="CVE-2026-22854" type="cve" title="CVE-2026-22854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22856" id="CVE-2026-22856" type="cve" title="CVE-2026-22856"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23732" id="CVE-2026-23732" type="cve" title="CVE-2026-23732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23948" id="CVE-2026-23948" type="cve" title="CVE-2026-23948"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24491" id="CVE-2026-24491" type="cve" title="CVE-2026-24491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24675" id="CVE-2026-24675" type="cve" title="CVE-2026-24675"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24676" id="CVE-2026-24676" type="cve" title="CVE-2026-24676"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24679" id="CVE-2026-24679" type="cve" title="CVE-2026-24679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24681" id="CVE-2026-24681" type="cve" title="CVE-2026-24681"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24683" id="CVE-2026-24683" type="cve" title="CVE-2026-24683"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24684" id="CVE-2026-24684" type="cve" title="CVE-2026-24684"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31806" id="CVE-2026-31806" type="cve" title="CVE-2026-31806"/>
      <reference href="https://bugzilla.redhat.com/2429650" id="2429650" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429652" id="2429652" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429654" id="2429654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430881" id="2430881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438201" id="2438201" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438202" id="2438202" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438207" id="2438207" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438208" id="2438208" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438210" id="2438210" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438216" id="2438216" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438217" id="2438217" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438221" id="2438221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447376" id="2447376" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6918.html" id="ALSA-2026:6918" type="self" title="ALSA-2026:6918"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="freerdp" version="2.11.7" release="6.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-6.el8_10.src.rpm">
          <filename>freerdp-2.11.7-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">424f39af18fbabd510f724396c70ab92bcaada8f32f2218d157bb7ba948545ba</sum>
        </package>
        <package name="freerdp-libs" version="2.11.7" release="6.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-6.el8_10.src.rpm">
          <filename>freerdp-libs-2.11.7-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">4419632338f8a8f1c519cc5f3a72ad715e847bc234cb8d547460cae63265e61a</sum>
        </package>
        <package name="libwinpr" version="2.11.7" release="6.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-6.el8_10.src.rpm">
          <filename>libwinpr-2.11.7-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">e6091b85818741fa09afb6225ef4d6ee1595242a85b2f80019e94172bad64bae</sum>
        </package>
        <package name="libwinpr-devel" version="2.11.7" release="6.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-6.el8_10.src.rpm">
          <filename>libwinpr-devel-2.11.7-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">ff114c7bed8eef16a4f25cd6eb2b28bdf699244fff28bd40837d69cffb1c902d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6949</id>
    <title>Important: go-toolset:rhel8 security update</title>
    <issued date="2026-04-08 00:00:00"/>
    <updated date="2026-04-09 12:17:38"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>go-toolset:rhel8 security update</summary>
    <description>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.   

Security Fix(es):  

  * cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive (CVE-2025-61731)
  * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6949" id="RHSA-2026:6949" type="rhsa" title="RHSA-2026:6949"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61731" id="CVE-2025-61731" type="cve" title="CVE-2025-61731"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25679" id="CVE-2026-25679" type="cve" title="CVE-2026-25679"/>
      <reference href="https://bugzilla.redhat.com/2434433" id="2434433" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2445356" id="2445356" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6949.html" id="ALSA-2026:6949" type="self" title="ALSA-2026:6949"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="go-toolset" stream="rhel8" version="8100020260408072059" context="9edba152" arch="s390x"/>
        <package name="golang" version="1.25.8" release="1.module_el8.10.0+4156+92f0ae2f" epoch="0" arch="s390x" src="golang-1.25.8-1.module_el8.10.0+4156+92f0ae2f.src.rpm">
          <filename>golang-1.25.8-1.module_el8.10.0+4156+92f0ae2f.s390x.rpm</filename>
          <sum type="sha256">28a5826d2b09b39da97aeb270742cf169c0c55d9035c92ea932ddc87e5ba2305</sum>
        </package>
        <package name="golang-misc" version="1.25.8" release="1.module_el8.10.0+4156+92f0ae2f" epoch="0" arch="noarch" src="golang-1.25.8-1.module_el8.10.0+4156+92f0ae2f.src.rpm">
          <filename>golang-misc-1.25.8-1.module_el8.10.0+4156+92f0ae2f.noarch.rpm</filename>
          <sum type="sha256">3f2683b8cc0a7d950e4af78e38ea3e852203ae81f3b163fa4df9ef4d02634dba</sum>
        </package>
        <package name="golang-bin" version="1.25.8" release="1.module_el8.10.0+4156+92f0ae2f" epoch="0" arch="s390x" src="golang-1.25.8-1.module_el8.10.0+4156+92f0ae2f.src.rpm">
          <filename>golang-bin-1.25.8-1.module_el8.10.0+4156+92f0ae2f.s390x.rpm</filename>
          <sum type="sha256">c27b3d6395cec0c95a9ded80d67513520242fd1aed254271d9435437fd5a4bf9</sum>
        </package>
        <package name="golang-tests" version="1.25.8" release="1.module_el8.10.0+4156+92f0ae2f" epoch="0" arch="noarch" src="golang-1.25.8-1.module_el8.10.0+4156+92f0ae2f.src.rpm">
          <filename>golang-tests-1.25.8-1.module_el8.10.0+4156+92f0ae2f.noarch.rpm</filename>
          <sum type="sha256">c2f6d8d6aaf6f805fea6a053cc934eb4f5f60940a1075d048eaedc87cd5ec23b</sum>
        </package>
        <package name="go-toolset" version="1.25.8" release="1.module_el8.10.0+4156+92f0ae2f" epoch="0" arch="s390x" src="golang-1.25.8-1.module_el8.10.0+4156+92f0ae2f.src.rpm">
          <filename>go-toolset-1.25.8-1.module_el8.10.0+4156+92f0ae2f.s390x.rpm</filename>
          <sum type="sha256">cf8ad37f33583e93276bc6146e34991ca04bb187e37c205f167ac974dbea7ec7</sum>
        </package>
        <package name="golang-src" version="1.25.8" release="1.module_el8.10.0+4156+92f0ae2f" epoch="0" arch="noarch" src="golang-1.25.8-1.module_el8.10.0+4156+92f0ae2f.src.rpm">
          <filename>golang-src-1.25.8-1.module_el8.10.0+4156+92f0ae2f.noarch.rpm</filename>
          <sum type="sha256">d31472d5a294ec900edd24ede84422c51678ebdbf4cdd919b5f1ddc282b21c82</sum>
        </package>
        <package name="golang-docs" version="1.25.8" release="1.module_el8.10.0+4156+92f0ae2f" epoch="0" arch="noarch" src="golang-1.25.8-1.module_el8.10.0+4156+92f0ae2f.src.rpm">
          <filename>golang-docs-1.25.8-1.module_el8.10.0+4156+92f0ae2f.noarch.rpm</filename>
          <sum type="sha256">e23165d45a016bc828cc87468d58d2ead0f0154dff7ee91a652f0e7633b04ba0</sum>
        </package>
        <package name="golang-race" version="1.25.8" release="1.module_el8.10.0+4156+92f0ae2f" epoch="0" arch="s390x" src="golang-1.25.8-1.module_el8.10.0+4156+92f0ae2f.src.rpm">
          <filename>golang-race-1.25.8-1.module_el8.10.0+4156+92f0ae2f.s390x.rpm</filename>
          <sum type="sha256">fd76f20cb9b4e1b5149614569e1ab33d6765e1e6e499e9a4a5422935a1e691f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7009</id>
    <title>Important: grafana-pcp security update</title>
    <issued date="2026-04-08 00:00:00"/>
    <updated date="2026-04-15 07:53:46"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana-pcp security update</summary>
    <description>The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.  

Security Fix(es):  

  * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7009" id="RHSA-2026:7009" type="rhsa" title="RHSA-2026:7009"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25679" id="CVE-2026-25679" type="cve" title="CVE-2026-25679"/>
      <reference href="https://bugzilla.redhat.com/2445356" id="2445356" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-7009.html" id="ALSA-2026:7009" type="self" title="ALSA-2026:7009"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="grafana-pcp" version="5.1.1" release="13.el8_10" epoch="0" arch="s390x" src="grafana-pcp-5.1.1-13.el8_10.src.rpm">
          <filename>grafana-pcp-5.1.1-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">fa96a2b8ad6d35c8b984e684145764a37550a10a868e20a99dc84d900a8a7122</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7011</id>
    <title>Important: grafana security update</title>
    <issued date="2026-04-08 00:00:00"/>
    <updated date="2026-04-15 07:52:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.   

Security Fix(es):  

  * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7011" id="RHSA-2026:7011" type="rhsa" title="RHSA-2026:7011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25679" id="CVE-2026-25679" type="cve" title="CVE-2026-25679"/>
      <reference href="https://bugzilla.redhat.com/2445356" id="2445356" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-7011.html" id="ALSA-2026:7011" type="self" title="ALSA-2026:7011"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="grafana" version="9.2.10" release="29.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-29.el8_10.src.rpm">
          <filename>grafana-9.2.10-29.el8_10.s390x.rpm</filename>
          <sum type="sha256">8aff0319665becab9512c4ac78218cd09faea61e207b221885b843daaea3bb12</sum>
        </package>
        <package name="grafana-selinux" version="9.2.10" release="29.el8_10" epoch="0" arch="s390x" src="grafana-9.2.10-29.el8_10.src.rpm">
          <filename>grafana-selinux-9.2.10-29.el8_10.s390x.rpm</filename>
          <sum type="sha256">cef862a69a8e108ed18e5e9109e98001eebc73d0eb55b9bbf37881adfedd709a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7123</id>
    <title>Important: nodejs:22 security update</title>
    <issued date="2026-04-08 00:00:00"/>
    <updated date="2026-04-15 08:45:14"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:22 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * brace-expansion: brace-expansion: Denial of Service via unbounded brace range expansion (CVE-2026-25547)
  * minimatch: minimatch: Denial of Service via specially crafted glob patterns (CVE-2026-26996)
  * minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions (CVE-2026-27904)
  * undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression (CVE-2026-1526)
  * undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter (CVE-2026-2229)
  * undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers (CVE-2026-1525)
  * undici: undici: Denial of Service via crafted WebSocket frame with large length (CVE-2026-1528)
  * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135)
  * Node.js: Node.js: Denial of Service due to crafted HTTP `__proto__` header (CVE-2026-21710)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7123" id="RHSA-2026:7123" type="rhsa" title="RHSA-2026:7123"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1525" id="CVE-2026-1525" type="cve" title="CVE-2026-1525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1526" id="CVE-2026-1526" type="cve" title="CVE-2026-1526"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1528" id="CVE-2026-1528" type="cve" title="CVE-2026-1528"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21710" id="CVE-2026-21710" type="cve" title="CVE-2026-21710"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2229" id="CVE-2026-2229" type="cve" title="CVE-2026-2229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25547" id="CVE-2026-25547" type="cve" title="CVE-2026-25547"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26996" id="CVE-2026-26996" type="cve" title="CVE-2026-26996"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27135" id="CVE-2026-27135" type="cve" title="CVE-2026-27135"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27904" id="CVE-2026-27904" type="cve" title="CVE-2026-27904"/>
      <reference href="https://bugzilla.redhat.com/2436942" id="2436942" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2441268" id="2441268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442922" id="2442922" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447142" id="2447142" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447143" id="2447143" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447144" id="2447144" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447145" id="2447145" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448754" id="2448754" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453151" id="2453151" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-7123.html" id="ALSA-2026:7123" type="self" title="ALSA-2026:7123"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="nodejs" stream="22" version="8100020250604143121" context="9c84b808" arch="s390x"/>
        <package name="nodejs-libs" version="22.22.2" release="1.module_el8.10.0+4158+e796f37f" epoch="1" arch="s390x" src="nodejs-22.22.2-1.module_el8.10.0+4158+e796f37f.src.rpm">
          <filename>nodejs-libs-22.22.2-1.module_el8.10.0+4158+e796f37f.s390x.rpm</filename>
          <sum type="sha256">0c918724859f0571b948283815ede8bfcfaa7056142d6de7a04e270c0107ec3b</sum>
        </package>
        <package name="nodejs-full-i18n" version="22.22.2" release="1.module_el8.10.0+4158+e796f37f" epoch="1" arch="s390x" src="nodejs-22.22.2-1.module_el8.10.0+4158+e796f37f.src.rpm">
          <filename>nodejs-full-i18n-22.22.2-1.module_el8.10.0+4158+e796f37f.s390x.rpm</filename>
          <sum type="sha256">18b5c5195b909720288eba5d9f8669b97a7c8a714cea18c1276234d053fda196</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.10.0+4006+3c416519" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.10.0+4006+3c416519.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.10.0+4006+3c416519.noarch.rpm</filename>
          <sum type="sha256">1b6e11aaa8d9bdb9162feb0d449e70ce58986cd57aeed33595bc13516352a9e6</sum>
        </package>
        <package name="nodejs-devel" version="22.22.2" release="1.module_el8.10.0+4158+e796f37f" epoch="1" arch="s390x" src="nodejs-22.22.2-1.module_el8.10.0+4158+e796f37f.src.rpm">
          <filename>nodejs-devel-22.22.2-1.module_el8.10.0+4158+e796f37f.s390x.rpm</filename>
          <sum type="sha256">1fa3140d373c1a10bef891530d21587e913d73e5a2d78d0bffc32918e72ea302</sum>
        </package>
        <package name="v8-12.4-devel" version="12.4.254.21" release="1.22.22.2.1.module_el8.10.0+4158+e796f37f" epoch="3" arch="s390x" src="nodejs-22.22.2-1.module_el8.10.0+4158+e796f37f.src.rpm">
          <filename>v8-12.4-devel-12.4.254.21-1.22.22.2.1.module_el8.10.0+4158+e796f37f.s390x.rpm</filename>
          <sum type="sha256">88c6cccd3de1c27a1efc1549ff738a953cce18eeca5091b4221d9e641c73b0f7</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="6.module_el8.10.0+4158+e796f37f" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-6.module_el8.10.0+4158+e796f37f.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-6.module_el8.10.0+4158+e796f37f.noarch.rpm</filename>
          <sum type="sha256">95549e780e9ad76b8e49f9c9db940d99cb8260f37e3d9cf05df2baaf6182e412</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="6.module_el8.10.0+4158+e796f37f" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-6.module_el8.10.0+4158+e796f37f.src.rpm">
          <filename>nodejs-packaging-2021.06-6.module_el8.10.0+4158+e796f37f.noarch.rpm</filename>
          <sum type="sha256">aaede6e40164690ca8a8b2229ad4ad4e0faea8ce4f2d6cfb3358572d8576dace</sum>
        </package>
        <package name="nodejs" version="22.22.2" release="1.module_el8.10.0+4158+e796f37f" epoch="1" arch="s390x" src="nodejs-22.22.2-1.module_el8.10.0+4158+e796f37f.src.rpm">
          <filename>nodejs-22.22.2-1.module_el8.10.0+4158+e796f37f.s390x.rpm</filename>
          <sum type="sha256">c1a9adef4d0500b8dec3e376816b9b0ee35598463da51352966264c12329403d</sum>
        </package>
        <package name="npm" version="10.9.7" release="1.22.22.2.1.module_el8.10.0+4158+e796f37f" epoch="1" arch="s390x" src="nodejs-22.22.2-1.module_el8.10.0+4158+e796f37f.src.rpm">
          <filename>npm-10.9.7-1.22.22.2.1.module_el8.10.0+4158+e796f37f.s390x.rpm</filename>
          <sum type="sha256">c85998e8618ccf479757d13ab2f4d2df0bbad6e4f8d6c0007dfe0a46d7d278fd</sum>
        </package>
        <package name="nodejs-docs" version="22.22.2" release="1.module_el8.10.0+4158+e796f37f" epoch="1" arch="noarch" src="nodejs-22.22.2-1.module_el8.10.0+4158+e796f37f.src.rpm">
          <filename>nodejs-docs-22.22.2-1.module_el8.10.0+4158+e796f37f.noarch.rpm</filename>
          <sum type="sha256">f65898b969de2a006de95b87fb381d21ea2334cc79e0dd61848288b98280cc0f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7670</id>
    <title>Important: nodejs:24 security update</title>
    <issued date="2026-04-13 00:00:00"/>
    <updated date="2026-04-15 07:50:26"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:24 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * nodejs: Nodejs denial of service (CVE-2026-21637)
  * minimatch: minimatch: Denial of Service via specially crafted glob patterns (CVE-2026-26996)
  * undici: Undici: Denial of Service due to uncontrolled resource consumption (CVE-2026-2581)
  * undici: Undici: HTTP header injection and request smuggling vulnerability (CVE-2026-1527)
  * undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression (CVE-2026-1526)
  * undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter (CVE-2026-2229)
  * undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers (CVE-2026-1525)
  * undici: undici: Denial of Service via crafted WebSocket frame with large length (CVE-2026-1528)
  * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135)
  * Node.js: Node.js: Denial of Service via malformed Internationalized Domain Name processing (CVE-2026-21712)
  * Node.js: Node.js: Denial of Service due to crafted HTTP `__proto__` header (CVE-2026-21710)
  * Node.js: Node.js: Information disclosure due to `fs.realpathSync.native()` bypassing filesystem read restrictions (CVE-2026-21715)
  * nodejs: Node.js: Permission bypass allows unauthorized modification of file permissions and ownership via incomplete security fix. (CVE-2026-21716)
  * Node.js: Node.js: Unauthorized inter-process communication due to missing Unix Domain Socket permission checks (CVE-2026-21711)
  * Node.js: Node.js: Information disclosure via timing oracle in HMAC verification (CVE-2026-21713)
  * Node.js: Node.js: Memory leak and Denial of Service via crafted HTTP/2 WINDOW_UPDATE frames (CVE-2026-21714)
  * nodejs: v8: Node.js: Denial of Service via V8 string hashing mechanism due to predictable hash collisions (CVE-2026-21717)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7670" id="RHSA-2026:7670" type="rhsa" title="RHSA-2026:7670"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1525" id="CVE-2026-1525" type="cve" title="CVE-2026-1525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1526" id="CVE-2026-1526" type="cve" title="CVE-2026-1526"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1527" id="CVE-2026-1527" type="cve" title="CVE-2026-1527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1528" id="CVE-2026-1528" type="cve" title="CVE-2026-1528"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21637" id="CVE-2026-21637" type="cve" title="CVE-2026-21637"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21710" id="CVE-2026-21710" type="cve" title="CVE-2026-21710"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21711" id="CVE-2026-21711" type="cve" title="CVE-2026-21711"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21712" id="CVE-2026-21712" type="cve" title="CVE-2026-21712"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21713" id="CVE-2026-21713" type="cve" title="CVE-2026-21713"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21714" id="CVE-2026-21714" type="cve" title="CVE-2026-21714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21715" id="CVE-2026-21715" type="cve" title="CVE-2026-21715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21716" id="CVE-2026-21716" type="cve" title="CVE-2026-21716"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21717" id="CVE-2026-21717" type="cve" title="CVE-2026-21717"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2229" id="CVE-2026-2229" type="cve" title="CVE-2026-2229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2581" id="CVE-2026-2581" type="cve" title="CVE-2026-2581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26996" id="CVE-2026-26996" type="cve" title="CVE-2026-26996"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27135" id="CVE-2026-27135" type="cve" title="CVE-2026-27135"/>
      <reference href="https://bugzilla.redhat.com/2431340" id="2431340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2441268" id="2441268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447140" id="2447140" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447141" id="2447141" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447142" id="2447142" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447143" id="2447143" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447144" id="2447144" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447145" id="2447145" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448754" id="2448754" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453037" id="2453037" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453151" id="2453151" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453152" id="2453152" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453157" id="2453157" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453158" id="2453158" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453160" id="2453160" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453161" id="2453161" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453162" id="2453162" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-7670.html" id="ALSA-2026:7670" type="self" title="ALSA-2026:7670"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="nodejs" stream="24" version="8100020260413035318" context="9c84b808" arch="s390x"/>
        <package name="nodejs-devel" version="24.14.1" release="2.module_el8.10.0+4160+4819ac42" epoch="1" arch="s390x" src="nodejs-24.14.1-2.module_el8.10.0+4160+4819ac42.src.rpm">
          <filename>nodejs-devel-24.14.1-2.module_el8.10.0+4160+4819ac42.s390x.rpm</filename>
          <sum type="sha256">0345deed16df0834a8b9e11f4fee9012ea24d3704a2f95628bebeb36d485858b</sum>
        </package>
        <package name="npm" version="11.11.0" release="1.24.14.1.2.module_el8.10.0+4160+4819ac42" epoch="1" arch="noarch" src="nodejs-24.14.1-2.module_el8.10.0+4160+4819ac42.src.rpm">
          <filename>npm-11.11.0-1.24.14.1.2.module_el8.10.0+4160+4819ac42.noarch.rpm</filename>
          <sum type="sha256">149b7e5f38874abbc9d1a1f050adfb1b83230912911b200f8251cae7894a2d5d</sum>
        </package>
        <package name="v8-13.6-devel" version="13.6.233.17" release="1.24.14.1.2.module_el8.10.0+4160+4819ac42" epoch="3" arch="s390x" src="nodejs-24.14.1-2.module_el8.10.0+4160+4819ac42.src.rpm">
          <filename>v8-13.6-devel-13.6.233.17-1.24.14.1.2.module_el8.10.0+4160+4819ac42.s390x.rpm</filename>
          <sum type="sha256">2876a7e157c907a54b11c117b41148d73c122d6edad30ee9bff40932de97fe46</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="6.module_el8.10.0+4086+70facd4a" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-6.module_el8.10.0+4086+70facd4a.src.rpm">
          <filename>nodejs-packaging-2021.06-6.module_el8.10.0+4086+70facd4a.noarch.rpm</filename>
          <sum type="sha256">318c493f93f2190506361306b5759e5e65eee18e3a8d85b195c800d8b7064bc0</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.3" release="1.module_el8.10.0+4061+f8ceeab9" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.3-1.module_el8.10.0+4061+f8ceeab9.src.rpm">
          <filename>nodejs-nodemon-3.0.3-1.module_el8.10.0+4061+f8ceeab9.noarch.rpm</filename>
          <sum type="sha256">9a38ec0d35f9d0671cb0343c1270c1a85bf1b2250b40fe3facedbd919eee2b91</sum>
        </package>
        <package name="nodejs-libs" version="24.14.1" release="2.module_el8.10.0+4160+4819ac42" epoch="1" arch="s390x" src="nodejs-24.14.1-2.module_el8.10.0+4160+4819ac42.src.rpm">
          <filename>nodejs-libs-24.14.1-2.module_el8.10.0+4160+4819ac42.s390x.rpm</filename>
          <sum type="sha256">a26c381cf7049229810f2d3878e491a25d450ca174ff41a54c12545fc69107b8</sum>
        </package>
        <package name="nodejs-docs" version="24.14.1" release="2.module_el8.10.0+4160+4819ac42" epoch="1" arch="noarch" src="nodejs-24.14.1-2.module_el8.10.0+4160+4819ac42.src.rpm">
          <filename>nodejs-docs-24.14.1-2.module_el8.10.0+4160+4819ac42.noarch.rpm</filename>
          <sum type="sha256">abe67a31cd2999167bc5472e65525c87a37ca44518e006aba6117a1b40029f80</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="6.module_el8.10.0+4086+70facd4a" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-6.module_el8.10.0+4086+70facd4a.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-6.module_el8.10.0+4086+70facd4a.noarch.rpm</filename>
          <sum type="sha256">f4b4a25dc07327deb51619715aae6bd35d22e29ccfc97141c0b61de3a1995eee</sum>
        </package>
        <package name="nodejs-full-i18n" version="24.14.1" release="2.module_el8.10.0+4160+4819ac42" epoch="1" arch="s390x" src="nodejs-24.14.1-2.module_el8.10.0+4160+4819ac42.src.rpm">
          <filename>nodejs-full-i18n-24.14.1-2.module_el8.10.0+4160+4819ac42.s390x.rpm</filename>
          <sum type="sha256">f6a728cf12ebce6bf2f7ee530f3793acfc96efc36126305c1216655643878bfa</sum>
        </package>
        <package name="nodejs" version="24.14.1" release="2.module_el8.10.0+4160+4819ac42" epoch="1" arch="s390x" src="nodejs-24.14.1-2.module_el8.10.0+4160+4819ac42.src.rpm">
          <filename>nodejs-24.14.1-2.module_el8.10.0+4160+4819ac42.s390x.rpm</filename>
          <sum type="sha256">fc61e99d3e925a0d04cfa6d7df93b9e5bb5ccde1947142a799dd0385889ee410</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7681</id>
    <title>Important: perl-XML-Parser security update</title>
    <issued date="2026-04-13 00:00:00"/>
    <updated date="2026-04-14 07:40:45"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>perl-XML-Parser security update</summary>
    <description>This module provides ways to parse XML documents. It is built on top of XML::Parser::Expat, which is a lower level interface to James Clark's expat library. Each call to one of the parsing methods creates a new instance of XML::Parser::Expat which is then used to parse the document. Expat options may be provided when the XML::Parser object is created. These options are then passed on to the Expat object on each parse call. They can also be given as extra arguments to the parse methods, in which case they override options given at XML::Parser creation time.  

Security Fix(es):  

  * perl-xml-parser: XML::Parser: Memory corruption via deeply nested XML files (CVE-2006-10003)
  * perl-xml-parser: XML::Parser for Perl: Heap corruption and denial of service from crafted XML input (CVE-2006-10002)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7681" id="RHSA-2026:7681" type="rhsa" title="RHSA-2026:7681"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2006-10002" id="CVE-2006-10002" type="cve" title="CVE-2006-10002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2006-10003" id="CVE-2006-10003" type="cve" title="CVE-2006-10003"/>
      <reference href="https://bugzilla.redhat.com/2448999" id="2448999" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2449001" id="2449001" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-7681.html" id="ALSA-2026:7681" type="self" title="ALSA-2026:7681"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="perl-XML-Parser" version="2.44" release="12.el8_10" epoch="0" arch="s390x" src="perl-XML-Parser-2.44-12.el8_10.src.rpm">
          <filename>perl-XML-Parser-2.44-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">f785a2283055f9be0f1cde9c22d8927eef8ab383c295f9737d9c856436ff4e7d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8052</id>
    <title>Important: firefox security update</title>
    <issued date="2026-04-14 00:00:00"/>
    <updated date="2026-04-15 13:12:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)
  * libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636)
  * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5734)
  * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5731)
  * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics: Text component (CVE-2026-5732)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8052" id="RHSA-2026:8052" type="rhsa" title="RHSA-2026:8052"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33416" id="CVE-2026-33416" type="cve" title="CVE-2026-33416"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33636" id="CVE-2026-33636" type="cve" title="CVE-2026-33636"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5731" id="CVE-2026-5731" type="cve" title="CVE-2026-5731"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5732" id="CVE-2026-5732" type="cve" title="CVE-2026-5732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5734" id="CVE-2026-5734" type="cve" title="CVE-2026-5734"/>
      <reference href="https://bugzilla.redhat.com/2451805" id="2451805" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451819" id="2451819" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2455897" id="2455897" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2455901" id="2455901" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2455908" id="2455908" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8052.html" id="ALSA-2026:8052" type="self" title="ALSA-2026:8052"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="firefox" version="140.9.1" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="firefox-140.9.1-1.el8_10.alma.1.src.rpm">
          <filename>firefox-140.9.1-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">3a92e51dadc23c6340e0307f6e1162d19500d71987a8938cb78ccd0c87a54281</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8096</id>
    <title>Moderate: perl:5.32 security update</title>
    <issued date="2026-04-14 00:00:00"/>
    <updated date="2026-04-15 10:21:51"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>perl:5.32 security update</summary>
    <description>Perl is a high-level programming language that is commonly used for system administration utilities and web programming.  

Security Fix(es):  

  * perl: Perl threads have a working directory race condition where file operations may target unintended paths (CVE-2025-40909)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8096" id="RHSA-2026:8096" type="rhsa" title="RHSA-2026:8096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40909" id="CVE-2025-40909" type="cve" title="CVE-2025-40909"/>
      <reference href="https://bugzilla.redhat.com/2369407" id="2369407" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8096.html" id="ALSA-2026:8096" type="self" title="ALSA-2026:8096"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="perl" stream="5.32" version="8100020260415070457" context="9edba152" arch="s390x"/>
        <package name="perl" version="5.32.1" release="474.module_el8.10.0+4162+0aac7c4c" epoch="4" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">011f43983089a48816e7957a86d1cf72a12ed4f335a50a827b1606c4a848988d</sum>
        </package>
        <package name="perl-Math-BigInt-FastCalc" version="0.500.900" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Math-BigInt-FastCalc-0.500.900-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Math-BigInt-FastCalc-0.500.900-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">02e26e19077af269cd397729470bc4fa338a1f4e076f9fa75dd7efc440debcff</sum>
        </package>
        <package name="perl-open" version="1.12" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-open-1.12-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">03e4688e8b380831a8cd4b5e2ef64816d8d855b0e51671a2adc52941b59da2f8</sum>
        </package>
        <package name="perl-Sys-Syslog" version="0.36" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Sys-Syslog-0.36-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Sys-Syslog-0.36-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">079b49645d07c209be167587ab587837e44e45fdaeadafa9b8b82e00b338b6bc</sum>
        </package>
        <package name="perl-AutoLoader" version="5.74" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-AutoLoader-5.74-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">0a24102ccd6a576a30826423eb8d25ca6de172288c34f39d413a52453f53d25c</sum>
        </package>
        <package name="perl-Encode" version="3.08" release="461.module_el8.6.0+3181+91434291" epoch="4" arch="s390x" src="perl-Encode-3.08-461.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Encode-3.08-461.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">0aa9678c2c64442ff6a3d5b1089e78550d762a2a5d3b984c64f786b76da7cf01</sum>
        </package>
        <package name="perl-Encode-devel" version="3.08" release="461.module_el8.6.0+3181+91434291" epoch="4" arch="s390x" src="perl-Encode-3.08-461.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Encode-devel-3.08-461.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">0ba7613843dc6a78fe7ba65103ac4915962b045bed0f95f738d64dec0269ae25</sum>
        </package>
        <package name="perl-Time-Piece" version="1.3401" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Time-Piece-1.3401-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">0bb0c24bb0a61f3fedac5424b8d929623790353aeb9ac823a2dbee38b20fd279</sum>
        </package>
        <package name="perl-Opcode" version="1.48" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Opcode-1.48-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">14ea15b836b87474bd2ef0ce046d52de465da3ca48b897753b6e70d733193cb9</sum>
        </package>
        <package name="perl-Safe" version="2.41" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Safe-2.41-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">16c6df130f68d0dc6845e6aa76d8a8325a54604e834f35994dc41b70e2af88e3</sum>
        </package>
        <package name="perl-overloading" version="0.02" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-overloading-0.02-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">18d6e80d91e36730a85bab2650cd98e9a11d665c9c30b8902e821ff1316db78e</sum>
        </package>
        <package name="perl-Errno" version="1.30" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Errno-1.30-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">18e5013689e6fbf773e56722e19b7e3da3497d51d9893a140c954aa2357071f9</sum>
        </package>
        <package name="perl-Net-Ping" version="2.72" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Net-Ping-2.72-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">1e040c34de1fd7c98d3cf2bb9eb1c31d6d7112c69421bbb4a58e179b4f68b2f0</sum>
        </package>
        <package name="perl-utils" version="5.32.1" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-utils-5.32.1-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">1e5fca94372196aab8d793465364c2f51650da017a119bc8f9294b54c6f3bec0</sum>
        </package>
        <package name="perl-lib" version="0.65" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-lib-0.65-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">228430700526e44abe17a4ba163c3d69ece77aa46fa6b89cc3be9f03214e2b4e</sum>
        </package>
        <package name="perl-Devel-PPPort" version="3.62" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Devel-PPPort-3.62-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Devel-PPPort-3.62-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">22b89b06807891168f339c873c1df71c09ea6279b58a053c1c3fa7756e5d9cfe</sum>
        </package>
        <package name="perl-DirHandle" version="1.05" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-DirHandle-1.05-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">24507dc82b28a622a38431dc2f0402493169f20072a24e1a9bb67aa84446d355</sum>
        </package>
        <package name="perl-overload" version="1.31" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-overload-1.31-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">2462af6ffc76c24b170d6a0bba512e9e085e6262f3026cae16370e40bace68d7</sum>
        </package>
        <package name="perl-libs" version="5.32.1" release="474.module_el8.10.0+4162+0aac7c4c" epoch="4" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-libs-5.32.1-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">248f346de4c283c1f102ad1a484b11e93d264eeada414c8af9baa2e59a77b71c</sum>
        </package>
        <package name="perl-Compress-Bzip2" version="2.28" release="2.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Compress-Bzip2-2.28-2.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Compress-Bzip2-2.28-2.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">24e9c4b296bff779ccafb1cce82029a1d0d7610c20f719e87338eecf5e28250d</sum>
        </package>
        <package name="perl-Symbol" version="1.08" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Symbol-1.08-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">297ee1e0a0a12f4cba0ad73f12644ca3ee2792789774408af4f78585ca72bde3</sum>
        </package>
        <package name="perl-I18N-Collate" version="1.02" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-I18N-Collate-1.02-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">2b3c90dffe1c8c5f416770a496b036f2f9912fdd94f25e278c6c9dc5299d1179</sum>
        </package>
        <package name="perl-Data-Dumper" version="2.174" release="440.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Data-Dumper-2.174-440.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Data-Dumper-2.174-440.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">2dbd08fb1974f13cdc2e12a54c2ac7974ebdc5ae17ee700b3e207e8068462c84</sum>
        </package>
        <package name="perl-NEXT" version="0.67" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-NEXT-0.67-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">2df0ff882f2056e512c4611805b10910279840caeadbd5f2d9f2a029828d45f6</sum>
        </package>
        <package name="perl-mro" version="1.23" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-mro-1.23-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">306880f68ef87d19519ea94dbf39c7262ccc0c9280bf7365e4afe2759d344f88</sum>
        </package>
        <package name="perl-Term-ReadLine" version="1.17" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Term-ReadLine-1.17-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">30e2b5389b8e1a6c71f67cf28cc213f1c773a3b1b557e769504866e569e0831d</sum>
        </package>
        <package name="perl-Pod-Functions" version="1.13" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Pod-Functions-1.13-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">322321aeaca24474b03e8d66aa8c5518ff3ff32c4330cea3bb5b61864dc6d4f1</sum>
        </package>
        <package name="perl-Time-HiRes" version="1.9764" release="459.module_el8.6.0+3181+91434291" epoch="4" arch="s390x" src="perl-Time-HiRes-1.9764-459.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Time-HiRes-1.9764-459.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">32d0137f5adc6c485c423ed080898c9d2d389d99c3414bc8183aefd23ff5fa20</sum>
        </package>
        <package name="perl-base" version="2.27" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-base-2.27-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">3356b4d0d4bc84df4d637a0bfb22d865f62cae5978d2dd0e377767331c3182ef</sum>
        </package>
        <package name="perl-vmsish" version="1.04" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-vmsish-1.04-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">340a07edf39df977632c2b0e180dfa1136430d5551dfff733a27cf07a6063e11</sum>
        </package>
        <package name="perl-subs" version="1.03" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-subs-1.03-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">34c8a6a85f2bae3439230444834e07af79aeda0518859f7ab32a97565b7ac752</sum>
        </package>
        <package name="perl-ODBM_File" version="1.16" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-ODBM_File-1.16-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">37739678cae5d48ea2704de738fad87f4ee50d5e62481d70d921215b514b360d</sum>
        </package>
        <package name="perl-Compress-Raw-Lzma" version="2.096" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Compress-Raw-Lzma-2.096-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Compress-Raw-Lzma-2.096-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">37cddb8cb6f7b081513d9ba73cde6b5a7af92dd45d761ed456a2131a0c2ba250</sum>
        </package>
        <package name="perl-Pod-Html" version="1.25" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Pod-Html-1.25-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">3869433f708b636aa4f69c76aa24b9d59892c3c31c0f09e62260adc60ecb41a8</sum>
        </package>
        <package name="perl-File-Compare" version="1.100.600" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-File-Compare-1.100.600-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">39464ea41c8a8860caa5631c73ea6c0634f0d8a26691265e2de31378f46ab14c</sum>
        </package>
        <package name="perl-Devel-Peek" version="1.28" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Devel-Peek-1.28-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">3a9e546ccee1f7fe7d447969fd81910da9b337147673c7df3030c37363d2e4f2</sum>
        </package>
        <package name="perl-Storable" version="3.21" release="457.module_el8.6.0+3181+91434291" epoch="1" arch="s390x" src="perl-Storable-3.21-457.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Storable-3.21-457.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">3ab4014c6090c63ddc06db649dc4f6861695fde6509d5fa1a3fa0dddbe517f1b</sum>
        </package>
        <package name="perl-File-DosGlob" version="1.12" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-File-DosGlob-1.12-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">43dc501826b9a9c80b3d27dddf9748a40bb71c27702e3e8fc57c0c050653fa30</sum>
        </package>
        <package name="perl-diagnostics" version="1.37" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-diagnostics-1.37-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">44476bf570d4106694d3e975b620d4bffab509e44067726b3f2096fd6f9bc422</sum>
        </package>
        <package name="perl-Tie-Memoize" version="1.1" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Tie-Memoize-1.1-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">45d0e2889588d6d524b69e06e6e0fff1f9aa6a9ff76dac646a7d25dcacc738c8</sum>
        </package>
        <package name="perl-Thread" version="3.05" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Thread-3.05-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">48e865ff853b2ad5d4ac85f2aa9d0edd11fe7edbaa0b0407e48092107f13d59f</sum>
        </package>
        <package name="perl-Digest-MD5" version="2.58" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Digest-MD5-2.58-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Digest-MD5-2.58-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">4c58a697799d53381b8811353807bc5b41e30181cad4af65d0b9023ee409a623</sum>
        </package>
        <package name="perl-Benchmark" version="1.23" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Benchmark-1.23-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">4f1eb233860039478ebb9b7578f39b5e506f10ace7cf2fc73665dc19db580f26</sum>
        </package>
        <package name="perl-IPC-SysV" version="2.09" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-IPC-SysV-2.09-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-IPC-SysV-2.09-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">508355af60ff76844cc9f5c2f57aeeba6cf7a9e88d14d942f52bd8717b021bff</sum>
        </package>
        <package name="perl-version" version="0.99.29" release="1.module_el8.6.0+3181+91434291" epoch="7" arch="s390x" src="perl-version-0.99.29-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-version-0.99.29-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">51208c4995fd02f53e0cfa0778654ddac6c8c19f2899ef672ec59e99248ae04f</sum>
        </package>
        <package name="perl-if" version="0.60.800" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-if-0.60.800-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">52816decf0c54675cd54fe86d467f496a4465fe593f6c431baca39c88485ab5d</sum>
        </package>
        <package name="perl-User-pwent" version="1.03" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-User-pwent-1.03-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">54541cf20e0cf6f13b2d5669d043227a488225867c2ad82e0d7d0757751de370</sum>
        </package>
        <package name="perl-NDBM_File" version="1.15" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-NDBM_File-1.15-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">5464ae876ff64b8dd16aff51e9124eb20eefe2a58cbbc7a382e41d5b92a284df</sum>
        </package>
        <package name="perl-encoding-warnings" version="0.13" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-encoding-warnings-0.13-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">55aaa46676dddd382ee565e3b5e8168025e7b047a1d51cb650c665f730a24e3b</sum>
        </package>
        <package name="perl-macros" version="5.32.1" release="474.module_el8.10.0+4162+0aac7c4c" epoch="4" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-macros-5.32.1-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">56d268b0449493ee59ba0cc8c7b51f30439f86df3b5a0486e5f0d46872a89200</sum>
        </package>
        <package name="perl-debugger" version="1.56" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-debugger-1.56-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">5c879e73bebf86d4e4a5b4519007a9e911e3866a9b9e5a3934318b7d81b51697</sum>
        </package>
        <package name="perl-IO-Zlib" version="1.10" release="474.module_el8.10.0+4162+0aac7c4c" epoch="1" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-IO-Zlib-1.10-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">5da0b77f7c45abdca856d19049375473ec90773c481e2bc35fb52ea208317c05</sum>
        </package>
        <package name="perl-autouse" version="1.11" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-autouse-1.11-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">5fe6a12eb756257e1343b27425439a8fb247230928e7b7c0146a9d3d0ec76bac</sum>
        </package>
        <package name="perl-Getopt-Std" version="1.12" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Getopt-Std-1.12-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">618ce69e8b571e0cedd7e9d11f763ece2c0612b85678bf1bfcc4793a2e688a31</sum>
        </package>
        <package name="perl-FileCache" version="1.10" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-FileCache-1.10-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">62ffed34381f172e1157921e3d94b52d8e2489d4eeac1897554bea9b5ffcb180</sum>
        </package>
        <package name="perl-Hash-Util-FieldHash" version="1.20" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Hash-Util-FieldHash-1.20-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">63fd01ec1b43060a3982c409fc05540bb3b39d06dfb14cdcdac1b9f852d4e6e8</sum>
        </package>
        <package name="perl-encoding" version="3.00" release="461.module_el8.6.0+3181+91434291" epoch="4" arch="s390x" src="perl-Encode-3.08-461.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-encoding-3.00-461.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">65c2e2390a32ae4d3401554d2671fa5da05b1266275b57b93945f620c8954b13</sum>
        </package>
        <package name="perl-deprecate" version="0.04" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-deprecate-0.04-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">67e5d76ad3710d202941d083f8c87fe7ab9a1557ad54f01cb9f786fe3aee50c1</sum>
        </package>
        <package name="perl-Tie" version="4.6" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Tie-4.6-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">68a4e93ec04023880bd7492ccd6e0cef3e991be543604baa8a06d7c72de33b34</sum>
        </package>
        <package name="perl-GDBM_File" version="1.18" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-GDBM_File-1.18-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">6aa51509c2d4b0698641fd680cd8bff3bd1bc6832a37a5233d399c22f2a84065</sum>
        </package>
        <package name="perl-I18N-Langinfo" version="0.19" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-I18N-Langinfo-0.19-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">6ad02449bad9e78823bc2c5144aa240eb748c0864593427807c033f3eca07a26</sum>
        </package>
        <package name="perl-Socket" version="2.031" release="1.module_el8.6.0+3181+91434291" epoch="4" arch="s390x" src="perl-Socket-2.031-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Socket-2.031-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">6cd39b199d77bc5ec945e2c8eaed29fd6313b543871371963960bd6ee4f09f97</sum>
        </package>
        <package name="perl-DB_File" version="1.855" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-DB_File-1.855-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-DB_File-1.855-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">6d3754e954e347b8733ea7bcfeb33a9276f3b228e187ad504cf1cf7b6656ea3b</sum>
        </package>
        <package name="perl-threads-shared" version="1.61" release="457.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-threads-shared-1.61-457.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-threads-shared-1.61-457.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">754868e4271ca419c6d78e0277d8f3bc08a056bb9dc302cefb2bbce83895671d</sum>
        </package>
        <package name="perl-Tie-RefHash" version="1.39" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Tie-RefHash-1.39-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">75502fcd89ceb061cdeaf69eb5094f59220989c3ebc2c05c9a940db24662f6c3</sum>
        </package>
        <package name="perl-Devel-Size" version="0.83" release="3.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Devel-Size-0.83-3.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Devel-Size-0.83-3.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">75c534ebd6e8c18903f47c0cf7b67b280a2797f5f808209654ce89983791b321</sum>
        </package>
        <package name="perl-sigtrap" version="1.09" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-sigtrap-1.09-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">75e1d788990d37d7cd3eb39ac3be61971898984b320fe09600bd54f7371e9367</sum>
        </package>
        <package name="perl-FindBin" version="1.51" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-FindBin-1.51-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">7601501c700593b0a22ae664ea431789e30bf4cc80ba0ce93ba3bd4a53b091c7</sum>
        </package>
        <package name="perl-MIME-Base64" version="3.15" release="1001.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-MIME-Base64-3.15-1001.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-MIME-Base64-3.15-1001.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">771a93948be3a3bbc985dd4bb28f433bb49093c00addd2cb45f2fd3451677537</sum>
        </package>
        <package name="perl-interpreter" version="5.32.1" release="474.module_el8.10.0+4162+0aac7c4c" epoch="4" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-interpreter-5.32.1-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">7735463757d3062f5d70e950e773c85f2e53a5805abf2e29ec6e6f576409d39b</sum>
        </package>
        <package name="perl-Fcntl" version="1.13" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Fcntl-1.13-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">78e06612e595b187fe4abda7a662444fff9b8757220bb3ba1edb922ecfe62223</sum>
        </package>
        <package name="perl-I18N-LangTags" version="0.44" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-I18N-LangTags-0.44-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">7ee1069f3c33a8f6c5f752f2f009e9d2ccbd0c7a0548689c0b8286bc2a1ab70c</sum>
        </package>
        <package name="perl-Unicode-Collate" version="1.29" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Unicode-Collate-1.29-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Unicode-Collate-1.29-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">83aa97c32d943ebd9ca2bbd3d28857b95f786824948a5fa0fa7d66ea9d6afd19</sum>
        </package>
        <package name="perl-ExtUtils-Embed" version="1.35" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-ExtUtils-Embed-1.35-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">858b7c20f41828ba30748ca769e877feb1e6f84538e5c36141169312d6ebc765</sum>
        </package>
        <package name="perl-Module-Loaded" version="0.08" release="474.module_el8.10.0+4162+0aac7c4c" epoch="1" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Module-Loaded-0.08-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">8a09f681899e2416dad0d22165534714bf4e423157da373b2f09bf08753d95e8</sum>
        </package>
        <package name="perl-PathTools" version="3.78" release="439.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-PathTools-3.78-439.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-PathTools-3.78-439.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">8a9e1057a64785f1f6fa2f151bff86e36aa5c0f64ff9fd56c05d2b7c515c9fc2</sum>
        </package>
        <package name="perl-sort" version="2.04" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-sort-2.04-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">8bc2edac44745566a84db78bcb89f926a954bbaae8d9ee9378afc27b47b5f499</sum>
        </package>
        <package name="perl-Math-Complex" version="1.59" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Math-Complex-1.59-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">8bd5b4a342a42dc5a728c9de3ca91fc7fa6a96951ac2da8014505c62997a3a14</sum>
        </package>
        <package name="perl-File-Find" version="1.37" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-File-Find-1.37-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">8dd83bcd0d87ed6379f224140df5525c5fc781ff72613dd9a9117a3496a452a1</sum>
        </package>
        <package name="perl-devel" version="5.32.1" release="474.module_el8.10.0+4162+0aac7c4c" epoch="4" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-devel-5.32.1-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">8e5e5643af525a91842be371bed73a70f7b9aec5a3ac1b62d3d74734748b4b1d</sum>
        </package>
        <package name="perl-B" version="1.80" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-B-1.80-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">97a8bc0edb9008a4ce0f92483b869ea8c63a1283fb7efdcdc57d6c0edbf30253</sum>
        </package>
        <package name="perl-Compress-Raw-Zlib" version="2.096" release="2.module_el8.10.0+3779+d5938d28" epoch="0" arch="s390x" src="perl-Compress-Raw-Zlib-2.096-2.module_el8.10.0+3779+d5938d28.src.rpm">
          <filename>perl-Compress-Raw-Zlib-2.096-2.module_el8.10.0+3779+d5938d28.s390x.rpm</filename>
          <sum type="sha256">97f176f0c7cda057fb35604812498a37bcfdeaf71ebfe294d9eaca10867904d9</sum>
        </package>
        <package name="perl-FileHandle" version="2.03" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-FileHandle-2.03-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">990828bc134806e196076d69a4692b1927f30e1380d672a58d6048a58309b96f</sum>
        </package>
        <package name="perl-Tie-File" version="1.06" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Tie-File-1.06-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">9b18b04253a0d54c659f1cb947b6e31fe93ebf60ed289da8d849fc2245a2e3d4</sum>
        </package>
        <package name="perl-Config-Extensions" version="0.03" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Config-Extensions-0.03-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">9f43f7ae0605bef575ff824c6c71ba5198855ff75281108c8ff5038d625a8075</sum>
        </package>
        <package name="perl-Net" version="1.02" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Net-1.02-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">9f6f0ec1037634b5d36029901156a19a57fb580eeaef8cdff3759734401e3830</sum>
        </package>
        <package name="perl-English" version="1.11" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-English-1.11-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">9fd3b3fc400af7ad85552071e07e408fdf1489cd5cda362fa765fc1dacbe2f5b</sum>
        </package>
        <package name="perl-Thread-Semaphore" version="2.13" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Thread-Semaphore-2.13-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">a1749aca69d521576805fe5ad1a203c3d92b7ed9f816e51228349a4c82026d8e</sum>
        </package>
        <package name="perl-Class-Struct" version="0.66" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Class-Struct-0.66-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">a2d25a8fcf02a154b36af5599a3b84b595618b652c6a97b50d7355471bbffeb1</sum>
        </package>
        <package name="perl-ExtUtils-Constant" version="0.25" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-ExtUtils-Constant-0.25-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">ab494774c7a3fa4ffde0733b1159b8ed073853da7143c3ca423e13e7ed1eff2c</sum>
        </package>
        <package name="perl-Text-Abbrev" version="1.02" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Text-Abbrev-1.02-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">ae9546d5fe760028fe982f1215a832e78ced62a8e110ed47392a2e0330a97af5</sum>
        </package>
        <package name="perl-Memoize" version="1.03" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Memoize-1.03-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">b03b16cc5ff02bdd42c91b142ae58e3f733bcbe01ddaab4fdc70b87a444285ea</sum>
        </package>
        <package name="perl-fields" version="2.27" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-fields-2.27-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">b29050d6d9dd0efe7d60d0fe51030f9093cc6bae78ca7329dfbfce3b600b060a</sum>
        </package>
        <package name="perl-filetest" version="1.03" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-filetest-1.03-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">b48850796a036d52290217838038873a5f9c711299d0a9bfb27524c6a9a99425</sum>
        </package>
        <package name="perl-Hash-Util" version="0.23" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Hash-Util-0.23-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">b6e6615a081f5c675c63d0ac58f90de6a0a1d8ba15f6b89afeaa6a735413aeca</sum>
        </package>
        <package name="perl-Term-Complete" version="1.403" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Term-Complete-1.403-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">b74c25d9917fd4057114b761182467087abc929962fb697337b91aecaebf8c0a</sum>
        </package>
        <package name="perl-SelectSaver" version="1.02" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-SelectSaver-1.02-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">b7a13b36400563527cbb8d6701ec05c9ca150f2cfad765ca9700147c359f26b3</sum>
        </package>
        <package name="perl-blib" version="1.07" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-blib-1.07-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">b8ab9e97c1a0ed0f1f75dd6ed7e5526682c6b94963a4a4bf9e11160be181c76f</sum>
        </package>
        <package name="perl-POSIX" version="1.94" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-POSIX-1.94-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">bc8f53fdbeded8e711d4525eccc94b8570a5deaec79d9dea7504e6435ef2d251</sum>
        </package>
        <package name="perl-File-Basename" version="2.85" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-File-Basename-2.85-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">bf5e365dc5faf5f9d632ed3779f5d3bd65bd9ad4fb5b79c49988b226be392c71</sum>
        </package>
        <package name="perl-Dumpvalue" version="2.27" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Dumpvalue-2.27-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">bf9065febf836844999dbbec1cf0b2ae8bdceba423e4ff9f2296399462d6983f</sum>
        </package>
        <package name="perl-Unicode-UCD" version="0.75" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Unicode-UCD-0.75-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">bff3d1951f3d9fd20c036a9bfb77bb4680ec4bdeb00c34b9526c9afe61f979fa</sum>
        </package>
        <package name="perl-IPC-Open3" version="1.21" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-IPC-Open3-1.21-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">c45ba507e702bdddfb11a22ad5f4aaff8047d2f6814812d6fca50bf14a3a0c51</sum>
        </package>
        <package name="perl-Scalar-List-Utils" version="1.55" release="457.module_el8.6.0+3181+91434291" epoch="4" arch="s390x" src="perl-Scalar-List-Utils-1.55-457.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Scalar-List-Utils-1.55-457.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">c6c92b3787b32e6fd71c6e8a74bd56b0438e53e8cc9619293890663e1ebba5b9</sum>
        </package>
        <package name="perl-Time" version="1.03" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Time-1.03-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">c8d4432f7eb9f6ff5a80efd46e1cd84c38d6c6b5397df5ff22ef894497e91357</sum>
        </package>
        <package name="perl-threads" version="2.25" release="457.module_el8.6.0+3181+91434291" epoch="1" arch="s390x" src="perl-threads-2.25-457.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-threads-2.25-457.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">caab48b96be64b8502fedaf6ec636f6bcc011d94eb0c3e8b394af4ec0b586698</sum>
        </package>
        <package name="perl-Devel-SelfStubber" version="1.06" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Devel-SelfStubber-1.06-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">cc31f38e525f969486f4732d712d0cccac43debb5ccf87ad1d004c2564758406</sum>
        </package>
        <package name="perl-Compress-Raw-Bzip2" version="2.096" release="1.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Compress-Raw-Bzip2-2.096-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Compress-Raw-Bzip2-2.096-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">ce463984e8d2dafef0907beaa97968fa715a908cd45dd640780443c01a11b046</sum>
        </package>
        <package name="perl-File-Copy" version="2.34" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-File-Copy-2.34-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">ce8ba8adf9834b571bc46cb0842d6e9d66ad748884a9809e49a2f28b949f2000</sum>
        </package>
        <package name="perl-vars" version="1.05" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-vars-1.05-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">cefb78a68b07487e5044c3bb3eee0d9d14902a651e8c59b6835c37ab57298f0c</sum>
        </package>
        <package name="perl-Search-Dict" version="1.07" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Search-Dict-1.07-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">d3044166d2c9ce9b778c5ba31cbe013aa5ec19f003ff38efb9f8feb918e4bd27</sum>
        </package>
        <package name="perl-Attribute-Handlers" version="1.01" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Attribute-Handlers-1.01-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">d52b883a28d934ee46ac01c1dc50489a2b2b667348c369f120bd0a7e98d4f574</sum>
        </package>
        <package name="perl-libnetcfg" version="5.32.1" release="474.module_el8.10.0+4162+0aac7c4c" epoch="4" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-libnetcfg-5.32.1-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">d59ebc2002c4ee2ce05e7545644db563b773d3c48d1a0cb13c8ecdcb86ccf753</sum>
        </package>
        <package name="perl-SelfLoader" version="1.26" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-SelfLoader-1.26-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">d8a439c7b06a430eb3408c3453b7a47a42340d8b151680d6cc05118cdd0747b4</sum>
        </package>
        <package name="perl-Sys-Hostname" version="1.23" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Sys-Hostname-1.23-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">dd2010cc2b5706f6ae51406c07bea4586591c625aa3ec1b9d62c5a27967f803e</sum>
        </package>
        <package name="perl-locale" version="1.09" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-locale-1.09-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">dde8469c97bb9c71b76bae8c352c984fccd7d05be2fc2884a7b74b8b6a600aed</sum>
        </package>
        <package name="perl-IO" version="1.43" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-IO-1.43-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">dde9dc2e2013f8b89daa03b41d507339dd53537f8a38f0cc7a1c9d832f9b8f03</sum>
        </package>
        <package name="perl-meta-notation" version="5.32.1" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-meta-notation-5.32.1-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">e2a65912757f8ecca3414eb2a1becfb878c3a0760bea99c3eb9fad970ea3e4b0</sum>
        </package>
        <package name="perl-doc" version="5.32.1" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-doc-5.32.1-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">e2ade5959784109dcd726d2c1403da39aa1987be4135744a833716b10a824dce</sum>
        </package>
        <package name="perl-DBM_Filter" version="0.06" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-DBM_Filter-0.06-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">e2c27c6dcaa74cecdcd58d2936e38310214a50d1d2709b72d697d7e7ca91549b</sum>
        </package>
        <package name="perl-Filter" version="1.60" release="1.module_el8.6.0+3181+91434291" epoch="2" arch="s390x" src="perl-Filter-1.60-1.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Filter-1.60-1.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">e3d0da13159278c7de0407ea3901dcbb6d6c91bec1144f9f58b582e04e2a62fb</sum>
        </package>
        <package name="perl-less" version="0.03" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-less-0.03-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">e77a1d89a16829e6e80704f1e068a8335d4906475e89d33c948f913fe5556843</sum>
        </package>
        <package name="perl-DynaLoader" version="1.47" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-DynaLoader-1.47-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">ecc5e634d0ccbbb2a822bdcfcc4ac55ca2c94704a1f241f1cd872582e0cea7be</sum>
        </package>
        <package name="perl-Digest-SHA" version="6.02" release="2.module_el8.6.0+3181+91434291" epoch="1" arch="s390x" src="perl-Digest-SHA-6.02-2.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Digest-SHA-6.02-2.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">ed84ef9abe04145a64d2994030d066ce6669bf548a106bee087caaf6c64b1e42</sum>
        </package>
        <package name="perl-Params-Util" version="1.102" release="2.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Params-Util-1.102-2.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Params-Util-1.102-2.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">f04d7989fc85d22ae36bd4c70dae2c64a2529074fd2a3bd4123b542d6b0b24f8</sum>
        </package>
        <package name="perl-Test" version="1.31" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Test-1.31-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">f1040b2e2ce8191180f86f65ee0656dfdb5f743b1e79bf7a4dff39bc755dd582</sum>
        </package>
        <package name="perl-Locale-Maketext-Simple" version="0.21" release="474.module_el8.10.0+4162+0aac7c4c" epoch="1" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-Locale-Maketext-Simple-0.21-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">f20bde9e5640e88ee75dd4b66d043b538e0608c2f6f3af8c09ff1f17c54030bd</sum>
        </package>
        <package name="perl-Unicode-Normalize" version="1.27" release="458.module_el8.6.0+3181+91434291" epoch="0" arch="s390x" src="perl-Unicode-Normalize-1.27-458.module_el8.6.0+3181+91434291.src.rpm">
          <filename>perl-Unicode-Normalize-1.27-458.module_el8.6.0+3181+91434291.s390x.rpm</filename>
          <sum type="sha256">f3a57fafe97ad72863248270a54c9a6ce1746188ccd854c1bae904b7a90c5be4</sum>
        </package>
        <package name="perl-ph" version="5.32.1" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="s390x" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-ph-5.32.1-474.module_el8.10.0+4162+0aac7c4c.s390x.rpm</filename>
          <sum type="sha256">f58cbeb495cef5e4f32e7d679d5a84bbb2ac1a7ef6cc14d5af75131975e21f36</sum>
        </package>
        <package name="perl-ExtUtils-Miniperl" version="1.09" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-ExtUtils-Miniperl-1.09-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">f7a74c8895da6f75633ef644cee778884b6388d038e709eed0d6f34ddfed95fb</sum>
        </package>
        <package name="perl-File-stat" version="1.09" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-File-stat-1.09-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">fc6ed6eac7c5c362e2e1e8a82f0dccc783e4f54c23cdc366dac9fb68e07e25aa</sum>
        </package>
        <package name="perl-AutoSplit" version="5.74" release="474.module_el8.10.0+4162+0aac7c4c" epoch="0" arch="noarch" src="perl-5.32.1-474.module_el8.10.0+4162+0aac7c4c.src.rpm">
          <filename>perl-AutoSplit-5.74-474.module_el8.10.0+4162+0aac7c4c.noarch.rpm</filename>
          <sum type="sha256">fcc0e1f43bbb02ac839e2cd8c840cd81e015200f5a06ed65f0e8901308ebafbd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8155</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2026-04-14 00:00:00"/>
    <updated date="2026-04-15 07:13:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8155" id="RHSA-2026:8155" type="rhsa" title="RHSA-2026:8155"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1519" id="CVE-2026-1519" type="cve" title="CVE-2026-1519"/>
      <reference href="https://bugzilla.redhat.com/2451305" id="2451305" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8155.html" id="ALSA-2026:8155" type="self" title="ALSA-2026:8155"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="bind9.16-utils" version="9.16.23" release="0.22.el8_10.5" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.5.src.rpm">
          <filename>bind9.16-utils-9.16.23-0.22.el8_10.5.s390x.rpm</filename>
          <sum type="sha256">2b6a27efeb9ab26683029486d37d05bbb4e60a9e88e40eb53c743b45b32df6f9</sum>
        </package>
        <package name="bind9.16-chroot" version="9.16.23" release="0.22.el8_10.5" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.5.src.rpm">
          <filename>bind9.16-chroot-9.16.23-0.22.el8_10.5.s390x.rpm</filename>
          <sum type="sha256">6a0ec6dd60069adf14427a527f106fce86967c96f0676597f580d4cef0cd7b46</sum>
        </package>
        <package name="bind9.16-dnssec-utils" version="9.16.23" release="0.22.el8_10.5" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.5.src.rpm">
          <filename>bind9.16-dnssec-utils-9.16.23-0.22.el8_10.5.s390x.rpm</filename>
          <sum type="sha256">76ed9e927f749a3cbe732a169b68454fbab01049ec615bc42a75837f7ecf7682</sum>
        </package>
        <package name="bind9.16" version="9.16.23" release="0.22.el8_10.5" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.5.src.rpm">
          <filename>bind9.16-9.16.23-0.22.el8_10.5.s390x.rpm</filename>
          <sum type="sha256">be8a7b2132b53e7af9fe09abe8ee60d9fda2986f558ef392e2d05a9857635013</sum>
        </package>
        <package name="bind9.16-license" version="9.16.23" release="0.22.el8_10.5" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.22.el8_10.5.src.rpm">
          <filename>bind9.16-license-9.16.23-0.22.el8_10.5.noarch.rpm</filename>
          <sum type="sha256">befdc0f579ed1cb324c86caeb09eac8f2aaa96594f4e11e6def4a127fb3b8747</sum>
        </package>
        <package name="python3-bind9.16" version="9.16.23" release="0.22.el8_10.5" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.22.el8_10.5.src.rpm">
          <filename>python3-bind9.16-9.16.23-0.22.el8_10.5.noarch.rpm</filename>
          <sum type="sha256">def9783c46484c5787ebf75492120dd88b3695d88b0a9634398204e549e06ab6</sum>
        </package>
        <package name="bind9.16-libs" version="9.16.23" release="0.22.el8_10.5" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.5.src.rpm">
          <filename>bind9.16-libs-9.16.23-0.22.el8_10.5.s390x.rpm</filename>
          <sum type="sha256">e77da28089ecacbd65ec5325ee2e838a763c9c772a80c15bff616b3a111a330c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8317</id>
    <title>Important: squid:4 security update</title>
    <issued date="2026-04-15 00:00:00"/>
    <updated date="2026-04-16 10:06:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>squid:4 security update</summary>
    <description>Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.  

Security Fix(es):  

  * squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling (CVE-2026-33526)
  * Squid: Squid: Denial of Service via crafted ICP traffic (CVE-2026-32748)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8317" id="RHSA-2026:8317" type="rhsa" title="RHSA-2026:8317"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32748" id="CVE-2026-32748" type="cve" title="CVE-2026-32748"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33526" id="CVE-2026-33526" type="cve" title="CVE-2026-33526"/>
      <reference href="https://bugzilla.redhat.com/2451574" id="2451574" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451577" id="2451577" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8317.html" id="ALSA-2026:8317" type="self" title="ALSA-2026:8317"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="squid" stream="4" version="8100020260415155047" context="9edba152" arch="s390x"/>
        <package name="libecap" version="1.0.1" release="2.module_el8.6.0+3048+383bc947" epoch="0" arch="s390x" src="libecap-1.0.1-2.module_el8.6.0+3048+383bc947.src.rpm">
          <filename>libecap-1.0.1-2.module_el8.6.0+3048+383bc947.s390x.rpm</filename>
          <sum type="sha256">6f8eb1f500a9dca1949f5f05aedf6b97764817d9f17284be3612eec04618f4e1</sum>
        </package>
        <package name="libecap-devel" version="1.0.1" release="2.module_el8.6.0+3048+383bc947" epoch="0" arch="s390x" src="libecap-1.0.1-2.module_el8.6.0+3048+383bc947.src.rpm">
          <filename>libecap-devel-1.0.1-2.module_el8.6.0+3048+383bc947.s390x.rpm</filename>
          <sum type="sha256">96f15e87a90682f6ec87bc4ed7c8edae439f414cd0382f1865dcf76ac3a7807d</sum>
        </package>
        <package name="squid" version="4.15" release="10.module_el8.10.0+4163+e77fcdac.11" epoch="7" arch="s390x" src="squid-4.15-10.module_el8.10.0+4163+e77fcdac.11.src.rpm">
          <filename>squid-4.15-10.module_el8.10.0+4163+e77fcdac.11.s390x.rpm</filename>
          <sum type="sha256">b1824b3e95bad9a8587cab3b076d8a5c563847781dfc74bfd3e8c7e8e2408b7e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8339</id>
    <title>Important: nodejs:20 security update</title>
    <issued date="2026-04-15 00:00:00"/>
    <updated date="2026-04-16 10:12:34"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nodejs:20 security update</summary>
    <description>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   

Security Fix(es):  

  * minimatch: minimatch: Denial of Service via specially crafted glob patterns (CVE-2026-26996)
  * minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions (CVE-2026-27904)
  * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135)
  * Node.js: Node.js: Denial of Service due to crafted HTTP `__proto__` header (CVE-2026-21710)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8339" id="RHSA-2026:8339" type="rhsa" title="RHSA-2026:8339"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21710" id="CVE-2026-21710" type="cve" title="CVE-2026-21710"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26996" id="CVE-2026-26996" type="cve" title="CVE-2026-26996"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27135" id="CVE-2026-27135" type="cve" title="CVE-2026-27135"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27904" id="CVE-2026-27904" type="cve" title="CVE-2026-27904"/>
      <reference href="https://bugzilla.redhat.com/2441268" id="2441268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442922" id="2442922" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448754" id="2448754" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453151" id="2453151" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8339.html" id="ALSA-2026:8339" type="self" title="ALSA-2026:8339"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <module name="nodejs" stream="20" version="8100020260415210249" context="9edba152" arch="s390x"/>
        <package name="nodejs" version="20.20.2" release="1.module_el8.10.0+4165+3f200bda" epoch="1" arch="s390x" src="nodejs-20.20.2-1.module_el8.10.0+4165+3f200bda.src.rpm">
          <filename>nodejs-20.20.2-1.module_el8.10.0+4165+3f200bda.s390x.rpm</filename>
          <sum type="sha256">23969c081786c2b87f421f198c7fba40882942d91afc45c4c2ff039f1283e84e</sum>
        </package>
        <package name="nodejs-nodemon" version="3.0.1" release="1.module_el8.10.0+3982+85c136aa" epoch="0" arch="noarch" src="nodejs-nodemon-3.0.1-1.module_el8.10.0+3982+85c136aa.src.rpm">
          <filename>nodejs-nodemon-3.0.1-1.module_el8.10.0+3982+85c136aa.noarch.rpm</filename>
          <sum type="sha256">2a3ac075981f56758aac0aa08cc55d71f2ca6610e6bc965f306dd6b9a8db442a</sum>
        </package>
        <package name="nodejs-docs" version="20.20.2" release="1.module_el8.10.0+4165+3f200bda" epoch="1" arch="noarch" src="nodejs-20.20.2-1.module_el8.10.0+4165+3f200bda.src.rpm">
          <filename>nodejs-docs-20.20.2-1.module_el8.10.0+4165+3f200bda.noarch.rpm</filename>
          <sum type="sha256">3d527c12c659faec2445770dae6cb5206b15893414a79392e8eec91d050eb42b</sum>
        </package>
        <package name="npm" version="10.8.2" release="1.20.20.2.1.module_el8.10.0+4165+3f200bda" epoch="1" arch="s390x" src="nodejs-20.20.2-1.module_el8.10.0+4165+3f200bda.src.rpm">
          <filename>npm-10.8.2-1.20.20.2.1.module_el8.10.0+4165+3f200bda.s390x.rpm</filename>
          <sum type="sha256">5812a65dc645d2018b77a2dd735c9c9d061dfbd31e7df2b68fad6fc67026cd67</sum>
        </package>
        <package name="nodejs-packaging-bundler" version="2021.06" release="6.module_el8.10.0+4165+3f200bda" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-6.module_el8.10.0+4165+3f200bda.src.rpm">
          <filename>nodejs-packaging-bundler-2021.06-6.module_el8.10.0+4165+3f200bda.noarch.rpm</filename>
          <sum type="sha256">6224e1814548e23ea087ce03ada89f7fb585bf019b36c21aa60fa1ef29b06cfa</sum>
        </package>
        <package name="nodejs-packaging" version="2021.06" release="6.module_el8.10.0+4165+3f200bda" epoch="0" arch="noarch" src="nodejs-packaging-2021.06-6.module_el8.10.0+4165+3f200bda.src.rpm">
          <filename>nodejs-packaging-2021.06-6.module_el8.10.0+4165+3f200bda.noarch.rpm</filename>
          <sum type="sha256">86514cfa3b98d8f30755b096872edda109ebe9a1daf1a5658ee580b4f6330d60</sum>
        </package>
        <package name="nodejs-devel" version="20.20.2" release="1.module_el8.10.0+4165+3f200bda" epoch="1" arch="s390x" src="nodejs-20.20.2-1.module_el8.10.0+4165+3f200bda.src.rpm">
          <filename>nodejs-devel-20.20.2-1.module_el8.10.0+4165+3f200bda.s390x.rpm</filename>
          <sum type="sha256">a0942a2804cb13a8cf2cd4d6e203ee0f6c449d61863e7aad665eadb7e8f38364</sum>
        </package>
        <package name="nodejs-full-i18n" version="20.20.2" release="1.module_el8.10.0+4165+3f200bda" epoch="1" arch="s390x" src="nodejs-20.20.2-1.module_el8.10.0+4165+3f200bda.src.rpm">
          <filename>nodejs-full-i18n-20.20.2-1.module_el8.10.0+4165+3f200bda.s390x.rpm</filename>
          <sum type="sha256">b8505eed162033a762fb586869e9e638772edf86eb117db4d7a455c74168f971</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8352</id>
    <title>Important: bind security update</title>
    <issued date="2026-04-15 00:00:00"/>
    <updated date="2026-04-16 10:03:25"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8352" id="RHSA-2026:8352" type="rhsa" title="RHSA-2026:8352"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1519" id="CVE-2026-1519" type="cve" title="CVE-2026-1519"/>
      <reference href="https://bugzilla.redhat.com/2451305" id="2451305" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8352.html" id="ALSA-2026:8352" type="self" title="ALSA-2026:8352"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="bind-libs" version="9.11.36" release="16.el8_10.7" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.7.src.rpm">
          <filename>bind-libs-9.11.36-16.el8_10.7.s390x.rpm</filename>
          <sum type="sha256">04aeccf6c5d539b7d1147f3f29ec82d151390affb0933b4d292e74e5c634038e</sum>
        </package>
        <package name="bind-pkcs11-devel" version="9.11.36" release="16.el8_10.7" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.7.src.rpm">
          <filename>bind-pkcs11-devel-9.11.36-16.el8_10.7.s390x.rpm</filename>
          <sum type="sha256">0cb6184764ff43a8e19eeacfab95fbd9ceafae7f3d480b8c3ba6028fc9dd43a3</sum>
        </package>
        <package name="python3-bind" version="9.11.36" release="16.el8_10.7" epoch="32" arch="noarch" src="bind-9.11.36-16.el8_10.7.src.rpm">
          <filename>python3-bind-9.11.36-16.el8_10.7.noarch.rpm</filename>
          <sum type="sha256">1525399a25d71cbd121b072e93683124dc1ba4923fc40f5815bc8bb80d683648</sum>
        </package>
        <package name="bind-pkcs11" version="9.11.36" release="16.el8_10.7" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.7.src.rpm">
          <filename>bind-pkcs11-9.11.36-16.el8_10.7.s390x.rpm</filename>
          <sum type="sha256">222c2f29fce9e3bbf2b9208e624b35fee9857ccf56853d9f6cdcd285fbfcc235</sum>
        </package>
        <package name="bind-devel" version="9.11.36" release="16.el8_10.7" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.7.src.rpm">
          <filename>bind-devel-9.11.36-16.el8_10.7.s390x.rpm</filename>
          <sum type="sha256">26e1706a61c0e07f75bdb459aef54cbbebc8f3a396ea7b72de272e7486c7eeb8</sum>
        </package>
        <package name="bind-utils" version="9.11.36" release="16.el8_10.7" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.7.src.rpm">
          <filename>bind-utils-9.11.36-16.el8_10.7.s390x.rpm</filename>
          <sum type="sha256">3ef596b75ede1275c7c1bfabdb34dbce19e7e45a7eb35d9a714ac58991ba181a</sum>
        </package>
        <package name="bind-sdb-chroot" version="9.11.36" release="16.el8_10.7" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.7.src.rpm">
          <filename>bind-sdb-chroot-9.11.36-16.el8_10.7.s390x.rpm</filename>
          <sum type="sha256">7006f09958e8bd30f0b32f46d4ede399866bf8b26faa0d4f15ee602fadd4c3d3</sum>
        </package>
        <package name="bind-pkcs11-utils" version="9.11.36" release="16.el8_10.7" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.7.src.rpm">
          <filename>bind-pkcs11-utils-9.11.36-16.el8_10.7.s390x.rpm</filename>
          <sum type="sha256">74304a55950a58f14ce2e51e4291beea3b2dcf4943e5c384ebeb24b122756844</sum>
        </package>
        <package name="bind-pkcs11-libs" version="9.11.36" release="16.el8_10.7" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.7.src.rpm">
          <filename>bind-pkcs11-libs-9.11.36-16.el8_10.7.s390x.rpm</filename>
          <sum type="sha256">7dc1cb79988eb91cd06350308f16c0ebe2a508d427fefff1c9c38adfdcfaf7b7</sum>
        </package>
        <package name="bind" version="9.11.36" release="16.el8_10.7" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.7.src.rpm">
          <filename>bind-9.11.36-16.el8_10.7.s390x.rpm</filename>
          <sum type="sha256">84ce260450dffa762efe7be6605d7316442b7237d685053f81eba4537dab94c5</sum>
        </package>
        <package name="bind-sdb" version="9.11.36" release="16.el8_10.7" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.7.src.rpm">
          <filename>bind-sdb-9.11.36-16.el8_10.7.s390x.rpm</filename>
          <sum type="sha256">90ce5937e9b0848457a737ea6824718380fe15be053b004b9cc772c38565d3c6</sum>
        </package>
        <package name="bind-libs-lite" version="9.11.36" release="16.el8_10.7" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.7.src.rpm">
          <filename>bind-libs-lite-9.11.36-16.el8_10.7.s390x.rpm</filename>
          <sum type="sha256">c1af6f38e424cb47e79d8c370591df573514f893d44f6aa45eaef595a0355b07</sum>
        </package>
        <package name="bind-chroot" version="9.11.36" release="16.el8_10.7" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.7.src.rpm">
          <filename>bind-chroot-9.11.36-16.el8_10.7.s390x.rpm</filename>
          <sum type="sha256">dda08d26567c8981a08119f08e10ee7a09ec6eb346fffb6402c220c8b0554800</sum>
        </package>
        <package name="bind-lite-devel" version="9.11.36" release="16.el8_10.7" epoch="32" arch="s390x" src="bind-9.11.36-16.el8_10.7.src.rpm">
          <filename>bind-lite-devel-9.11.36-16.el8_10.7.s390x.rpm</filename>
          <sum type="sha256">e2169ace63d42f83bc866affc820ffa99dd7a8aeb23bb277314b808541c19ad3</sum>
        </package>
        <package name="bind-license" version="9.11.36" release="16.el8_10.7" epoch="32" arch="noarch" src="bind-9.11.36-16.el8_10.7.src.rpm">
          <filename>bind-license-9.11.36-16.el8_10.7.noarch.rpm</filename>
          <sum type="sha256">fccaa4143cf7cb9a37a8e45f5cee98eee83e76daa29be914b342e9900d72ee19</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8456</id>
    <title>Important: osbuild-composer security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-24 10:09:11"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>osbuild-composer security update</summary>
    <description>A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients.  

Security Fix(es):  

  * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8456" id="RHSA-2026:8456" type="rhsa" title="RHSA-2026:8456"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25679" id="CVE-2026-25679" type="cve" title="CVE-2026-25679"/>
      <reference href="https://bugzilla.redhat.com/2445356" id="2445356" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8456.html" id="ALSA-2026:8456" type="self" title="ALSA-2026:8456"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="osbuild-composer-core" version="101.4" release="5.el8_10.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101.4-5.el8_10.alma.1.src.rpm">
          <filename>osbuild-composer-core-101.4-5.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">4f7d8bad5b66d5d712635b172b54e1021acd08c30ccc39da96443663645bcf64</sum>
        </package>
        <package name="osbuild-composer-worker" version="101.4" release="5.el8_10.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101.4-5.el8_10.alma.1.src.rpm">
          <filename>osbuild-composer-worker-101.4-5.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">69f2a6b09c54fa1e4f696d2eb1ef06d8a58c69da4f52658b3d6b653f1de9ca87</sum>
        </package>
        <package name="osbuild-composer" version="101.4" release="5.el8_10.alma.1" epoch="0" arch="s390x" src="osbuild-composer-101.4-5.el8_10.alma.1.src.rpm">
          <filename>osbuild-composer-101.4-5.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">f089c1552cf8bab0dc83e84801d4b243753dfa362ab7c1cbfb916bcdc2b23d60</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8468</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-20 08:45:13"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK SDK_VERSION and .NET Runtime RUNTIME_VERSION.Security Fix(es):  

  * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
  * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
  * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
  * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8468" id="RHSA-2026:8468" type="rhsa" title="RHSA-2026:8468"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26171" id="CVE-2026-26171" type="cve" title="CVE-2026-26171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32178" id="CVE-2026-32178" type="cve" title="CVE-2026-32178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32203" id="CVE-2026-32203" type="cve" title="CVE-2026-32203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33116" id="CVE-2026-33116" type="cve" title="CVE-2026-33116"/>
      <reference href="https://bugzilla.redhat.com/2457739" id="2457739" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457740" id="2457740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457741" id="2457741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457781" id="2457781" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8468.html" id="ALSA-2026:8468" type="self" title="ALSA-2026:8468"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="aspnetcore-targeting-pack-8.0" version="8.0.26" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-8.0-8.0.26-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">05bb4d62bfa8e65eb840cacfb8b913452ca5f010a7f19110459a631e7cba74f8</sum>
        </package>
        <package name="dotnet-runtime-8.0" version="8.0.26" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el8_10.src.rpm">
          <filename>dotnet-runtime-8.0-8.0.26-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">18d602bded5b1aab73c5c8548d8b040d563c6fcb3545c18852db35ff91a83662</sum>
        </package>
        <package name="dotnet-apphost-pack-8.0" version="8.0.26" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-8.0-8.0.26-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">26977fe40a9d49926b252041d594b33d9a3e46ec440bf9b8fd4360af6fcc69d0</sum>
        </package>
        <package name="dotnet-targeting-pack-8.0" version="8.0.26" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-8.0-8.0.26-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">4b5565de60134ae3de5eae6a9f5c8c8733b4db1eb15326eddcc8be2fd1932678</sum>
        </package>
        <package name="dotnet-templates-8.0" version="8.0.126" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el8_10.src.rpm">
          <filename>dotnet-templates-8.0-8.0.126-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5d412c4fa5c11fbdf96d17c843dc4679840541654c55f5cf0f20c84c055b056e</sum>
        </package>
        <package name="dotnet-sdk-dbg-8.0" version="8.0.126" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-8.0-8.0.126-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">91f056b5f26d53ac4dde900a26c9ee2ccfed1493877aa0512ff4c844d9cb17dc</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-8.0" version="8.0.26" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-8.0-8.0.26-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">abc5ec81af50a03a4214f8ae0d2077104cfc3b066bc7084d2f9dc0a2e5a556d9</sum>
        </package>
        <package name="aspnetcore-runtime-8.0" version="8.0.26" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-8.0-8.0.26-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b1a6720821b5ced0cf79b5358a469bfcb776169589a2773283949519599d9aa8</sum>
        </package>
        <package name="dotnet-runtime-dbg-8.0" version="8.0.26" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-8.0-8.0.26-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c56e1c00ad9ed5d541ef874f257a2b2bde416b34bf51857bc62bc5024a71e142</sum>
        </package>
        <package name="dotnet-sdk-8.0" version="8.0.126" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-8.0.126-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">e042532ed530db0d34e6efca0e1c03882683239fb6d472ccbe2caf9908337ccb</sum>
        </package>
        <package name="dotnet-hostfxr-8.0" version="8.0.26" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-8.0-8.0.26-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">fc1688902472fbf1d22d2a7931271b89536f3ad55e9fc626d07090fce64d369f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8473</id>
    <title>Important: .NET 10.0 security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-20 08:43:11"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.106 and .NET Runtime 10.0.6.Security Fix(es):  

  * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
  * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
  * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
  * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8473" id="RHSA-2026:8473" type="rhsa" title="RHSA-2026:8473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26171" id="CVE-2026-26171" type="cve" title="CVE-2026-26171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32178" id="CVE-2026-32178" type="cve" title="CVE-2026-32178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32203" id="CVE-2026-32203" type="cve" title="CVE-2026-32203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33116" id="CVE-2026-33116" type="cve" title="CVE-2026-33116"/>
      <reference href="https://bugzilla.redhat.com/2457739" id="2457739" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457740" id="2457740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457741" id="2457741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457781" id="2457781" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8473.html" id="ALSA-2026:8473" type="self" title="ALSA-2026:8473"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="dotnet-templates-10.0" version="10.0.106" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>dotnet-templates-10.0-10.0.106-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">37e7d2f98c56c53db37cbe5433262fcd77da7953c709172bfabe2d69f7167b6e</sum>
        </package>
        <package name="dotnet-runtime-10.0" version="10.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>dotnet-runtime-10.0-10.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">4cbf3b9131612a46be17b1dcf67062137735d58da7c719a80baa8d211e10bf92</sum>
        </package>
        <package name="dotnet-targeting-pack-10.0" version="10.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-10.0-10.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">574932acbfb57ec3529175f0f41f5c270157a9af3d2112534f7774704aa27a6e</sum>
        </package>
        <package name="aspnetcore-runtime-10.0" version="10.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-10.0-10.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">6feb5a22d9b5b289aec20cecda4ff0d2b751cf776b8863884179566a3b2ffbaf</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-10.0" version="10.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-10.0-10.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">747971fff0d55742d85a725d7e64c1374c8d93ee37072d8162eb054df6792439</sum>
        </package>
        <package name="dotnet-hostfxr-10.0" version="10.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-10.0-10.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">76b20f26bfda261b2cb18db8a746019b0254886178fcdefeb69e785f8bdc4bb6</sum>
        </package>
        <package name="dotnet-runtime-dbg-10.0" version="10.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-10.0-10.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">8e67515aff0723c09318fa7a156087982a0dd1a08f3002828c92cbe37db08e2d</sum>
        </package>
        <package name="dotnet-apphost-pack-10.0" version="10.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-10.0-10.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">99f1efa292eeed565839798d426d2f0b1449e3185df9fdddc94f8bdb7d2d26bc</sum>
        </package>
        <package name="aspnetcore-targeting-pack-10.0" version="10.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-10.0-10.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">9f39652b06ebfc342f7ec833a0005c2b80f810ae3f949a98a341d40a616013a3</sum>
        </package>
        <package name="dotnet-sdk-dbg-10.0" version="10.0.106" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-10.0-10.0.106-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a1a31244c126e1d98520e225a11ed7bc6b0d4b727a21c62694faf6ae2aa853ac</sum>
        </package>
        <package name="dotnet-host" version="10.0.6" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>dotnet-host-10.0.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a2db33a4f5638242e366780ed6755186bd134a8a1258b23fd87cb46d8b13b521</sum>
        </package>
        <package name="dotnet" version="10.0.106" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>dotnet-10.0.106-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b17be6dd59a71da3e3b954a78e3fbddf84c32ece97af3264a251f6fef243b70d</sum>
        </package>
        <package name="dotnet-sdk-10.0" version="10.0.106" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>dotnet-sdk-10.0-10.0.106-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">deb5c00d7024219843a2d20ef29050a7d740501f16fe805a394e767dfebdcd83</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8475</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-20 08:40:30"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.116 and .NET Runtime 9.0.15.Security Fix(es):  

  * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
  * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
  * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
  * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8475" id="RHSA-2026:8475" type="rhsa" title="RHSA-2026:8475"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26171" id="CVE-2026-26171" type="cve" title="CVE-2026-26171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32178" id="CVE-2026-32178" type="cve" title="CVE-2026-32178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32203" id="CVE-2026-32203" type="cve" title="CVE-2026-32203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33116" id="CVE-2026-33116" type="cve" title="CVE-2026-33116"/>
      <reference href="https://bugzilla.redhat.com/2457739" id="2457739" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457740" id="2457740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457741" id="2457741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457781" id="2457781" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8475.html" id="ALSA-2026:8475" type="self" title="ALSA-2026:8475"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="dotnet-templates-9.0" version="9.0.116" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.116-1.el8_10.src.rpm">
          <filename>dotnet-templates-9.0-9.0.116-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">09855f594b234ac368df88a34412726989a28324cabec69dd573236a5e04ed44</sum>
        </package>
        <package name="dotnet-targeting-pack-9.0" version="9.0.15" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.116-1.el8_10.src.rpm">
          <filename>dotnet-targeting-pack-9.0-9.0.15-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">26d8afa9461dcbd480fa16e1684b650ae860243aade0ba969bc6efffae70099d</sum>
        </package>
        <package name="dotnet-sdk-9.0" version="9.0.116" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.116-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-9.0.116-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">3b8a52f64bd8a8c4c7be226d0e7779b67085edcbc84c13c30801c1c1e8e62bd6</sum>
        </package>
        <package name="dotnet-runtime-9.0" version="9.0.15" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.116-1.el8_10.src.rpm">
          <filename>dotnet-runtime-9.0-9.0.15-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">5296768c1921a637c095b0328bc25dd840e742b6e266c506dc018dcfcf1b3f3c</sum>
        </package>
        <package name="aspnetcore-targeting-pack-9.0" version="9.0.15" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.116-1.el8_10.src.rpm">
          <filename>aspnetcore-targeting-pack-9.0-9.0.15-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">55188dd5b6263ccc9d54d29d750751cf2ad3bd2c06e8d54243b8a126230cedc4</sum>
        </package>
        <package name="dotnet-sdk-dbg-9.0" version="9.0.116" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.116-1.el8_10.src.rpm">
          <filename>dotnet-sdk-dbg-9.0-9.0.116-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">57927e4cc86e262b941a39ce559e820297b55b82f7ce5a5ca9dee385510f5c6f</sum>
        </package>
        <package name="aspnetcore-runtime-dbg-9.0" version="9.0.15" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.116-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-dbg-9.0-9.0.15-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">732421daa8132e46488ffa258263cb9854b9a0582806489a280257762672aee5</sum>
        </package>
        <package name="dotnet-runtime-dbg-9.0" version="9.0.15" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.116-1.el8_10.src.rpm">
          <filename>dotnet-runtime-dbg-9.0-9.0.15-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">7327c6bd65d695830505fe0da6d4942e927c3ca6546b11fd65333ed1fc3cee6e</sum>
        </package>
        <package name="dotnet-hostfxr-9.0" version="9.0.15" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.116-1.el8_10.src.rpm">
          <filename>dotnet-hostfxr-9.0-9.0.15-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a7f642707949735e09d15bdd548aaa1296c44c0b93fd454eb5df57197b08458c</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="9.0.116" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.116-1.el8_10.src.rpm">
          <filename>netstandard-targeting-pack-2.1-9.0.116-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">eda01c99e46827a6a28801aee265a7fe320e2b1b6c322b029ad93cdee8ad366f</sum>
        </package>
        <package name="aspnetcore-runtime-9.0" version="9.0.15" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.116-1.el8_10.src.rpm">
          <filename>aspnetcore-runtime-9.0-9.0.15-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">fd759c71e72954ba1adae15c0ac6cf68d3a10f32d5e136657fe64a9da9b3643c</sum>
        </package>
        <package name="dotnet-apphost-pack-9.0" version="9.0.15" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.116-1.el8_10.src.rpm">
          <filename>dotnet-apphost-pack-9.0-9.0.15-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">fea67b4f9a519f0d4dbd2ca3f0c367567750e97d48ea6da1e538456f47237328</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8534</id>
    <title>Important: libarchive security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-20 08:36:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libarchive security update</summary>
    <description>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.  

Security Fix(es):  

  * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing (CVE-2026-4424)
  * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing (CVE-2026-5121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8534" id="RHSA-2026:8534" type="rhsa" title="RHSA-2026:8534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4424" id="CVE-2026-4424" type="cve" title="CVE-2026-4424"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5121" id="CVE-2026-5121" type="cve" title="CVE-2026-5121"/>
      <reference href="https://bugzilla.redhat.com/2449006" id="2449006" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452945" id="2452945" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8534.html" id="ALSA-2026:8534" type="self" title="ALSA-2026:8534"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libarchive-devel" version="3.3.3" release="7.el8_10" epoch="0" arch="s390x" src="libarchive-3.3.3-7.el8_10.src.rpm">
          <filename>libarchive-devel-3.3.3-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">6f7aa68b5ec426dd44a9de559a1e27afbee8290606a3ed53305daa23610839a0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8861</id>
    <title>Important: giflib security update</title>
    <issued date="2026-04-20 00:00:00"/>
    <updated date="2026-04-30 07:36:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>giflib security update</summary>
    <description>giflib is a library for reading and writing gif images.  

Security Fix(es):  

  * giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8861" id="RHSA-2026:8861" type="rhsa" title="RHSA-2026:8861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23868" id="CVE-2026-23868" type="cve" title="CVE-2026-23868"/>
      <reference href="https://bugzilla.redhat.com/2446207" id="2446207" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8861.html" id="ALSA-2026:8861" type="self" title="ALSA-2026:8861"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="giflib" version="5.1.4" release="4.el8_10" epoch="0" arch="s390x" src="giflib-5.1.4-4.el8_10.src.rpm">
          <filename>giflib-5.1.4-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">9eb1a71d09568edb3fe9912d9f70ab60768e204ddb3e12fd5a866431c7bc2d93</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8863</id>
    <title>Important: OpenEXR security update</title>
    <issued date="2026-04-20 00:00:00"/>
    <updated date="2026-04-30 07:37:50"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>OpenEXR security update</summary>
    <description>OpenEXR is a high dynamic-range (HDR) image file format developed by Industrial Light &amp; Magic for use in computer imaging applications. This package contains libraries and sample applications for handling the format.   

Security Fix(es):  

  * openexr: OpenEXR: Arbitrary code execution via integer overflow in EXR file processing (CVE-2026-27622)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8863" id="RHSA-2026:8863" type="rhsa" title="RHSA-2026:8863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27622" id="CVE-2026-27622" type="cve" title="CVE-2026-27622"/>
      <reference href="https://bugzilla.redhat.com/2444251" id="2444251" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8863.html" id="ALSA-2026:8863" type="self" title="ALSA-2026:8863"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="OpenEXR-libs" version="2.2.0" release="12.el8_10.1" epoch="0" arch="s390x" src="OpenEXR-2.2.0-12.el8_10.1.src.rpm">
          <filename>OpenEXR-libs-2.2.0-12.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">6e881998b5b62b9cd88a1e9baf7e3850a28e6b0da2d0a24f98abb60e6d9161a9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8945</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-04-20 00:00:00"/>
    <updated date="2026-04-20 12:43:13"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data (CVE-2026-33984)
  * FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages (CVE-2026-33983)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8945" id="RHSA-2026:8945" type="rhsa" title="RHSA-2026:8945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33983" id="CVE-2026-33983" type="cve" title="CVE-2026-33983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33984" id="CVE-2026-33984" type="cve" title="CVE-2026-33984"/>
      <reference href="https://bugzilla.redhat.com/2453219" id="2453219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453220" id="2453220" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8945.html" id="ALSA-2026:8945" type="self" title="ALSA-2026:8945"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="libwinpr" version="2.11.7" release="7.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-7.el8_10.src.rpm">
          <filename>libwinpr-2.11.7-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">2a0df94fd2683f3cf4474332812b1a4a7544b4d2f65866b8e83462cea02cfc69</sum>
        </package>
        <package name="libwinpr-devel" version="2.11.7" release="7.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-7.el8_10.src.rpm">
          <filename>libwinpr-devel-2.11.7-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">6c2fe8e737d50264eb5bed765f1cee598ff7d5f5943db81045c30506df8947dd</sum>
        </package>
        <package name="freerdp-libs" version="2.11.7" release="7.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-7.el8_10.src.rpm">
          <filename>freerdp-libs-2.11.7-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">7625973f49fa76283ff9306e5ed8d73192412dbabdfc8bd39f7197f2662a4e0a</sum>
        </package>
        <package name="freerdp" version="2.11.7" release="7.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-7.el8_10.src.rpm">
          <filename>freerdp-2.11.7-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">7eb75e7a8dc51d0dcb5a1654d4723967417044c7eea7d07e36f39a9301e71eec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9345</id>
    <title>Important: thunderbird security update</title>
    <issued date="2026-04-21 00:00:00"/>
    <updated date="2026-04-22 07:34:30"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)
  * libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636)
  * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5734)
  * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5731)
  * firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics: Text component (CVE-2026-5732)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9345" id="RHSA-2026:9345" type="rhsa" title="RHSA-2026:9345"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33416" id="CVE-2026-33416" type="cve" title="CVE-2026-33416"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33636" id="CVE-2026-33636" type="cve" title="CVE-2026-33636"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5731" id="CVE-2026-5731" type="cve" title="CVE-2026-5731"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5732" id="CVE-2026-5732" type="cve" title="CVE-2026-5732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5734" id="CVE-2026-5734" type="cve" title="CVE-2026-5734"/>
      <reference href="https://bugzilla.redhat.com/2451805" id="2451805" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451819" id="2451819" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2455897" id="2455897" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2455901" id="2455901" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2455908" id="2455908" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-9345.html" id="ALSA-2026:9345" type="self" title="ALSA-2026:9345"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="thunderbird" version="140.9.1" release="1.el8_10.alma.1" epoch="0" arch="s390x" src="thunderbird-140.9.1-1.el8_10.alma.1.src.rpm">
          <filename>thunderbird-140.9.1-1.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">35435112f23daace5fee8d95d9384a3c3fb285294cdf28cfd8a8232be4d3002c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9683</id>
    <title>Important: java-1.8.0-openjdk security update</title>
    <issued date="2026-04-23 00:00:00"/>
    <updated date="2026-04-30 07:32:51"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance crypto algorithm support (CVE-2026-22007)
  * JDK: Improve Kerberos credentialing (CVE-2026-22013)
  * JDK: Enhance Path Factories Redux (CVE-2026-22016)
  * JDK: Enhance Zip file reading (CVE-2026-22018)
  * JDK: Enhance certificate chain validation (CVE-2026-22021)
  * JDK: Updating FreeType 2.14.1 (CVE-2026-23865)
  * JDK: Enhance key generation (CVE-2026-34268)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9683" id="RHSA-2026:9683" type="rhsa" title="RHSA-2026:9683"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22007" id="CVE-2026-22007" type="cve" title="CVE-2026-22007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22013" id="CVE-2026-22013" type="cve" title="CVE-2026-22013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22016" id="CVE-2026-22016" type="cve" title="CVE-2026-22016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22018" id="CVE-2026-22018" type="cve" title="CVE-2026-22018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22021" id="CVE-2026-22021" type="cve" title="CVE-2026-22021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23865" id="CVE-2026-23865" type="cve" title="CVE-2026-23865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34268" id="CVE-2026-34268" type="cve" title="CVE-2026-34268"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-9683.html" id="ALSA-2026:9683" type="self" title="ALSA-2026:9683"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.492.b09" release="1.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.492.b09-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.492.b09-1.el8.s390x.rpm</filename>
          <sum type="sha256">2fe8e4970e652729fb25428733062ce74a5191dc28cfbb120090ae33caac06e3</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.492.b09" release="1.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.492.b09-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.492.b09-1.el8.s390x.rpm</filename>
          <sum type="sha256">3f41fb688c3d89498b0ffb4d528de557135617d1fa5999bbe4e013942eee123e</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.492.b09" release="1.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.492.b09-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.492.b09-1.el8.s390x.rpm</filename>
          <sum type="sha256">4f81bf2dc13e8aba24428208a66c656e8adfb9739e23e4dfd131276d6154888e</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.492.b09" release="1.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.492.b09-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.492.b09-1.el8.s390x.rpm</filename>
          <sum type="sha256">847ab2738ab3e6b481c0e91fa39c68e31c11743c42e6ddd8bed70dd1102bab9a</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.492.b09" release="1.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.492.b09-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.492.b09-1.el8.noarch.rpm</filename>
          <sum type="sha256">c1a19224405cbcb5f396189e869e97fefed8311ef9bcd54de18484b2c8a13762</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.492.b09" release="1.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.492.b09-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.492.b09-1.el8.s390x.rpm</filename>
          <sum type="sha256">c36323b24d0b2adc5093b59bfd0b521e8a8b57bdc44d27bab484e9f119ff81ac</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.492.b09" release="1.el8" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.492.b09-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.492.b09-1.el8.noarch.rpm</filename>
          <sum type="sha256">ccb33253376a8217d7d9d90d1859896974e340fb24a4cd319f248275b802e923</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility" version="1.8.0.492.b09" release="1.el8" epoch="1" arch="s390x" src="java-1.8.0-openjdk-1.8.0.492.b09-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-1.8.0.492.b09-1.el8.s390x.rpm</filename>
          <sum type="sha256">dcc48e37a15c301134eee2256d5f41847563d2b58991cda9e6b90722597fe415</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9686</id>
    <title>Important: java-17-openjdk security update</title>
    <issued date="2026-04-23 00:00:00"/>
    <updated date="2026-04-28 13:20:40"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance crypto algorithm support (CVE-2026-22007)
  * JDK: Improve Kerberos credentialing (CVE-2026-22013)
  * JDK: Enhance Path Factories Redux (CVE-2026-22016)
  * JDK: Enhance Zip file reading (CVE-2026-22018)
  * JDK: Enhance certificate chain validation (CVE-2026-22021)
  * JDK: Updating FreeType 2.14.1 (CVE-2026-23865)
  * JDK: Enhance TLS connection handling (CVE-2026-34282)
  * JDK: Enhance key generation (CVE-2026-34268)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9686" id="RHSA-2026:9686" type="rhsa" title="RHSA-2026:9686"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22007" id="CVE-2026-22007" type="cve" title="CVE-2026-22007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22013" id="CVE-2026-22013" type="cve" title="CVE-2026-22013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22016" id="CVE-2026-22016" type="cve" title="CVE-2026-22016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22018" id="CVE-2026-22018" type="cve" title="CVE-2026-22018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22021" id="CVE-2026-22021" type="cve" title="CVE-2026-22021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23865" id="CVE-2026-23865" type="cve" title="CVE-2026-23865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34268" id="CVE-2026-34268" type="cve" title="CVE-2026-34268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34282" id="CVE-2026-34282" type="cve" title="CVE-2026-34282"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-9686.html" id="ALSA-2026:9686" type="self" title="ALSA-2026:9686"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-17-openjdk-headless" version="17.0.19.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-headless-17.0.19.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">051ec62a29d87238cb872102871fce06bec37e79b0d649e2a9183d7b6c309daa</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.19.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.19.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">1dcd4edc56ed8f8b38c512354b0c9826717a6db6ac2ef2d94b3e563fe898a40b</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.19.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-src-17.0.19.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">23058c31b4737d41c92611771b17830c94562a91f489ee172ceb638e522125f1</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.19.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.19.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">24e929ce578d9a758edad6d1bcc4d576c7dbed239ecab2da3fa195a6d59c9d51</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.19.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-devel-17.0.19.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">36bfc90519a1e29b7ed70a18e019d9fdf7247d2cf097ab59b7991b831f910211</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.19.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-17.0.19.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">5b574ef89f56b2d25cd0d7e1833774fca1db8b25660af4bfc0dc0183a7e7b322</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.19.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.19.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">5e9f6944df258a6cadff629c0512174af4ad26602212d94c105bfa132a74a4ca</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.19.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.19.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">6f5d0a49dda1f132b9c80da7a1a693e8eda8d66c57d4cee35d9d3bc47b0a77f9</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.19.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-demo-17.0.19.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">ad9f717a3e1f9122b8afab37c13bedda2faa44449ca4431273a98f51caa91cfb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9689</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2026-04-23 00:00:00"/>
    <updated date="2026-04-30 07:26:21"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance crypto algorithm support (CVE-2026-22007)
  * JDK: Improve Kerberos credentialing (CVE-2026-22013)
  * JDK: Enhance Path Factories Redux (CVE-2026-22016)
  * JDK: Enhance Zip file reading (CVE-2026-22018)
  * JDK: Enhance certificate chain validation (CVE-2026-22021)
  * JDK: Updating FreeType 2.14.1 (CVE-2026-23865)
  * JDK: Enhance TLS connection handling (CVE-2026-34282)
  * JDK: Enhance key generation (CVE-2026-34268)


Bug Fix(es):  

  * When copying files, OpenJDK 21 prefers to use the copy_file_range native function for performance reasons, only falling back to sendfile when this fails. However, in previous OpenJDK 21 releases, a response of EOPNOTSUPP (operation not supported) did not cause the JDK to fall back to sendfile. This is rectified in this release. (AlmaLinux-169617, AlmaLinux-169951, AlmaLinux-169952, AlmaLinux-169942, AlmaLinux-169953, AlmaLinux-169945)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9689" id="RHSA-2026:9689" type="rhsa" title="RHSA-2026:9689"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22007" id="CVE-2026-22007" type="cve" title="CVE-2026-22007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22013" id="CVE-2026-22013" type="cve" title="CVE-2026-22013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22016" id="CVE-2026-22016" type="cve" title="CVE-2026-22016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22018" id="CVE-2026-22018" type="cve" title="CVE-2026-22018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22021" id="CVE-2026-22021" type="cve" title="CVE-2026-22021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23865" id="CVE-2026-23865" type="cve" title="CVE-2026-23865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34268" id="CVE-2026-34268" type="cve" title="CVE-2026-34268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34282" id="CVE-2026-34282" type="cve" title="CVE-2026-34282"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-9689.html" id="ALSA-2026:9689" type="self" title="ALSA-2026:9689"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-appstream-rpms__8_10_default">
        <name>almalinux-8-for-s390x-appstream-rpms__8_10_default</name>
        <package name="java-21-openjdk-headless" version="21.0.11.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-21.0.11.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">1de9c23fd2190c119e4cf3ad86503b6209de6af2265c41241fcadf201b8ad173</sum>
        </package>
        <package name="java-21-openjdk-src" version="21.0.11.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-src-21.0.11.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">23b758cc36574fd155afca13266a7e1be1e716acb0af5ff086fc705a218344aa</sum>
        </package>
        <package name="java-21-openjdk-devel" version="21.0.11.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-21.0.11.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">3134464eea25232536312bbe8063af829b06c451abc896bc03815cee08e04069</sum>
        </package>
        <package name="java-21-openjdk-jmods" version="21.0.11.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-21.0.11.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">53c2bda77232ef3e5179b3d736c3d9b31401fb545f2b534aa50397dc0408ec1a</sum>
        </package>
        <package name="java-21-openjdk-javadoc" version="21.0.11.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-javadoc-21.0.11.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">7314ef648d1ef1bd3e24676cd46c2cb10c25efc2e535e3d9de2a2a7c399a3c65</sum>
        </package>
        <package name="java-21-openjdk-demo" version="21.0.11.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-21.0.11.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">82691dbc607d66a4b05ab4cf2d71b1891662e3a54ae27c07d0f84cfe8f9ce03d</sum>
        </package>
        <package name="java-21-openjdk-static-libs" version="21.0.11.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-21.0.11.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">858a740fde8c1f546ffabbf2169cd2d5ddbcdd8d2161b3ff50eae453e7e9ba90</sum>
        </package>
        <package name="java-21-openjdk-javadoc-zip" version="21.0.11.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-javadoc-zip-21.0.11.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">e7083cfac48f6fad0a0d44ae3b7079d3bacd0942ad2fa265fa6bb6dc9103cc55</sum>
        </package>
        <package name="java-21-openjdk" version="21.0.11.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-21.0.11.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">efe2d37a13d82457409cb209f6c6928e5e056bc5b17cd5c8c0c60789c2db7f7f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>